You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geronimo.apache.org by "Geir Magnusson Jr." <ge...@optonline.net> on 2003/11/20 00:13:37 UTC

Update : CVS has been taken offline

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

During the ongoing examination of the Geronimo codebase, a discrepancy 
was found between the on-disk CVS ",v" file, and the CVS history of 
that file.

This has happened before in other codebases in Apache during careful 
review, so it is not yet considered a cause for alarm.  However, we had 
to take the CVS offline immediately during the investigation as the ASF 
does take the issue of accountability for our codebases seriously.

This kind of discrepancy can be caused by

a) bugs in the CVS system - quitting a commit at the wrong time
b) well-intentioned modification of a ,v file
c) removal and replacement of a ,v file (if you screwed up an import, 
for example)
d) modification of ,v file for mal-intentioned reasons

Doing d) is really stupid, because we keep track of every commit, so 
this can be detected.

In Geronimo's case, c) is possible because I think I personally fouled 
up the initial import of the code last summer, and it may have been 
fixed by wiping out the ,v and reimporting.  I don't yet know which 
file(s) were affected or else I could verify or eliminate this as a 
cause.

If there are any committers that can recall either  failed or 'strange' 
commits or manual modifications to ,v files - for any reason, good or 
bad - please do the right thing and come forward either privately to me 
or on this list.  You will save lots of time for lots of people that 
were otherwise trying to enjoy ApacheCon.

geir

- -- 
Geir Magnusson Jr                                   203-247-1713(m)
geir@4quarters.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQE/u/kkyX6cq3d1tHkRAs9pAJ4iPuxgV3LAWHy9owUIvgFjxyeAfwCdGiok
G/LuwmHXANt3/exITgxyN/o=
=/u8j
-----END PGP SIGNATURE-----


Re: Update : CVS is now available

Posted by Geir Magnusson Jr <gm...@4quarters.com>.
On Nov 20, 2003, at 6:35 AM, James Strachan wrote:

> Was this related to Apache going down about 24-48 hours ago? I 
> remember talk about it on #apachecon IRC. Having just travelled across 
> the pond I've no idea how long that was ago - it was dark in Vegas if 
> that helps :)

No - it was because of a potential issue in CVS.  We'll have a public 
discussion later today about it.  All is well.

geir

>
>
> On 19 Nov 2003, at 23:49, Geir Magnusson Jr. wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> All work that needed to be done to continue the investigation into 
>> the discrepancy has been completed, and the CVS repository is now 
>> being returned to normal availability.
>>
>> Updates will follow.
>>
>> geir
>>
>> - -- Geir Magnusson Jr                                   
>> 203-247-1713(m)
>> geir@4quarters.com
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.2.3 (Darwin)
>>
>> iD8DBQE/vAGayX6cq3d1tHkRAmg1AKCCmnk8wRXJ41fwiiGUAEy+tbV4SwCeIGst
>> xWra+R7134A9k3UrdhwwEI0=
>> =Qsp5
>> -----END PGP SIGNATURE-----
>>
>>
>
> James
> -------
> http://radio.weblogs.com/0112098/
>
>
-- 
Geir Magnusson Jr                                   203-247-1713(m)
geir@4quarters.com


Re: Update : CVS is now available

Posted by James Strachan <ja...@yahoo.co.uk>.
Was this related to Apache going down about 24-48 hours ago? I remember 
talk about it on #apachecon IRC. Having just travelled across the pond 
I've no idea how long that was ago - it was dark in Vegas if that helps 
:)


On 19 Nov 2003, at 23:49, Geir Magnusson Jr. wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> All work that needed to be done to continue the investigation into the 
> discrepancy has been completed, and the CVS repository is now being 
> returned to normal availability.
>
> Updates will follow.
>
> geir
>
> - -- Geir Magnusson Jr                                   
> 203-247-1713(m)
> geir@4quarters.com
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (Darwin)
>
> iD8DBQE/vAGayX6cq3d1tHkRAmg1AKCCmnk8wRXJ41fwiiGUAEy+tbV4SwCeIGst
> xWra+R7134A9k3UrdhwwEI0=
> =Qsp5
> -----END PGP SIGNATURE-----
>
>

James
-------
http://radio.weblogs.com/0112098/


Update : CVS is now available

Posted by "Geir Magnusson Jr." <ge...@optonline.net>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All work that needed to be done to continue the investigation into the 
discrepancy has been completed, and the CVS repository is now being 
returned to normal availability.

Updates will follow.

geir

- -- 
Geir Magnusson Jr                                   203-247-1713(m)
geir@4quarters.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQE/vAGayX6cq3d1tHkRAmg1AKCCmnk8wRXJ41fwiiGUAEy+tbV4SwCeIGst
xWra+R7134A9k3UrdhwwEI0=
=Qsp5
-----END PGP SIGNATURE-----