Annotation of www/anoncvs.html, Revision 1.131
1.1 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
1.93 deraadt 4: <title>OpenBSD AnonCVS</title>
5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="How to get OpenBSD updates via Internet using Anonymous CVS">
8: <meta name="keywords" content="openbsd,anoncvs,updates">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1996-1998 by OpenBSD.">
1.1 deraadt 11: </head>
12:
1.14 downsj 13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
1.1 deraadt 14:
1.58 pauls 15: <img alt="[OpenBSD]" height=30 width=141 SRC="images/smalltitle.gif">
1.93 deraadt 16: <p>
17: <h2><font color=#e00000>Anonymous CVS</font><hr></h2>
1.14 downsj 18:
1.100 ericj 19: <p>
20: <ul><h3>Table Of Contents</h3>
21: <li><a href="#anoncvs">What is Anonymous CVS?</a>
22: <li><a href="#CVS">What is CVS?</a>
23: <li><a href="#starting">Getting Started Using Anonymous CVS.</a>
24: <li><a href="#using">Using CVS to Get and Update your Source Tree.</a>
25: <li><a href="#CVSROOT">Available Anonymous CVS Servers.</a>
1.104 ericj 26: <li><a href="#CRYPTO">Getting crypto sources through CVS(1).</a>
27: <li><a href="#EXAMPLE">Example usages for CVS(1).</a>
28: <li><a href="#WHICH">Use rsh(1) or ssh(1)?</a>
1.107 millert 29: <li><a href="#SUP">Mirroring the CVS repository via sup(1).</a>
1.105 ericj 30: <li><a href="#MIRROR">Setting up an anoncvs mirror.</a>
1.100 ericj 31: </ul>
32: </p>
33: <hr>
34:
35:
36: <a name="anoncvs"></a>
37: <h3><font color=#0000e0>What is Anonymous CVS?</font></h3>
1.99 ericj 38:
1.15 grr 39: <p>
40: Anonymous CVS is a method of keeping your local copy of the OpenBSD source
41: tree up to date with respect to changes made to current OpenBSD sources.
1.109 jason 42: In addition to following the bleeding edge of development, it is
43: also possible to track the patches for errata of a release.
1.99 ericj 44: </p>
45:
1.14 downsj 46: <p>
1.15 grr 47: The major advantage of Anonymous CVS over other source code update
48: techniques is that it works directly against a central source code
49: repository or mirror. This means that you have the full set of CVS
50: commands available to control merging and updating your changes with
51: other source changes and for performing diff's, change histories
52: and other queries against the central repository.
1.99 ericj 53: </p>
54:
1.36 deraadt 55: <p>
1.99 ericj 56: The OpenBSD Project currently has three main source repositories:
57: </p>
58:
59: <ul>
60: <li><b>src</b> - Houses all source code for the OpenBSD Operating System.
61: <li><b>ports</b> - Houses the <a href="./ports.html">OpenBSD Ports</a>.
62: <li><b>www</b> - Houses all OpenBSD web pages. (Including this one).
63: </ul>
64:
1.100 ericj 65: <p>
66: To summarize, the real strength of using Anonymous CVS is that it is
67: a "tolerant" source code control system - it <strong>respects</strong>
68: changes that you have made to your local sources and makes <strong>
69: "best efforts"</strong> to update your entire source tree, rather than
70: leaving you a list of arcane problems that have to be resolved before
71: continuing.
72: </p>
73:
74: <a name="CVS"></a>
75: <h3><font color=#0000e0>What is CVS?</font></h3>
1.99 ericj 76:
1.36 deraadt 77: <p>
78: <a href=why-cvs.html>
79: CVS is the source code control system used to manage the OpenBSD source tree.</a>
1.16 deraadt 80: It implements a central repository for all officially released source code
1.15 grr 81: and changes, while permitting developers to maintain local copies of the
1.99 ericj 82: source code with their working changes. Developers with "<b>write access</b>"
1.15 grr 83: can commit changes directly to the OpenBSD source tree, while "Anonymous
1.99 ericj 84: CVS" users have "<b>read access</b>" and can keep their local copies of the source
1.15 grr 85: up to date and issue queries against the central depository.
1.99 ericj 86: </p>
87:
1.15 grr 88: <p>
1.22 niklas 89: The major strength of CVS is that it has the ability to perform intelligent
1.15 grr 90: merges of changes to the central repository with changes that you make to
91: your local copy. This means that if you make a change to a module and
92: perform an update, your changes are not "blown away", rather CVS makes
93: best efforts to merge the changes made to the central sources with changes
94: you've made to your local copy.
1.99 ericj 95: </p>
96:
1.15 grr 97: <p>
98: In the event that the changes can't be completely merged, CVS provides a
99: "soft fallback", in terms of providing you with annotated changes to your
1.39 todd 100: local copy, preserving an unmodified copy of your version and continuing
1.15 grr 101: to update any other source modules you requested.
1.99 ericj 102: </p>
103:
1.100 ericj 104: <a name="starting"></a>
105: <h3><font color=#0000e0>Getting Started Using Anonymous CVS.</font></h3>
106:
107: <p>
108: The latest version of CVS is available at
1.111 deraadt 109: <a href=http://www.cyclic.com/CVS/Dev/code/>Cyclic</a>.
