[BACK]Return to anoncvs.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/anoncvs.html, Revision 1.194

1.180     jufi        1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1       deraadt     2: <html>
                      3: <head>
1.93      deraadt     4: <title>OpenBSD AnonCVS</title>
1.135     naddy       5: <link rev="made" href="mailto:www@openbsd.org">
1.93      deraadt     6: <meta name="resource-type" content="document">
1.180     jufi        7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
1.93      deraadt     8: <meta name="description" content="How to get OpenBSD updates via Internet using Anonymous CVS">
                      9: <meta name="keywords" content="openbsd,anoncvs,updates">
                     10: <meta name="distribution" content="global">
1.162     horacio    11: <meta name="copyright" content="This document copyright 1996-2002 by OpenBSD.">
1.1       deraadt    12: </head>
                     13:
1.135     naddy      14: <body bgcolor="#ffffff" text="#000000" link="#23238e">
1.1       deraadt    15:
1.171     jsyn       16: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.93      deraadt    17: <p>
1.135     naddy      18: <h2><font color="#e00000">Anonymous CVS</font></h2>
1.14      downsj     19:
1.135     naddy      20: <hr>
                     21:
                     22: <h3>Table Of Contents</h3>
                     23:
                     24: <ul>
1.100     ericj      25: <li><a href="#anoncvs">What is Anonymous CVS?</a>
                     26: <li><a href="#CVS">What is CVS?</a>
1.135     naddy      27: <li><a href="#starting">Getting Started Using Anonymous CVS</a>
                     28: <li><a href="#using">Using CVS to Get and Update your Source Tree</a>
                     29: <li><a href="#CVSROOT">Available Anonymous CVS Servers</a>
                     30: <li><a href="#CRYPTO">Getting crypto sources through cvs(1)</a>
                     31: <li><a href="#EXAMPLE">Example usages for cvs(1)</a>
1.104     ericj      32: <li><a href="#WHICH">Use rsh(1) or ssh(1)?</a>
1.135     naddy      33: <li><a href="#SUP">Mirroring the CVS repository via sup(1)</a>
                     34: <li><a href="#MIRROR">Setting up an anoncvs mirror</a>
1.100     ericj      35: </ul>
1.135     naddy      36:
1.100     ericj      37: <hr>
                     38:
1.135     naddy      39: <h3><a name="anoncvs"><font color="#0000e0">What is Anonymous CVS?</font></a></h3>
1.99      ericj      40:
1.15      grr        41: <p>
                     42: Anonymous CVS is a method of keeping your local copy of the OpenBSD source
                     43: tree up to date with respect to changes made to current OpenBSD sources.
1.109     jason      44: In addition to following the bleeding edge of development, it is
                     45: also possible to track the patches for errata of a release.
1.99      ericj      46: </p>
                     47:
1.14      downsj     48: <p>
1.15      grr        49: The major advantage of Anonymous CVS over other source code update
                     50: techniques is that it works directly against a central source code
                     51: repository or mirror.  This means that you have the full set of CVS
                     52: commands available to control merging and updating your changes with
1.154     jsyn       53: other source changes and for performing diffs, change histories
1.15      grr        54: and other queries against the central repository.
1.99      ericj      55: </p>
                     56:
1.36      deraadt    57: <p>
1.135     naddy      58: The OpenBSD Project currently has five main source repositories:
1.99      ericj      59: </p>
                     60:
                     61: <ul>
1.140     horacio    62:   <li><b>src</b> - Houses all source code for the OpenBSD Operating System.</li>
                     63:   <li><b>ports</b> - Houses the <a href="./ports.html">OpenBSD Ports</a>.</li>
                     64:   <li><b>www</b> - Houses all OpenBSD web pages. (Including this one).</li>
1.135     naddy      65:   <li><b>X11</b> - Houses OpenBSD's adaptation of the
                     66:       <a href="http://www.XFree86.org/">XFree86-3</a> software project.</li>
                     67:   <li><b>XF4</b> - Houses OpenBSD's adaptation of the
                     68:       <a href="http://www.XFree86.org/">XFree86-4</a> software project.</li>
1.99      ericj      69: </ul>
                     70:
1.100     ericj      71: <p>
                     72: To summarize, the real strength of using Anonymous CVS is that it is
                     73: a "tolerant" source code control system - it <strong>respects</strong>
                     74: changes that you have made to your local sources and makes <strong>
                     75: "best efforts"</strong> to update your entire source tree, rather than
                     76: leaving you a list of arcane problems that have to be resolved before
                     77: continuing.
                     78: </p>
                     79:
1.135     naddy      80: <h3><a name="CVS"><font color="#0000e0">What is CVS?</font></a></h3>
1.99      ericj      81:
1.36      deraadt    82: <p>
1.135     naddy      83: <a href="why-cvs.html">
1.36      deraadt    84: CVS is the source code control system used to manage the OpenBSD source tree.</a>
1.16      deraadt    85: It implements a central repository for all officially released source code
1.15      grr        86: and changes, while permitting developers to maintain local copies of the
1.99      ericj      87: source code with their working changes.  Developers with "<b>write access</b>"
1.15      grr        88: can commit changes directly to the OpenBSD source tree, while "Anonymous
1.155     jsyn       89: CVS" users have "<b>read access</b>" and can keep their local copies of the
1.169     miod       90: source up to date and issue queries against the central repository.
