Re: [opennic-discuss] [PROPOSAL] TLD Reliability Policies (Git mirrors)

Jonah Aragon <[email protected]> Mon, 16 Jul 2018 15:25:41 -0500
Newsgroups	gmane.network.opennic.general
Message-ID	<[email protected]>
This is exactly what I was saying.

I floated the idea about moving to our own Gitea host I was going to provide at git.opennic.org <http://git.opennic.org/>, but the general consensus, on IRC at least, is that for those exact reasons, GitHub works fine for us and we don’t need to migrate to another platform.

Personally, I have all our repositories cloned to my laptop, since I either actively work on them or just want to maintain a copy, and I’d encourage others to do the same. In the event GitHub suddenly dies somehow, I can just push elsewhere. I don’t see why GitHub specifically is an issue.

Jonah

P.S. And for what it’s worth, I am signing all my commits.

> On Jul 16, 2018, at 7:06 AM, Rouben <[email protected]> wrote:
> 
> I don’t get what the fuss around Github is all about. I mean I do, but *why* is it an issue?
> 
> Git has built-in protections against modification of commit data. So if you’re paranoid enough to think Microsoft is going to mess with us by altering repo data, start signing commits. Ultimately whatever source control hosting system we use shouldn’t require us to trust the host, and git already has provisions to operate this way.
> 
> Secondly, we *should* be mirroring all *official* repos, especially with mission-critical infrastructure code, in more that one place. That’s just good practice.
> 
> At the end of the day, it doesn’t matter where the code is mirrored. Be it Github, Gitlab, VisualStudio.com (yes, they host git repos), BitBucket or anywhere else.
> 
> If anyone here *really* wishes to run their own clone of a git hosting system, I’d say run gitea, gogs or similar, simply because it’s lightweight (not a behemoth like Gitlab), and actually looks presentable (not like GitWeb, which is reminiscent of a GeoCities website and has limited functionality).
> 
> Just my $0.02...
> 
> Rouben
> 
> On Mon, Jul 16, 2018 at 05:07 Philipp Schafft <[email protected] <mailto:[email protected]>> wrote:
> Good morning,
> 
> 
> On Sun, 2018-07-15 at 19:02 -0700, Jonah Aragon wrote:
> > That being said... if community members set up their own publicly
> > accessible automatic Git mirrors of our entire GitHub organization at
> > https://github.com/opennic <https://github.com/opennic>, and send me links, I can throw together a
> > list and put them on the homepage. I'm planning an entire "community
> > showcase/projects" section anyways.
> 
> What is it what makes people to commit ultimative trust into GitHub in
> the first place?
> 
> That is for both their service being provided flawlessly and for them
> not never interact with the content?
> 
> With best regards,
> 
> --
> Philipp.
>  (Rah of PH2)
> 
> 
> --------
> You are a member of the OpenNIC Discuss list.
> You may unsubscribe by emailing [email protected] <mailto:[email protected]>
> --
> Rouben
> 
> 
> --------
> You are a member of the OpenNIC Discuss list.
> You may unsubscribe by emailing [email protected]
signature.asc (application/pgp-signature, 833 B)