| 1 | <?xml version="1.0" encoding="utf-8" ?> |
|---|
| 2 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> |
|---|
| 3 | <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> |
|---|
| 4 | <head> |
|---|
| 5 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> |
|---|
| 6 | <meta name="generator" content="Docutils 0.7: http://docutils.sourceforge.net/" /> |
|---|
| 7 | <title>User-Visible Changes in Tahoe-LAFS</title> |
|---|
| 8 | <style type="text/css"> |
|---|
| 9 | |
|---|
| 10 | /* |
|---|
| 11 | :Author: David Goodger (goodger@python.org) |
|---|
| 12 | :Id: $Id: html4css1.css 6253 2010-03-02 00:24:53Z milde $ |
|---|
| 13 | :Copyright: This stylesheet has been placed in the public domain. |
|---|
| 14 | |
|---|
| 15 | Default cascading style sheet for the HTML output of Docutils. |
|---|
| 16 | |
|---|
| 17 | See http://docutils.sf.net/docs/howto/html-stylesheets.html for how to |
|---|
| 18 | customize this style sheet. |
|---|
| 19 | */ |
|---|
| 20 | |
|---|
| 21 | /* used to remove borders from tables and images */ |
|---|
| 22 | .borderless, table.borderless td, table.borderless th { |
|---|
| 23 | border: 0 } |
|---|
| 24 | |
|---|
| 25 | table.borderless td, table.borderless th { |
|---|
| 26 | /* Override padding for "table.docutils td" with "! important". |
|---|
| 27 | The right padding separates the table cells. */ |
|---|
| 28 | padding: 0 0.5em 0 0 ! important } |
|---|
| 29 | |
|---|
| 30 | .first { |
|---|
| 31 | /* Override more specific margin styles with "! important". */ |
|---|
| 32 | margin-top: 0 ! important } |
|---|
| 33 | |
|---|
| 34 | .last, .with-subtitle { |
|---|
| 35 | margin-bottom: 0 ! important } |
|---|
| 36 | |
|---|
| 37 | .hidden { |
|---|
| 38 | display: none } |
|---|
| 39 | |
|---|
| 40 | a.toc-backref { |
|---|
| 41 | text-decoration: none ; |
|---|
| 42 | color: black } |
|---|
| 43 | |
|---|
| 44 | blockquote.epigraph { |
|---|
| 45 | margin: 2em 5em ; } |
|---|
| 46 | |
|---|
| 47 | dl.docutils dd { |
|---|
| 48 | margin-bottom: 0.5em } |
|---|
| 49 | |
|---|
| 50 | /* Uncomment (and remove this text!) to get bold-faced definition list terms |
|---|
| 51 | dl.docutils dt { |
|---|
| 52 | font-weight: bold } |
|---|
| 53 | */ |
|---|
| 54 | |
|---|
| 55 | div.abstract { |
|---|
| 56 | margin: 2em 5em } |
|---|
| 57 | |
|---|
| 58 | div.abstract p.topic-title { |
|---|
| 59 | font-weight: bold ; |
|---|
| 60 | text-align: center } |
|---|
| 61 | |
|---|
| 62 | div.admonition, div.attention, div.caution, div.danger, div.error, |
|---|
| 63 | div.hint, div.important, div.note, div.tip, div.warning { |
|---|
| 64 | margin: 2em ; |
|---|
| 65 | border: medium outset ; |
|---|
| 66 | padding: 1em } |
|---|
| 67 | |
|---|
| 68 | div.admonition p.admonition-title, div.hint p.admonition-title, |
|---|
| 69 | div.important p.admonition-title, div.note p.admonition-title, |
|---|
| 70 | div.tip p.admonition-title { |
|---|
| 71 | font-weight: bold ; |
|---|
| 72 | font-family: sans-serif } |
|---|
| 73 | |
|---|
| 74 | div.attention p.admonition-title, div.caution p.admonition-title, |
|---|
| 75 | div.danger p.admonition-title, div.error p.admonition-title, |
