From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from olivedrab.birch.relay.mailchannels.net (olivedrab.birch.relay.mailchannels.net [23.83.209.135]) by sourceware.org (Postfix) with ESMTPS id 11F2D383067D for ; Thu, 23 Jun 2022 02:16:29 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 11F2D383067D Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=gotplt.org Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gotplt.org X-Sender-Id: dreamhost|x-authsender|siddhesh@gotplt.org Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id C8F06761507; Thu, 23 Jun 2022 02:16:28 +0000 (UTC) Received: from pdx1-sub0-mail-a306.dreamhost.com (unknown [127.0.0.6]) (Authenticated sender: dreamhost) by relay.mailchannels.net (Postfix) with ESMTPA id 5FB9076151C; Thu, 23 Jun 2022 02:16:28 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1655950588; a=rsa-sha256; cv=none; b=3A+63A1nahKpW8zoIvYVgTJWGM8VgPN79x0FjpkCxT9gx+XNjvUxOuvSxCSUzcuR06JUmL Vlz1bUVy9bov9jB68qCs+K+zhYufTkWpv0a1PV0t6XNx6hyBPpc7ZabMWzBGaO00ALsnbM B/LAYDdwYFHrg8MsAO9ZzZsy5R52dmEes6xlnBNlgDMSHapSTPfk8zQfXdStJdqeZHTnwW fAPj6HV8SUH4b6T4c4Ns0MzqvyLu9DMafgIIFpBqKXEEuY8tUCd5/vi/IbCm4r4yiLvM0A TyRYRW8QSdzESKtWSmJpdJk/mPDo/4FSQK7Ap3+0jSOgNTm20RVqzKdLYamPog== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1655950588; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=nqbNCsf0qcu7SQdHAUzejO3Dma6pW2+KQ8xbshGJ2Ds=; b=ybKJeoHrS11vKAo7TWVFB7qfnyj/e+mWL3fTTImz7wN4tM2bFqjw8YieMvwFz6fGMScf5q rX6axv+VxIJkdcNxT8Y6ftYsEwm1j3KSCjTjjkbxUpFSrakTcYcHbfEBfvBQijuw1Nwtup //nwTWyEX6aJPpYIzbH0Cm85WcHxYBMJB0PxbftBdQmT2jHuYPZiLNub9302vgPCRDp9g6 4wz31+qJFwn6XTjgEtLUrOUCu99UToa0UwZMSjFVuQ2ED/4W7DkX1hoFACb81vUawzSFq+ lLG9ibjxFV0yjkWh1pLmaZVuGGjsB8Ln0k18raEG1ARgno4ZozXDJE4oYFIZ3Q== ARC-Authentication-Results: i=1; rspamd-848669fb87-tk5zj; auth=pass smtp.auth=dreamhost smtp.mailfrom=siddhesh@gotplt.org X-Sender-Id: dreamhost|x-authsender|siddhesh@gotplt.org X-MC-Relay: Neutral X-MailChannels-SenderId: dreamhost|x-authsender|siddhesh@gotplt.org X-MailChannels-Auth-Id: dreamhost X-Broad-Shoe: 03c101ab1eb6f5be_1655950588637_3947395110 X-MC-Loop-Signature: 1655950588637:1315951123 X-MC-Ingress-Time: 1655950588637 Received: from pdx1-sub0-mail-a306.dreamhost.com (pop.dreamhost.com [64.90.62.162]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.116.106.98 (trex/6.7.1); Thu, 23 Jun 2022 02:16:28 +0000 Received: from [192.168.86.152] (unknown [103.199.173.7]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: siddhesh@gotplt.org) by pdx1-sub0-mail-a306.dreamhost.com (Postfix) with ESMTPSA id 4LT3lZ22Hvz7f; Wed, 22 Jun 2022 19:16:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gotplt.org; s=dreamhost; t=1655950588; bh=nqbNCsf0qcu7SQdHAUzejO3Dma6pW2+KQ8xbshGJ2Ds=; h=Date:Subject:To:Cc:From:Content-Type:Content-Transfer-Encoding; b=vkviiF9LHdDpJy3j71pVFVODgnoRrV8lTvbMo+NENXUyhWlWKPCGFo0WUfMp3N8XN wLd++fK6whMlXd8SZeBpl3va2LR1/vRodovm1Aa0P2DCmum1hrl1bTNiS9SAmiQa7S 4FobZ82Pkm+ZLFP+GN3CI/BQS1GOI89obDnvK40I52G7dO42UaTHSByOLzQhzxpNf2 H0AWl4UsMxcZhvvsihcbMgOvlQH0sTCspuk0s1CVCnRv/BAb053yBzQcVmhhG9aBvj TQh9RqDlap1C7+UjP3ZaVoKhwbBlbJou0OiYeGCO4sYsoRPLTX2onfIepJf2bA4m9b b08zsWJLoIbow== Message-ID: <551277bc-975d-0b2e-670b-679db68e604b@gotplt.org> Date: Thu, 23 Jun 2022 07:46:18 +0530 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.9.0 Subject: Re: patchwork upgrade week Content-Language: en-US To: Mark Wielaard Cc: libc-alpha@sourceware.org, DJ Delorie , Carlos O'Donell References: From: Siddhesh Poyarekar In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-3028.9 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, NICE_REPLY_A, RCVD_IN_BARRACUDACENTRAL, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Jun 2022 02:16:31 -0000 On 23/06/2022 02:57, Mark Wielaard wrote: > So I was hoping to integrate the buildbot with the patchwork based > trybot. But it would be good to have some way to authenticate the > patch as genuine before throwing it at the buildbot-worker. I was > hoping that could be done by a project admin setting the state of the > patch to some "please-try" value. But it looks like a (rogue) user can > set the state on their own patch. So relying on the patchwork patch > state seems not secure. > > Or is there a state (maybe a check state?) that we can make sure can > only be set by project admins? > > If not, how else can we authenticate a patch as "OK to let the > buildbot do a try build?" DJ is working on an email based workflow. Another method (that Frank proposed on IRC recently) could be for a trybot to track namespace branches for all committers on sourceware and trigger builds on specific names, e.g. siddhesh/buildbot/*. That way maintainers can manually trigger builds by pushing their changes to that specific branch namespace. Sid