[BACK]Return to anoncvs.html CVS log [TXT][DIR] Up to [local] / www

Annotation of www/anoncvs.html, Revision 1.304

1.300     sthen       1: <!-- DO NOT EDIT MANUALLY! See comments in www/build/mirrors.dat for details -->
1.246     steven      2:
1.180     jufi        3: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1       deraadt     4: <html>
                      5: <head>
1.93      deraadt     6: <title>OpenBSD AnonCVS</title>
1.135     naddy       7: <link rev="made" href="mailto:www@openbsd.org">
1.93      deraadt     8: <meta name="resource-type" content="document">
1.249     nick        9: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
1.93      deraadt    10: <meta name="description" content="How to get OpenBSD updates via Internet using Anonymous CVS">
                     11: <meta name="keywords" content="openbsd,anoncvs,updates">
                     12: <meta name="distribution" content="global">
1.296     sthen      13: <meta name="copyright" content="This document copyright 1996-2009 by OpenBSD.">
1.1       deraadt    14: </head>
                     15:
1.226     nick       16: <body bgcolor="#ffffff" text="#000000">
1.1       deraadt    17:
1.249     nick       18: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.93      deraadt    19: <p>
1.135     naddy      20: <h2><font color="#e00000">Anonymous CVS</font></h2>
1.14      downsj     21:
1.135     naddy      22: <hr>
                     23:
1.249     nick       24: <h3>Table Of Contents</h3>
1.135     naddy      25:
                     26: <ul>
1.249     nick       27: <li><a href="#anoncvs">What is Anonymous CVS?</a>
                     28: <li><a href="#CVS">What is CVS?</a>
                     29: <li><a href="#starting">Getting Started Using Anonymous CVS</a>
                     30: <li><a href="#using">Using CVS to Get and Update your Source Tree</a>
                     31: <li><a href="#CVSROOT">Available Anonymous CVS Servers</a>
                     32: <li><a href="#CRYPTO">Getting crypto sources through cvs(1)</a>
                     33: <li><a href="#EXAMPLE">Example usages for cvs(1)</a>
                     34: <li><a href="#WHICH">Use rsh(1) or ssh(1)?</a>
                     35: <li><a href="#SUP">Mirroring the CVS repository via sup(1)</a>
                     36: <li><a href="#MIRROR">Setting up an anoncvs mirror</a>
1.100     ericj      37: </ul>
1.135     naddy      38:
1.100     ericj      39: <hr>
                     40:
1.249     nick       41: <h3><a name="anoncvs"><font color="#0000e0">What is Anonymous CVS?</font></a></h3>
1.99      ericj      42:
1.15      grr        43: <p>
1.249     nick       44: Anonymous CVS is a method of keeping your local copy of the OpenBSD source
                     45: tree up to date with respect to changes made to current OpenBSD sources.
                     46: In addition to following the bleeding edge of development, it is
                     47: also possible to track the patches for errata of a release.
1.99      ericj      48:
1.14      downsj     49: <p>
1.249     nick       50: The major advantage of Anonymous CVS over other source code update
                     51: techniques is that it works directly against a central source code
                     52: repository or mirror.  This means that you have the full set of CVS
                     53: commands available to control merging and updating your changes with
                     54: other source changes and for performing diffs, change histories
                     55: and other queries against the central repository.
1.99      ericj      56:
1.36      deraadt    57: <p>
1.282     nick       58: The OpenBSD Project currently has four active and two historic
                     59: source repositories:
1.99      ericj      60:
                     61: <ul>
1.249     nick       62:   <li><b>src</b> - Houses all source code for the OpenBSD Operating System.
                     63:   <li><b>ports</b> - Houses the <a href="./ports.html">OpenBSD Ports</a>.
                     64:   <li><b>www</b> - Houses all OpenBSD web pages. (Including this one).
1.280     steven     65:   <li><b>xenocara</b> - Houses OpenBSD's active X.org v7 source tree.
1.282     nick       66:   <li><b>X11</b> and <b>XF4</b> - Houses OpenBSD's adaptation of the
                     67:       <a href="http://www.XFree86.org/">XFree86-3</a> and XFree86-4
                     68:       source trees.
                     69:       These are here just for historical purposes, most users will have
                     70:       no reason to use this tree, it is no longer being used.
1.99      ericj      71: </ul>
                     72:
1.100     ericj      73: <p>
1.249     nick       74: To summarize, the real strength of using Anonymous CVS is that it is
                     75: a "tolerant" source code control system - it <strong>respects</strong>
                     76: changes that you have made to your local sources and makes <strong>
                     77: "best efforts"</strong> to update your entire source tree, rather than
                     78: leaving you a list of arcane problems that have to be resolved before
                     79: continuing.
                     80:
                     81: <h3><a name="CVS"><font color="#0000e0">What is CVS?</font></a></h3>
                     82:
                     83: <p>
1.260     nick       84: <a href="http://ximbiot.com/cvs/">CVS</a> is the source code control
1.249     nick       85: system used to <a href="why-cvs.html">manage the OpenBSD source
                     86: tree.</a>
                     87: It implements a central repository for all officially released source code
                     88: and changes, while permitting developers to maintain local copies of the
                     89: source code with their working changes.
1.226     nick       90:
1.249     nick       91: There are two levels of source tree access:
1.226     nick       92: <ul>
1.249     nick       93: <li><b>Read-write access for developers:</b>
                     94: Developers who need to commit changes to the source tree must have an
                     95: account on the OpenBSD machines.
                     96: Getting this access will be a natural result of working on the sources
                     97: with other OpenBSD developers.
                     98: If someone does some good work and shows they can work with the team,
                     99: they will get an account.
