Remote-to-remote cloning

[Antoine Pitrou]

Martin Geisler <mg <at> aragost.com> writes:
> >> I would make a small CGI script that users can use to create a new
> >> server-side clone.
> >
> > We've thought about this. I am fearing the security consequences a
> > bit: what if some robot starts hitting the clone button real hard?
> > (yes, clones are cheap, but still). But it would definitely be easier
> > to use, especially for Windows developers who don't have a real "ssh"
> > command available.
> 
> Yeah, they will love it. Since such a page would only allow people to
> execute a very restricted set of fixed commands, then I don't think it
> would be that bad to let people log in using the same username and
> password as for the bug tracker.

Actually, the idea would be to make the button public :) It's much simpler for
us (no need to integrate with whatever Roundup's auth system is) and nicer for
users too (the Roundup cookies wouldn't apply to the hg.python.org domain, so
they would have to authenticate again).

Regards

Antoine.