1.99      ericj      91: </p>
                     92:
1.15      grr        93: <p>
1.22      niklas     94: The major strength of CVS is that it has the ability to perform intelligent
1.15      grr        95: merges of changes to the central repository with changes that you make to
                     96: your local copy.  This means that if you make a change to a module and
                     97: perform an update, your changes are not "blown away", rather CVS makes
                     98: best efforts to merge the changes made to the central sources with changes
                     99: you've made to your local copy.
1.99      ericj     100: </p>
                    101:
1.15      grr       102: <p>
                    103: In the event that the changes can't be completely merged, CVS provides a
                    104: "soft fallback", in terms of providing you with annotated changes to your
1.39      todd      105: local copy, preserving an unmodified copy of your version and continuing
1.15      grr       106: to update any other source modules you requested.
1.99      ericj     107: </p>
                    108:
1.155     jsyn      109: <h3><a name="starting"><font color="#0000e0">Getting Started Using Anonymous
                    110: CVS</font></a></h3>
1.100     ericj     111:
                    112: <p>
                    113: The latest version of CVS is available at
1.140     horacio   114: <a href="http://www.cvshome.org/">Cyclic</a>.
1.100     ericj     115: Versions earlier than 1.6 are not recommended, and may not work.
                    116: If you already have OpenBSD installed, CVS is included.
                    117: </p>
                    118:
1.22      niklas    119: <p>
1.99      ericj     120: People who own an OpenBSD CD may have seen the <i>CVS/</i> dirs on it.
1.155     jsyn      121: Actually there is a reason, the CD has a checkout of the OpenBSD <b>src</b>
                    122: module usable to continue updating from.  Using this tree will result in a much
1.23      mickey    123: faster initial CVS update than a fresh checkout of the full OpenBSD
                    124: source tree.  There are two ways of using the CD:
1.99      ericj     125: </p>
                    126:
1.23      mickey    127: <ul>
1.155     jsyn      128: <li>To copy the CVS tree from the CD to <i>/usr/src</i> (assuming the CD is
                    129: mounted on /mnt):
1.22      niklas    130: <pre>
1.99      ericj     131:        # <b>cd /mnt; pax -rw CVS Makefile [a-z]* /usr/src</b>
1.22      niklas    132: </pre>
1.155     jsyn      133: <li>Use a union mount (see <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_union&amp;apropos=0&amp;sektion=8&amp;manpath=OpenBSD+Current&amp;format=html">mount_union(8)</a>)
                    134: with the CD below a writable directory. (This can be used when only compiling from the tree.)
1.22      niklas    135: <pre>
1.99      ericj     136:        # <b>mount -t union -o -b /mnt /usr/src</b>
1.22      niklas    137: </pre>
1.23      mickey    138: </ul>
1.100     ericj     139:
                    140: <p>
1.155     jsyn      141: For people who don't have a CD on hand, you can use <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1&amp;format=html">
                    142: cvs(1)</a> to "<b>checkout</b>" the source repository for you. This is
                    143: discussed in the <a href="#using">next section</a>.
1.100     ericj     144: </p>
                    145:
                    146: <p>
1.155     jsyn      147: After this, <i>/usr/src</i> will be a nice checkout area where all
                    148: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1&amp;format=html">
                    149: cvs(1)</a> commands will work OK.
1.100     ericj     150: </p>
                    151:
1.155     jsyn      152: <h3><a name="using"><font color="#0000e0">Using CVS to get and update your
                    153: source tree</font></a></h3>
1.100     ericj     154:
                    155: <p>
1.109     jason     156: CVS was designed to be a simple way to retrieve and update your sources,
                    157: therefore there isn't much involved at all in doing so.  You must first
                    158: decide whether you want to track <i>current</i> or a patch branch.
1.112     kjell     159: The current tree has all of the up to the minute changes,
1.109     jason     160: whereas a patch branch contains a formal release plus the patches
1.157     heko      161: from the <a href="errata.html">errata</a> already applied. For a definition
                    162: of <i>current</i>, see the <a href="faq/upgrade-minifaq.html#1.1">Upgrade
                    163: Mini-FAQ</a>.
1.109     jason     164:
1.169     miod      165: <p>Once you have decided which tree to follow, you must choose which Anonymous
1.109     jason     166: CVS server you are going to use.  A list of these servers is
1.135     naddy     167: <a href="#CVSROOT">below</a>.  Do, however, notice that there are three ways
1.109     jason     168: to access these servers.
1.100     ericj     169: </p>
1.99      ericj     170:
1.135     naddy     171: <dl>
1.155     jsyn      172: <dt><b>ssh</b><dd>Secure Shell can be used to access the anonymous CVS servers.
                    173: This is the <em>recommended</em> way of doing so, as it is encrypted. As of
                    174: 2.6, OpenBSD has included OpenSSH in its standard distribution.
                    175: <dt><b>rsh</b><dd>Remote Shell can be used on some of the servers for users
                    176: who don't have access to <a href="http://www.openssh.com/">ssh</a>.
                    177: <dt><b>pserver</b><dd>pserver is primarily useful for users who are behind
                    178: firewalls that block the other two connections.
1.135     naddy     179: </dl>
1.100     ericj     180:
                    181: <p>
1.159     jcs       182: <b>NOTE:</b> For users wishing to use rsh, you must first set the
                    183: <var>CVS_RSH</var> variable to rsh.