                    100:
                    101: <li><b>Read-only access for everyone:</b>
                    102: Anyone can access the read-only CVS repositories.
                    103: These copies of the read-write CVS repository are mirrored often.
1.226     nick      104: </ul>
1.99      ericj     105:
1.15      grr       106: <p>
1.249     nick      107: The major strength of CVS is that it has the ability to perform intelligent
                    108: merges of changes to the central repository with changes that you make to
                    109: your local copy.  This means that if you make a change to a module and
                    110: perform an update, your changes are not "blown away", rather CVS makes
                    111: best efforts to merge the changes made to the central sources with changes
                    112: you've made to your local copy.
                    113:
                    114: <p>
                    115: In the event that the changes can't be completely merged, CVS provides a
                    116: "soft fallback", providing you with annotated changes to your
                    117: local copy, preserving an unmodified copy of your version and continuing
                    118: to update any other source modules you requested.
                    119:
                    120: <h3><a name="starting"><font color="#0000e0">Getting Started Using Anonymous
                    121: CVS</font></a></h3>
                    122:
                    123: While you can download the entire source tree from an AnonCVS server,
                    124: you can often save a lot of time and bandwidth by "preloading" your
                    125: source tree with the source files from either the OpenBSD CD or from an
                    126: FTP server.
                    127: This is particularly true if you are running
                    128: <a href="stable.html"><i>-stable</i></a>, as relatively few files change
                    129: between the <i>-release</i> and <i>-stable</i>.
1.100     ericj     130:
1.22      niklas    131: <p>
1.249     nick      132: To extract the source tree from the CD to <i>/usr/src</i> (assuming the CD is
                    133: mounted on /mnt):
1.22      niklas    134: <pre>
1.280     steven    135:     # <b>cd /usr/src</b>
                    136:     # <b>tar xzf /mnt/src.tar.gz</b>
1.282     nick      137:     # <b>cd /usr</b>
1.280     steven    138:     # <b>tar xzf /mnt/xenocara.tar.gz</b>
1.226     nick      139:     # <b>tar xzf /mnt/ports.tar.gz</b>
1.22      niklas    140: </pre>
1.224     nick      141:
1.249     nick      142: The source files for download from the FTP servers are separated into two
                    143: files to minimize the time required to download for those wishing to work
                    144: with only one part of the tree.  The two files are <tt>sys.tar.gz</tt>,
                    145: which contains the files used to create the kernel, and <tt>src.tar.gz</tt>
                    146: which contains all the other "userland" utilities.
                    147: In general, however, you will usually want both of them installed.
1.280     steven    148: Assuming the downloaded files, <tt>src.tar.gz</tt>,
                    149: <tt>sys.tar.gz</tt> and <tt>xenocara.tar.gz</tt> are in <tt>/usr</tt>:
1.224     nick      150:
1.22      niklas    151: <pre>
1.224     nick      152:     # <b>cd /usr/src</b>
                    153:     # <b>tar xzf ../sys.tar.gz</b>
1.225     nick      154:     # <b>tar xzf ../src.tar.gz</b>
1.282     nick      155:     # <b>cd /usr</b>
1.284     steven    156:     # <b>tar xzf xenocara.tar.gz</b>
1.226     nick      157:     # <b>tar xzf ports.tar.gz</b>
1.22      niklas    158: </pre>
1.100     ericj     159:
                    160: <p>
1.249     nick      161: Not all people will wish to unpack all the file sets, but as the system
                    162: must be kept in sync, you will generally need to set up all trees.
1.226     nick      163:
                    164: <p>
1.249     nick      165: You can also just use cvs(1) to "<b>checkout</b>" the source repository
                    166: for you. This is discussed in the <a href="#using">next section</a>.
1.100     ericj     167:
                    168: <p>
1.249     nick      169: After this, <tt>/usr/src</tt> will be a nice checkout area where all
                    170: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1&amp;format=html">
                    171: cvs(1)</a> commands will work properly.
1.100     ericj     172:
1.249     nick      173: <h3><a name="using"><font color="#0000e0">Using CVS to get and update your
                    174: source tree</font></a></h3>
1.100     ericj     175:
                    176: <p>
1.249     nick      177: CVS was designed to be a simple way to retrieve and update your sources.
                    178: You must first decide whether you want to track <i>-current</i> or a
                    179: <a href="stable.html">patch branch</a>.
                    180: The current tree has all of the up to the minute changes,
                    181: whereas a patch branch contains a formal release plus the patches
                    182: from the <a href="errata.html">errata</a> and lesser issues already applied.
                    183: For more information on these "flavors" of OpenBSD, see
                    184: <a href="faq/faq5.html#Flavors">here</a>.
                    185:
                    186: <p>Once you have decided which tree to follow, you must choose which Anonymous
                    187: CVS server you are going to use.  A list of these servers is
                    188: <a href="#CVSROOT">below</a>.
                    189:
                    190: <p>
                    191: Once you have chosen which <a href="#CVSROOT">Anonymous CVS Server</a> you will
                    192: use, you can start using cvs. For those of you
                    193: who have CDs you can start with the CVS checkout that is on the CD by using
                    194: the method <a href="#starting">above</a> to get the sources onto your system.
                    195: If you don't have a CD handy, use the method below to checkout the sources.
                    196: This method puts the OpenBSD source tree into <i>/usr/src</i>.
1.100     ericj     197:
1.135     naddy     198: <pre>
                    199:        # <b>cd /usr; cvs checkout -P src</b>
                    200: </pre>
1.99      ericj     201:
1.1       deraadt   202: <p>
1.249     nick      203: The above will checkout the <i>current</i> source tree.  Many of you will
                    204: only want the patch branch sources.  To checkout a patch branch, you must
                    205: specify a tag along with your command. Example:
1.1       deraadt   206:
1.135     naddy     207: <pre>
1.299     landry    208:        # <b>cd /usr; cvs checkout -P -rOPENBSD_4_5 src</b>
1.135     naddy     209: </pre>
1.1       deraadt   210: <p>
1.299     landry    211: Or OPENBSD_4_4 for 4.4, etc.
