https://dev.arvados.org/https://dev.arvados.org/favicon.ico?15576888422015-07-14T19:47:12ZArvadosArvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=271002015-07-14T19:47:12ZNico César
<ul></ul><p>Personally I don't like doing --system level configurations because we could be using git clone for other stuff, with unwanted consecuences. Correct me if I'm wrong the "git config" could be done when the user is created and only once. sound like a job for /usr/local/arvados/install-arvados-tokens.rb or /usr/local/arvados/update-shell-accounts.rb.</p> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=271142015-07-14T20:38:19ZTom Cleggtom@curii.com
<ul></ul><p>Nico Cesar wrote:</p>
<blockquote>
<p>Personally I don't like doing --system level configurations because we could be using git clone for other stuff</p>
</blockquote>
<p>This config only applies to urls with the given form, and only if not overridden in --global or per-repo configs or on the command line. It looks like this in .gitconfig:</p>
<pre>
[credential "https://git.zzzzz.arvadosapi.com/"]
username = none
helper = "!cred(){ cat >/dev/null; if [ \"$1\" = get ]; then echo password=$ARVADOS_API_TOKEN; fi; };cred"
</pre>
<p>Using "git clone for other stuff" wouldn't be affected unless it was cloning from <code>https://git.zzzzz.arvadosapi.com/</code> (and didn't want to specify/override). And Arvados tokens are the only way to authenticate to those URLs. Using "your token" automatically for arvados git urls seems no more intrusive than defaulting to ~/.ssh/id authentication for SSH git urls...?</p>
<p>I figured using system level config would make it easier for us to update the default/automatic config without mucking with users' own configs. But I suppose that only holds for shared shell VMs, so maybe it's no big win.</p>
<p>Anyway, if it makes more sense to put it in each user's <code>~/.gitconfig</code> that's totally fine. As long as it's enabled by default for all logins, it's all the same to me...</p> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=271152015-07-14T20:38:51ZTom Cleggtom@curii.com
<ul><li><strong>Description</strong> updated (<a title="View differences" href="/journals/27115/diff?detail_id=26602">diff</a>)</li></ul> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=271222015-07-14T22:32:14ZNico César
<ul></ul><p>(.. I agree on all the stuff cutted here...)</p>
<p>Tom Clegg wrote:</p>
<blockquote>
<p>I figured using system level config would make it easier for us to update the default/automatic config without mucking with users' own configs. But I suppose that only holds for shared shell VMs, so maybe it's no big win.</p>
<p>Anyway, if it makes more sense to put it in each user's <code>~/.gitconfig</code> that's totally fine. As long as it's enabled by default for all logins, it's all the same to me...</p>
</blockquote>
<p>it's almost the same effort for the current state of the art. one is a global file provided by puppet, the other one is modifing the create_user script.</p>
<p>I have no strong preferences here. I think the user modification will keep it more aisolated. proabably is better down the road... but again. no particular preference.</p>
<p>any comment on thiss ward?</p> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=271562015-07-15T19:36:09ZWard Vandewegeward@curii.com
<ul></ul><p>Nico Cesar wrote:</p>
<blockquote>
<p>(.. I agree on all the stuff cutted here...)</p>
<p>Tom Clegg wrote:</p>
<blockquote>
<p>I figured using system level config would make it easier for us to update the default/automatic config without mucking with users' own configs. But I suppose that only holds for shared shell VMs, so maybe it's no big win.</p>
<p>Anyway, if it makes more sense to put it in each user's <code>~/.gitconfig</code> that's totally fine. As long as it's enabled by default for all logins, it's all the same to me...</p>
</blockquote>
<p>it's almost the same effort for the current state of the art. one is a global file provided by puppet, the other one is modifing the create_user script.</p>
<p>I have no strong preferences here. I think the user modification will keep it more aisolated. proabably is better down the road... but again. no particular preference.</p>
<p>any comment on this ward?</p>
</blockquote>
<p>Systemwide seems fine since it's pretty narrow. Agree on the potential pitfalls of doing this systemwide by default, but it's only for the local git repo and users can still override this locally.</p> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=272062015-07-16T15:58:09ZTom Cleggtom@curii.com
<ul><li><strong>Target version</strong> set to <i>Arvados Future Sprints</i></li></ul> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=272072015-07-16T16:08:58ZTom Cleggtom@curii.com
<ul><li><strong>Target version</strong> changed from <i>Arvados Future Sprints</i> to <i>2015-08-05 sprint</i></li></ul> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=272082015-07-16T16:42:33ZRadhika Chippadaradhika@curoverse.com
<ul><li><strong>Assigned To</strong> set to <i>Nico César</i></li><li><strong>Target version</strong> changed from <i>2015-08-05 sprint</i> to <i>2015-07-22 sprint</i></li></ul> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=272202015-07-16T17:49:41ZNico César
<ul><li><strong>Status</strong> changed from <i>New</i> to <i>Resolved</i></li></ul> Arvados - Feature #6619: [Deployment] [Documentation] Install system-wide git credential helper for arvados-hosted https git-urlshttps://dev.arvados.org/issues/6619?journal_id=273132015-07-20T17:49:57ZPeter Amstutzpeter.amstutz@curii.com
<ul></ul><p>"Configure git to use the ARVADOS_API_TOKEN environment variable to authenticate to gitolite."</p>
<p>That's not quite right, it uses the ARVADOS_API_TOKEN to talk to arv-git-httpd, not gitolite. This should say:</p>
<p>"Configure git to use the ARVADOS_API_TOKEN environment variable to authenticate to arv-git-httpd."</p>