Annotation of www/anoncvs.html, Revision 1.349
1.320 sthen 1: <!-- DO NOT EDIT ANONCVS.HTML MANUALLY - IT IS GENERATED FROM TEMPLATES!
2: See comments in www/build/mirrors.dat for details -->
1.246 steven 3:
1.180 jufi 4: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1 deraadt 5: <html>
6: <head>
1.93 deraadt 7: <title>OpenBSD AnonCVS</title>
1.135 naddy 8: <link rev="made" href="mailto:www@openbsd.org">
1.93 deraadt 9: <meta name="resource-type" content="document">
1.249 nick 10: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
1.93 deraadt 11: <meta name="description" content="How to get OpenBSD updates via Internet using Anonymous CVS">
12: <meta name="keywords" content="openbsd,anoncvs,updates">
13: <meta name="distribution" content="global">
1.333 sthen 14: <meta name="copyright" content="This document copyright 1996-2010 by OpenBSD.">
1.1 deraadt 15: </head>
16:
1.226 nick 17: <body bgcolor="#ffffff" text="#000000">
1.1 deraadt 18:
1.249 nick 19: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.93 deraadt 20: <p>
1.135 naddy 21: <h2><font color="#e00000">Anonymous CVS</font></h2>
1.14 downsj 22:
1.135 naddy 23: <hr>
24:
1.249 nick 25: <h3>Table Of Contents</h3>
1.135 naddy 26:
27: <ul>
1.249 nick 28: <li><a href="#anoncvs">What is Anonymous CVS?</a>
29: <li><a href="#CVS">What is CVS?</a>
30: <li><a href="#starting">Getting Started Using Anonymous CVS</a>
31: <li><a href="#using">Using CVS to Get and Update your Source Tree</a>
32: <li><a href="#CVSROOT">Available Anonymous CVS Servers</a>
33: <li><a href="#CRYPTO">Getting crypto sources through cvs(1)</a>
34: <li><a href="#EXAMPLE">Example usages for cvs(1)</a>
35: <li><a href="#WHICH">Use rsh(1) or ssh(1)?</a>
1.333 sthen 36: <li><a href="#SUP">Mirroring the CVS repository via sup(1)</a>
1.249 nick 37: <li><a href="#MIRROR">Setting up an anoncvs mirror</a>
1.100 ericj 38: </ul>
1.135 naddy 39:
1.100 ericj 40: <hr>
41:
1.249 nick 42: <h3><a name="anoncvs"><font color="#0000e0">What is Anonymous CVS?</font></a></h3>
1.99 ericj 43:
1.15 grr 44: <p>
1.249 nick 45: Anonymous CVS is a method of keeping your local copy of the OpenBSD source
46: tree up to date with respect to changes made to current OpenBSD sources.
47: In addition to following the bleeding edge of development, it is
48: also possible to track the patches for errata of a release.
1.99 ericj 49:
1.14 downsj 50: <p>
1.249 nick 51: The major advantage of Anonymous CVS over other source code update
52: techniques is that it works directly against a central source code
53: repository or mirror. This means that you have the full set of CVS
54: commands available to control merging and updating your changes with
55: other source changes and for performing diffs, change histories
56: and other queries against the central repository.
1.99 ericj 57:
1.36 deraadt 58: <p>
1.282 nick 59: The OpenBSD Project currently has four active and two historic
60: source repositories:
1.99 ericj 61:
62: <ul>
1.249 nick 63: <li><b>src</b> - Houses all source code for the OpenBSD Operating System.
1.329 steven 64: <li><b>ports</b> - Houses the <a href="faq/ports/index.html">OpenBSD Ports</a>.
1.249 nick 65: <li><b>www</b> - Houses all OpenBSD web pages. (Including this one).
1.280 steven 66: <li><b>xenocara</b> - Houses OpenBSD's active X.org v7 source tree.
1.282 nick 67: <li><b>X11</b> and <b>XF4</b> - Houses OpenBSD's adaptation of the
68: <a href="http://www.XFree86.org/">XFree86-3</a> and XFree86-4
69: source trees.
70: These are here just for historical purposes, most users will have
71: no reason to use this tree, it is no longer being used.
1.99 ericj 72: </ul>
73:
1.100 ericj 74: <p>
1.249 nick 75: To summarize, the real strength of using Anonymous CVS is that it is
76: a "tolerant" source code control system - it <strong>respects</strong>
77: changes that you have made to your local sources and makes <strong>
78: "best efforts"</strong> to update your entire source tree, rather than
79: leaving you a list of arcane problems that have to be resolved before
80: continuing.
81:
82: <h3><a name="CVS"><font color="#0000e0">What is CVS?</font></a></h3>
83:
84: <p>
1.260 nick 85: <a href="http://ximbiot.com/cvs/">CVS</a> is the source code control
1.249 nick 86: system used to <a href="why-cvs.html">manage the OpenBSD source
87: tree.</a>
88: It implements a central repository for all officially released source code
89: and changes, while permitting developers to maintain local copies of the
90: source code with their working changes.
1.226 nick 91:
1.249 nick 92: There are two levels of source tree access:
1.226 nick 93: <ul>
1.249 nick 94: <li><b>Read-write access for developers:</b>
95: Developers who need to commit changes to the source tree must have an
96: account on the OpenBSD machines.
97: Getting this access will be a natural result of working on the sources
98: with other OpenBSD developers.
99: If someone does some good work and shows they can work with the team,
100: they will get an account.
101:
102: <li><b>Read-only access for everyone:</b>
103: Anyone can access the read-only CVS repositories.
104: These copies of the read-write CVS repository are mirrored often.