1.100     ericj     212:
1.299     landry    213: <p> The OPENBSD_4_5 tag contains the release sources and
1.249     nick      214: errata already applied.
1.100     ericj     215:
1.249     nick      216: <h3><a name="CVSROOT"><font color="#0000e0">Available Anonymous CVS Servers
1.155     jsyn      217: </font></a></h3>
1.1       deraadt   218:
                    219: <p>
1.249     nick      220: <em>Please see the note about <a href="#WHICH">ssh vs. rsh</a> below!</em>
1.12      grr       221: <p>
1.1       deraadt   222: <ul>
1.298     landry    223: <li><strong>CVSROOT=anoncvs@anoncvs.fr.openbsd.org:/cvs</strong><br>
                    224: Location: Paris, France.<br>
                    225: Maintained by <a href="mailto:landry@openbsd.org">Landry Breuil</a>.<br>
                    226: Protocols: ssh.<br>
                    227: Updated every 2 hours from anoncvs1.ca.openbsd.org.<br>
1.302     landry    228: SSH fingerprints:<br>
                    229: (RSA1) 2048 28:ce:6b:61:76:d9:0e:6d:65:a1:5c:dd:e8:d7:57:42<br>
                    230: (RSA) 2048 89:2e:84:9e:0c:f9:8d:21:41:0e:c5:80:41:27:14:c1<br>
                    231: (DSA) 1024 7f:fb:68:2f:0f:c8:63:6c:0f:32:2c:03:d4:cd:0c:47<br>
1.298     landry    232: <p>
1.252     grunk     233: <li><strong>CVSROOT=anoncvs@anoncvs1.usa.openbsd.org:/cvs</strong><br>
1.249     nick      234: Host also known as <strong>anoncvs.usa.openbsd.org, anoncvs4.usa.openbsd.org</strong>.<br>
                    235: Location: Redwood City, CA, USA.<br>
1.273     martin    236: Maintained by <a href="mailto:millert@openbsd.org">Todd C. Miller</a>.<br>
1.249     nick      237: Protocols: rsh, ssh, ssh port 2022, pserver.<br>
                    238: Updated every 2 hours.<br>
1.214     millert   239: SSH fingerprints:<br>
                    240: (RSA1) 1024 64:de:26:16:c2:ff:1b:c7:24:ed:a4:4a:d7:2f:69:3e<br>
                    241: (RSA) 1024 49:67:9a:46:62:8a:3f:4e:b3:63:ca:d6:41:29:2a:2f<br>
                    242: (DSA) 1024 a7:75:49:77:f3:47:d1:3c:5e:65:84:84:3b:03:f1:33<br>
1.196     nick      243: <p>
1.209     david     244: <li><strong>CVSROOT=anoncvs@anoncvs3.usa.openbsd.org:/cvs</strong><br>
1.249     nick      245: Location: National Center for Atmospheric Research, Boulder, CO, USA.<br>
1.273     martin    246: Maintained by <a href="mailto:millert@openbsd.org">Todd C. Miller</a>.<br>
1.249     nick      247: Protocols: rsh, ssh, ssh port 2022, pserver.<br>
                    248: Updated every 2 hours.<br>
1.214     millert   249: SSH fingerprints:<br>
1.272     millert   250: (RSA1) 2048 80:cd:f6:fc:4f:0e:cb:80:6a:d0:6a:5e:dd:9e:5d:0a<br>
                    251: (RSA) 2048 49:6f:4a:be:02:63:0d:c0:54:b0:57:f0:48:7f:ce:16<br>
                    252: (DSA) 1024 f9:ab:fc:60:a3:15:8f:9c:47:24:9e:92:15:78:0d:f3<br>
1.1       deraadt   253: <p>
1.281     nick      254: <li><strong>CVSROOT=anoncvs@obsd.cec.mtu.edu:/cvs</strong><br>
                    255: Location: Michigan Technological University, Houghton, Michigan, USA.<br>
                    256: Maintained by <a href="mailto:celinn@mtu.edu">Chris Linn</a>.<br>
                    257: Protocols: ssh.<br>
                    258: Updated every 2 hours.<br>
                    259: SSH fingerprints:<br>
                    260: (RSA1) 2048 d7:91:a2:f4:d2:8d:81:7f:3c:44:91:8f:b5:b9:46:48 <br>
                    261: (RSA) 2048 de:f1:09:85:a0:db:60:97:d4:95:0d:07:80:4e:ee:68<br>
                    262: (DSA) 1024 78:05:5c:c7:ce:7e:6f:c8:6d:b7:e2:7e:ba:06:1c:40<br>
                    263: <p>
1.271     martin    264: <li><strong>CVSROOT=anoncvs@anga.funkfeuer.at:/cvs</strong><br>
                    265: Location: Vienna, Austria.<br>
                    266: Maintained by <a href="mailto:martin@openbsd.org">Martin Reindl</a>.<br>
                    267: Protocols: ssh, ssh port 2022.<br>
1.275     martin    268: Updated every 2 hours from anoncvs1.usa.openbsd.org.<br>
1.273     martin    269: SSH fingerprints:<br>
                    270: (RSA) 2048 e4:a7:3a:ab:e1:a7:c8:eb:5c:f4:ff:38:95:6f:81:f2<br>
                    271: (DSA) 2048 66:03:a3:bc:46:85:f3:6c:4b:6b:e3:d4:f5:5f:a6:c4<br>
1.271     martin    272: <p>
1.246     steven    273: <li><strong>CVSROOT=anoncvs@anoncvs1.ca.openbsd.org:/cvs</strong><br>
1.249     nick      274: Host also known as <strong>anoncvs.ca.openbsd.org, openbsd.sunsite.ualberta.ca</strong>.<br>
                    275: Location: Edmonton, Canada.<br>
                    276: Maintained by <a href="mailto:beck@ualberta.ca">Bob Beck</a>.<br>