1.100     ericj     184:
                    185: <ul>
1.135     naddy     186: <li>For Korn/Bourne shells:
1.100     ericj     187: <pre>
1.159     jcs       188:        $ <b>export CVS_RSH=/usr/bin/rsh</b>
1.100     ericj     189: </pre>
1.135     naddy     190: <li>For csh/tcsh:
1.100     ericj     191: <pre>
1.159     jcs       192:        % <b>setenv CVS_RSH /usr/bin/rsh</b>
1.100     ericj     193: </pre>
                    194: </ul>
                    195:
                    196: <p>
1.155     jsyn      197: Once you have chosen which <a href="#CVSROOT">Anonymous CVS Server</a> you will
                    198: use, and which method you will use, you can start using cvs. For those of you
                    199: who have CDs you can start with the CVS checkout that is on the CD by using
                    200: the method <a href="#starting">above</a> to get the sources onto your system.
                    201: If you don't have a CD handy, use the method below to checkout the sources.
                    202: This method puts the OpenBSD source tree into <i>/usr/src</i>.
1.100     ericj     203: </p>
                    204:
1.135     naddy     205: <pre>
                    206:        # <b>cd /usr; cvs checkout -P src</b>
                    207: </pre>
1.99      ericj     208:
1.1       deraadt   209: <p>
1.109     jason     210: The above will checkout the <i>current</i> source tree.  Many of you will
1.169     miod      211: only want the patch branch sources.  To checkout a patch branch, you must
1.109     jason     212: specify a tag along with your command. Example:
1.100     ericj     213: </p>
1.1       deraadt   214:
1.135     naddy     215: <pre>
1.191     nick      216:        # <b>cd /usr; cvs checkout -P -rOPENBSD_3_4 src</b>
1.135     naddy     217: </pre>
1.1       deraadt   218: <p>
1.191     nick      219: Or OPENBSD_3_3 for 3.3, etc.
1.100     ericj     220:
1.191     nick      221: <p> The OPENBSD_3_4 tag contains the release sources and
1.109     jason     222: errata already applied.
1.100     ericj     223:
1.155     jsyn      224: <h3><a name="CVSROOT"><font color="#0000e0">Available Anonymous CVS Servers
                    225: </font></a></h3>
1.1       deraadt   226:
                    227: <p>
                    228: There are two levels of source tree access:
                    229:
                    230: <dl>
                    231: <dt><strong>Read-write access for developers:</strong>
                    232: <dd>Developers who need to commit changes to the source tree must have
                    233: an account on the OpenBSD machines.  Getting this access will be a
                    234: natural result of working on the sources with other OpenBSD developers.
                    235: If someone does some good work and shows they can work with the team,
                    236: they will get an account.
                    237: </dl>
                    238:
                    239: <dl>
                    240: <dt><strong>Read-only access for everyone:</strong>
                    241: <dd>Anyone can access the read-only CVS repositories. These copies
                    242: of the read-write CVS repository are mirrored often. To use one,
1.135     naddy     243: set your <var>CVSROOT</var> environment variable to one of
1.1       deraadt   244: the following values:
1.12      grr       245: <p>
1.159     jcs       246: <em>Please see the note about <a href="#WHICH">ssh vs. rsh</a> below!</em>
1.12      grr       247: <p>
1.1       deraadt   248: <ul>
1.83      millert   249: <li><strong>CVSROOT=anoncvs@anoncvs.usa.openbsd.org:/cvs</strong><br>
                    250: Host also known as <strong>anoncvs3.usa.openbsd.org</strong>.<br>
1.1       deraadt   251: located at the University of Colorado, Boulder, western USA.<br>
1.148     millert   252: maintained by <a href="mailto:millert@openbsd.org">Todd Miller</a>.<br>
1.94      millert   253: protocols: rsh, ssh, ssh port 2022, pserver.<br>
1.144     millert   254: updated every 3 hours.<br>
1.1       deraadt   255: <p>
1.31      deraadt   256: <li><strong>CVSROOT=anoncvs@anoncvs6.usa.openbsd.org:/cvs</strong><br>
                    257: Host also known as <strong>openbsd.citi.umich.edu</strong>.<br>
                    258: located at the University of Michigan, central USA.<br>
1.135     naddy     259: maintained by <a href="mailto:rees@umich.edu">Jim Rees</a>.<br>
1.31      deraadt   260: protocols: ssh, ssh port 2022.<br>
                    261: updated every 12 hours.<br>
                    262: <p>
1.24      deraadt   263: <li><strong>CVSROOT=anoncvs@anoncvs1.ca.openbsd.org:/cvs</strong><br>
1.40      beck      264: Host also known as <strong>anoncvs.ca.openbsd.org</strong>,
1.74      beck      265: <strong>openbsd.sunsite.ualberta.ca</strong><br>
1.24      deraadt   266: located in Edmonton, Alberta, Canada.<br>
1.149     miod      267: maintained by <A HREF="mailto:beck@ualberta.ca">Bob Beck</A>.<br>