1.100 ericj 110: Versions earlier than 1.6 are not recommended, and may not work.
111: If you already have OpenBSD installed, CVS is included.
112: </p>
113:
1.22 niklas 114: <p>
1.99 ericj 115: People who own an OpenBSD CD may have seen the <i>CVS/</i> dirs on it.
116: Actually there is a reason, the CD has a checkout of the OpenBSD <b>src</b> module
1.95 millert 117: usable to continue updating from. Using this tree will result in a much
1.23 mickey 118: faster initial CVS update than a fresh checkout of the full OpenBSD
119: source tree. There are two ways of using the CD:
1.99 ericj 120: </p>
121:
1.23 mickey 122: <ul>
1.99 ericj 123: <li>To copy the CVS tree from the CD to <i>/usr/src</i> (assuming the CD is mounted on /mnt):
1.22 niklas 124: <pre>
1.99 ericj 125: # <b>cd /mnt; pax -rw CVS Makefile [a-z]* /usr/src</b>
1.22 niklas 126: </pre>
1.110 wvdputte 127: <li>Use a union mount (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_union&apropos=0&sektion=8&manpath=OpenBSD+Current&format=html">mount_union(8)</a>) with the CD below a writable directory. (This can be used when only compiling from the tree.)
1.22 niklas 128: <pre>
1.99 ericj 129: # <b>mount -t union -o -b /mnt /usr/src</b>
1.22 niklas 130: </pre>
1.23 mickey 131: </ul>
1.100 ericj 132:
133: <p>
134: For people who don't have a CD on hand, you can use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1&format=html">cvs(1)</a> to "<b>checkout</b>" the source repository for you. This is discussed in the <a href="#using">next section</a>.
135: </p>
136:
137: <p>
1.99 ericj 138: After this, <i>/usr/src</i> will be a nice checkout area where all <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1&format=html">cvs(1)</a> commands will work OK.
1.100 ericj 139: </p>
140:
141: <a name="using"></a>
142: <h3><font color=#0000e0>Using CVS(1) to get and update your source tree.</font></h3>
143:
144: <p>
1.109 jason 145: CVS was designed to be a simple way to retrieve and update your sources,
146: therefore there isn't much involved at all in doing so. You must first
147: decide whether you want to track <i>current</i> or a patch branch.
1.112 kjell 148: The current tree has all of the up to the minute changes,
1.109 jason 149: whereas a patch branch contains a formal release plus the patches
150: from the <a href="errata.html">errata</a> already applied.
151:
152: <p>Once you have decided which tree to follow, you much choose which Anonymous
153: CVS server you are going to use. A list of these servers is
154: <a href="#CVSROOT">below</a>. Do, however, notice that there are 3 ways
155: to access these servers.
1.100 ericj 156: </p>
1.99 ericj 157:
1.100 ericj 158: <ul>
159: <li><b>ssh</b> - Secure Shell can be used to access the anonymous CVS servers. This is the <b>recommended</b> way of doing so, as it is encrypted. As of 2.6 OpenBSD has included OpenSSH in its standard distribution.
160: <li><b>rsh</b> - Remote Shell can be used on some of the servers for users who don't have access to <a href="http://www.openssh.com">ssh</a>
161: <li><b>pserver</b> - pserver is primarily useful for users who are behind firewalls that block the other two connections.
162: </ul>
163:
164: <p>
165: <b>NOTE:</b> - For users wishing to use ssh, you must first set the <i>CVS_RSH</i> variable to ssh.
166:
167: <ul>
168: <li> For Korn/Bourne shells.
169: <pre>
170: $ <b>export CVS_RSH="/usr/bin/ssh"</b>
171: </pre>
172: <li> For CSH based shells.
173: <pre>
174: $ <b>setenv CVS_RSH /usr/bin/ssh</b>
175: </pre>
176: </ul>
177:
178: <p>
179: Once you have chosen which <a href="#CVSROOT">Anonymous CVS Server</a> you will use, and which method you will use, you can start using cvs. For those of you who have CD's you can start with the CVS checkout that is on the CD by using the method <a href="#starting">above</a> to get the sources onto your system. If you don't have a CD handy, use the method below to checkout the sources. This method puts the OpenBSD source tree into <i>/usr/src</i>.
180: </p>
181:
182: <p>
183: <ul><pre>
1.114 marc 184: # <b>cd /usr; cvs checkout -P src</b>
1.127 jufi 185: </pre></ul>
1.100 ericj 186: </p>
1.99 ericj 187:
1.1 deraadt 188: <p>
1.109 jason 189: The above will checkout the <i>current</i> source tree. Many of you will
190: only want a patch branch sources. To checkout a patch branch, you must
191: specify a tag along with your command. Example:
1.100 ericj 192: </p>
1.1 deraadt 193:
194: <p>
1.100 ericj 195: <ul><pre>
1.129 millert 196: # <b>cd /usr; cvs checkout -P -rOPENBSD_2_8 src</b>
1.127 jufi 197: </pre></ul>
1.129 millert 198: Or OPENBSD_2_7 for 2.7, etc.
1.100 ericj 199: </p>
200:
1.129 millert 201: <p> Currently only the OPENBSD_2_8 tag contains the release sources and
1.109 jason 202: errata already applied.