1.226 nick 105: </ul>
1.99 ericj 106:
1.15 grr 107: <p>
1.249 nick 108: The major strength of CVS is that it has the ability to perform intelligent
109: merges of changes to the central repository with changes that you make to
110: your local copy. This means that if you make a change to a module and
111: perform an update, your changes are not "blown away", rather CVS makes
112: best efforts to merge the changes made to the central sources with changes
113: you've made to your local copy.
114:
115: <p>
116: In the event that the changes can't be completely merged, CVS provides a
117: "soft fallback", providing you with annotated changes to your
118: local copy, preserving an unmodified copy of your version and continuing
119: to update any other source modules you requested.
120:
121: <h3><a name="starting"><font color="#0000e0">Getting Started Using Anonymous
122: CVS</font></a></h3>
123:
124: While you can download the entire source tree from an AnonCVS server,
125: you can often save a lot of time and bandwidth by "preloading" your
126: source tree with the source files from either the OpenBSD CD or from an
127: FTP server.
128: This is particularly true if you are running
129: <a href="stable.html"><i>-stable</i></a>, as relatively few files change
130: between the <i>-release</i> and <i>-stable</i>.
1.100 ericj 131:
1.22 niklas 132: <p>
1.249 nick 133: To extract the source tree from the CD to <i>/usr/src</i> (assuming the CD is
134: mounted on /mnt):
1.22 niklas 135: <pre>
1.280 steven 136: # <b>cd /usr/src</b>
137: # <b>tar xzf /mnt/src.tar.gz</b>
1.282 nick 138: # <b>cd /usr</b>
1.280 steven 139: # <b>tar xzf /mnt/xenocara.tar.gz</b>
1.226 nick 140: # <b>tar xzf /mnt/ports.tar.gz</b>
1.22 niklas 141: </pre>
1.224 nick 142:
1.249 nick 143: The source files for download from the FTP servers are separated into two
144: files to minimize the time required to download for those wishing to work
145: with only one part of the tree. The two files are <tt>sys.tar.gz</tt>,
146: which contains the files used to create the kernel, and <tt>src.tar.gz</tt>
147: which contains all the other "userland" utilities.
148: In general, however, you will usually want both of them installed.
1.280 steven 149: Assuming the downloaded files, <tt>src.tar.gz</tt>,
150: <tt>sys.tar.gz</tt> and <tt>xenocara.tar.gz</tt> are in <tt>/usr</tt>:
1.224 nick 151:
1.22 niklas 152: <pre>
1.224 nick 153: # <b>cd /usr/src</b>
154: # <b>tar xzf ../sys.tar.gz</b>
1.225 nick 155: # <b>tar xzf ../src.tar.gz</b>
1.282 nick 156: # <b>cd /usr</b>
1.284 steven 157: # <b>tar xzf xenocara.tar.gz</b>
1.226 nick 158: # <b>tar xzf ports.tar.gz</b>
1.22 niklas 159: </pre>
1.100 ericj 160:
161: <p>
1.249 nick 162: Not all people will wish to unpack all the file sets, but as the system
163: must be kept in sync, you will generally need to set up all trees.
1.226 nick 164:
165: <p>
1.249 nick 166: You can also just use cvs(1) to "<b>checkout</b>" the source repository
167: for you. This is discussed in the <a href="#using">next section</a>.
1.100 ericj 168:
169: <p>
1.249 nick 170: After this, <tt>/usr/src</tt> will be a nice checkout area where all
171: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1&format=html">
172: cvs(1)</a> commands will work properly.
1.100 ericj 173:
1.249 nick 174: <h3><a name="using"><font color="#0000e0">Using CVS to get and update your
175: source tree</font></a></h3>
1.100 ericj 176:
177: <p>
1.249 nick 178: CVS was designed to be a simple way to retrieve and update your sources.
179: You must first decide whether you want to track <i>-current</i> or a
180: <a href="stable.html">patch branch</a>.
181: The current tree has all of the up to the minute changes,
182: whereas a patch branch contains a formal release plus the patches
183: from the <a href="errata.html">errata</a> and lesser issues already applied.
184: For more information on these "flavors" of OpenBSD, see
185: <a href="faq/faq5.html#Flavors">here</a>.
186:
187: <p>Once you have decided which tree to follow, you must choose which Anonymous
188: CVS server you are going to use. A list of these servers is
189: <a href="#CVSROOT">below</a>.
190:
191: <p>
192: Once you have chosen which <a href="#CVSROOT">Anonymous CVS Server</a> you will
193: use, you can start using cvs. For those of you
194: who have CDs you can start with the CVS checkout that is on the CD by using
195: the method <a href="#starting">above</a> to get the sources onto your system.
196: If you don't have a CD handy, use the method below to checkout the sources.
197: This method puts the OpenBSD source tree into <i>/usr/src</i>.
1.100 ericj 198:
1.135 naddy 199: <pre>
200: # <b>cd /usr; cvs checkout -P src</b>
201: </pre>
1.99 ericj 202:
1.1 deraadt 203: <p>
1.249 nick 204: The above will checkout the <i>current</i> source tree. Many of you will
205: only want the patch branch sources. To checkout a patch branch, you must
206: specify a tag along with your command. Example:
1.1 deraadt 207:
1.320 sthen 208: <!-- DO NOT EDIT ANONCVS.HTML MANUALLY - IT IS GENERATED FROM TEMPLATES!
209: See comments in www/build/mirrors.dat for details -->
1.135 naddy 210: <pre>
1.346 sthen 211: # <b>cd /usr; cvs checkout -P -rOPENBSD_4_9 src</b>
1.135 naddy 212: </pre>
1.1 deraadt 213: <p>
1.346 sthen 214: Or OPENBSD_4_8 for 4.8, etc.