1.295     beck      277: Protocols: ssh, ssh port 2022.<br>
1.249     nick      278: Updated every 2 hours.<br>
1.246     steven    279: <p>
1.288     sthen     280: <li><strong>CVSROOT=anoncvs@anoncvs.comstyle.com:/cvs</strong><br>
                    281: Location: Toronto, Canada.<br>
1.296     sthen     282: Maintained by <a href="mailto:brad@comstyle.com">Brad Smith</a>.<br>
1.288     sthen     283: Protocols: ssh, ssh port 2022.<br>
                    284: Updated every 2 hours.<br>
                    285: <p>
1.285     sthen     286: <li><strong>CVSROOT=anoncvs@anoncvs.estpak.ee:/OpenBSD</strong><br>
                    287: Location: Elion, Tallinn, Estonia.<br>
                    288: Maintained by <a href="mailto:rix@estpak.ee">Rivo Nurges</a>.<br>
                    289: Protocols: ssh.<br>
1.289     sthen     290: Updated every 2 hours from cvsync.de.openbsd.org.<br>
1.285     sthen     291: SSH fingerprints:<br>
1.292     sthen     292: (RSA) 1024 e1:12:fb:6b:e5:c0:6a:b3:f8:ca:b1:4c:20:fb:5e:07<br>
                    293: (DSA) 1024 bb:5c:44:f4:d9:12:3b:22:08:a9:12:c5:0c:e7:db:49<br>
1.285     sthen     294: <p>
1.246     steven    295: <li><strong>CVSROOT=anoncvs@anoncvs.skyrock.com:/cvs/openbsd</strong><br>
1.249     nick      296: Location: Paris, France.<br>
                    297: Maintained by <a href="mailto:anoncvs@pureftpd.org">Frank Denis</a>.<br>
                    298: Protocols: ssh, ssh port 2022.<br>
                    299: Updated every 2 hours from anoncvs3.usa.openbsd.org.<br>
1.246     steven    300: SSH fingerprints:<br>
                    301: (RSA1) 2048 4d:60:d8:ab:bc:c6:29:64:b4:45:1b:98:2b:fe:40:7e<br>
                    302: (RSA) 2048 01:f1:c4:25:c8:e3:0d:0e:7a:33:94:14:f4:9d:98:5f<br>
                    303: (DSA) 2048 73:36:41:46:fd:0a:67:df:e6:c1:4a:6b:02:61:f4:61<br>
1.121     deraadt   304: <p>
1.246     steven    305: <li><strong>CVSROOT=anoncvs@mirror.osn.de:/cvs</strong><br>
1.249     nick      306: Location: N&uuml;rnberg, Germany.<br>
                    307: Maintained by <a href="mailto:aw@osn.de">Armin Wolfermann</a>.<br>
                    308: Protocols: ssh.<br>
1.252     grunk     309: Updated every 4 hours from anoncvs1.usa.openbsd.org.<br>
1.215     david     310: SSH fingerprints:<br>
1.246     steven    311: (RSA) 1024 f2:73:d2:f6:e3:01:ef:ca:3b:e7:6c:80:b6:bd:bb:84<br>
                    312: (DSA) 1024 fb:33:05:62:96:20:cf:88:7e:10:cb:8d:91:72:57:32<br>
                    313: <p>
                    314: <li><strong>CVSROOT=anoncvs@anoncvs.silihost.hu:/cvs</strong><br>
1.249     nick      315: Location: Budapest, Hungary.<br>
                    316: Maintained by <a href="mailto:robert@openbsd.org">Robert Nagy</a>.<br>
                    317: Protocols: ssh.<br>
                    318: Updated every 3 hours from anoncvs.de.openbsd.org.<br>
1.123     beck      319: <p>
1.246     steven    320: <li><strong>CVSROOT=anoncvs@anoncvs.jp.openbsd.org:/cvs</strong><br>
1.249     nick      321: Host also known as <strong>kankoromochi.econ.nagasaki-u.ac.jp</strong>.<br>
                    322: Location: Nagasaki University, Faculty of Economics, Nagasaki, Japan.<br>
                    323: Maintained by <a href="mailto:sigh@net.nagasaki-u.ac.jp">Suzuki Itoshi</a>.<br>
                    324: Protocols: ssh, pserver.<br>
                    325: Updated every 3 hours.<br>
1.176     miod      326: <p>
                    327: <li><strong>CVSROOT=anoncvs@anoncvs.openbsd.lt:/cvs</strong><br>
1.249     nick      328: Location: TVK, Cable TV and Internet Services, Taurage, Lithuania.<br>
                    329: Maintained by <a href="mailto:helpas@ebox.lt">Donatas Budvytis</a>.<br>
                    330: Protocols: ssh.<br>
                    331: Updated every 3 hours from cvsup.no.openbsd.org.<br>
1.183     jufi      332: <p>
1.246     steven    333: <li><strong>CVSROOT=anoncvs@anoncvs.nl.openbsd.org:/cvs</strong><br>
1.249     nick      334: Host also known as <strong>anoncvs.calyx.nl</strong>.<br>
                    335: Location: Amsterdam, The Netherlands.<br>
                    336: Protocols: ssh.<br>
                    337: Updated every 3 hours.<br>
1.194     nick      338: <p>
1.293     sthen     339: <li><strong>CVSROOT=anoncvs@anoncvs.no.openbsd.org:/cvs</strong><br>
                    340: Host also known as <strong>cvs.inet.no</strong>.<br>
                    341: Location: Oslo, Norway.<br>
                    342: Maintained by <a href="mailto:cvsadmin@inet.no">Michael Schuldman</a>.<br>
                    343: Protocols: ssh, ssh port 2022.<br>