1.100 ericj 203:
204: <a name="CVSROOT"></a>
205: <h3><font color=#0000e0>Available Anonymous CVS Servers.</font></h3>
1.1 deraadt 206:
207: <p>
208: There are two levels of source tree access:
209:
210: <dl>
211: <dt><strong>Read-write access for developers:</strong>
212: <dd>Developers who need to commit changes to the source tree must have
213: an account on the OpenBSD machines. Getting this access will be a
214: natural result of working on the sources with other OpenBSD developers.
215: If someone does some good work and shows they can work with the team,
216: they will get an account.
217: </dl>
218:
219: <dl>
220: <dt><strong>Read-only access for everyone:</strong>
221: <dd>Anyone can access the read-only CVS repositories. These copies
222: of the read-write CVS repository are mirrored often. To use one,
223: set your <strong>CVSROOT</strong> environment variable to one of
224: the following values:
1.12 grr 225: <p>
226: <strong>Please see the note about using ssh vs. rsh below!</strong>
227: <p>
1.1 deraadt 228: <ul>
229: <p>
1.83 millert 230: <li><strong>CVSROOT=anoncvs@anoncvs1.usa.openbsd.org:/cvs</strong><br>
231: Host also known as <strong>anoncvs@anoncvs4.usa.openbsd.org</strong>.<br>
1.10 millert 232: located in California, western USA.<br>
1.46 millert 233: maintained by <a href=mailto:millert@openbsd.org>Todd Miller</a>.<br>
1.83 millert 234: protocols: pserver only.<br>
1.1 deraadt 235: updated every 4 hours.<br>
236: <p>
1.83 millert 237: <li><strong>CVSROOT=anoncvs@anoncvs.usa.openbsd.org:/cvs</strong><br>
238: Host also known as <strong>anoncvs3.usa.openbsd.org</strong>.<br>
1.1 deraadt 239: located at the University of Colorado, Boulder, western USA.<br>
240: maintained by <a href=mailto:Todd.Miller@cs.colorado.edu>Todd Miller</a>.<br>
1.94 millert 241: protocols: rsh, ssh, ssh port 2022, pserver.<br>
1.1 deraadt 242: updated every 6 hours.<br>
243: <p>
1.76 deraadt 244: <li><strong>CVSROOT=anoncvs@anoncvs5.usa.openbsd.org:/cvs</strong><br>
245: Host also known as <strong>squid.nas.nasa.gov</strong>.<br>
246: located at Ames Research Center, Moffett Field, California, USA.<br>
1.78 deraadt 247: maintained by <a href=mailto:allison@mail.arc.nasa.gov>Tyler Allison</a>.<br>
1.77 deraadt 248: protocols: ssh only.<br>
249: updated every 3 hours.<br>
1.121 deraadt 250: <p>
1.84 beck 251: <li><strong>CVSROOT=anoncvs@mirror.arc.nasa.gov:/cvs</strong><br>
252: located at Ames Research Center, Moffett Field, California, USA.<br>
253: maintained by <a href=mailto:allison@mail.arc.nasa.gov>Tyler Allison</a>.<br>
254: protocols: ssh only.<br>
255: updated every 3 hours.<br>
1.76 deraadt 256: <p>
1.31 deraadt 257: <li><strong>CVSROOT=anoncvs@anoncvs6.usa.openbsd.org:/cvs</strong><br>
258: Host also known as <strong>openbsd.citi.umich.edu</strong>.<br>
259: located at the University of Michigan, central USA.<br>
260: maintained by <a href=mailto:rees@umich.edu>Jim Rees</a>.<br>
261: protocols: ssh, ssh port 2022.<br>
262: updated every 12 hours.<br>
263: <p>
1.24 deraadt 264: <li><strong>CVSROOT=anoncvs@anoncvs1.ca.openbsd.org:/cvs</strong><br>
1.40 beck 265: Host also known as <strong>anoncvs.ca.openbsd.org</strong>,
1.74 beck 266: <strong>openbsd.sunsite.ualberta.ca</strong><br>
1.24 deraadt 267: located in Edmonton, Alberta, Canada.<br>
1.80 beck 268: maintained by <A HREF="mailto:beck@ualberta.ca">Bob Beck</A><br>
1.53 beck 269: protocols: ssh, rsh, ssh port 2022, pserver<br>
1.45 beck 270: updated every 2 hours.<br>
1.24 deraadt 271: <p>
1.1 deraadt 272: <li><strong>CVSROOT=anoncvs@anoncvs.uk.openbsd.org:/cvs</strong><br>
273: located in London, UK.<br>
274: maintained by <a href=mailto:peter@wonderland.org>Peter Galbavy</a>.<br>
1.116 beck 275: protocols: ssh only.<br>
276: updated every 6 hours.<br>
1.1 deraadt 277: <p>
1.117 beck 278: <li><strong>CVSROOT=anoncvs@anoncvs2.uk.openbsd.org:/cvs</strong><br>
