Hi all, I am tending to disable the svn-git mirroring I am doing of luatex from svn to github, since now since considerable time the svn server seems to be broken:
Can't create session: Unable to connect to a repository at URL 'https://serveur-svn.lri.fr/svn/modhel/luatex': Unexpected server error 500 'Proxy Error' on '/svn/modhel/luatex' at /usr/share/perl5/Git/SVN.pm line 148.
Any comments? And btw, is it really still necessary to use this rather unconventional development space ...? All the best Norbert -- PREINING Norbert https://www.preining.info Fujitsu Research + IFMGA Guide + TU Wien + TeX Live GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
Hi all,
Luigi warned me about the svn server being down end of last week.
Some electrical maintenance was scheduled, so I did not worry that much.
Unfortunately, the svn server of the lab is still down and I got no answer
to
the message I sent on Friday to the support team. I will ask again end of
the day
if nothing moves.
We have been warned that (French) public research labs are under attack.
Our gitlab server has been compromised and down for a few days last month.
I wonder who is best prepared to handle these attacks and what is the best
place to host luatex.
Best regards,
Fabrice
Le lun. 20 déc. 2021 à 07:13, Norbert Preining
Hi all,
I am tending to disable the svn-git mirroring I am doing of luatex from svn to github, since now since considerable time the svn server seems to be broken:
Can't create session: Unable to connect to a repository at URL ' https://serveur-svn.lri.fr/svn/modhel/luatex': Unexpected server error 500 'Proxy Error' on '/svn/modhel/luatex' at /usr/share/perl5/Git/SVN.pm line 148.
Any comments?
And btw, is it really still necessary to use this rather unconventional development space ...?
All the best
Norbert
-- PREINING Norbert https://www.preining.info Fujitsu Research + IFMGA Guide + TU Wien + TeX Live GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13 _______________________________________________ dev-luatex mailing list dev-luatex@ntg.nl https://mailman.ntg.nl/mailman/listinfo/dev-luatex
-- Fabrice Popineau ----------------------------- SUPELEC Département Informatique 3, rue Joliot Curie 91192 Gif/Yvette Cedex Tel direct : +33 (0) 169851950 Standard : +33 (0) 169851212 ------------------------------
Hi Fabrice, thanks for the status update, that is much appreciated. Yes, the Log4j waves (tsunami?) are far from over.
I wonder who is best prepared to handle these attacks and what is the best place to host luatex.
Any big server hosting is normally better prepared due to cloudflare or similar front line. I am not sure where there is still public svn possible, probably bitbucket? Best Norbert -- PREINING Norbert https://www.preining.info Fujitsu Research + IFMGA Guide + TU Wien + TeX Live GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
On Mon, Dec 20, 2021 at 7:13 AM Norbert Preining
Hi all,
I am tending to disable the svn-git mirroring I am doing of luatex from svn to github, since now since considerable time the svn server seems to be broken:
Can't create session: Unable to connect to a repository at URL ' https://serveur-svn.lri.fr/svn/modhel/luatex': Unexpected server error 500 'Proxy Error' on '/svn/modhel/luatex' at /usr/share/perl5/Git/SVN.pm line 148.
Any comments?
And btw, is it really still necessary to use this rather unconventional development space ...?
I never used it -- for hans and me everything happens on https://serveur-svn.lri.fr/svn/modhel/luatex and https://tug.org/svn/texlive/trunk/Build/source/texk/web2c/luatexdir I hope that https://serveur-svn.lri.fr/svn/modhel/luatex will be soon online, in case I will talk with hans for the alternatives. -- luigi
On 12/20/2021 9:55 AM, luigi scarso wrote:
I never used it -- for hans and me everything happens on https://serveur-svn.lri.fr/svn/modhel/luatex https://serveur-svn.lri.fr/svn/modhel/luatex and https://tug.org/svn/texlive/trunk/Build/source/texk/web2c/luatexdir https://tug.org/svn/texlive/trunk/Build/source/texk/web2c/luatexdir I hope that https://serveur-svn.lri.fr/svn/modhel/luatex https://serveur-svn.lri.fr/svn/modhel/luatex will be soon online, in case I will talk with hans for the alternatives. A good answer.