1.100 ericj 215:
1.346 sthen 216: <p> The OPENBSD_4_9 tag contains the release sources and
1.249 nick 217: errata already applied.
1.100 ericj 218:
1.249 nick 219: <h3><a name="CVSROOT"><font color="#0000e0">Available Anonymous CVS Servers
1.155 jsyn 220: </font></a></h3>
1.1 deraadt 221:
222: <p>
1.249 nick 223: <em>Please see the note about <a href="#WHICH">ssh vs. rsh</a> below!</em>
1.12 grr 224: <p>
1.1 deraadt 225: <ul>
1.339 sthen 226: <li><strong>CVSROOT=anoncvs@anoncvs.openbsd.org.ar:/cvs</strong><br>
227: Location: Buenos Aires, Argentina.<br>
228: Maintained by <a href="mailto:gonzalo@x61.com.ar">Gonzalo Lionel Rodriguez</a>.<br>
229: Protocols: ssh.<br>
230: Updated every 2 hours from obsd.cec.mtu.edu.<br>
231: <p>
1.344 sthen 232: <li><strong>CVSROOT=anoncvs@cvs.sentina.org:/cvs</strong><br>
233: Location: Sydney, Australia.<br>
234: Maintained by <a href="mailto:mb@ii.net">Michael W. Bombardieri</a>.<br>
235: Protocols: ssh.<br>
236: Updated every 2 hours from anoncvs.usa.openbsd.org.<br>
237: <p>
1.322 sthen 238: <li><strong>CVSROOT=anoncvs@ftp5.eu.openbsd.org:/cvs</strong><br>
239: Host also known as <strong>anga.funkfeuer.at</strong>.<br>
1.271 martin 240: Location: Vienna, Austria.<br>
241: Maintained by <a href="mailto:martin@openbsd.org">Martin Reindl</a>.<br>
242: Protocols: ssh, ssh port 2022.<br>
1.275 martin 243: Updated every 2 hours from anoncvs1.usa.openbsd.org.<br>
1.273 martin 244: SSH fingerprints:<br>
245: (RSA) 2048 e4:a7:3a:ab:e1:a7:c8:eb:5c:f4:ff:38:95:6f:81:f2<br>
246: (DSA) 2048 66:03:a3:bc:46:85:f3:6c:4b:6b:e3:d4:f5:5f:a6:c4<br>
1.271 martin 247: <p>
1.246 steven 248: <li><strong>CVSROOT=anoncvs@anoncvs1.ca.openbsd.org:/cvs</strong><br>
1.249 nick 249: Host also known as <strong>anoncvs.ca.openbsd.org, openbsd.sunsite.ualberta.ca</strong>.<br>
1.328 sthen 250: Location: Alberta, Canada.<br>
1.249 nick 251: Maintained by <a href="mailto:beck@ualberta.ca">Bob Beck</a>.<br>
1.295 beck 252: Protocols: ssh, ssh port 2022.<br>
1.249 nick 253: Updated every 2 hours.<br>
1.246 steven 254: <p>
1.288 sthen 255: <li><strong>CVSROOT=anoncvs@anoncvs.comstyle.com:/cvs</strong><br>
256: Location: Toronto, Canada.<br>
1.296 sthen 257: Maintained by <a href="mailto:brad@comstyle.com">Brad Smith</a>.<br>
1.288 sthen 258: Protocols: ssh, ssh port 2022.<br>
1.312 sthen 259: Updated hourly.<br>
1.288 sthen 260: <p>
1.285 sthen 261: <li><strong>CVSROOT=anoncvs@anoncvs.estpak.ee:/OpenBSD</strong><br>
262: Location: Elion, Tallinn, Estonia.<br>
263: Maintained by <a href="mailto:rix@estpak.ee">Rivo Nurges</a>.<br>
264: Protocols: ssh.<br>
1.289 sthen 265: Updated every 2 hours from cvsync.de.openbsd.org.<br>
1.285 sthen 266: SSH fingerprints:<br>
1.292 sthen 267: (RSA) 1024 e1:12:fb:6b:e5:c0:6a:b3:f8:ca:b1:4c:20:fb:5e:07<br>
268: (DSA) 1024 bb:5c:44:f4:d9:12:3b:22:08:a9:12:c5:0c:e7:db:49<br>
1.285 sthen 269: <p>
1.328 sthen 270: <li><strong>CVSROOT=anoncvs@anoncvs.fr.openbsd.org:/cvs</strong><br>
271: Location: Paris, France.<br>
272: Maintained by <a href="mailto:landry@openbsd.org">Landry Breuil</a>.<br>
273: Protocols: ssh.<br>
274: Updated every 2 hours from anoncvs1.ca.openbsd.org.<br>
275: SSH fingerprints:<br>
276: (RSA1) 2048 28:ce:6b:61:76:d9:0e:6d:65:a1:5c:dd:e8:d7:57:42<br>
277: (RSA) 2048 89:2e:84:9e:0c:f9:8d:21:41:0e:c5:80:41:27:14:c1<br>
278: (DSA) 1024 7f:fb:68:2f:0f:c8:63:6c:0f:32:2c:03:d4:cd:0c:47<br>
1.347 landry 279: (ECDSA) 256 6f:a8:a5:93:d7:68:55:91:15:42:b0:5d:38:62:b9:c3<br>
1.328 sthen 280: <p>
1.349 ! sthen 281: <li><strong>CVSROOT=anoncvs@openbsd.cs.fau.de:/cvs</strong><br>
! 282: Host also known as <strong>openbsd.informatik.uni-erlangen.de</strong>.<br>