279: located in London, UK.<br>
280: maintained by <a href=mailto:joe@hole-in-the.net>Joe Warren-Meeks</a>.<br>
281: protocols: ssh only.<br>
1.119 brian 282: updated every 3 hours.<br>
1.117 beck 283: <p>
1.1 deraadt 284: <li><strong>CVSROOT=anoncvs@anoncvs.tw.openbsd.org:/cvs</strong><br>
1.64 deraadt 285: Host also known as <strong>OpenBSD.csie.NCTU.edu.tw</strong>.<br>
1.1 deraadt 286: located in Taipei, Taiwan.<br>
1.63 deraadt 287: maintained by <a href=mailto:lkchu@OpenBSD.csie.NCTU.edu.tw>Liang-Kai Chu</a>.<br>
1.1 deraadt 288: protocols: rsh, ssh, ssh port 2022.<br>
289: updated every 12 hours.<br>
290: <p>
291: <li><strong>CVSROOT=anoncvs@anoncvs.no.openbsd.org:/cvs</strong><br>
1.64 deraadt 292: Host also known as <strong>cvs.inet.no</strong>.<br>
1.1 deraadt 293: located in Norway.<br>
1.64 deraadt 294: maintained by <a href=mailto:cvsadmin@inet.no>Michael Shuldman</a>.<br>
1.1 deraadt 295: protocols: rsh, ssh, ssh port 2022.<br>
296: updated every 4 hours.<br>
297: <p>
1.33 deraadt 298: <li><strong>CVSROOT=anoncvs@anoncvs.se.openbsd.org:/cvs</strong><br>
1.54 art 299: Host also known as <strong>anoncvs.stacken.kth.se</strong>.<br>
1.33 deraadt 300: located in Sweden.<br>
301: maintained by <a href=mailto:anoncvs@stacken.kth.se>Magnus Holmberg</a>.<br>
302: protocols: rsh, ssh, ssh port 2022.<br>
1.57 art 303: updated every 3 hours.<br>
1.68 wvdputte 304: <p>
305: <li><strong>CVSROOT=anoncvs@anoncvs.be.openbsd.org:/cvs</strong><br>
306: Host also known as <strong>badlands.rug.ac.be</strong>.<br>
307: located in Belgium.<br>
308: maintained by <a href=mailto:wvdputte@reptile.rug.ac.be>Wim Vandeputte</a>.<br>
309: protocols: ssh, ssh port 2022.<br>
310: updated every 3 hours.<br>
1.69 deraadt 311: <p>
1.118 beck 312: <li><strong>CVSROOT=anoncvs@anoncvs.calyx.nl:/cvs</strong><br>
313: located in Amsterdam, The Netherlands.<br>
1.127 jufi 314: maintained by <a href="mailto:nick@calyx.net">Nick Merrill</a>.<br>
1.118 beck 315: protocols: ssh.<br>
316: updated every 3 hours.<br>
317: <p>
1.69 deraadt 318: <li><strong>CVSROOT=anoncvs@anoncvs.jp.openbsd.org:/cvs</strong><br>
319: Host also known as <strong>kankoromochi.econ.nagasaki-u.ac.jp</strong>.<br>
320: located at Nagasaki Univ. Faculty of Economics, JAPAN.<br>
321: maintained by <a href=mailto:sigh@net.nagasaki-u.ac.jp>SUZUKI Hitoshi</a>.<br>
1.79 deraadt 322: protocols: ssh, pserver.<br>
323: updated every 3 hours.<br>
1.121 deraadt 324: <p>
1.73 deraadt 325: <li><strong>CVSROOT=anoncvs@anoncvs.cz.openbsd.org:/cvs</strong><br>
326: Host also known as <strong>com-os2.ms.mff.cuni.cz</strong>.<br>
1.98 rohee 327: located at Faculty Math & Physics, Charles University, Prague, Czech republic.<br>
1.73 deraadt 328: maintained by <a href=mailto:galambos@com-os2.ms.mff.cuni.cz>Leo Galambos</a>.<br>
329: protocols: ssh, ssh port 2022.<br>
330: updated every 3 hours.<br>
1.121 deraadt 331: <p>
1.84 beck 332: <li><strong>CVSROOT=anoncvs@anoncvs1.au.openbsd.org:/cvs</strong><br>
333: Host also known as <strong>anoncvs.au.openbsd.org</strong>,
334: <strong>anoncvs.openbsd.aba.net.au</strong><br>
335: located in Carlton, Victoria, Australia.<br>
336: maintained by <A HREF="mailto:mwp@aba.net.au">Micheal Paddon</A><br>
337: protocols: ssh<br>
338: updated every 4 hours.<br>
1.121 deraadt 339: <p>
1.88 beck 340: <li><strong>CVSROOT=anoncvs@dolphin.mtmc.ru:/cvs</strong><br>
341: located in Moscow, Russia<br>
342: maintained by <A HREF="mailto:jc@mtmc.ru">John Chertihin</A><br>
343: protocols: rsh, ssh<br>
1.89 beck 344: updated every 24 hours (at 1 AM Moscow time)<br>
1.121 deraadt 345: <p>
1.103 beck 346: <li><strong>CVSROOT :pserver:anoncvs@cvs.bsdfr.org:/cvs</strong><br>
347: located at in France<br>
348: maintained by: <A HREF=mailto:jch@oleane.net>Jean-Claude Christophe</A><br>
349: protocols: pserver<br>
350: updated every 24h <br>
1.121 deraadt 351: <p>