1.53      beck      268: protocols: ssh, rsh, ssh port 2022, pserver<br>
1.45      beck      269: updated every 2 hours.<br>
1.24      deraadt   270: <p>
1.1       deraadt   271: <li><strong>CVSROOT=anoncvs@anoncvs.no.openbsd.org:/cvs</strong><br>
1.64      deraadt   272: Host also known as <strong>cvs.inet.no</strong>.<br>
1.1       deraadt   273: located in Norway.<br>
1.135     naddy     274: maintained by <a href="mailto:cvsadmin@inet.no">Michael Shuldman</a>.<br>
1.1       deraadt   275: protocols: rsh, ssh, ssh port 2022.<br>
                    276: updated every 4 hours.<br>
                    277: <p>
1.68      wvdputte  278: <li><strong>CVSROOT=anoncvs@anoncvs.be.openbsd.org:/cvs</strong><br>
                    279: Host also known as <strong>badlands.rug.ac.be</strong>.<br>
                    280: located in Belgium.<br>
1.135     naddy     281: maintained by <a href="mailto:wvdputte@reptile.rug.ac.be">Wim Vandeputte</a>.<br>
1.68      wvdputte  282: protocols: ssh, ssh port 2022.<br>
                    283: updated every 3 hours.<br>
1.69      deraadt   284: <p>
1.142     naddy     285: <li><strong>CVSROOT=anoncvs@anoncvs.nl.openbsd.org:/cvs</strong><br>
                    286: Host also known as <strong>anoncvs.calyx.nl</strong>.<br>
1.118     beck      287: located in Amsterdam, The Netherlands.<br>
1.142     naddy     288: maintained by <a href="mailto:nick@calyx.net">Nick Merrill</a> and
                    289: <a href="mailto:alex@calyx.nl">Alexander Grendel</a>.<br>
1.118     beck      290: protocols: ssh.<br>
                    291: updated every 3 hours.<br>
                    292: <p>
1.69      deraadt   293: <li><strong>CVSROOT=anoncvs@anoncvs.jp.openbsd.org:/cvs</strong><br>
                    294: Host also known as <strong>kankoromochi.econ.nagasaki-u.ac.jp</strong>.<br>
                    295: located at Nagasaki Univ. Faculty of Economics, JAPAN.<br>
1.135     naddy     296: maintained by <a href="mailto:sigh@net.nagasaki-u.ac.jp">SUZUKI Hitoshi</a>.<br>
1.79      deraadt   297: protocols: ssh, pserver.<br>
                    298: updated every 3 hours.<br>
1.121     deraadt   299: <p>
1.103     beck      300: <li><strong>CVSROOT :pserver:anoncvs@cvs.bsdfr.org:/cvs</strong><br>
1.141     naddy     301: located in France<br>
1.149     miod      302: maintained by: <a href="mailto:jch@oleane.net">Jean-Claude Christophe</a>.<br>
1.103     beck      303: protocols: pserver<br>
                    304: updated every 24h <br>
1.121     deraadt   305: <p>
1.161     naddy     306: <li><strong>CVSROOT=anoncvs@anoncvs.de.openbsd.org:/cvs</strong><br>
                    307: Host also known as <strong>grappa.unix-ag.uni-kl.de</strong>.<br>
1.115     beck      308: located at the University of Kaiserslautern, Germany<br>
1.188     naddy     309: maintained by <A HREF="mailto:naddy@openbsd.org">Christian Weisgerber</A>.<br>
                    310: protocols: ssh, ssh port 2022, pserver<br>
                    311: updated every 6 hours from anoncvs.usa.openbsd.org.<br>
1.121     deraadt   312: <p>
1.128     beck      313: <li><strong>CVSROOT=anoncvs@anoncvs.pl.openbsd.org:/cvs</strong><br>
                    314: Host also known as <strong>anoncvs1.pl.openbsd.org</strong>,
                    315: <strong>incredible.bmtmc.gda.pl</strong><br>
1.126     beck      316: Located at BMT Maritime Consultants, Gdansk, Poland<br>
1.122     beck      317: maintained by <A HREF="mailto:detergent@incredible.bmtmc.gda.pl">
1.149     miod      318: Adam Naguszewski</A>.<br>
1.128     beck      319: protocols: ssh, pserver<br>
1.122     beck      320: updated every 3 hours.<br>
                    321: <p>
1.123     beck      322: <li><strong>CVSROOT=anoncvs@rt.fm:/cvs</strong><br>
1.136     miod      323: Located in Lake in the Hills, Illinois, USA<br>
1.123     beck      324: maintained by <A HREF="mailto:jcs@rt.fm">
1.149     miod      325: Joshua Stein</A>.<br>
1.123     beck      326: protocols: ssh<br>
1.124     beck      327: updated every 3 hours.<br>
1.123     beck      328: <p>
1.149     miod      329: <li><strong>CVSROOT=anoncvs@cvs.openbsd.cz:/cvs</strong><br>
                    330: Located in Prague, Czech Republic<br>
1.190     nick      331: maintained by <A HREF="mailto:vlada@openbsd.cz">Vladimir Kotal</A>.<br>
1.149     miod      332: protocols: ssh, pserver.<br>
                    333: updated every 4 hours.<br>
1.152     beck      334: <p>
1.153     mickey    335: <li><strong>CVSROOT=anoncvs@anoncvs.openbsd.org.ua:/cvs</strong><br>
1.152     beck      336: Located in Kiev, Ukraine<br>
                    337: maintained by <A HREF="mailto:hunter@dg.net.ua">Sergey Smitienko</A>.<br>
                    338: protocols: ssh<br>
                    339: updated every 6 hours.<br>
1.164     miod      340: <p>
1.165     miod      341: <li><strong>CVSROOT=openbsd@openbsd.bug.it:/cvs</strong><br>