1.327 sthen 283: Location: University of Erlangen-Nuremberg, Erlangen, Germany.<br>
284: Maintained by <a href="mailto:simon@blarzwurst.de">Simon Kuhnle</a>.<br>
285: Protocols: ssh, ssh port 2022.<br>
286: Updated every 2 hours from anoncvs.spacehopper.org.<br>
287: SSH fingerprints:<br>
288: (RSA) 2048 bc:8e:dd:84:2d:6a:ed:6d:33:e7:46:d9:83:00:1b:ff<br>
289: (DSA) 1024 5c:e7:fb:a9:bc:93:4a:02:cc:04:88:57:71:51:0b:10<br>
1.348 sthen 290: (ECDSA) 256 66:e8:62:bb:83:01:16:f8:e8:01:43:d5:d3:84:e9:43<br>
1.327 sthen 291: <p>
1.246 steven 292: <li><strong>CVSROOT=anoncvs@mirror.osn.de:/cvs</strong><br>
1.249 nick 293: Location: Nürnberg, Germany.<br>
294: Maintained by <a href="mailto:aw@osn.de">Armin Wolfermann</a>.<br>
295: Protocols: ssh.<br>
1.307 sthen 296: Updated every 3 hours.<br>
1.215 david 297: SSH fingerprints:<br>
1.246 steven 298: (RSA) 1024 f2:73:d2:f6:e3:01:ef:ca:3b:e7:6c:80:b6:bd:bb:84<br>
299: (DSA) 1024 fb:33:05:62:96:20:cf:88:7e:10:cb:8d:91:72:57:32<br>
300: <p>
301: <li><strong>CVSROOT=anoncvs@anoncvs.silihost.hu:/cvs</strong><br>
1.249 nick 302: Location: Budapest, Hungary.<br>
303: Maintained by <a href="mailto:robert@openbsd.org">Robert Nagy</a>.<br>
304: Protocols: ssh.<br>
305: Updated every 3 hours from anoncvs.de.openbsd.org.<br>
1.123 beck 306: <p>
1.246 steven 307: <li><strong>CVSROOT=anoncvs@anoncvs.jp.openbsd.org:/cvs</strong><br>
1.249 nick 308: Host also known as <strong>kankoromochi.econ.nagasaki-u.ac.jp</strong>.<br>
309: Location: Nagasaki University, Faculty of Economics, Nagasaki, Japan.<br>
310: Maintained by <a href="mailto:sigh@net.nagasaki-u.ac.jp">Suzuki Itoshi</a>.<br>
311: Protocols: ssh, pserver.<br>
312: Updated every 3 hours.<br>
1.176 miod 313: <p>
314: <li><strong>CVSROOT=anoncvs@anoncvs.openbsd.lt:/cvs</strong><br>
1.249 nick 315: Location: TVK, Cable TV and Internet Services, Taurage, Lithuania.<br>
316: Maintained by <a href="mailto:helpas@ebox.lt">Donatas Budvytis</a>.<br>
317: Protocols: ssh.<br>
318: Updated every 3 hours from cvsup.no.openbsd.org.<br>
1.183 jufi 319: <p>
1.267 grunk 320: <li><strong>CVSROOT=anoncvs@anoncvs.obsd.si:/cvs</strong><br>
321: Host also known as <strong>nina.kerberos.si</strong>.<br>
322: Location: Ljubljana, Slovenia.<br>
323: Maintained by <a href="mailto:mitja@kerberos.si">Mitja Muzenic</a>.<br>
324: Protocols: ssh.<br>
1.323 sthen 325: Updated every 2 hours from anoncvs.eu.openbsd.org.<br>
1.267 grunk 326: <p>
1.328 sthen 327: <li><strong>CVSROOT=anoncvs@anoncvs.eu.openbsd.org:/cvs</strong><br>
328: Location: Stockholm University, Stockholm, Sweden.<br>
329: Maintained by <a href="mailto:jj@openbsd.org">Janne Johansson</a>.<br>
330: Protocols: ssh.<br>
331: Updated every 2 hours.<br>
332: SSH fingerprints:<br>
1.345 jj 333: (RSA1) 2048 4c:d2:0a:90:b8:95:5d:37:3b:32:7b:77:5a:c5:ef:26<br>
1.328 sthen 334: (RSA) 2048 98:e6:80:5d:95:bb:e2:15:5e:19:4d:a3:e4:d0:bc:2c<br>
1.345 jj 335: (DSA) 1024 55:cd:a7:a9:e3:bc:a5:5c:81:5e:98:c0:60:a2:67:52<br>
1.328 sthen 336: <p>
1.343 sthen 337: <li><strong>CVSROOT=anoncvs@anoncvs.netbsd.se:/cvs</strong><br>
338: Location: Stockholm, Sweden.<br>
339: Maintained by <a href="mailto:viktor@holmlund.it">Viktor Holmlund</a>.<br>
340: Protocols: ssh.<br>
341: Updated every 3 hours.<br>
342: <p>
1.328 sthen 343: <li><strong>CVSROOT=anoncvs@anoncvs.spacehopper.org:/cvs</strong><br>
344: Location: London, United Kingdom.<br>
345: Maintained by <a href="mailto:sthen@openbsd.org">Stuart Henderson</a>.<br>
346: Protocols: ssh, ssh port 2022.<br>
347: Updated hourly from anoncvs.ca.openbsd.org.<br>
348: SSH fingerprints:<br>