1.115 beck 352: <li><strong>CVSROOT=anoncvs@grappa.unix-ag.uni-kl.de:/cvs</strong><br>
353: located at the University of Kaiserslautern, Germany<br>
354: maintained by <A HREF="mailto:hgw@d1906.inka.de">Hans Gunter Weigand</A> and
355: <A HREF="mailto:naddy@openbsd.org"> Christian Weisgerber</A><br>
356: protocols: rsh, ssh, ssh port 2022, pserver<br>
357: updated daily from cvsup.uk.openbsd.org<br>
1.121 deraadt 358: <p>
1.80 beck 359: <li><strong>CVSROOT=anoncvs@exokernel.lcs.mit.edu:/cvs</strong><br>
360: located at M.I.T, Eastern USA.<br>
361: maintained by ????<br>
362: protocols: ssh, ???<br>
363: updated every ? hours.<br>
1.121 deraadt 364: <p>
1.108 ho 365: <li><strong>CVSROOT=anoncvs@xyzzy.gsnig.org:/cvs</strong><br>
366: Located in Göteborg, Sweden<br>
1.80 beck 367: maintained by martin@openbsd.org<br>
1.108 ho 368: protocols: ssh port 2022<br>
369: updated every 4 hours.<br>
1.121 deraadt 370: <p>
1.80 beck 371: <li><strong>CVSROOT=anoncvs@stl-isaas.ey.com:/cvs</strong><br>
1.90 beck 372: Located in St. Louis, MO, Eastern USA<br>
1.81 beck 373: maintained by <A HREF="mailto:aaron11@sprynet.com">Aaron Miller</A><br>
374: protocols: ssh, ssh port 2022, pserver<br>
375: updated every 3 hours.<br>
1.121 deraadt 376: <p>
1.91 beck 377: <li><strong>CVSROOT=anoncvs@openbsd.groupbsd.org:/cvs</strong><br>
1.92 jason 378: Located in Hillsborough NC, Eastern USA<br>
379: maintained by <A HREF="mailto:jason@openbsd.org">Jason Wright</A><br>
1.91 beck 380: protocols: ssh<br>
381: updated every 4 hours.<br>
1.121 deraadt 382: <p>
1.120 beck 383: <li><strong>CVSROOT=anoncvs@anoncvs.mx.openbsd.org:/cvs</strong><br>
384: Located at Campus Iztacala, Universidad Autonoma de Mexico<br>
385: maintained by <A HREF="mailto:alex@iztacala.unam.mx">Alejandro Juarez</A><br>
386: protocols: ssh<br>
387: updated every 3 hours.<br>
1.121 deraadt 388: <p>
1.128 beck 389: <li><strong>CVSROOT=anoncvs@anoncvs.pl.openbsd.org:/cvs</strong><br>
390: Host also known as <strong>anoncvs1.pl.openbsd.org</strong>,
391: <strong>incredible.bmtmc.gda.pl</strong><br>
1.126 beck 392: Located at BMT Maritime Consultants, Gdansk, Poland<br>
1.122 beck 393: maintained by <A HREF="mailto:detergent@incredible.bmtmc.gda.pl">
394: Adam Naguszewski</A><br>
1.128 beck 395: protocols: ssh, pserver<br>
1.122 beck 396: updated every 3 hours.<br>
397: <p>
1.123 beck 398: <li><strong>CVSROOT=anoncvs@rt.fm:/cvs</strong><br>
1.125 beck 399: Located in Algonquin, Illinois, USA<br>
1.123 beck 400: maintained by <A HREF="mailto:jcs@rt.fm">
401: Joshua Stein</A><br>
402: protocols: ssh<br>
1.124 beck 403: updated every 3 hours.<br>
1.131 ! beck 404: <P>
! 405: <li><strong>CVSROOT=anoncvs@shellhung.org:/cvs</strong><br>
! 406: Located in Hong Kong, China<br>
! 407: maintained by <A HREF="mailto:shell@shellhung.org">
! 408: Shell Hung</A><br>
! 409: protocols: pserver, ssh<br>
! 410: updated every 3 hours.<br>
1.123 beck 411: <p>
1.73 deraadt 412: </ul>
1.84 beck 413:
414:
1.73 deraadt 415: <p>
1.80 beck 416: <EM>Note:</EM>, If your server is listed on here with inaccurate or
1.104 ericj 417: unknown information, please contact
418: <A HREF="mailto:beck@openbsd.org"><tt>beck@openbsd.org</tt></A>
419: </p>
420:
1.80 beck 421: <p>
1.104 ericj 422: You may want to use
423: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&sektion=8&format=html">traceroute(8)</a>
424: to find out which server is nearest you.
1.11 michaels 425: Problems with a server should be reported to the <b>maintainer</b> of the
426: server in question.
1.104 ericj 427: </dl></p>
428:
429: <a name="CRYPTO"></a>
430: <h3><font color=#0000e0>Getting crypto sources through CVS(1)</font></h3>
431:
1.1 deraadt 432: <p>
433: <strong>IMPORTANT NOTE:</strong>
434: There are a few issues relating to cryptographic software that everyone
435: should be aware of:
436: <ul>
437: <li>The OpenBSD sources are from Canada.