1.164     miod      342: Located in Modena, Italy<br>
                    343: maintained by <A HREF="mailto:jwk@bug.it">Giacomo Cariello</A>.<br>
1.165     miod      344: protocols: ssh, password "openbsd"<br>
1.164     miod      345: updated every 6 hours.<br>
1.176     miod      346: <p>
                    347: <li><strong>CVSROOT=anoncvs@anoncvs.openbsd.lt:/cvs</strong><br>
                    348: Host also known as <strong>anoncvs.studentas.lt</strong><br>
                    349: Located at LITNET NOC, Academical and Research Network, Kaunas, Lithuania.<br>
                    350: maintained by <a href="mailto:helpas@aic.lt">Donatas Budvytis</a>.<br>
1.193     nick      351: protocols: ssh, password "anoncvs"<br>
1.176     miod      352: updated every 3 hours from anoncvs.usa.openbsd.org.<br>
1.183     jufi      353: <p>
1.194   ! nick      354: <li><strong>CVSROOT=anoncvs@openbsd.informatik.uni-erlangen.de:/cvs</strong><br>
        !           355: Located at the University of Erlangen-Nuremberg, Germany<br>
        !           356: maintained by <a href="mailto:Alexander.Gernler@informatik.stud.uni-erlangen.de">Alexander von Gernler</a>.<br>
        !           357: protocols: ssh, ssh port 2022, pserver<br>
        !           358: updated every 2 hours from cvsup.uk.openbsd.org.<br>
        !           359: <p>
1.185     jufi      360: <li><strong>CVSROOT=anoncvs@mirror.osn.de:/cvs</strong><br>
                    361: Located in N&uuml;rnberg, Germany<br>
                    362: maintained by <a href="mailto:aw@osn.de">Armin Wolfermann</a>.<br>
                    363: protocols: ssh<br>
                    364: updated every 4 hours.<br>
1.186     beck      365: <p>
                    366: <li><strong>CVSROOT=anoncvs@openbsd.chem.uw.edu.pl:/cvs</strong><br>
                    367: Located in Warsaw, Poland<br>
                    368: maintained by <a href="mailto:admin@chem.uw.edu.pl">Piotr Klein</a>.<br>
                    369: protocols: ssh<br>
                    370: updated every 3 hours.<br>
1.73      deraadt   371: </ul>
1.84      beck      372:
                    373:
1.73      deraadt   374: <p>
1.135     naddy     375: <em>Note:</em> If your server is listed on here with inaccurate or
1.104     ericj     376: unknown information, please contact
1.135     naddy     377: <a href="mailto:beck@openbsd.org"><tt>beck@openbsd.org</tt></a>
1.104     ericj     378: </p>
                    379:
1.80      beck      380: <p>
1.104     ericj     381: You may want to use
1.135     naddy     382: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&amp;sektion=8&amp;format=html">traceroute(8)</a>
1.104     ericj     383: to find out which server is nearest you.
1.11      michaels  384: Problems with a server should be reported to the <b>maintainer</b> of the
                    385: server in question.
1.135     naddy     386: </dl>
1.104     ericj     387:
1.155     jsyn      388: <h3><a name="CRYPTO"><font color="#0000e0">Getting crypto sources through
                    389: cvs(1)</font></a></h3>
1.104     ericj     390:
1.1       deraadt   391: <p>
                    392: <strong>IMPORTANT NOTE:</strong>
                    393: There are a few issues relating to cryptographic software that everyone
                    394: should be aware of:
                    395: <ul>
                    396: <li>The OpenBSD sources are from Canada.
1.9       deraadt   397: As
1.182     nick      398:        <a href="http://www.efc.ca/pages/doc/crypto-export.html">
1.9       deraadt   399:        researched by a Canadian individual</a>
                    400: and as
1.135     naddy     401:        <a href="http://axion.physics.ubc.ca/ECL.html">
1.9       deraadt   402:        described in the Export Control list of Canada</a>
1.156     ian       403: it is legal to export crypto software from Canada to the world.
1.1       deraadt   404: <p>
                    405: <li>However, if you are outside the USA or Canada, you should not
                    406: fetch the cryptographic sections of the OpenBSD sources from an
                    407: anoncvs server located in the USA. The files in question are...
                    408: <ul>
                    409: <li>src/kerberosIV/*
1.167     miod      410: <li>src/kerberosV/*
1.57      art       411: <li>src/lib/libdes/*
1.1       deraadt   412: <li>src/lib/libc/crypt/crypt.c
                    413: <li>src/lib/libc/crypt/morecrypt.c
1.167     miod      414: <li>src/sys/crypto
1.36      deraadt   415: <li>src/sys/netinet
1.67      art       416: <li>src/usr.sbin/afs/src/rxkad/*
1.167     miod      417: <li>XF4/xc-mit/lib/Xdmcp/Wraphelp.c
                    418: <li>XF4/xc-old/lib/Xdmcp/Wraphelp.c
                    419: <li>XF4/xc/lib/Xdmcp/Wraphelp.c
1.1       deraadt   420: </ul>
                    421: Because of the USA ITAR munitions list,
                    422: crypto software may only be exported to Canada from the USA.
