[aur-general] Git over HTTPS

Tom Swartz

15 Jun 2015 15 Jun '15

3:57 p.m.

Hi all, The majority of my work happens behind corporate firewalls where ssh out via port 22 is not an option. Is there a way to configure GitHub-like SSH via HTTPS ports? https://help.github.com/articles/using-ssh-over-the-https-port/ I'd be greatly appreciative if this was the case. Thanks! -- Tom Swartz

Show replies by date

Johannes Löthberg

15 Jun 15 Jun

4:03 p.m.

On 15/06, Tom Swartz wrote:

...

Hi all,

The majority of my work happens behind corporate firewalls where ssh out via port 22 is not an option.

Is there a way to configure GitHub-like SSH via HTTPS ports? https://help.github.com/articles/using-ssh-over-the-https-port/

I'd be greatly appreciative if this was the case.

You'll have to use something like the sslh multiplexer -- Sincerely, Johannes Löthberg PGP Key ID: 0x50FB9B273A9D0BB5 https://theos.kyriasis.com/~kyrias/

Giancarlo Razzolini

4:11 p.m.

Em 15-06-2015 13:03, Johannes Löthberg escreveu:

...

You'll have to use something like the sslh multiplexer sslh is for the server side, not the client. I don't see the devs implementing this, mostly because it seems that both the ssh and https service are running on the same machine. And it adds unecessary complexity.

The OP should use a proxy, VPN, or other methods to punch a hole through the corporate firewall for being able to access the aur host. Cheers, Giancarlo Razzolini

Eli Schwartz

4:23 p.m.

On Mon, Jun 15, 2015 at 10:57 AM, Tom Swartz wrote:

...

Hi all,

The majority of my work happens behind corporate firewalls where ssh out via port 22 is not an option.

Is there a way to configure GitHub-like SSH via HTTPS ports? https://help.github.com/articles/using-ssh-over-the-https-port/

I'd be greatly appreciative if this was the case.

Thanks!

-- Tom Swartz

Try something like: http://gitolite.com/git-over-proxy.html -- Eli Schwartz .

Doug Newgard

16 Jun 16 Jun

6:37 a.m.

On Mon, 15 Jun 2015 11:57:26 -0400 Tom Swartz wrote:

...

Hi all,

The majority of my work happens behind corporate firewalls where ssh out via port 22 is not an option.

Is there a way to configure GitHub-like SSH via HTTPS ports? https://help.github.com/articles/using-ssh-over-the-https-port/

I'd be greatly appreciative if this was the case.

Thanks!

What it comes down to is that you want Arch to provide a way for you to bypass security restrictions your employer has put into place. Does this really sound like a good idea?

nmset＠netcourrier.com

7:49 a.m.

Le mardi 16 juin 2015 01:37:36 Doug Newgard a écrit :

...

What it comes down to is that you want Arch to provide a way for you to bypass security restrictions your employer has put into place. Does this really sound like a good idea?

But Arch should be more committed and friendly to its contributors than to their blind employers, to whom Arch is not tied at all. Security is something put forward to mask many other goals... control, power... I won't elaborate any further.

Giovanni Santini

7:51 a.m.

New subject: [aur-general] Help needed in fixing my package (gcc44-multilib)

Good morning, I would like to know if someone could help me in finding a problem. Actually, I was trying to build my package, but, as you now, on every GCC major update, something goes wrong. I wrote a little patch for fixing a not working check (the one with 'toplevel' in its name) but now I'm having problem linking (it keeps saying that I have multiple definitions of the functions giving me problems... the fact is that definition and redefinition are on the same line .-.)... I am sending my future source tarball (it will be a git one when fixed, obviously) here. If someone could help me, I would really appreciate. -- Giovanni Santini My blog: http://giovannisantini.tk My code: https://github.com/ItachiSan

Florian Bruhin

7:56 a.m.

New subject: [aur-general] Help needed in fixing my package (gcc44-multilib)

* Giovanni Santini [2015-06-16 09:51:58 +0200]:

...

Good morning, I would like to know if someone could help me in finding a problem.

Please start a new thread for a different issue rather than replying to an existing mail and changing the subject - otherwise it's rather confusing...

...

I am sending my future source tarball (it will be a git one when fixed, obviously) here.

There isn't any attachment. Florian -- http://www.the-compiler.org | me@the-compiler.org (Mail/XMPP) GPG: 916E B0C8 FD55 A072 | http://the-compiler.org/pubkey.asc I love long mails! | http://email.is-not-s.ms/

Giovanni Santini

8:01 a.m.

New subject: [aur-general] Help needed in fixing my package (gcc44-multilib)

Thunderbird thinks he has sended it. Uff, nevermind. Sending it again (I hope Thunderbird won't troll me again) Il 16/06/2015 09:56, Florian Bruhin ha scritto:

...

* Giovanni Santini [2015-06-16 09:51:58 +0200]:

...
Good morning, I would like to know if someone could help me in finding a problem. Please start a new thread for a different issue rather than replying to an existing mail and changing the subject - otherwise it's rather confusing...

...
I am sending my future source tarball (it will be a git one when fixed, obviously) here. There isn't any attachment.

Florian

-- Giovanni Santini My blog: http://giovannisantini.tk My code: https://github.com/ItachiSan

Giovanni Santini

8:04 a.m.

