From nobody Wed Oct 13 18:12:29 2021 X-Original-To: questions@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 0C75817F377E for ; Wed, 13 Oct 2021 18:12:43 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) Received: from holgerdanske.com (holgerdanske.com [IPv6:2001:470:0:19b::b869:801b]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "holgerdanske.com", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HV0xj6hpCz4RpF for ; Wed, 13 Oct 2021 18:12:41 +0000 (UTC) (envelope-from dpchrist@holgerdanske.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=holgerdanske.com; s=nov-20210719-112354; t=1634148753; bh=E/qVZ3iUESQOQl6zeZQG//A1ky2EA7I9tHRXg75jzyI=; h=Received:Message-ID:Date:MIME-Version:User-Agent:Subject: Content-Language:To:References:From:In-Reply-To:Content-Type: Content-Transfer-Encoding; b=gYjwtDiR/3YP4Ep3+3512OOIiTtIXPKoJ5UVIaMXpyRd6ifW8e9gT+RTIIyPR9bBf jFnTSL1FpYqQqt/JRbv+8mzGo9ROv2fI+j7Yr4sa65D5UKIuqz0ZtYllYfN5RmfIad gVs0M1cXZwgmYrZLfvkifr5jsZVWDxUWVcXmMIsiBF8jfbWQpusfh5S7YqTQ0StBtK 17DWAnfTkYjNSq7pctQAfxyQlgZ2dRwga4CJLTr/UCb6gdJA9BxoQvKe9YoeTclN+/ fY1fqYRgXKluTjRYEmIlKFox7/8YM0RUr4DQ+X/srchD6SNrurSkntYanbq3Hf8lv7 XwYIy6JnNpOjpJ/QgrYUuLJLMMBUPMir23LAF8iMAo6h/fr2vQV3tkeqVYDiEEPRvs cz7WqyOaoy3Xe8pjM44RnBxSZ8CTXMTSour4E9BVO4ub7sRb5noH9tAwxCzcuVp/jT qpOkTO+wryIXiixdYhJkrO7nCgIaBSBepPTeOuBYJu1TS+hBYOWHcBjw7ak212/0Rf 4hfdvQWSMpX5nNXmDJJA3vU4EK1X2fuqxkNu0FMPj5s7s8dDyroFnNGIQDVajj+vWX vtAKsKtIRJvl1jYYNgAklDeG2lrVlT2AIV18t+aqq4LWeuBOuunjCQJY7rbDONv7jK VMHRiK9EkyT/vw4PvnLfaGUI= Received: from 99.100.19.101 (99-100-19-101.lightspeed.frokca.sbcglobal.net [99.100.19.101]) by holgerdanske.com with ESMTPSA (TLS_AES_128_GCM_SHA256:TLSv1.3:Kx=any:Au=any:Enc=AESGCM(128):Mac=AEAD) (SMTP-AUTH username dpchrist@holgerdanske.com, mechanism PLAIN) for ; Wed, 13 Oct 2021 11:12:33 -0700 Message-ID: <1ce050c5-25fd-33de-02cf-0d847385d023@holgerdanske.com> Date: Wed, 13 Oct 2021 11:12:29 -0700 List-Id: User questions List-Archive: https://lists.freebsd.org/archives/freebsd-questions List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.2.0 Subject: Re: best software for managing multiple freebsd & linux machines ? Content-Language: en-US To: questions@freebsd.org References: From: David Christensen In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 4HV0xj6hpCz4RpF X-Spamd-Bar: / Authentication-Results: mx1.freebsd.org; dkim=pass header.d=holgerdanske.com header.s=nov-20210719-112354 header.b=gYjwtDiR; dmarc=pass (policy=none) header.from=holgerdanske.com; spf=pass (mx1.freebsd.org: domain of dpchrist@holgerdanske.com designates 2001:470:0:19b::b869:801b as permitted sender) smtp.mailfrom=dpchrist@holgerdanske.com X-Spamd-Result: default: False [1.00 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_NA(0.00)[]; R_DKIM_ALLOW(-0.20)[holgerdanske.com:s=nov-20210719-112354]; MID_RHS_MATCH_FROM(0.00)[]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; R_SPF_ALLOW(-0.20)[+a:november.he.net]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[questions@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_SPAM_SHORT(1.00)[1.000]; DKIM_TRACE(0.00)[holgerdanske.com:+]; DMARC_POLICY_ALLOW(-0.50)[holgerdanske.com,none]; NEURAL_SPAM_LONG(1.00)[1.000]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; SUBJECT_ENDS_QUESTION(1.00)[]; ASN(0.00)[asn:6939, ipnet:2001:470::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-ThisMailContainsUnwantedMimeParts: N On 10/13/21 06:49, tech-lists wrote: > On Sun, Oct 10, 2021 at 12:20:29PM -0700, David Christensen wrote: >> I have a SOHO network that I administer using SSH, Vim, CVS, various >> userland tools, and homebrew scripts (Bourne, Bash, and Perl).  The most >> important element is a networked version control system. > > I've only ever used cvs in a client context, so please forgive me for > asking a question that might seem daft - but is there a cvs server on > each machine you admin? The CVS repository is in a jail on the server. It is not really a service -- the clients connect via SSH and run the CLI. Putting CVS in a jail on the server can and has complicated sysadmin tasks when I need to work either or both the server and jail. A dedicated machine without the jail would be simpler. > if yes, are there security issues associated with cvs? I think there are security issues no matter how you run CVS: https://www.cvedetails.com/vulnerability-list.php?vendor_id=442&product_id=0&version_id=0&page=1&hasexp=0&opdos=0&opec=0&opov=0&opcsrf=0&opgpriv=0&opsqli=0&opxss=0&opdirt=0&opmemc=0&ophttprs=0&opbyp=0&opfileinc=0&opginf=0&cvssscoremin=0&cvssscoremax=0&year=0&cweid=0&order=1&trc=20&sha=94cfaaf625f54f37acad68e891f591329feb2260 David