1.9 deraadt 438: As
439: <a href=http://insight.mcmaster.ca/org/efc/pages/doc/crypto-export.html>
440: researched by a Canadian individual</a>
441: and as
442: <a href=http://axion.physics.ubc.ca/ECL.html>
443: described in the Export Control list of Canada</a>
444: is legal to export crypto software from Canada to the world.
1.1 deraadt 445: <p>
446: <li>However, if you are outside the USA or Canada, you should not
447: fetch the cryptographic sections of the OpenBSD sources from an
448: anoncvs server located in the USA. The files in question are...
449: <ul>
450: <li>src/kerberosIV/*
1.57 art 451: <li>src/lib/libdes/*
1.1 deraadt 452: <li>src/lib/libc/crypt/crypt.c
453: <li>src/lib/libc/crypt/morecrypt.c
1.36 deraadt 454: <li>src/sys/netinet
1.67 art 455: <li>src/usr.sbin/afs/src/rxkad/*
1.56 matthieu 456: <li>X11/xc/lib/Xdmcp/Wraphelp.c
1.1 deraadt 457: </ul>
458: Because of the USA ITAR munitions list,
459: crypto software may only be exported to Canada from the USA.
460: <p>
461: <li>The OpenBSD project is looking for more anoncvs servers -- read
462: on to find out how you can help.
463: </ul>
464:
1.104 ericj 465: <a name="EXAMPLE"></a>
466: <h3><font color=#0000e0>Example usages for CVS(1).</font></h3>
467:
1.1 deraadt 468: <p>
469: A sample use of an anoncvs CVS server would be:
1.104 ericj 470: <ul><pre>
471: % <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
472: % <strong>cd /tmp</strong>
473: % <strong>cvs get src/sys/arch/sparc</strong>
1.12 grr 474: [copies the files from the repository to your machine]
1.104 ericj 475: % <strong>cvs log src/sys/arch/sparc/sparc/locore.s</strong>
1.12 grr 476: [shows the commit log for the chosen file ]
1.104 ericj 477: % <strong>cvs diff -bc -r1.1 -r1.5 src/sys/arch/sparc/sparc/locore.s</strong>
1.12 grr 478: [shows the changes between revisions 1.1 and rev 1.5]
1.104 ericj 479: </pre></ul>
1.1 deraadt 480:
481: <p>
1.18 todd 482: <a name=pserver>In order to use a cvs ``pserver'' (a direct tcp connection instead of using ssh or rsh) you must login once:</a>
1.104 ericj 483:
484: <ul><pre>
1.18 todd 485: [ *NOTE* You must be using cvs version 1.8 or higher to do this ]
1.104 ericj 486: % <strong>setenv CVSROOT :pserver:anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
487: % <strong>cvs login</strong>
1.59 beck 488: (Logging in to anoncvs@anoncvs1.ca.openbsd.org)
1.104 ericj 489: CVS password: <strong>anoncvs</strong>
1.18 todd 490: [this writes a line to ~/.cvspass (filename over-ridden by CVS_PASSFILE).]
491: [An example line from my ~/.cvspass after typing 'blah' for the above ]
492: [password is: ]
493: [:pserver:anoncvs@anoncvs5.usa.openbsd.org:/cvs Au'yc ]
494: [...after logging in ONCE every other use of the above CVSROOT will work ]
1.104 ericj 495: % <strong>cvs get ksrc-i386 ksrc-common</strong>
1.18 todd 496: [allows you to retrieve ONLY that necessary to rebuild an i386 kernel ]
1.104 ericj 497: </pre></ul>
1.18 todd 498:
499: <p>
1.39 todd 500: Here is how someone using anoncvs regularly would update his
1.1 deraadt 501: source tree:
1.60 millert 502: <ul><li>First, start out by `get'-ing an initial tree:
1.27 todd 503:
1.109 jason 504: <p> (If you are following <i>current</i>):
1.104 ericj 505: <ul><pre>
506: # <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
507: # <strong>cd /usr</strong>
508: # <strong>cvs -q get -PA src</strong>
509: </pre></ul>
1.109 jason 510:
1.129 millert 511: <p> (If you are following the patch branch for 2.8):
1.109 jason 512: <ul><pre>
513: # <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
514: # <strong>cd /usr</strong>
1.129 millert 515: # <strong>cvs -q get -rOPENBSD_2_8 -P src</strong>
1.109 jason 516: </pre></ul>
1.27 todd 517: </li>
1.37 todd 518:
1.27 todd 519: <li> Anytime afterwards, to `update' this tree:
1.109 jason 520: <p> (If you are following <i>current</i>):
1.104 ericj 521: <ul><pre>
522: # <strong>cd /usr/src</strong>
523: # <strong>cvs -q up -PAd</strong>
524: </pre></ul>
1.27 todd 525:
1.129 millert 526: <p> (If you are following the patch branch for 2.8):
1.109 jason 527: <ul><pre>
528: # <strong>cd /usr/src</strong>
1.129 millert 529: # <strong>cvs -q up -rOPENBSD_2_8 -Pd</strong>
1.109 jason 530: </pre></ul>
531:
1.39 todd 532: Everytime you ran this it would synchronize your /usr/src tree. It would
1.1 deraadt 533: not destroy any of your local changes, rather it would attempt to merge
534: changes in. If you use obj directories (not obj symbolic links) you may
535: wish to append "-I obj" to the cvs command line, this will keep cvs from
536: spitting out a warning about all the obj directories it is going to
537: encounter which are not in the repository.