349: (RSA1) 2048 31:fc:3d:e0:f7:6c:47:7e:48:f0:52:17:e6:19:74:f5<br>
350: (RSA) 2048 e2:19:16:3f:a3:2e:eb:94:14:cd:5c:92:9a:6c:9a:8f<br>
351: (DSA) 1024 ff:47:13:22:83:d1:6e:df:a0:f0:4f:18:31:cb:f2:28<br>
1.330 sthen 352: (ECDSA) 256 a5:b0:2a:65:ff:9a:0b:ef:7d:6f:d2:95:2e:a7:c9:2c<br>
1.328 sthen 353: <p>
354: <li><strong>CVSROOT=anoncvs@anoncvs1.usa.openbsd.org:/cvs</strong><br>
355: Host also known as <strong>anoncvs.usa.openbsd.org, anoncvs4.usa.openbsd.org</strong>.<br>
356: Location: Internet Software Consortium, Redwood City, CA, USA.<br>
357: Maintained by <a href="mailto:millert@openbsd.org">Todd C. Miller</a>.<br>
358: Protocols: rsh, ssh, ssh port 2022, pserver.<br>
359: Updated every 2 hours.<br>
360: SSH fingerprints:<br>
361: (RSA1) 1024 64:de:26:16:c2:ff:1b:c7:24:ed:a4:4a:d7:2f:69:3e<br>
362: (RSA) 1024 49:67:9a:46:62:8a:3f:4e:b3:63:ca:d6:41:29:2a:2f<br>
363: (DSA) 1024 a7:75:49:77:f3:47:d1:3c:5e:65:84:84:3b:03:f1:33<br>
364: <p>
365: <li><strong>CVSROOT=anoncvs@anoncvs3.usa.openbsd.org:/cvs</strong><br>
366: Location: National Center for Atmospheric Research, Boulder, CO, USA.<br>
367: Maintained by <a href="mailto:millert@openbsd.org">Todd C. Miller</a>.<br>
368: Protocols: rsh, ssh, ssh port 2022, pserver.<br>
369: Updated every 2 hours.<br>
370: SSH fingerprints:<br>
371: (RSA1) 2048 80:cd:f6:fc:4f:0e:cb:80:6a:d0:6a:5e:dd:9e:5d:0a<br>
372: (RSA) 2048 49:6f:4a:be:02:63:0d:c0:54:b0:57:f0:48:7f:ce:16<br>
373: (DSA) 1024 f9:ab:fc:60:a3:15:8f:9c:47:24:9e:92:15:78:0d:f3<br>
374: <p>
1.254 steven 375: <li><strong>CVSROOT=anoncvs@mirror.planetunix.net:/cvs</strong><br>
1.313 sthen 376: Location: Chicago, IL, USA.<br>
1.254 steven 377: Maintained by <a href="mailto:brian@planetunix.net">Brian Brombacher</a>.<br>
378: Protocols: ssh, ssh port 2022, pserver.<br>
1.305 jcs 379: Updated every 3 hours from anoncvs3.usa.openbsd.org.<br>
1.254 steven 380: SSH fingerprints:<br>
381: (RSA1) 2048 e4:22:93:81:84:e0:68:8c:0b:d5:1f:78:cd:6f:fa:c3<br>
382: (RSA) 2048 8f:42:bd:b0:a2:94:df:6b:af:1e:96:03:ea:68:03:d9<br>
383: (DSA) 1024 26:51:e8:b3:38:88:dc:a8:2a:98:59:86:ab:40:bb:a4<br>
1.328 sthen 384: <p>
385: <li><strong>CVSROOT=anoncvs@obsd.cec.mtu.edu:/cvs</strong><br>
386: Location: Michigan Technological University, Houghton, Michigan, USA.<br>
387: Maintained by <a href="mailto:celinn@mtu.edu">Chris Linn</a>.<br>
388: Protocols: ssh.<br>
389: Updated every 2 hours.<br>
390: SSH fingerprints:<br>
1.349 ! sthen 391: (RSA1) 2048 d7:91:a2:f4:d2:8d:81:7f:3c:44:91:8f:b5:b9:46:48<br>
1.328 sthen 392: (RSA) 2048 de:f1:09:85:a0:db:60:97:d4:95:0d:07:80:4e:ee:68<br>
393: (DSA) 1024 78:05:5c:c7:ce:7e:6f:c8:6d:b7:e2:7e:ba:06:1c:40<br>
1.254 steven 394: <p>
1.283 sthen 395: <li><strong>CVSROOT=anoncvs@openbsd.mirror.frontiernet.net:/cvs</strong><br>
396: Location: Frontier Communications, Rochester, NY, USA.<br>
397: Maintained by <a href="mailto:jrrs@frontiernet.net">jared r r spiegel</a>.<br>
398: Protocols: ssh.<br>
399: Updated every 4 hours from anoncvs.ca.openbsd.org.<br>
400: <p>
1.246 steven 401:
1.73 deraadt 402: </ul>
1.84 beck 403:
1.73 deraadt 404: <p>
1.249 nick 405: <em>Note:</em> If your server is listed on here with inaccurate or
406: unknown information, please contact
407: <a href="mailto:beck@openbsd.org"><tt>beck@openbsd.org</tt></a>
1.104 ericj 408:
1.80 beck 409: <p>
1.249 nick 410: You may want to use
1.135 naddy 411: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=traceroute&sektion=8&format=html">traceroute(8)</a>
1.249 nick 412: to find out which server is nearest you.
413: Problems with a server should be reported to the <b>maintainer</b> of the
414: server in question.