                    344: Updated every 4 hours from rsync.de.openbsd.org.<br>
                    345: <p>
1.186     beck      346: <li><strong>CVSROOT=anoncvs@openbsd.chem.uw.edu.pl:/cvs</strong><br>
1.249     nick      347: Location: Warsaw, Poland.<br>
                    348: Maintained by <a href="mailto:admin@chem.uw.edu.pl">Piotr Klein</a>.<br>
                    349: Protocols: ssh.<br>
                    350: Updated every 3 hours.<br>
1.203     saad      351: <p>
1.267     grunk     352: <li><strong>CVSROOT=anoncvs@anoncvs.obsd.si:/cvs</strong><br>
                    353: Host also known as <strong>nina.kerberos.si</strong>.<br>
                    354: Location: Ljubljana, Slovenia.<br>
                    355: Maintained by <a href="mailto:mitja@kerberos.si">Mitja Muzenic</a>.<br>
                    356: Protocols: ssh.<br>
                    357: Updated every 2 hours from cvsync.de.openbsd.org.<br>
                    358: <p>
1.288     sthen     359: <li><strong>CVSROOT=anoncvs@anoncvs.netbsd.se:/cvs</strong><br>
                    360: Location: Stockholm, Sweden.<br>
                    361: Maintained by <a href="mailto:viktor@holmlund.it">Viktor Holmlund</a>.<br>
                    362: Protocols: ssh.<br>
                    363: Updated every 3 hours from rsync.de.openbsd.org.<br>
1.269     grunk     364: <p>
1.230     naddy     365: <li><strong>CVSROOT=anoncvs@mirror.sg.depaul.edu:/cvs</strong><br>
1.249     nick      366: Location: DePaul University, Chicago, IL, USA.<br>
                    367: Maintained by <a href="mailto:mirror-admin@sg.depaul.edu">Eric Pancer</a>.<br>
                    368: Protocols: ssh, ssh port 2022, pserver.<br>
                    369: Updated every 2 hours.<br>
1.230     naddy     370: SSH fingerprints:<br>
                    371: (RSA1) 1024 5b:1c:cb:b7:5f:82:82:cc:af:13:21:a4:2c:c2:55:6b<br>
1.246     steven    372: (RSA) 1024 18:0f:97:2a:cf:6c:7f:d4:ca:2b:bc:c8:b9:56:2b:86<br>
                    373: (DSA) 1024 65:cb:ce:7c:3e:29:5c:82:0b:9d:fa:b7:bb:e0:4b:47<br>
1.236     grunk     374: <p>
1.254     steven    375: <li><strong>CVSROOT=anoncvs@mirror.planetunix.net:/cvs</strong><br>
1.270     steven    376: Location: CalPOP, Los Angeles, CA, USA.<br>
1.254     steven    377: Maintained by <a href="mailto:brian@planetunix.net">Brian Brombacher</a>.<br>
                    378: Protocols: ssh, ssh port 2022, pserver.<br>
1.270     steven    379: Updated every 3 hours from rt.fm.<br>
1.254     steven    380: SSH fingerprints:<br>
                    381: (RSA1) 2048 e4:22:93:81:84:e0:68:8c:0b:d5:1f:78:cd:6f:fa:c3<br>
                    382: (RSA) 2048 8f:42:bd:b0:a2:94:df:6b:af:1e:96:03:ea:68:03:d9<br>
                    383: (DSA) 1024 26:51:e8:b3:38:88:dc:a8:2a:98:59:86:ab:40:bb:a4<br>
                    384: <p>
1.283     sthen     385: <li><strong>CVSROOT=anoncvs@openbsd.mirror.frontiernet.net:/cvs</strong><br>
                    386: Location: Frontier Communications, Rochester, NY, USA.<br>
                    387: Maintained by <a href="mailto:jrrs@frontiernet.net">jared r r spiegel</a>.<br>
                    388: Protocols: ssh.<br>
                    389: Updated every 4 hours from anoncvs.ca.openbsd.org.<br>
                    390: <p>
1.246     steven    391:
1.73      deraadt   392: </ul>
1.84      beck      393:
1.73      deraadt   394: <p>
1.249     nick      395: <em>Note:</em> If your server is listed on here with inaccurate or
                    396: unknown information, please contact
                    397: <a href="mailto:beck@openbsd.org"><tt>beck@openbsd.org</tt></a>
1.104     ericj     398:
1.80      beck      399: <p>
1.249     nick      400: You may want to use
1.135     naddy     401: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&amp;sektion=8&amp;format=html">traceroute(8)</a>
1.249     nick      402: to find out which server is nearest you.
                    403: Problems with a server should be reported to the <b>maintainer</b> of the
                    404: server in question.
1.104     ericj     405:
1.249     nick      406: <h3><a name="CRYPTO"><font color="#0000e0">Getting crypto sources through
                    407: cvs(1)</font></a></h3>
1.104     ericj     408:
1.1       deraadt   409: <p>
1.249     nick      410: <strong>IMPORTANT NOTE:</strong>
                    411: There are a few issues relating to cryptographic software that everyone
                    412: should be aware of:
1.1       deraadt   413: <ul>
1.249     nick      414: <li>The OpenBSD sources are from Canada.