It seems to be fashion today to clone into git(hub) and such ... I'm often puzzles by all these clones a some get abandoned and then people wonder of something is evolving. To me, if someome clones, it's up to them. Also, it's not like luatex has hourly updates -) You always are very precise in syncing with tex live and coordinating with Karl and that's then the official one ... it is all about stability, and we have experimental for a reason. Hans ----------------------------------------------------------------- Hans Hagen | PRAGMA ADE Ridderstraat 27 | 8061 GH Hasselt | The Netherlands tel: 038 477 53 69 | www.pragma-ade.nl | www.pragma-pod.nl -----------------------------------------------------------------
I wonder who is best prepared to handle these attacks and what is the best place to host luatex. But haven't all the big ones also come under attach every now and then? In the end the tex live repository is the final place where stuff ends up right? But even then, every end point can be under attack. So i think
On 12/20/2021 8:18 AM, Fabrice Popineau wrote: that there is no 'best place'. I suppose tug has some offline storage as the ultimate place for code so if everything goes down .... Also makes me wonder about ctan. I'm not aware of those more traditional storage places getting much interest of attackers. Hans btw, it's not like your svn is that much in trouble, went/goes wel for ages and when we noticed the issue a few days ago you acted immediately on luigi's mail, so we can live with a few days off line ... nothing spectacular happening in the tex world that depends on it ----------------------------------------------------------------- Hans Hagen | PRAGMA ADE Ridderstraat 27 | 8061 GH Hasselt | The Netherlands tel: 038 477 53 69 | www.pragma-ade.nl | www.pragma-pod.nl -----------------------------------------------------------------
Hi all, I have disabled git-svn mirroring of luatex for now. I don't want to see all the error messages in my inbox.
I never used it -- for hans and me everything happens on
Yes, I know, but that doesn't mean nobody else is using it.
https://serveur-svn.lri.fr/svn/modhel/luatex will be soon online, in case I will talk with hans for the alternatives.
Please let me know.
It seems to be fashion today to clone into git(hub) and such ... I'm often puzzles by all these clones a some get abandoned and then people wonder of something is evolving. To me, if someome clones, it's up to them.
Hans, calm down, if you look at the history of the git-svn clones I am doing, you wouldn't say something like this in a thread that I started.
But haven't all the big ones also come under attach every now and then? In
Yes, but they have professional teams caring for this, while university servers have overworked volunteer stuff or underpaid apprentices in general. After 30 years in academics I know who is managing most servers. Best Norbert -- PREINING Norbert https://www.preining.info Fujitsu Research + IFMGA Guide + TU Wien + TeX Live GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
On Mon, 20 Dec 2021 at 09:55, luigi scarso wrote:
On Mon, Dec 20, 2021 at 7:13 AM Norbert Preining wrote:
Hi all,
I am tending to disable the svn-git mirroring I am doing of luatex from svn to github, since now since considerable time the svn server seems to be broken:
I also disabled some mirroring jobs on contextgarden (due to the same reason).
I never used it -- for hans and me everything happens on https://serveur-svn.lri.fr/svn/modhel/luatex and https://tug.org/svn/texlive/trunk/Build/source/texk/web2c/luatexdir
The build farm on contextgarden is tied to Norbert's github mirror, so just keep in mind that no new builds will be triggered there either. Mojca
On 2021-12-21 at 06:27:49 +0900, Norbert Preining wrote:
Yes, but they have professional teams caring for this, while university servers have overworked volunteer stuff or underpaid apprentices in general. After 30 years in academics I know who is managing most servers.
