Re: Some thoughts on merging 0install.net and 0install.de

<[email protected]> Thu, 4 Aug 2016 12:41:19 +0000
Newsgroups gmane.comp.file-systems.zero-install.devel
Message-ID <E1FE65505B872347A5DE1BB83A95331E65A96EF1@C111BXWEMBX70.ERF.thomson.com>
Bastian,
	Sorry my ideas where not useful, thanks for considering them.
Phil

-----Original Message-----
From: Bastian Eicher [mailto:[email protected]] 
Sent: Tuesday, August 02, 2016 4:59 PM
To: 'The Zero Install system'
Subject: Re: [Zero-install-devel] Some thoughts on merging 0install.net and 0install.de

Phil ([email protected]) wrote:
> Here are 3 ideas.
Thanks. :)

> Generate static pages from the wordpress site. There are at least a 
> couple
wordpress plug ins that do this.
I do use a number of dynamic features though, such as user registration, contact form and switching language based on "Accept-Language" and "Cookie"
headers.

> Host it on a unikernel like mirage os 
> https://urldefense.proofpoint.com/v2/url?u=https-3A__mirage.io_&d=CwIC
> Ag&c=4ZIZThykDLcoWk-GVjSLm9hvvvzvGv0FLoWSRuCSs5Q&r=4Pr_PrAPzkvj5hwDAYM
> dDu8rWJVZyxE05zU9XgLghe8&m=a_e6BT2YUQhpBsyNu0K0p9hzSuZQasbT78zK0XlHY3Q
> &s=_KWLvtIC9_Y6wIHjYMTlzOniO1xtPJk7utdjoAFnc2o&e= . That lowers your
attack surface by not running anything but the software to host the website.
Unikernels are a really cool concept. :) However, 0install.de does host some rather complex stuff, like a continuous integration server that builds source using Mono. Probably wouldn't be able to get that running outside of a general-purpose OS.

> Write the site in ur/web 
> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.impredicative.
> com_ur_&d=CwICAg&c=4ZIZThykDLcoWk-GVjSLm9hvvvzvGv0FLoWSRuCSs5Q&r=4Pr_P
> rAPzkvj5hwDAYMdDu8rWJVZyxE05zU9XgLghe8&m=a_e6BT2YUQhpBsyNu0K0p9hzSuZQa
> sbT78zK0XlHY3Q&s=ZiV4PzABe3_pZafh5ZfSNXN5r5i51XI3Q3pRSliAb3Q&e= . 
> Probably a bit
of learning curve here though.
> But it would be protected by the static type system from most 
> injection
attacks.
Haven't heard of that yet, will take a look. However, as you hinted at with the learning curve, the amount of time I can spend on this next to my daytime job is somewhat limited.


------------------------------------------------------------------------------
_______________________________________________
Zero-install-devel mailing list
[email protected]
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_zero-2Dinstall-2Ddevel&d=CwICAg&c=4ZIZThykDLcoWk-GVjSLm9hvvvzvGv0FLoWSRuCSs5Q&r=4Pr_PrAPzkvj5hwDAYMdDu8rWJVZyxE05zU9XgLghe8&m=a_e6BT2YUQhpBsyNu0K0p9hzSuZQasbT78zK0XlHY3Q&s=fWVHBK044-qmFM5qPYdxvnhpxt-s4LNDcJTgMOwCrhI&e= 

------------------------------------------------------------------------------