                    415: As
1.182     nick      416:        <a href="http://www.efc.ca/pages/doc/crypto-export.html">
1.249     nick      417:        researched by a Canadian individual</a>
                    418: and as
1.135     naddy     419:        <a href="http://axion.physics.ubc.ca/ECL.html">
1.249     nick      420:        described in the Export Control list of Canada</a>
                    421: it is legal to export crypto software from Canada to the world.
1.1       deraadt   422: <p>
1.249     nick      423: <li>However, if you are outside the USA or Canada, you should not
                    424: fetch the cryptographic sections of the OpenBSD sources from an
                    425: anoncvs server located in the USA. The files in question are...
1.1       deraadt   426: <ul>
                    427: <li>src/kerberosIV/*
1.167     miod      428: <li>src/kerberosV/*
1.57      art       429: <li>src/lib/libdes/*
1.1       deraadt   430: <li>src/lib/libc/crypt/crypt.c
                    431: <li>src/lib/libc/crypt/morecrypt.c
1.167     miod      432: <li>src/sys/crypto
1.36      deraadt   433: <li>src/sys/netinet
1.67      art       434: <li>src/usr.sbin/afs/src/rxkad/*
1.167     miod      435: <li>XF4/xc-mit/lib/Xdmcp/Wraphelp.c
                    436: <li>XF4/xc-old/lib/Xdmcp/Wraphelp.c
                    437: <li>XF4/xc/lib/Xdmcp/Wraphelp.c
1.1       deraadt   438: </ul>
1.249     nick      439: Because of US Dept. of Commerce policy,
                    440: crypto software may only be exported to Canada from the USA.
1.1       deraadt   441: </ul>
                    442:
1.249     nick      443: <h3><a name="EXAMPLE"><font color="#0000e0">Example usages for cvs(1)</font>
1.155     jsyn      444: </a></h3>
1.104     ericj     445:
1.198     david     446: <p>
1.249     nick      447: NOTICE: If you want to update a branch (such as a patch branch)
                    448: to <i>current</i>, you would add the <code>-A</code>
                    449: flag to cvs, but this flag is of little use otherwise.   Some older
                    450: versions of the OpenBSD documentation recommended use of this flag
                    451: in many examples. We no longer recommend this flag unless absolutely necessary.
1.163     chris     452:
1.1       deraadt   453: <p>
1.249     nick      454: A sample use of an anoncvs server would be:
1.135     naddy     455: <pre>
1.245     ray       456: $ <strong>cd /tmp</strong>
                    457: $ <strong>cvs -d anoncvs@anoncvs.ca.openbsd.org:/cvs get src/sys/arch/sparc</strong>
1.249     nick      458:     [copies the files from the repository to your machine]
1.245     ray       459: $ <strong>cd src/sys/arch/sparc</strong>
                    460: $ <strong>cvs log locore.s</strong>
1.249     nick      461:     [shows the commit log for the chosen file]
1.245     ray       462: $ <strong>cvs diff -bc -r1.1 -r1.5 locore.s</strong>
1.249     nick      463:     [shows the changes between revisions 1.1 and rev 1.5]
1.135     naddy     464: </pre>
1.1       deraadt   465:
                    466: <p>
1.249     nick      467: <a name="pserver">In order to use a cvs ``pserver'' (a direct TCP connection
                    468: instead of using ssh or rsh) you must login once:</a>
1.104     ericj     469:
1.135     naddy     470: <pre>
1.245     ray       471: $ <strong>cvs -d :pserver:anoncvs@anoncvs.ca.openbsd.org:/cvs login</strong>
1.249     nick      472: (Logging in to anoncvs@anoncvs1.ca.openbsd.org)
1.104     ericj     473: CVS password: <strong>anoncvs</strong>
1.249     nick      474:     [This writes a line to ~/.cvspass (filename over-ridden by CVS_PASSFILE).]
                    475:     [An example line from my ~/.cvspass after typing 'blah' for the above    ]
                    476:     [password is:                                                            ]
                    477:     [:pserver:anoncvs@anoncvs5.usa.openbsd.org:/cvs Au'yc                    ]
                    478:     [After logging in ONCE every other use of the above CVSROOT will work.   ]
1.245     ray       479: $ <strong>cvs -d :pserver:anoncvs@anoncvs.ca.openbsd.org:/cvs get ksrc-i386 ksrc-common</strong>
1.249     nick      480:     [Allows you to retrieve ONLY that necessary to rebuild an i386 kernel.   ]
1.135     naddy     481: </pre>
1.18      todd      482:
                    483: <p>
1.249     nick      484: Here is how someone using anoncvs regularly would update his
                    485: source tree:
                    486: <ul><li>First, start out by `get'-ing an initial tree:
1.27      todd      487:
1.249     nick      488: <p> (If you are following <i>current</i>):
1.135     naddy     489: <pre>
                    490:        # <strong>cd /usr</strong>
1.245     ray       491:        # <strong>cvs -qd anoncvs@anoncvs.ca.openbsd.org:/cvs get -P src</strong>
1.135     naddy     492: </pre>
1.109     jason     493:
1.299     landry    494: <p> (If you are following the patch branch for 4.5):
1.135     naddy     495: <pre>
                    496:        # <strong>cd /usr</strong>
1.299     landry    497:        # <strong>cvs -qd anoncvs@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_5 -P src</strong>
1.135     naddy     498: </pre>
1.37      todd      499:
1.249     nick      500: <li> Anytime afterwards, to `update' this tree:
                    501: <p> (If you are following <i>current</i>):
1.135     naddy     502: <pre>
                    503:        # <strong>cd /usr/src</strong>
1.163     chris     504:        # <strong>cvs -q up -Pd</strong>
1.135     naddy     505: </pre>
1.27      todd      506:
1.299     landry    507: <p> (If you are following the patch branch for 4.5):
1.135     naddy     508: <pre>
                    509:        # <strong>cd /usr/src</strong>
1.299     landry    510:        # <strong>cvs -q up -rOPENBSD_4_5 -Pd</strong>
1.135     naddy     511: </pre>
1.109     jason     512:
1.249     nick      513: Every time you ran this it would synchronize your /usr/src tree. It would
                    514: not destroy any of your local changes, rather it would attempt to merge
                    515: changes in.