                    423: <p>
                    424: <li>The OpenBSD project is looking for more anoncvs servers -- read
                    425: on to find out how you can help.
                    426: </ul>
                    427:
1.155     jsyn      428: <h3><a name="EXAMPLE"><font color="#0000e0">Example usages for cvs(1)</font>
                    429: </a></h3>
1.104     ericj     430:
1.163     chris     431: <P>
1.168     pvalchev  432: NOTICE: If you want to update a branch (such as a patch branch)
1.169     miod      433: to <i>current</i>, you would add the <code>-A</code>
1.163     chris     434: flag to cvs, but this flag is of little use otherwise.   Some older
                    435: versions of the OpenBSD documentation recommended use of this flag
                    436: in many examples. We no longer recommend this flag unless absolutely necessary.
                    437:
1.1       deraadt   438: <p>
1.135     naddy     439: A sample use of an anoncvs server would be:
                    440: <pre>
1.104     ericj     441: % <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
                    442: % <strong>cd /tmp</strong>
                    443: % <strong>cvs get src/sys/arch/sparc</strong>
1.12      grr       444:     [copies the files from the repository to your machine]
1.104     ericj     445: % <strong>cvs log src/sys/arch/sparc/sparc/locore.s</strong>
1.135     naddy     446:     [shows the commit log for the chosen file]
1.104     ericj     447: % <strong>cvs diff -bc -r1.1 -r1.5 src/sys/arch/sparc/sparc/locore.s</strong>
1.12      grr       448:     [shows the changes between revisions 1.1 and rev 1.5]
1.135     naddy     449: </pre>
1.1       deraadt   450:
                    451: <p>
1.155     jsyn      452: <a name="pserver">In order to use a cvs ``pserver'' (a direct TCP connection
                    453: instead of using ssh or rsh) you must login once:</a>
1.104     ericj     454:
1.135     naddy     455: <pre>
1.104     ericj     456: % <strong>setenv CVSROOT :pserver:anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
                    457: % <strong>cvs login</strong>
1.59      beck      458: (Logging in to anoncvs@anoncvs1.ca.openbsd.org)
1.104     ericj     459: CVS password: <strong>anoncvs</strong>
1.135     naddy     460:     [This writes a line to ~/.cvspass (filename over-ridden by CVS_PASSFILE).]
1.18      todd      461:     [An example line from my ~/.cvspass after typing 'blah' for the above    ]
                    462:     [password is:                                                            ]
                    463:     [:pserver:anoncvs@anoncvs5.usa.openbsd.org:/cvs Au'yc                    ]
1.135     naddy     464:     [After logging in ONCE every other use of the above CVSROOT will work.   ]
1.104     ericj     465: % <strong>cvs get ksrc-i386 ksrc-common</strong>
1.135     naddy     466:     [Allows you to retrieve ONLY that necessary to rebuild an i386 kernel.   ]
                    467: </pre>
1.18      todd      468:
                    469: <p>
1.39      todd      470: Here is how someone using anoncvs regularly would update his
1.1       deraadt   471: source tree:
1.60      millert   472: <ul><li>First, start out by `get'-ing an initial tree:
1.27      todd      473:
1.109     jason     474: <p> (If you are following <i>current</i>):
1.135     naddy     475: <pre>
                    476:        # <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
                    477:        # <strong>cd /usr</strong>
1.163     chris     478:        # <strong>cvs -q get -P src</strong>
1.135     naddy     479: </pre>
1.109     jason     480:
1.191     nick      481: <p> (If you are following the patch branch for 3.4):
1.135     naddy     482: <pre>
                    483:        # <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
                    484:        # <strong>cd /usr</strong>
1.191     nick      485:        # <strong>cvs -q get -rOPENBSD_3_4 -P src</strong>
1.135     naddy     486: </pre>
1.27      todd      487: </li>
1.37      todd      488:
1.27      todd      489: <li> Anytime afterwards, to `update' this tree:
1.109     jason     490: <p> (If you are following <i>current</i>):
1.135     naddy     491: <pre>
                    492:        # <strong>cd /usr/src</strong>
1.163     chris     493:        # <strong>cvs -q up -Pd</strong>
1.135     naddy     494: </pre>
1.27      todd      495:
1.191     nick      496: <p> (If you are following the patch branch for 3.4):
1.135     naddy     497: <pre>
                    498:        # <strong>cd /usr/src</strong>
1.191     nick      499:        # <strong>cvs -q up -rOPENBSD_3_4 -Pd</strong>
1.135     naddy     500: </pre>
1.109     jason     501:
1.154     jsyn      502: Every time you ran this it would synchronize your /usr/src tree. It would
1.1       deraadt   503: not destroy any of your local changes, rather it would attempt to merge
                    504: changes in. If you use obj directories (not obj symbolic links) you may
                    505: wish to append "-I obj" to the cvs command line, this will keep cvs from
                    506: spitting out a warning about all the obj directories it is going to
                    507: encounter which are not in the repository.
1.72      millert   508:
                    509: <p>
1.163     chris     510: <li> NOTE:
                    511: If you are updating a source tree that you initially fetched
1.72      millert   512: from a different server, or from a CD, you <strong>must</strong>
1.163     chris     513: add the <em>-d $CVSROOT</em> options to cvs.
