You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@sling.apache.org by "Robert A. Decker" <de...@robdecker.com> on 2013/10/24 14:54:30 UTC

more secure bundle uploads?

Hi,

Is it possible to have a key-based way of uploading bundles? For example, maven could scp the built bundle to the server and then a process on the server can install it. 

This way we can avoid having passwords in our pom, and also each developer can be audited separately.

Has anyone done this? What maven plugin should I look into for scp? And if I remember right, there's a way to install zip file bundles into a sling instance by dropping it into a directory, but I can't remember if this was only a CQ feature or not. (I'm not using CQ).

Rob

Re: more secure bundle uploads?

Posted by Carsten Ziegeler <cz...@apache.org>.
You can install the file provider extension to Sling's OSGi installer and
configure an install directory. The provider watches this directory for
changes, so simply copying a new bundle into that dir will pick it up and
install it (removing it from the fs will uninstall it)

Carsten


2013/10/24 Justin Edelson <ju...@justinedelson.com>

> Robt-
> You should be able to use Felix FileInstall for this.
>
> Regards,
> Justin
>
> On Thu, Oct 24, 2013 at 8:57 AM, Robert A. Decker <de...@robdecker.com>
> wrote:
> > It looks like the maven-deploy-plugin can probably handle things on the
> developer side. Now, I just need a way to handle it on the sling side…
> >
> > Rob
> >
> > On Oct 24, 2013, at 2:54 PM, Robert A. Decker wrote:
> >
> >> Hi,
> >>
> >> Is it possible to have a key-based way of uploading bundles? For
> example, maven could scp the built bundle to the server and then a process
> on the server can install it.
> >>
> >> This way we can avoid having passwords in our pom, and also each
> developer can be audited separately.
> >>
> >> Has anyone done this? What maven plugin should I look into for scp? And
> if I remember right, there's a way to install zip file bundles into a sling
> instance by dropping it into a directory, but I can't remember if this was
> only a CQ feature or not. (I'm not using CQ).
> >>
> >> Rob
> >
>



-- 
Carsten Ziegeler
cziegeler@apache.org

Re: more secure bundle uploads?

Posted by Justin Edelson <ju...@justinedelson.com>.
Robt-
You should be able to use Felix FileInstall for this.

Regards,
Justin

On Thu, Oct 24, 2013 at 8:57 AM, Robert A. Decker <de...@robdecker.com> wrote:
> It looks like the maven-deploy-plugin can probably handle things on the developer side. Now, I just need a way to handle it on the sling side…
>
> Rob
>
> On Oct 24, 2013, at 2:54 PM, Robert A. Decker wrote:
>
>> Hi,
>>
>> Is it possible to have a key-based way of uploading bundles? For example, maven could scp the built bundle to the server and then a process on the server can install it.
>>
>> This way we can avoid having passwords in our pom, and also each developer can be audited separately.
>>
>> Has anyone done this? What maven plugin should I look into for scp? And if I remember right, there's a way to install zip file bundles into a sling instance by dropping it into a directory, but I can't remember if this was only a CQ feature or not. (I'm not using CQ).
>>
>> Rob
>

Re: more secure bundle uploads?

Posted by "Robert A. Decker" <de...@robdecker.com>.
It looks like the maven-deploy-plugin can probably handle things on the developer side. Now, I just need a way to handle it on the sling side…

Rob

On Oct 24, 2013, at 2:54 PM, Robert A. Decker wrote:

> Hi,
> 
> Is it possible to have a key-based way of uploading bundles? For example, maven could scp the built bundle to the server and then a process on the server can install it. 
> 
> This way we can avoid having passwords in our pom, and also each developer can be audited separately.
> 
> Has anyone done this? What maven plugin should I look into for scp? And if I remember right, there's a way to install zip file bundles into a sling instance by dropping it into a directory, but I can't remember if this was only a CQ feature or not. (I'm not using CQ).
> 
> Rob