1.72      millert   516:
                    517: <p>
1.249     nick      518: <li> NOTE:
                    519: If you are updating a source tree that you initially fetched
                    520: from a different server, or from a CD, you <strong>must</strong>
                    521: add the <em>-d anoncvs@anoncvs.ca.openbsd.org:/cvs</em> options to cvs.
1.135     naddy     522: <pre>
                    523:        # <strong>cd /usr/src</strong>
1.245     ray       524:        # <strong>cvs -d anoncvs@anoncvs.ca.openbsd.org:/cvs -q up -Pd</strong>
1.135     naddy     525: </pre>
1.27      todd      526: </ul>
                    527:
1.37      todd      528: <p>
1.249     nick      529: To <a name="ports">use</a> <a href="ports.html">ports</a>, it is similar to src:
1.37      todd      530: <ul><li>
1.249     nick      531: <p> (If you are following <i>current</i>):
1.37      todd      532: <pre>
1.135     naddy     533:        # <strong>cd /usr</strong>
1.245     ray       534:        # <strong>cvs -qd anoncvs@anoncvs.ca.openbsd.org:/cvs get -P ports</strong>
1.38      deraadt   535: </pre>
1.299     landry    536: <p> (If you are following the patch branch for 4.5):
1.157     heko      537: <pre>
                    538:        # <strong>cd /usr</strong>
1.299     landry    539:        # <strong>cvs -qd anoncvs@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_5 -P ports</strong>
1.157     heko      540: </pre>
1.249     nick      541: <li> Anytime afterwards, to `update' this tree:
                    542: <p> (If you are following <i>current</i>):
1.37      todd      543: <pre>
1.218     nick      544:        # <strong>cd /usr/ports</strong>
                    545:        # <strong>cvs -q up -Pd</strong>
1.157     heko      546: </pre>
1.299     landry    547: <p> (If you are following the patch branch for 4.5):
1.157     heko      548: <pre>
1.218     nick      549:        # <strong>cd /usr/ports</strong>
1.299     landry    550:        # <strong>cvs -q up -rOPENBSD_4_5 -Pd</strong>
1.157     heko      551: </pre>
1.127     jufi      552: </ul>
1.37      todd      553:
1.249     nick      554: In the above example, <i>-q</i> is optional, only intended to minimize
                    555: cvs's output.  For those who like to see screenfulls of output, it
                    556: can be omitted.
1.1       deraadt   557:
                    558: <p>
1.250     steven    559: To make a diff of a locally patched module (here <i>cd.c</i>) to include with
1.249     nick      560: a bug report:
1.135     naddy     561: <pre>
                    562:        # <strong>cd /usr</strong>
                    563:        # <strong>cvs diff -u src/sys/scsi/cd.c &gt; /tmp/patch</strong>
                    564: </pre>
1.12      grr       565:
                    566: <p>
1.249     nick      567: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&amp;sektion=1&amp;format=html">
                    568: cvs(1) man page</a>
                    569: (included with the CVS sources) has much more
                    570: information about how CVS can be used.
1.1       deraadt   571:
1.105     ericj     572: <p>
1.249     nick      573: <strong>Warning:</strong>
                    574: When using cvs you should take care that your current directory is either
                    575: the root of the tree you are referencing or in a separate place such as /tmp.
                    576: Some commands such as "get" can create an arbitrary sub-tree in the current
                    577: directory, and a subsequent update will recursively flesh out this sub-tree.
1.12      grr       578:
                    579: <p>
1.249     nick      580: The anoncvs service gives fledgling developers a chance to learn CVS
                    581: operation and get thoroughly involved in the development process
                    582: before getting "commit" access -- as a result of showing useful
                    583: skills and high quality results they will naturally later be given
                    584: developer access.  As well, people providing patches can create
                    585: their "diff"s relative to the CVS tree, which will ease integration.
1.1       deraadt   586:
1.104     ericj     587:
1.249     nick      588: <h3><a name="WHICH"><font color="#0000e0">Use rsh(1) or ssh(1)?</font></a></h3>
1.104     ericj     589:
1.249     nick      590: CVS supports three access methods between the CVS server and the CVS
                    591: client:
1.226     nick      592:
                    593: <ul>
1.249     nick      594: <li><b>ssh:</b> Secure Shell can be used to access the anonymous CVS servers.
                    595: This is the <i>recommended</i> way of doing so, as it is encrypted.
1.226     nick      596:
1.249     nick      597: <li><b>rsh:</b> Remote Shell can be used on some of the servers for users
                    598: who don't have access to <a href="http://www.openssh.com/">ssh</a>.
1.226     nick      599:
1.249     nick      600: <li><b>pserver:</b> pserver is primarily useful for users who are behind
                    601: firewalls that block the other two connections.
1.226     nick      602: </ul>
                    603:
1.249     nick      604: <p>
                    605: <b>NOTE:</b> For users wishing to use rsh, you must first set the
                    606: <tt>CVS_RSH</tt> environment variable to point to the rsh(1) program:
1.226     nick      607:
                    608: <ul>
1.249     nick      609: <li>For Korn/Bourne shells:
1.226     nick      610: <pre>
                    611:         $ <b>export CVS_RSH=/usr/bin/rsh</b>
                    612: </pre>
1.249     nick      613: <li>For csh/tcsh:
1.226     nick      614: <pre>
                    615:         % <b>setenv CVS_RSH /usr/bin/rsh</b>
                    616: </pre>
                    617: </ul>
                    618:
1.1       deraadt   619: <p>
1.249     nick      620: By default, OpenBSD's CVS client uses ssh ("secure shell":
                    621: <a href="http://www.openssh.com/">OpenSSH</a>) to talk to the CVS server.
