public inbox for elfutils@sourceware.org
 help / color / mirror / Atom feed
* [Bug debuginfod/25607] New: debuginfod-client: paranoid federation mode
@ 2020-02-27 22:08 fche at redhat dot com
  2021-07-12 18:21 ` [Bug debuginfod/25607] " nsanci at redhat dot com
                   ` (2 more replies)
  0 siblings, 3 replies; 4+ messages in thread
From: fche at redhat dot com @ 2020-02-27 22:08 UTC (permalink / raw)
  To: elfutils-devel

https://sourceware.org/bugzilla/show_bug.cgi?id=25607

            Bug ID: 25607
           Summary: debuginfod-client: paranoid federation mode
           Product: elfutils
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: debuginfod
          Assignee: unassigned at sourceware dot org
          Reporter: fche at redhat dot com
                CC: elfutils-devel at sourceware dot org
  Target Milestone: ---

It may be helpful to have a debuginfod_client option (env var? api?) that adds
a degree of paranoia to frontend debuginfod servers that simply federate out to
multiple mostly-trustworthy upstreams.  The present code simply launches the
outgoing curl requests to -all- upstream servers in $DEBUGINFOD_URLS, and the
first one that starts sending data back is selected as the winner.  The data
from the others is thrown away.

This is fine if all the servers are trustworthy, correct, etc. etc.

With a bit of extra code, we can detect some kinds of shenanigans or errors. 
One possibility is teaching the -client code to -not- choose the first upstream
server as the winner, but to wait for them all to send back a definite response
(subject to a timeout).  Then it can compare the responses from those servers
that claimed to know the buildid/$payload.  If there is a mismatch, signal a
loud error, as though there were a RAID-1 disagreement between mirrored disks.

With such checking logic in place, it is possible to proactively scan the
federated server tree by mechanically looking up all "interesting" buildids. 
It could permit the assembly of a semi-trusted tree of servers that still limit
client exposure to wrong data.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 4+ messages in thread

* [Bug debuginfod/25607] debuginfod-client: paranoid federation mode
  2020-02-27 22:08 [Bug debuginfod/25607] New: debuginfod-client: paranoid federation mode fche at redhat dot com
@ 2021-07-12 18:21 ` nsanci at redhat dot com
  2021-07-26 18:57 ` nsanci at redhat dot com
  2022-07-14 16:30 ` nsanci at redhat dot com
  2 siblings, 0 replies; 4+ messages in thread
From: nsanci at redhat dot com @ 2021-07-12 18:21 UTC (permalink / raw)
  To: elfutils-devel

https://sourceware.org/bugzilla/show_bug.cgi?id=25607

Noah Sanci <nsanci at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |nsanci at redhat dot com
           Assignee|unassigned at sourceware dot org   |nsanci at redhat dot com

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 4+ messages in thread

* [Bug debuginfod/25607] debuginfod-client: paranoid federation mode
  2020-02-27 22:08 [Bug debuginfod/25607] New: debuginfod-client: paranoid federation mode fche at redhat dot com
  2021-07-12 18:21 ` [Bug debuginfod/25607] " nsanci at redhat dot com
@ 2021-07-26 18:57 ` nsanci at redhat dot com
  2022-07-14 16:30 ` nsanci at redhat dot com
  2 siblings, 0 replies; 4+ messages in thread
From: nsanci at redhat dot com @ 2021-07-26 18:57 UTC (permalink / raw)
  To: elfutils-devel

https://sourceware.org/bugzilla/show_bug.cgi?id=25607

Noah Sanci <nsanci at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|nsanci at redhat dot com           |unassigned at sourceware dot org

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 4+ messages in thread

* [Bug debuginfod/25607] debuginfod-client: paranoid federation mode
  2020-02-27 22:08 [Bug debuginfod/25607] New: debuginfod-client: paranoid federation mode fche at redhat dot com
  2021-07-12 18:21 ` [Bug debuginfod/25607] " nsanci at redhat dot com
  2021-07-26 18:57 ` nsanci at redhat dot com
@ 2022-07-14 16:30 ` nsanci at redhat dot com
  2 siblings, 0 replies; 4+ messages in thread
From: nsanci at redhat dot com @ 2022-07-14 16:30 UTC (permalink / raw)
  To: elfutils-devel

https://sourceware.org/bugzilla/show_bug.cgi?id=25607

Noah Sanci <nsanci at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|unassigned at sourceware dot org   |nsanci at redhat dot com

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2022-07-14 16:30 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-02-27 22:08 [Bug debuginfod/25607] New: debuginfod-client: paranoid federation mode fche at redhat dot com
2021-07-12 18:21 ` [Bug debuginfod/25607] " nsanci at redhat dot com
2021-07-26 18:57 ` nsanci at redhat dot com
2022-07-14 16:30 ` nsanci at redhat dot com

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).