|---|
| 76 | div.warning p.admonition-title { |
|---|
| 77 | color: red ; |
|---|
| 78 | font-weight: bold ; |
|---|
| 79 | font-family: sans-serif } |
|---|
| 80 | |
|---|
| 81 | /* Uncomment (and remove this text!) to get reduced vertical space in |
|---|
| 82 | compound paragraphs. |
|---|
| 83 | div.compound .compound-first, div.compound .compound-middle { |
|---|
| 84 | margin-bottom: 0.5em } |
|---|
| 85 | |
|---|
| 86 | div.compound .compound-last, div.compound .compound-middle { |
|---|
| 87 | margin-top: 0.5em } |
|---|
| 88 | */ |
|---|
| 89 | |
|---|
| 90 | div.dedication { |
|---|
| 91 | margin: 2em 5em ; |
|---|
| 92 | text-align: center ; |
|---|
| 93 | font-style: italic } |
|---|
| 94 | |
|---|
| 95 | div.dedication p.topic-title { |
|---|
| 96 | font-weight: bold ; |
|---|
| 97 | font-style: normal } |
|---|
| 98 | |
|---|
| 99 | div.figure { |
|---|
| 100 | margin-left: 2em ; |
|---|
| 101 | margin-right: 2em } |
|---|
| 102 | |
|---|
| 103 | div.footer, div.header { |
|---|
| 104 | clear: both; |
|---|
| 105 | font-size: smaller } |
|---|
| 106 | |
|---|
| 107 | div.line-block { |
|---|
| 108 | display: block ; |
|---|
| 109 | margin-top: 1em ; |
|---|
| 110 | margin-bottom: 1em } |
|---|
| 111 | |
|---|
| 112 | div.line-block div.line-block { |
|---|
| 113 | margin-top: 0 ; |
|---|
| 114 | margin-bottom: 0 ; |
|---|
| 115 | margin-left: 1.5em } |
|---|
| 116 | |
|---|
| 117 | div.sidebar { |
|---|
| 118 | margin: 0 0 0.5em 1em ; |
|---|
| 119 | border: medium outset ; |
|---|
| 120 | padding: 1em ; |
|---|
| 121 | background-color: #ffffee ; |
|---|
| 122 | width: 40% ; |
|---|
| 123 | float: right ; |
|---|
| 124 | clear: right } |
|---|
| 125 | |
|---|
| 126 | div.sidebar p.rubric { |
|---|
| 127 | font-family: sans-serif ; |
|---|
| 128 | font-size: medium } |
|---|
| 129 | |
|---|
| 130 | div.system-messages { |
|---|
| 131 | margin: 5em } |
|---|
| 132 | |
|---|
| 133 | div.system-messages h1 { |
|---|
| 134 | color: red } |
|---|
| 135 | |
|---|
| 136 | div.system-message { |
|---|
| 137 | border: medium outset ; |
|---|
| 138 | padding: 1em } |
|---|
| 139 | |
|---|
| 140 | div.system-message p.system-message-title { |
|---|
| 141 | color: red ; |
|---|
| 142 | font-weight: bold } |
|---|
| 143 | |
|---|
| 144 | div.topic { |
|---|
| 145 | margin: 2em } |
|---|
| 146 | |
|---|
| 147 | h1.section-subtitle, h2.section-subtitle, h3.section-subtitle, |
|---|
| 148 | h4.section-subtitle, h5.section-subtitle, h6.section-subtitle { |
|---|
| 149 | margin-top: 0.4em } |
|---|
| 150 | |
|---|
| 151 | h1.title { |
|---|
| 152 | text-align: center } |
|---|
| 153 | |
|---|
| 154 | h2.subtitle { |
|---|
| 155 | text-align: center } |
|---|
| 156 | |
|---|
| 157 | hr.docutils { |
|---|
| 158 | width: 75% } |
|---|
| 159 | |
|---|
| 160 | img.align-left, .figure.align-left, object.align-left { |
|---|
| 161 | clear: left ; |
|---|
| 162 | float: left ; |
|---|
| 163 | margin-right: 1em } |
|---|
| 164 | |
|---|
| 165 | img.align-right, .figure.align-right, object.align-right { |
|---|
| 166 | clear: right ; |
|---|
| 167 | float: right ; |
|---|
| 168 | margin-left: 1em } |
|---|
| 169 | |
|---|