1.159     jcs       622:
                    623: <p>
1.282     nick      624: Many of the CVS sites no longer support rsh or pserver for security reasons.
                    625: Local
1.249     nick      626: problems like firewalls or imperfect protocol emulators such as slirp may
                    627: also hinder rsh usage.  However, if rsh is desired, one must set the
                    628: <var>CVS_RSH</var> environment variable to point to rsh
                    629: (typically <strong>/usr/bin/rsh</strong>).
1.159     jcs       630:
                    631: <p>
1.249     nick      632: If local policy prevents outgoing connections to ssh's default port of 22,
                    633: port 2022 may be used in its place.  Note, however, that not all anoncvs
                    634: servers accept ssh connections on this port.  Furthermore, most anoncvs servers
                    635: no longer accept the <strong>none</strong> cipher, as it is disabled in
                    636: recent versions of ssh for security reasons.  Also, do not be tempted
                    637: to turn on compression: CVS already compresses.
1.159     jcs       638:
                    639: <p>
1.249     nick      640: One could specify something like the following in the
                    641: <strong>$HOME/.ssh/config</strong> configuration file to avoid the pitfalls
                    642: and restrictions mentioned above:
1.1       deraadt   643: <pre>
1.59      beck      644:        Host anoncvs.ca.openbsd.org
1.159     jcs       645:            Compression no
1.1       deraadt   646:            Port 2022
                    647: </pre>
                    648:
                    649: <p>
1.249     nick      650: CVS is a little noisy starting up; to quiet it a bit you may want to
                    651: do this:
1.105     ericj     652:
1.135     naddy     653: <pre>
1.245     ray       654:        <strong>$ export CVS_CLIENT_PORT=-1</strong>
1.135     naddy     655: </pre>
1.1       deraadt   656:
                    657: <p>
1.249     nick      658: <h3><a name="SUP"><font color="#0000e0">Mirroring the CVS repository via
                    659: sup(1)</font></a></h3>
1.107     millert   660:
                    661: <p>
1.249     nick      662: Users wishing to mirror the OpenBSD CVS tree itself may now do so
                    663: from <em>anoncvs.usa.openbsd.org</em> or <em>anoncvs3.usa.openbsd.org</em>
                    664: (these are different machines).  Note that this is the cvs tree,
                    665: <b>not</b> a checked out source tree.  It is only useful if you
                    666: want to be able to do fast cvs operations (diff, annotate, etc) or
                    667: if you have multiple source trees and you only want to transfer new
                    668: data once (you can then checkout a tree from your local cvs mirror).
1.107     millert   669: <p>
1.249     nick      670: A sample supfile would be:
1.107     millert   671: <pre>
                    672:        cvs host=anoncvs.usa.openbsd.org hostbase=/ base=/home delete
                    673: </pre>
                    674: <p>
1.249     nick      675: which would mirror the cvs tree into /home/cvs with the sup data
                    676: files ending up in /home/sup.  The full OpenBSD cvs tree is currently
1.260     nick      677: about 3.5GB in size, and will, of course continue to grow.
1.65      matthieu  678:
1.249     nick      679: <h3><a name="MIRROR"><font color="#0000e0">Setting up an anoncvs mirror
1.155     jsyn      680: </font></a></h3>
1.105     ericj     681:
1.107     millert   682: <p>
1.249     nick      683: If you wish to setup a new anoncvs mirror site and make it available to
                    684: the general public, please contact the anoncvs
                    685: <a href="mailto:sup@openbsd.org">maintainer</a>.
1.259     nick      686: Anoncvs mirrors currently require about 3.5GB of disk (and it will grow!),
                    687: and use up to 32MB of swap
1.249     nick      688: per anoncvs user (assuming the user does a large operation; while smaller
                    689: operations use fewer resources, anoncvs still makes much more of an
                    690: impact than ftp or sup).  Such anoncvs machines should have excellent
                    691: network connectivity for the area they are expected to serve.  A
                    692: <a href="anoncvs.shar">document</a>
                    693: which describes the setup of anoncvs servers is available.
                    694:
                    695: <h3><font color="#0000e0">Final notes</font></h3>
                    696: After upgrading your source tree, you should read the comments
                    697: at the top of <kbd>/usr/src/Makefile</kbd> before attempting
                    698: a build.  Also, you should build a new kernel <strong>before</strong>
                    699: doing a <kbd>make build</kbd> if possible.  In some cases it may be
                    700: necessary to rebuild and install the <kbd>config</kbd> utility before
                    701: you can build the kernel.  If <kbd>config GENERIC</kbd> fails this
                    702: is probably the case.
                    703: <p>
                    704: It is important to note that upgrading from a release to the current tree
                    705: by rebuilding the sources can be rather difficult due to dependencies
                    706: that are often not obvious.  Therefore, it is suggested that you first
                    707: install the latest snapshot before attempting a tree build from source.
1.1       deraadt   708:
                    709: <hr>
1.249     nick      710: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
                    711: alt="OpenBSD"></a>
1.135     naddy     712: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.300     sthen     713: <br><small>$OpenBSD: anoncvs.html.end,v 1.11 2009/06/10 09:29:58 landry Exp $
1.155     jsyn      714: </small>
1.1       deraadt   715:
                    716: </body>
                    717: </html>