[Bug 5753] New: Support for inline clone bundles when cloning via ssh

mercurial-bugs at mercurial-scm.org mercurial-bugs at mercurial-scm.org
Mon Dec 4 16:44:19 UTC 2017


https://bz.mercurial-scm.org/show_bug.cgi?id=5753

            Bug ID: 5753
           Summary: Support for inline clone bundles when cloning via ssh
           Product: Mercurial
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: UNCONFIRMED
          Severity: feature
          Priority: wish
         Component: Mercurial
          Assignee: bugzilla at mercurial-scm.org
          Reporter: joerg at NetBSD.org
                CC: mercurial-devel at mercurial-scm.org

The main NetBSD repository is a secured machine with restricted access. It is
considered the root of the trust hierachy in terms of information flow.
Developers access the machine via ssh only. Replicating such a setup for
Mercurial is desirable, but it can currently not support clone bundles as those
can be only obtained via HTTP(S). Having to provide more services increases the
attack surface and is less desirable.

The easiest approachs seems to be a new argument for 'getbundle', i.e.
'getbundle clonebundle <url>' and a inline:// URL schema for the manifest. The
remote side would verify that <url> can be found in the manifest and then
interprete it as local reference, similar to the ssh schema. This approach
should work for any transport, ssh and https as well.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Mercurial-devel mailing list