| 170 | img.align-center, .figure.align-center, object.align-center { |
|---|
| 171 | display: block; |
|---|
| 172 | margin-left: auto; |
|---|
| 173 | margin-right: auto; |
|---|
| 174 | } |
|---|
| 175 | |
|---|
| 176 | .align-left { |
|---|
| 177 | text-align: left } |
|---|
| 178 | |
|---|
| 179 | .align-center { |
|---|
| 180 | clear: both ; |
|---|
| 181 | text-align: center } |
|---|
| 182 | |
|---|
| 183 | .align-right { |
|---|
| 184 | text-align: right } |
|---|
| 185 | |
|---|
| 186 | /* reset inner alignment in figures */ |
|---|
| 187 | div.align-right { |
|---|
| 188 | text-align: left } |
|---|
| 189 | |
|---|
| 190 | /* div.align-center * { */ |
|---|
| 191 | /* text-align: left } */ |
|---|
| 192 | |
|---|
| 193 | ol.simple, ul.simple { |
|---|
| 194 | margin-bottom: 1em } |
|---|
| 195 | |
|---|
| 196 | ol.arabic { |
|---|
| 197 | list-style: decimal } |
|---|
| 198 | |
|---|
| 199 | ol.loweralpha { |
|---|
| 200 | list-style: lower-alpha } |
|---|
| 201 | |
|---|
| 202 | ol.upperalpha { |
|---|
| 203 | list-style: upper-alpha } |
|---|
| 204 | |
|---|
| 205 | ol.lowerroman { |
|---|
| 206 | list-style: lower-roman } |
|---|
| 207 | |
|---|
| 208 | ol.upperroman { |
|---|
| 209 | list-style: upper-roman } |
|---|
| 210 | |
|---|
| 211 | p.attribution { |
|---|
| 212 | text-align: right ; |
|---|
| 213 | margin-left: 50% } |
|---|
| 214 | |
|---|
| 215 | p.caption { |
|---|
| 216 | font-style: italic } |
|---|
| 217 | |
|---|
| 218 | p.credits { |
|---|
| 219 | font-style: italic ; |
|---|
| 220 | font-size: smaller } |
|---|
| 221 | |
|---|
| 222 | p.label { |
|---|
| 223 | white-space: nowrap } |
|---|
| 224 | |
|---|
| 225 | p.rubric { |
|---|
| 226 | font-weight: bold ; |
|---|
| 227 | font-size: larger ; |
|---|
| 228 | color: maroon ; |
|---|
| 229 | text-align: center } |
|---|
| 230 | |
|---|
| 231 | p.sidebar-title { |
|---|
| 232 | font-family: sans-serif ; |
|---|
| 233 | font-weight: bold ; |
|---|
| 234 | font-size: larger } |
|---|
| 235 | |
|---|
| 236 | p.sidebar-subtitle { |
|---|
| 237 | font-family: sans-serif ; |
|---|
| 238 | font-weight: bold } |
|---|
| 239 | |
|---|
| 240 | p.topic-title { |
|---|
| 241 | font-weight: bold } |
|---|
| 242 | |
|---|
| 243 | pre.address { |
|---|
| 244 | margin-bottom: 0 ; |
|---|
| 245 | margin-top: 0 ; |
|---|
| 246 | font: inherit } |
|---|
| 247 | |
|---|
| 248 | pre.literal-block, pre.doctest-block { |
|---|
| 249 | margin-left: 2em ; |
|---|
| 250 | margin-right: 2em } |
|---|
| 251 | |
|---|
| 252 | span.classifier { |
|---|
| 253 | font-family: sans-serif ; |
|---|
| 254 | font-style: oblique } |
|---|
| 255 | |
|---|
| 256 | span.classifier-delimiter { |
|---|
| 257 | font-family: sans-serif ; |
|---|
| 258 | font-weight: bold } |
|---|
| 259 | |
|---|
| 260 | span.interpreted { |
|---|
| 261 | font-family: sans-serif } |
|---|
| 262 | |
|---|
| 263 | span.option { |
|---|
| 264 | white-space: nowrap } |
|---|
| 265 | |
|---|
| 266 | span.pre { |
|---|
| 267 | white-space: pre } |
|---|
| 268 | |
|---|
| 269 | span.problematic { |
|---|
| 270 | color: red } |
|---|
| 271 | |
|---|
| 272 | span.section-subtitle { |
|---|