1.104 ericj 415:
1.249 nick 416: <h3><a name="CRYPTO"><font color="#0000e0">Getting crypto sources through
417: cvs(1)</font></a></h3>
1.104 ericj 418:
1.1 deraadt 419: <p>
1.249 nick 420: <strong>IMPORTANT NOTE:</strong>
421: There are a few issues relating to cryptographic software that everyone
422: should be aware of:
1.1 deraadt 423: <ul>
1.249 nick 424: <li>The OpenBSD sources are from Canada.
425: As
1.182 nick 426: <a href="http://www.efc.ca/pages/doc/crypto-export.html">
1.249 nick 427: researched by a Canadian individual</a>
428: and as
1.135 naddy 429: <a href="http://axion.physics.ubc.ca/ECL.html">
1.249 nick 430: described in the Export Control list of Canada</a>
431: it is legal to export crypto software from Canada to the world.
1.1 deraadt 432: <p>
1.249 nick 433: <li>However, if you are outside the USA or Canada, you should not
434: fetch the cryptographic sections of the OpenBSD sources from an
435: anoncvs server located in the USA. The files in question are...
1.1 deraadt 436: <ul>
437: <li>src/kerberosIV/*
1.167 miod 438: <li>src/kerberosV/*
1.57 art 439: <li>src/lib/libdes/*
1.1 deraadt 440: <li>src/lib/libc/crypt/crypt.c
441: <li>src/lib/libc/crypt/morecrypt.c
1.167 miod 442: <li>src/sys/crypto
1.36 deraadt 443: <li>src/sys/netinet
1.67 art 444: <li>src/usr.sbin/afs/src/rxkad/*
1.167 miod 445: <li>XF4/xc-mit/lib/Xdmcp/Wraphelp.c
446: <li>XF4/xc-old/lib/Xdmcp/Wraphelp.c
447: <li>XF4/xc/lib/Xdmcp/Wraphelp.c
1.1 deraadt 448: </ul>
1.249 nick 449: Because of US Dept. of Commerce policy,
450: crypto software may only be exported to Canada from the USA.
1.1 deraadt 451: </ul>
452:
1.249 nick 453: <h3><a name="EXAMPLE"><font color="#0000e0">Example usages for cvs(1)</font>
1.155 jsyn 454: </a></h3>
1.104 ericj 455:
1.198 david 456: <p>
1.249 nick 457: NOTICE: If you want to update a branch (such as a patch branch)
458: to <i>current</i>, you would add the <code>-A</code>
459: flag to cvs, but this flag is of little use otherwise. Some older
460: versions of the OpenBSD documentation recommended use of this flag
461: in many examples. We no longer recommend this flag unless absolutely necessary.
1.163 chris 462:
1.1 deraadt 463: <p>
1.249 nick 464: A sample use of an anoncvs server would be:
1.135 naddy 465: <pre>
1.245 ray 466: $ <strong>cd /tmp</strong>
467: $ <strong>cvs -d anoncvs@anoncvs.ca.openbsd.org:/cvs get src/sys/arch/sparc</strong>
1.249 nick 468: [copies the files from the repository to your machine]
1.245 ray 469: $ <strong>cd src/sys/arch/sparc</strong>
470: $ <strong>cvs log locore.s</strong>
1.249 nick 471: [shows the commit log for the chosen file]
1.245 ray 472: $ <strong>cvs diff -bc -r1.1 -r1.5 locore.s</strong>
1.249 nick 473: [shows the changes between revisions 1.1 and rev 1.5]
1.135 naddy 474: </pre>
1.1 deraadt 475:
476: <p>
1.249 nick 477: <a name="pserver">In order to use a cvs ``pserver'' (a direct TCP connection
478: instead of using ssh or rsh) you must login once:</a>
1.104 ericj 479:
1.135 naddy 480: <pre>
1.245 ray 481: $ <strong>cvs -d :pserver:anoncvs@anoncvs.ca.openbsd.org:/cvs login</strong>
1.249 nick 482: (Logging in to anoncvs@anoncvs1.ca.openbsd.org)
1.104 ericj 483: CVS password: <strong>anoncvs</strong>
1.249 nick 484: [This writes a line to ~/.cvspass (filename over-ridden by CVS_PASSFILE).]
485: [An example line from my ~/.cvspass after typing 'blah' for the above ]
486: [password is: ]
487: [:pserver:anoncvs@anoncvs5.usa.openbsd.org:/cvs Au'yc ]
488: [After logging in ONCE every other use of the above CVSROOT will work. ]
1.245 ray 489: $ <strong>cvs -d :pserver:anoncvs@anoncvs.ca.openbsd.org:/cvs get ksrc-i386 ksrc-common</strong>
1.249 nick 490: [Allows you to retrieve ONLY that necessary to rebuild an i386 kernel. ]
1.135 naddy 491: </pre>
1.18 todd 492:
493: <p>
1.249 nick 494: Here is how someone using anoncvs regularly would update his
495: source tree:
496: <ul><li>First, start out by `get'-ing an initial tree:
1.27 todd 497:
1.249 nick 498: <p> (If you are following <i>current</i>):
1.135 naddy 499: <pre>
500: # <strong>cd /usr</strong>
1.245 ray 501: # <strong>cvs -qd anoncvs@anoncvs.ca.openbsd.org:/cvs get -P src</strong>
1.135 naddy 502: </pre>
1.109 jason 503:
1.346 sthen 504: <p> (If you are following the patch branch for 4.9):
1.135 naddy 505: <pre>
506: # <strong>cd /usr</strong>
1.346 sthen 507: # <strong>cvs -qd anoncvs@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_9 -P src</strong>
1.135 naddy 508: </pre>
1.37 todd 509:
1.249 nick 510: <li> Anytime afterwards, to `update' this tree:
511: <p> (If you are following <i>current</i>):
1.135 naddy 512: <pre>
513: # <strong>cd /usr/src</strong>
1.163 chris 514: # <strong>cvs -q up -Pd</strong>
1.135 naddy 515: </pre>
1.27 todd 516:
1.346 sthen 517: <p> (If you are following the patch branch for 4.9):
1.135 naddy 518: <pre>
519: # <strong>cd /usr/src</strong>
1.346 sthen 520: # <strong>cvs -q up -rOPENBSD_4_9 -Pd</strong>
1.135 naddy 521: </pre>
1.109 jason 522:
1.249 nick 523: Every time you ran this it would synchronize your /usr/src tree. It would
524: not destroy any of your local changes, rather it would attempt to merge
525: changes in.
