[FFmpeg-devel] trac backups

[Michael Niedermayer]

On Wed, Sep 13, 2023 at 12:32:28AM +0200, Marvin Scholz wrote:
> 
> 
> On 13 Sep 2023, at 0:13, Michael Niedermayer wrote:
> 
> > Hi all
> >
> > our trac backups died 6 months ago
> > i just noticed as i checked the backups before deleting spam with trac-admin
> > backups are working again
> >
> > failure reason where expired gpg keys
> >
> > thx
> >
> > PS: yeah, iam slightly unhappy noone noticed this for 6 months
> 
> Who else other than you has access to the infrastructure?

all the root admins do
but that isnt the problem, even if 100 more people had access
the only way that was noticable it seems was if someone looked
either at the backups (which happily where generated with size 0 per file)
or the logs

ive added a gpg --recv-key so until the key server gets killed by the NSA
that might be avoided. Sadly gpg has no clean was to ignore key expiry

also ive pinged beastd (who wrote the trac backup scripts and is in CC)
and if he has no time, i guess ill have to look at why this was not more
vissible and how to fix that ...
But it seems theres no hurry

theres also the more radical solution of just making the backups public
as they are enrcypted anyway, it just doesnt feel like the first
choice. But it would avoid several issues like not noticing this or
other lost backups, ...

thx

-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

If a bugfix only changes things apparently unrelated to the bug with no
further explanation, that is a good sign that the bugfix is wrong.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20230913/13ff5602/attachment.sig>