Hi Norbert, these overworked volunteers and underpaid apprentices do a pretty good job and deserve appreciation, not only because they do all this in their spare time. What they do is amazingly reliable and IMO it's not a big problem if a server is down for maintenance for a few hours. I'm glad that at least dante.de and tug.org are not maintained by so-called "professional teams". That would be disastrous. Regards, Reinhard -- ------------------------------------------------------------------ Reinhard Kotucha Phone: +49-511-3373112 Marschnerstr. 25 D-30167 Hannover mailto:reinhard.kotucha@web.de ------------------------------------------------------------------
Hi Reinhard,
these overworked volunteers and underpaid apprentices do a pretty good job and deserve appreciation, not only because they do all this in
Agreed, and I have been doing this for long time.
their spare time. What they do is amazingly reliable and IMO it's not a big problem if a server is down for maintenance for a few hours.
Nobody says something about afew hours. Fail-over or redundancy is not to be expected in these suroundings, and down-time is normal. But we are going into the second week now AFAIR.
I'm glad that at least dante.de and tug.org are not maintained by so-called "professional teams". That would be disastrous.
I don't think that it would be disastrous, only more complicated to make changes. The advantage of "home-maintained" servers are that we can do changes quickly, easily, and without a lot of red-tape. That is great, I agree. But there are also advantages on the other side, it is not all black/white. Best Norbert -- PREINING Norbert https://www.preining.info Fujitsu Research + IFMGA Guide + TU Wien + TeX Live GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13
On 12/20/2021 10:27 PM, Norbert Preining wrote:
Hans, calm down, if you look at the history of the git-svn clones I am doing, you wouldn't say something like this in a thread that I started.
this was more a general remark (when you google for something and end up on git it's not always easy to immediately see if you have some old clone or the real thing) .. till now tex is often an exception, because it is coordinated by the texlive team (which for me are the only real reference locations) (maybe it is an advantage of tex not being too much mainstream and in the picture ... a somewhat old fashioned application) Hans ----------------------------------------------------------------- Hans Hagen | PRAGMA ADE Ridderstraat 27 | 8061 GH Hasselt | The Netherlands tel: 038 477 53 69 | www.pragma-ade.nl | www.pragma-pod.nl -----------------------------------------------------------------
Hi all,
Just to close the issue on the server down : I thought because of the
scheduled electrical work in the building that it was the reason, so I did
not worry much.
However, the actual reason was that the certificate expired on 15/12 :-)
The server being accessible from the internal network, the guys in charge
did not notice the problem at first.
Best wishes,
Fabrice
Le mar. 21 déc. 2021 à 15:28, Norbert Preining
Hi Reinhard,
these overworked volunteers and underpaid apprentices do a pretty good job and deserve appreciation, not only because they do all this in
Agreed, and I have been doing this for long time.
their spare time. What they do is amazingly reliable and IMO it's not a big problem if a server is down for maintenance for a few hours.
Nobody says something about afew hours. Fail-over or redundancy is not to be expected in these suroundings, and down-time is normal. But we are going into the second week now AFAIR.
I'm glad that at least dante.de and tug.org are not maintained by so-called "professional teams". That would be disastrous.
I don't think that it would be disastrous, only more complicated to make changes. The advantage of "home-maintained" servers are that we can do changes quickly, easily, and without a lot of red-tape. That is great, I agree.
But there are also advantages on the other side, it is not all black/white.
Best
Norbert
-- PREINING Norbert https://www.preining.info Fujitsu Research + IFMGA Guide + TU Wien + TeX Live GPG: 0x860CDC13 fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13 _______________________________________________ dev-luatex mailing list dev-luatex@ntg.nl https://mailman.ntg.nl/mailman/listinfo/dev-luatex
-- Fabrice Popineau ----------------------------- SUPELEC Département Informatique 3, rue Joliot Curie 91192 Gif/Yvette Cedex Tel direct : +33 (0) 169851950 Standard : +33 (0) 169851212 ------------------------------
participants (6)
-
Fabrice Popineau -
Hans Hagen -
luigi scarso -
Mojca Miklavec -
Norbert Preining -
Reinhard Kotucha