1.72 millert 526:
527: <p>
1.249 nick 528: <li> NOTE:
529: If you are updating a source tree that you initially fetched
530: from a different server, or from a CD, you <strong>must</strong>
531: add the <em>-d anoncvs@anoncvs.ca.openbsd.org:/cvs</em> options to cvs.
1.135 naddy 532: <pre>
533: # <strong>cd /usr/src</strong>
1.245 ray 534: # <strong>cvs -d anoncvs@anoncvs.ca.openbsd.org:/cvs -q up -Pd</strong>
1.135 naddy 535: </pre>
1.27 todd 536: </ul>
537:
1.37 todd 538: <p>
1.329 steven 539: To <a name="ports">use</a> <a href="faq/ports/index.html">ports</a>,
540: it is similar to src:
1.37 todd 541: <ul><li>
1.249 nick 542: <p> (If you are following <i>current</i>):
1.37 todd 543: <pre>
1.135 naddy 544: # <strong>cd /usr</strong>
1.245 ray 545: # <strong>cvs -qd anoncvs@anoncvs.ca.openbsd.org:/cvs get -P ports</strong>
1.38 deraadt 546: </pre>
1.346 sthen 547: <p> (If you are following the patch branch for 4.9):
1.157 heko 548: <pre>
549: # <strong>cd /usr</strong>
1.346 sthen 550: # <strong>cvs -qd anoncvs@anoncvs.ca.openbsd.org:/cvs get -rOPENBSD_4_9 -P ports</strong>
1.157 heko 551: </pre>
1.249 nick 552: <li> Anytime afterwards, to `update' this tree:
553: <p> (If you are following <i>current</i>):
1.37 todd 554: <pre>
1.218 nick 555: # <strong>cd /usr/ports</strong>
556: # <strong>cvs -q up -Pd</strong>
1.157 heko 557: </pre>
1.346 sthen 558: <p> (If you are following the patch branch for 4.9):
1.157 heko 559: <pre>
1.218 nick 560: # <strong>cd /usr/ports</strong>
1.346 sthen 561: # <strong>cvs -q up -rOPENBSD_4_9 -Pd</strong>
1.157 heko 562: </pre>
1.127 jufi 563: </ul>
1.37 todd 564:
1.249 nick 565: In the above example, <i>-q</i> is optional, only intended to minimize
566: cvs's output. For those who like to see screenfulls of output, it
567: can be omitted.
1.1 deraadt 568:
569: <p>
1.250 steven 570: To make a diff of a locally patched module (here <i>cd.c</i>) to include with
1.249 nick 571: a bug report:
1.135 naddy 572: <pre>
573: # <strong>cd /usr</strong>
574: # <strong>cvs diff -u src/sys/scsi/cd.c > /tmp/patch</strong>
575: </pre>
1.12 grr 576:
577: <p>
1.249 nick 578: The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&sektion=1&format=html">
579: cvs(1) man page</a>
580: (included with the CVS sources) has much more
581: information about how CVS can be used.
1.1 deraadt 582:
1.105 ericj 583: <p>
1.249 nick 584: <strong>Warning:</strong>
585: When using cvs you should take care that your current directory is either
586: the root of the tree you are referencing or in a separate place such as /tmp.
587: Some commands such as "get" can create an arbitrary sub-tree in the current
588: directory, and a subsequent update will recursively flesh out this sub-tree.
1.12 grr 589:
590: <p>
1.249 nick 591: The anoncvs service gives fledgling developers a chance to learn CVS
592: operation and get thoroughly involved in the development process
593: before getting "commit" access -- as a result of showing useful
594: skills and high quality results they will naturally later be given
595: developer access. As well, people providing patches can create
596: their "diff"s relative to the CVS tree, which will ease integration.
1.1 deraadt 597:
1.104 ericj 598:
1.249 nick 599: <h3><a name="WHICH"><font color="#0000e0">Use rsh(1) or ssh(1)?</font></a></h3>
1.104 ericj 600:
1.249 nick 601: CVS supports three access methods between the CVS server and the CVS
602: client:
1.226 nick 603:
604: <ul>
1.249 nick 605: <li><b>ssh:</b> Secure Shell can be used to access the anonymous CVS servers.
606: This is the <i>recommended</i> way of doing so, as it is encrypted.
1.226 nick 607:
1.249 nick 608: <li><b>rsh:</b> Remote Shell can be used on some of the servers for users
609: who don't have access to <a href="http://www.openssh.com/">ssh</a>.
1.226 nick 610:
1.249 nick 611: <li><b>pserver:</b> pserver is primarily useful for users who are behind
612: firewalls that block the other two connections.