1.72 millert 538:
539: <p>
1.109 jason 540: <li> NOTES: if you are updating a source tree that you initially fetched
1.72 millert 541: from a different server, or from a CD, you <strong>must</strong>
542: add the <em>-d $CVSROOT</em> options to cvs. You must also set the
1.109 jason 543: <em>CVS_IGNORE_REMOTE_ROOT</em> environment variable. If you are following
544: a patch branch, be sure to always <strong>omit</strong> the <code>-A</code>
545: flag to cvs, or you may find yourself tracking <i>current</i> instead.
1.72 millert 546:
1.109 jason 547: <p> (If you are following <i>current</i>):
1.104 ericj 548: <ul><pre>
549: # <strong>cd /usr/src</strong>
550: # <strong>cvs -d $CVSROOT -q up -PAd</strong>
551: </pre></ul>
1.72 millert 552:
1.109 jason 553: <p> (If you are following a patch branch):
554: <ul><pre>
555: # <strong>cd /usr/src</strong>
556: # <strong>cvs -d $CVSROOT -q up -Pd</strong>
557: </pre></ul>
558:
1.27 todd 559: </li>
560: </ul>
561:
1.37 todd 562: <p>
563: To <a name=ports>use</a> <a href=ports.html>ports</a>, it is similar to src:
564: <ul><li>
565: <pre>
1.104 ericj 566: # <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
567: # <strong>cd /usr</strong>
568: # <strong>cvs -q get -PA ports</strong>
1.38 deraadt 569: </pre>
1.37 todd 570: </li>
571: <li> Anytime afterwards, to `update' this tree:
572: <pre>
1.104 ericj 573: # <strong>cd /usr</strong>
574: # <strong>cvs -q up -PAd ports</strong>
1.37 todd 575: </pre>
576: </li>
1.127 jufi 577: </ul>
1.37 todd 578: </p>
579:
1.104 ericj 580: In the above example, <i>-q</i> is optional, only intended to minimize
1.27 todd 581: cvs's output. For those who like to see screenfulls of output, it
582: can be omitted.
1.1 deraadt 583:
584: <p>
1.104 ericj 585: or to make a diff of a locally patched module (here <i>cd.c</i>) to include with
1.12 grr 586: a bug report:
1.104 ericj 587: <ul><pre>
588: # <strong>cd /usr</strong>
1.127 jufi 589: # <strong>cvs diff -u src/sys/scsi/cd.c > /tmp/patch</strong>
1.104 ericj 590: </pre></ul>
1.37 todd 591: </p>
1.12 grr 592:
593: <p>
1.104 ericj 594: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1&format=html">CVS(1) man page</a>
595: (included with the CVS sources) has much more
1.1 deraadt 596: information about how CVS can be used.
597:
598: <p>
1.105 ericj 599: <strong>X11 Source tree</strong>
600: <br>
601: Anoncvs mirrors also carry the OpenBSD X11 source tree. You can adapt
602: the recipe above to update your X11 source tree from the second CD.
603: Either copy or use a union mount to get the X11 sources in <i>/usr/X11</i>:
604:
605: <ul>
606: <li>copy the tree off it (assuming the 2nd CD is mounted on /mnt):
607: <pre>
608: # <strong>cd /mnt; cp -Rp X11 /usr</strong>
609: </pre>
610: <li>use a union mount with the CD below a writable directory.
611: <pre>
612: # <strong>mount -t union -o -b /mnt/X11 /usr/X11</strong>
613: </pre></ul>
614:
615: After this, <i>/usr/X11</i> will be ready to be used by cvs. You can for
616: example update it to -current source (assuming you've already set
617: the <b>CVSROOT</b> environment variable):
618:
619: <ul><pre>
620: # <strong>cd /usr/X11</strong>
621: # <strong>cvs -q update -PAd</strong>
622: </pre></ul>
623:
624: <p>
1.12 grr 625: <strong>Warning:</strong>
626: When using cvs you should take care that your current directory is either
1.109 jason 627: the root of the tree you are referencing or in a separate place such as /tmp.
1.12 grr 628: Some commands such as "get" can create an arbitrary sub-tree in the current
629: directory, and a subsequent update will recursively flesh out this sub-tree.
630:
631: <p>
1.1 deraadt 632: The anoncvs service gives fledgling developers a chance to learn CVS
633: operation and get thoroughly involved in the development process
634: before getting "commit" access -- as a result of showing useful
635: skills and high quality results they will naturally later be given
636: developer access. As well, people providing patches can create
637: their "diff"s relative to the CVS tree, which will ease integration.
638:
1.104 ericj 639:
640: <a name="WHICH"></a>
641: <h3><font color=#0000e0>Use rsh(1) or ssh(1)?</font></h3>
642:
1.1 deraadt 643: <p>
1.15 grr 644: <strong>Anoncvs: rsh vs. ssh</strong>
1.12 grr 645: <br>
646: By default, the CVS client uses rsh to talk to the CVS server. Many
1.39 todd 647: of the CVS sites no longer support rsh for security reasons or a local
1.12 grr 648: problem like a firewall or imperfect protocol emulator such as slirp
649: may prevent you from using rsh.
