[FFmpeg-devel] trac backups

Michael Niedermayer michael at niedermayer.cc
Wed Sep 13 19:38:34 EEST 2023


On Wed, Sep 13, 2023 at 11:05:23AM +0200, Jean-Baptiste Kempf wrote:
> On Wed, 13 Sep 2023, at 01:33, Michael Niedermayer wrote:
> >> Who else other than you has access to the infrastructure?
> >
> > all the root admins do
> > but that isnt the problem, even if 100 more people had access
> > the only way that was noticable it seems was if someone looked
> 
> I disagree. The infrastructure is un-documented, and the people accessing it are un-documented.

Your reply isnt really related to the statment it follows

Also it maybe sounds a little accusational. I just spoted the issue
and fixed it and documented the issue here in public.
So i get a "thanks for fixing the backups and thanks for the transparency"
no, this is open source, so i get a mildly accusational reply

Not even a "Where is the list of root admins" but a
"the people accessing it are un-documented"
are they ?

the MAINTAINERS file lists teh admins, yes ubitux removed himself
from it in MAINTAINERS and still has access which i think is good
in case of an emergency and also thresh has access and is not listed
in MAINTAINERS (he is more a last resort emergency and less a day to
day admin).
send a patch for MAINTAINERS if you feel the list is not good

and what do you mean by infrastructure ?
its a trac issue tracker in a VM, trac backup scripts written by beastd and a 2nd
backup system setup by raz for all the ffmpeg infrastructure.
what is missing and what do you want ?
config files ? cronjobs ?
making all that public is possible, if its a good idea for security and all
i dont know.

May i make a blunt suggestion, anyone who doesnt take the information in
this mail and start writing/documenting the infrastructure should not
complain its undocumented again in the future.


>
> This is a big problem.

this really sounds more like a populistic statement than anything with
the intend to improve a real problem.

i mean you know, this is not a list of questions with the intend behind to
document anything, its more finger-pointing. And somehow it feels like
that pointing is going my way even though i havent writen or setup either
backup system but it also would be deeply unfair to point to beastd or other
admins here. Everyone did their best with the time they had available.

So again if people want better documentation. First step i would suggest
someone should volunteer to write that documentation. And then that
person should start asking specific questions. Documentation does not
write itself yet.

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

During times of universal deceit, telling the truth becomes a
revolutionary act. -- George Orwell
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20230913/e2daceec/attachment.sig>


More information about the ffmpeg-devel mailing list