New subject: [aur-general] Help needed in fixing my package (gcc44-multilib)

Seems Thunderbird hates me. Here you have: https://dl.dropboxusercontent.com/u/4152736/gcc44-multilib_future.tar.gz Il 16/06/2015 10:01, Giovanni Santini ha scritto:

...

Thunderbird thinks he has sended it. Uff, nevermind. Sending it again (I hope Thunderbird won't troll me again)

Il 16/06/2015 09:56, Florian Bruhin ha scritto:

...
* Giovanni Santini [2015-06-16 09:51:58 +0200]:

...
Good morning, I would like to know if someone could help me in finding a problem. Please start a new thread for a different issue rather than replying to an existing mail and changing the subject - otherwise it's rather confusing...

...
I am sending my future source tarball (it will be a git one when fixed, obviously) here. There isn't any attachment.

Florian

-- Giovanni Santini My blog: http://giovannisantini.tk My code: https://github.com/ItachiSan

Hugo Osvaldo Barrera

20 Jun 20 Jun

12:51 a.m.

On 2015-06-15 11:57, Tom Swartz wrote:

...

Hi all,

The majority of my work happens behind corporate firewalls where ssh out via port 22 is not an option.

Is there a way to configure GitHub-like SSH via HTTPS ports? https://help.github.com/articles/using-ssh-over-the-https-port/

I'd be greatly appreciative if this was the case.

Thanks!

-- Tom Swartz

Do you have permission from your employer to user their infrastructure (eg: computers, network) to work on contributions to ArchLinux? If not, they *may* own the IP related to the PKGBUILDs, or any extra scripts you include (in most jurisdictions, if you write a 15 line script, it's copyrighted automatically). I suggest that you carefully study this, and similar scenarios. So, if you have permission, asking for them to open SSH should be trivial. If not, then stop creating tainted contributions at work. Cheers, -- Hugo Osvaldo Barrera A: Because we read from top to bottom, left to right. Q: Why should I start my reply below the quoted text?

David Kaylor

5:44 a.m.

...

Do you have permission from your employer to user their infrastructure (eg: computers, network) to work on contributions to ArchLinux?

If not, they *may* own the IP related to the PKGBUILDs, or any extra scripts you include (in most jurisdictions, if you write a 15 line script, it's copyrighted automatically). I suggest that you carefully study this, and similar scenarios.

So, if you have permission, asking for them to open SSH should be trivial. If not, then stop creating tainted contributions at work.

If you had bothered to read the entire thread, you should have noticed that the OP has already answered this question.

Johannes Löthberg

10:08 a.m.

On 20/06, David Kaylor wrote:

...

...
Do you have permission from your employer to user their infrastructure (eg: computers, network) to work on contributions to ArchLinux?

If not, they *may* own the IP related to the PKGBUILDs, or any extra scripts you include (in most jurisdictions, if you write a 15 line script, it's copyrighted automatically). I suggest that you carefully study this, and similar scenarios.

So, if you have permission, asking for them to open SSH should be trivial. If not, then stop creating tainted contributions at work.

If you had bothered to read the entire thread, you should have noticed that the OP has already answered this question.

I'm rather sure that he never actually said that maintaining the AUR package was part of his job, just avoided the question by saying that he worked on the software. (Though I'm too lazy to check now.) -- Sincerely, Johannes Löthberg PGP Key ID: 0x50FB9B273A9D0BB5 https://theos.kyriasis.com/~kyrias/

David Kaylor

10:34 a.m.

...

I'm rather sure that he never actually said that maintaining the AUR package was part of his job, just avoided the question by saying that he worked on the software. (Though I'm too lazy to check now.)

I just double checked, and this is what he wrote: 2. I currently maintain the ownCloud-beta-client package as part of my involvement with that group. This is done as part of my official duties in my corporate environment. My organization is also looking to begin sharing several large projects within a few months. Without another form of access, this would be technically impossible. Which sounds to me like he was saying it is part of his job, or at least he has explicit approval to work on it. Why can't he get outbound SSH access to do this, if it is work related? Who knows. But I sort of sympathize with him. Not blaming the AUR4 developer, he has good reasons for the new design, as far as I know. I do wish people would stop focusing on the OP's corporate network policies, stupid as they may be, because it's just not relevant at this point. I, for one, hope he can continue to contribute.

Johannes Löthberg

10:36 a.m.

On 20/06, Johannes Löthberg wrote:

...

I'm rather sure that he never actually said that maintaining the AUR package was part of his job, just avoided the question by saying that he worked on the software. (Though I'm too lazy to check now.)

Ah, seems I misread him, quoting CAG22HqdeFJnT9uN6r8ai1iaFzsbUqPpgiNsZFrJ-tfRWjn29RQ@mail.gmail.com:

...

2. I currently maintain the ownCloud-beta-client package as part of my involvement with that group. This is done as part of my official duties in my corporate environment.

-- Sincerely, Johannes Löthberg PGP Key ID: 0x50FB9B273A9D0BB5 https://theos.kyriasis.com/~kyrias/

3235

Age (days ago)

3240

Last active (days ago)

List overview

Download

14 comments

10 participants

participants (10)

David Kaylor
Doug Newgard
Eli Schwartz
Florian Bruhin
Giancarlo Razzolini
Giovanni Santini
Hugo Osvaldo Barrera
Johannes Löthberg
nmset＠netcourrier.com
Tom Swartz