1.97 deraadt 650: The alternative is a to use a "secure shell" connection using either
651: <a href=http://www.openssh.com>OpenSSH (*FREE*)</a> or
652: <a href=http://www.cs.hut.fi/ssh/>ssh (non-commercial and commercial)</a>.
1.68 wvdputte 653:
654: <p>
1.97 deraadt 655: The OpenBSD anoncvs repositries support the SSH1 protocol, not the SSH2
656: protocol due to the use of a "strict non-commercial use licensing policy".
1.28 beck 657:
1.75 millert 658: <p>
659: Once ssh is installed, one sets the environment variable
1.28 beck 660: <strong>CVS_RSH</strong> to point to ssh (typically
1.113 brad 661: <strong>/usr/bin/ssh</strong>). If your local site prevents you
1.28 beck 662: from connecting out to port 22 (which ssh defaults to using) use port
663: 2022.
1.1 deraadt 664:
665: <p>
666: Do not be tempted to turn on compression since CVS already compresses.
667: Use something like the following in your <strong>$HOME/.ssh/config</strong>
1.10 millert 668: file. Note that not all anoncvs servers allow ssh connections on
1.21 millert 669: port 2022. Also note that most anoncvs servers no longer accept
670: the <strong>none</strong> cipher as it is disabled in recent
671: versions of ssh for security reasons.
1.1 deraadt 672: <pre>
1.59 beck 673: Host anoncvs.ca.openbsd.org
1.1 deraadt 674: Port 2022
675: </pre>
676:
677: <p>
678: CVS is a little noisy starting up; to quiet it a bit you may want to
679: do this:
1.105 ericj 680:
681: <ul><pre>
682: <strong>setenv CVS_CLIENT_PORT -1</strong>
683: </pre></ul>
1.1 deraadt 684:
685: <p>
1.8 deraadt 686: If you wish to change from one CVS server to another (say your normal one is
687: down, or for any other reason), the environment variable which will let you
688: do this is
1.105 ericj 689:
690: <ul><pre>
691: <strong>setenv CVS_IGNORE_REMOTE_ROOT</strong>
692: </pre></ul>
693:
1.72 millert 694: Note that you will also need to use the <strong>-d</strong> flag
695: as mentioned above.
1.8 deraadt 696:
1.107 millert 697: <a name="SUP"></a>
698: <h3><font color=#0000e0>Mirroring the CVS repository via sup(1).</font></h3>
699:
700: <p>
701: Users wishing to mirror the OpenBSD CVS tree itself may now do so
702: from <em>anoncvs.usa.openbsd.org</em>. Note that this is the cvs
703: tree, <b>not</b> a checked out source tree. It is only useful if
704: you want to be able to do fast cvs operations (diff, annotate, etc)
705: or if you have multiple source trees and you only want to transfer
706: new data once (you can then checkout a tree from your local cvs
707: mirror).
708: <p>
709: A sample supfile would be:
710: <pre>
711: cvs host=anoncvs.usa.openbsd.org hostbase=/ base=/home delete
712: </pre>
713: <p>
714: which would mirror the cvs tree into /home/cvs with the sup data
715: files ending up in /home/sup. The full OpenBSD cvs tree is just
716: under a gigabyte in size.
1.65 matthieu 717:
1.105 ericj 718: <a name="MIRROR"></a>
719: <h3><font color=#0000e0>Setting up an anoncvs mirror.</font></h3>
720:
1.107 millert 721: <p>
1.1 deraadt 722: If you wish to be a new anoncvs mirror site, please contact the anoncvs
1.102 deraadt 723: <a href=mailto:sup@openbsd.org>maintainer</a>.
1.107 millert 724: Anoncvs mirrors require about 1GB of disk, and use up to 4MB of swap
1.1 deraadt 725: per anoncvs user (assuming the user does a large operation; while smaller
726: operations use fewer resources, anoncvs still makes much more of an
727: impact than ftp or sup). Such anoncvs machines should have excellent
728: network connectivity for the area they are expected to serve. A
729: <a href=anoncvs.shar>document</a>
730: which describes the setup of anoncvs servers is available.
731:
1.60 millert 732: <h3><font color=#0000e0>Final notes:</font></h3>
733: After upgrading your source tree, you should read the comments
734: at the top of <KBD>/usr/src/Makefile</KBD> before attemping
735: a build. Also, you should build a new kernel <strong>before</strong>
1.101 ericj 736: doing a <KBD>make build</KBD> if possible. In some cases it may be
1.60 millert 737: necessary to rebuild and install the <KBD>config</KBD> utility before
738: you can build the kernel. If <KBD>config GENERIC</KBD> fails this
739: is probably the case.
740: <p>
741: It is important to note that upgrading from a release to the current tree
742: by rebuilding the sources can be rather difficult due to dependencies
743: that are often not obvious. Therefore, it is suggested that you first
744: install the latest snapshot before attemping a tree build from source.
1.1 deraadt 745:
746: <hr>
1.58 pauls 747: <a href=index.html><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.1 deraadt 748: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.131 ! beck 749: <br><small>$OpenBSD: anoncvs.html,v 1.130 2000/12/16 15:03:54 beck Exp $</small>
1.1 deraadt 750:
751: </body>
752: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to anoncvs.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www