1.135     naddy     514: <pre>
                    515:        # <strong>cd /usr/src</strong>
                    516:        # <strong>cvs -d $CVSROOT -q up -Pd</strong>
                    517: </pre>
1.27      todd      518: </li>
                    519: </ul>
                    520:
1.37      todd      521: <p>
1.135     naddy     522: To <a name="ports">use</a> <a href="ports.html">ports</a>, it is similar to src:
1.37      todd      523: <ul><li>
1.157     heko      524: <p> (If you are following <i>current</i>):
1.37      todd      525: <pre>
1.135     naddy     526:        # <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
                    527:        # <strong>cd /usr</strong>
1.163     chris     528:        # <strong>cvs -q get -P ports</strong>
1.38      deraadt   529: </pre>
1.191     nick      530: <p> (If you are following the patch branch for 3.4):
1.157     heko      531: <pre>
                    532:        # <strong>setenv CVSROOT anoncvs@anoncvs.ca.openbsd.org:/cvs</strong>
                    533:        # <strong>cd /usr</strong>
1.191     nick      534:        # <strong>cvs -q get -rOPENBSD_3_4 -P ports</strong>
1.157     heko      535: </pre>
1.37      todd      536: <li> Anytime afterwards, to `update' this tree:
1.157     heko      537: <p> (If you are following <i>current</i>):
1.37      todd      538: <pre>
1.135     naddy     539:        # <strong>cd /usr</strong>
1.163     chris     540:        # <strong>cvs -q up -Pd ports</strong>
1.157     heko      541: </pre>
1.191     nick      542: <p> (If you are following the patch branch for 3.4):
1.157     heko      543: <pre>
                    544:        # <strong>cd /usr</strong>
1.191     nick      545:        # <strong>cvs -q up -rOPENBSD_3_4 ports</strong>
1.157     heko      546: </pre>
1.37      todd      547: </li>
1.127     jufi      548: </ul>
1.37      todd      549:
1.104     ericj     550: In the above example, <i>-q</i> is optional, only intended to minimize
1.27      todd      551: cvs's output.  For those who like to see screenfulls of output, it
                    552: can be omitted.
1.1       deraadt   553:
                    554: <p>
1.104     ericj     555: or to make a diff of a locally patched module (here <i>cd.c</i>) to include with
1.12      grr       556: a bug report:
1.135     naddy     557: <pre>
                    558:        # <strong>cd /usr</strong>
                    559:        # <strong>cvs diff -u src/sys/scsi/cd.c &gt; /tmp/patch</strong>
                    560: </pre>
1.12      grr       561:
                    562: <p>
1.155     jsyn      563: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1&amp;format=html">
                    564: cvs(1) man page</a>
1.104     ericj     565: (included with the CVS sources) has much more
1.1       deraadt   566: information about how CVS can be used.
                    567:
1.135     naddy     568: <h4>X11 Source tree</h4>
                    569:
1.1       deraadt   570: <p>
1.163     chris     571: Anoncvs mirrors also carry the OpenBSD X11 (XFree86) source tree. You can adapt
1.172     miod      572: the recipe above to update your XFree86 source tree from the third CD.
1.163     chris     573: You can copy or download the XFree86 3 source tree with the X11 cvs module,
                    574: although the current module containing XFree86 4 is XF4.
                    575: There are two ways to get the XF4 sources to <i>/usr/XF4</i>:
1.105     ericj     576:
                    577: <ul>
1.173     miod      578: <li>copy the tree off the CD (assuming the 3rd CD is mounted on /mnt):
1.105     ericj     579: <pre>
1.163     chris     580:         # <strong>cd /mnt; cp -Rp XF4 /usr</strong>
1.105     ericj     581: </pre>
                    582: <li>use a union mount with the CD below a writable directory.
                    583: <pre>
1.163     chris     584:         # <strong>mount -t union -o -b /mnt/XF4 /usr/XF4</strong>
1.135     naddy     585: </pre>
                    586: </ul>
1.105     ericj     587:
1.163     chris     588: After this, <i>/usr/XF4</i> will be ready to be used by cvs. You can for
1.105     ericj     589: example update it to -current source (assuming you've already set
1.140     horacio   590: the <var>CVSROOT</var> environment variable):
1.105     ericj     591:
1.135     naddy     592: <pre>
1.163     chris     593:         # <strong>cd /usr/XF4</strong>
                    594:         # <strong>cvs -q update -Pd</strong>
1.135     naddy     595: </pre>
1.105     ericj     596:
                    597: <p>
1.12      grr       598: <strong>Warning:</strong>
                    599: When using cvs you should take care that your current directory is either
1.109     jason     600: the root of the tree you are referencing or in a separate place such as /tmp.
1.12      grr       601: Some commands such as "get" can create an arbitrary sub-tree in the current
                    602: directory, and a subsequent update will recursively flesh out this sub-tree.
                    603:
                    604: <p>
1.1       deraadt   605: The anoncvs service gives fledgling developers a chance to learn CVS
                    606: operation and get thoroughly involved in the development process
                    607: before getting "commit" access -- as a result of showing useful
                    608: skills and high quality results they will naturally later be given
                    609: developer access.  As well, people providing patches can create
                    610: their "diff"s relative to the CVS tree, which will ease integration.
                    611:
1.104     ericj     612:
1.135     naddy     613: <h3><a name="WHICH"><font color="#0000e0">Use rsh(1) or ssh(1)?</font></a></h3>
1.104     ericj     614:
1.1       deraadt   615: <p>
1.159     jcs       616: By default, the CVS client uses ssh ("secure shell":
                    617: <a href="http://www.openssh.com/">OpenSSH</a>) to talk to the CVS server.