1.226 nick 613: </ul>
614:
1.249 nick 615: <p>
616: <b>NOTE:</b> For users wishing to use rsh, you must first set the
617: <tt>CVS_RSH</tt> environment variable to point to the rsh(1) program:
1.226 nick 618:
619: <ul>
1.249 nick 620: <li>For Korn/Bourne shells:
1.226 nick 621: <pre>
622: $ <b>export CVS_RSH=/usr/bin/rsh</b>
623: </pre>
1.249 nick 624: <li>For csh/tcsh:
1.226 nick 625: <pre>
626: % <b>setenv CVS_RSH /usr/bin/rsh</b>
627: </pre>
628: </ul>
629:
1.1 deraadt 630: <p>
1.249 nick 631: By default, OpenBSD's CVS client uses ssh ("secure shell":
632: <a href="http://www.openssh.com/">OpenSSH</a>) to talk to the CVS server.
1.159 jcs 633:
634: <p>
1.282 nick 635: Many of the CVS sites no longer support rsh or pserver for security reasons.
636: Local
1.249 nick 637: problems like firewalls or imperfect protocol emulators such as slirp may
638: also hinder rsh usage. However, if rsh is desired, one must set the
639: <var>CVS_RSH</var> environment variable to point to rsh
640: (typically <strong>/usr/bin/rsh</strong>).
1.159 jcs 641:
642: <p>
1.249 nick 643: If local policy prevents outgoing connections to ssh's default port of 22,
644: port 2022 may be used in its place. Note, however, that not all anoncvs
645: servers accept ssh connections on this port. Furthermore, most anoncvs servers
646: no longer accept the <strong>none</strong> cipher, as it is disabled in
647: recent versions of ssh for security reasons. Also, do not be tempted
648: to turn on compression: CVS already compresses.
1.159 jcs 649:
650: <p>
1.249 nick 651: One could specify something like the following in the
652: <strong>$HOME/.ssh/config</strong> configuration file to avoid the pitfalls
653: and restrictions mentioned above:
1.1 deraadt 654: <pre>
1.59 beck 655: Host anoncvs.ca.openbsd.org
1.159 jcs 656: Compression no
1.1 deraadt 657: Port 2022
658: </pre>
659:
660: <p>
1.249 nick 661: CVS is a little noisy starting up; to quiet it a bit you may want to
662: do this:
1.105 ericj 663:
1.135 naddy 664: <pre>
1.245 ray 665: <strong>$ export CVS_CLIENT_PORT=-1</strong>
1.135 naddy 666: </pre>
1.1 deraadt 667:
668: <p>
1.333 sthen 669: <h3><a name="SUP"><font color="#0000e0">Mirroring the CVS repository via
670: sup(1)</font></a></h3>
671:
672: <p>
673: Users wishing to mirror the OpenBSD CVS tree itself may now do so
674: from <em>anoncvs.usa.openbsd.org</em> or <em>anoncvs3.usa.openbsd.org</em>
675: (these are different machines). Note that this is the cvs tree,
676: <b>not</b> a checked out source tree. It is only useful if you
677: want to be able to do fast cvs operations (diff, annotate, etc) or
678: if you have multiple source trees and you only want to transfer new
679: data once (you can then checkout a tree from your local cvs mirror).
680: <p>
681: A sample supfile would be:
682: <pre>
683: cvs host=anoncvs.usa.openbsd.org hostbase=/ base=/home delete
684: </pre>
685: <p>
686: which would mirror the cvs tree into /home/cvs with the sup data
687: files ending up in /home/sup. The full OpenBSD cvs tree is currently
1.335 johan 688: about 5GB in size, and will, of course continue to grow.
1.333 sthen 689:
1.249 nick 690: <h3><a name="MIRROR"><font color="#0000e0">Setting up an anoncvs mirror
1.155 jsyn 691: </font></a></h3>
1.105 ericj 692:
1.107 millert 693: <p>
1.249 nick 694: If you wish to setup a new anoncvs mirror site and make it available to
695: the general public, please contact the anoncvs
696: <a href="mailto:sup@openbsd.org">maintainer</a>.
1.336 johan 697: Anoncvs mirrors currently require about 5GB of disk (and it will grow!),
1.318 sthen 698: and use up to 32MB of swap
1.249 nick 699: per anoncvs user (assuming the user does a large operation; while smaller
700: operations use fewer resources, anoncvs still makes much more of an
1.333 sthen 701: impact than ftp or sup). Such anoncvs machines should have excellent
1.249 nick 702: network connectivity for the area they are expected to serve. A
703: <a href="anoncvs.shar">document</a>
704: which describes the setup of anoncvs servers is available.
705:
706: <h3><font color="#0000e0">Final notes</font></h3>
707: After upgrading your source tree, you should read the comments
708: at the top of <kbd>/usr/src/Makefile</kbd> before attempting
709: a build. Also, you should build a new kernel <strong>before</strong>
710: doing a <kbd>make build</kbd> if possible. In some cases it may be
711: necessary to rebuild and install the <kbd>config</kbd> utility before
712: you can build the kernel. If <kbd>config GENERIC</kbd> fails this
713: is probably the case.
714: <p>
715: It is important to note that upgrading from a release to the current tree
716: by rebuilding the sources can be rather difficult due to dependencies
717: that are often not obvious. Therefore, it is suggested that you first
718: install the latest snapshot before attempting a tree build from source.
1.1 deraadt 719:
720: <hr>
1.249 nick 721: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
722: alt="OpenBSD"></a>
1.135 naddy 723: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.346 sthen 724: <br><small>$OpenBSD: anoncvs.html.end,v 1.17 2011/05/01 14:04:14 sthen Exp $
1.155 jsyn 725: </small>
1.1 deraadt 726:
727: </body>
728: </html>