                    618:
                    619: <p>
                    620: Many of the CVS sites no longer support rsh for security reasons.  Local
                    621: problems like firewalls or imperfect protocol emulators such as slirp may
                    622: also hinder rsh usage.  However, if rsh is desired, one must set the
                    623: <var>CVS_RSH</var> environment variable to point to rsh
                    624: (typically <strong>/usr/bin/rsh</strong>).
                    625:
                    626: <p>
                    627: If local policy prevents outgoing connections to ssh's default port of 22,
                    628: port 2022 may be used in its place.  Note, however, that not all anoncvs
                    629: servers accept ssh connections on this port.  Furthermore, most anoncvs servers
                    630: no longer accept the <strong>none</strong> cipher, as it is disabled in
1.169     miod      631: recent versions of ssh for security reasons.  Also, do not be tempted
1.159     jcs       632: to turn on compression: CVS already compresses.
                    633:
                    634: <p>
                    635: One could specify something like the following in the
                    636: <strong>$HOME/.ssh/config</strong> configuration file to avoid the pitfalls
                    637: and restrictions mentioned above:
1.1       deraadt   638: <pre>
1.59      beck      639:        Host anoncvs.ca.openbsd.org
1.159     jcs       640:            Compression no
1.1       deraadt   641:            Port 2022
                    642: </pre>
                    643:
                    644: <p>
                    645: CVS is a little noisy starting up; to quiet it a bit you may want to
                    646: do this:
1.105     ericj     647:
1.135     naddy     648: <pre>
                    649:        <strong>% setenv CVS_CLIENT_PORT -1</strong>
                    650: </pre>
1.1       deraadt   651:
                    652: <p>
1.155     jsyn      653: <h3><a name="SUP"><font color="#0000e0">Mirroring the CVS repository via
                    654: sup(1)</font></a></h3>
1.107     millert   655:
                    656: <p>
                    657: Users wishing to mirror the OpenBSD CVS tree itself may now do so
1.143     millert   658: from <em>anoncvs.usa.openbsd.org</em> or <em>anoncvs1.usa.openbsd.org</em>
                    659: (these are different machines).  Note that this is the cvs tree,
                    660: <b>not</b> a checked out source tree.  It is only useful if you
                    661: want to be able to do fast cvs operations (diff, annotate, etc) or
                    662: if you have multiple source trees and you only want to transfer new
                    663: data once (you can then checkout a tree from your local cvs mirror).
1.107     millert   664: <p>
                    665: A sample supfile would be:
                    666: <pre>
                    667:        cvs host=anoncvs.usa.openbsd.org hostbase=/ base=/home delete
                    668: </pre>
                    669: <p>
                    670: which would mirror the cvs tree into /home/cvs with the sup data
1.133     millert   671: files ending up in /home/sup.  The full OpenBSD cvs tree is currently
1.181     brad      672: about 1.7GB in size.
1.65      matthieu  673:
1.155     jsyn      674: <h3><a name="MIRROR"><font color="#0000e0">Setting up an anoncvs mirror
                    675: </font></a></h3>
1.105     ericj     676:
1.107     millert   677: <p>
1.1       deraadt   678: If you wish to be a new anoncvs mirror site, please contact the anoncvs
1.135     naddy     679: <a href="mailto:sup@openbsd.org">maintainer</a>.
1.177     mickey    680: Anoncvs mirrors require about 1.7GB of disk, and use up to 32MB of swap
1.1       deraadt   681: per anoncvs user (assuming the user does a large operation; while smaller
                    682: operations use fewer resources, anoncvs still makes much more of an
                    683: impact than ftp or sup).  Such anoncvs machines should have excellent
                    684: network connectivity for the area they are expected to serve.  A
1.135     naddy     685: <a href="anoncvs.shar">document</a>
1.1       deraadt   686: which describes the setup of anoncvs servers is available.
                    687:
1.135     naddy     688: <h3><font color="#0000e0">Final notes</font></h3>
1.60      millert   689: After upgrading your source tree, you should read the comments
1.154     jsyn      690: at the top of <KBD>/usr/src/Makefile</KBD> before attempting
1.60      millert   691: a build.  Also, you should build a new kernel <strong>before</strong>
1.101     ericj     692: doing a <KBD>make build</KBD> if possible.  In some cases it may be
1.60      millert   693: necessary to rebuild and install the <KBD>config</KBD> utility before
                    694: you can build the kernel.  If <KBD>config GENERIC</KBD> fails this
                    695: is probably the case.
                    696: <p>
                    697: It is important to note that upgrading from a release to the current tree
                    698: by rebuilding the sources can be rather difficult due to dependencies
                    699: that are often not obvious.  Therefore, it is suggested that you first
1.154     jsyn      700: install the latest snapshot before attempting a tree build from source.
1.1       deraadt   701:
                    702: <hr>
1.155     jsyn      703: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
                    704: alt="OpenBSD"></a>
1.135     naddy     705: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.194   ! nick      706: <br><small>$OpenBSD: anoncvs.html,v 1.193 2003/12/26 20:50:39 nick Exp $
1.155     jsyn      707: </small>
1.1       deraadt   708:
                    709: </body>
                    710: </html>