| 273 | /* font-size relative to parent (h1..h6 element) */ |
|---|
| 274 | font-size: 80% } |
|---|
| 275 | |
|---|
| 276 | table.citation { |
|---|
| 277 | border-left: solid 1px gray; |
|---|
| 278 | margin-left: 1px } |
|---|
| 279 | |
|---|
| 280 | table.docinfo { |
|---|
| 281 | margin: 2em 4em } |
|---|
| 282 | |
|---|
| 283 | table.docutils { |
|---|
| 284 | margin-top: 0.5em ; |
|---|
| 285 | margin-bottom: 0.5em } |
|---|
| 286 | |
|---|
| 287 | table.footnote { |
|---|
| 288 | border-left: solid 1px black; |
|---|
| 289 | margin-left: 1px } |
|---|
| 290 | |
|---|
| 291 | table.docutils td, table.docutils th, |
|---|
| 292 | table.docinfo td, table.docinfo th { |
|---|
| 293 | padding-left: 0.5em ; |
|---|
| 294 | padding-right: 0.5em ; |
|---|
| 295 | vertical-align: top } |
|---|
| 296 | |
|---|
| 297 | table.docutils th.field-name, table.docinfo th.docinfo-name { |
|---|
| 298 | font-weight: bold ; |
|---|
| 299 | text-align: left ; |
|---|
| 300 | white-space: nowrap ; |
|---|
| 301 | padding-left: 0 } |
|---|
| 302 | |
|---|
| 303 | h1 tt.docutils, h2 tt.docutils, h3 tt.docutils, |
|---|
| 304 | h4 tt.docutils, h5 tt.docutils, h6 tt.docutils { |
|---|
| 305 | font-size: 100% } |
|---|
| 306 | |
|---|
| 307 | ul.auto-toc { |
|---|
| 308 | list-style-type: none } |
|---|
| 309 | |
|---|
| 310 | </style> |
|---|
| 311 | </head> |
|---|
| 312 | <body> |
|---|
| 313 | <div class="document" id="user-visible-changes-in-tahoe-lafs"> |
|---|
| 314 | <h1 class="title">User-Visible Changes in Tahoe-LAFS</h1> |
|---|
| 315 | |
|---|
| 316 | <!-- -*- coding: utf-8 -*- --> |
|---|
| 317 | <div class="section" id="release-1-8-2-2011-01-30"> |
|---|
| 318 | <h1>Release 1.8.2 (2011-01-30)</h1> |
|---|
| 319 | <div class="section" id="compatibility-and-dependencies"> |
|---|
| 320 | <h2>Compatibility and Dependencies</h2> |
|---|
| 321 | <ul class="simple"> |
|---|
| 322 | <li>Tahoe is now compatible with Twisted-10.2 (released last month), as |
|---|
| 323 | well as with earlier versions. The previous Tahoe-1.8.1 release |
|---|
| 324 | failed to run against Twisted-10.2, raising an AttributeError on |
|---|
| 325 | StreamServerEndpointService (#1286)</li> |
|---|
| 326 | <li>Tahoe now depends upon the "mock" testing library, and the foolscap |
|---|
| 327 | dependency was raised to 0.6.1 . It no longer requires pywin32 |
|---|
| 328 | (which was used only on windows). Future developers should note that |
|---|
| 329 | reactor.spawnProcess and derivatives may no longer be used inside |
|---|
| 330 | Tahoe code.</li> |
|---|
| 331 | </ul> |
|---|
| 332 | </div> |
|---|
| 333 | <div class="section" id="other-changes"> |
|---|
| 334 | <h2>Other Changes</h2> |
|---|
| 335 | <ul class="simple"> |
|---|
| 336 | <li>the default reserved_space value for new storage nodes is 1 GB (#1208)</li> |
|---|
| 337 | <li>documentation is now in reStructuredText (.rst) format</li> |
|---|
| 338 | <li>"tahoe cp" should now handle non-ASCII filenames</li> |
|---|
| 339 | <li>the unmaintained Mac/Windows GUI applications have been removed (#1282)</li> |
|---|
| 340 | <li>tahoe processes should appear in top and ps as "tahoe", not |
|---|
| 341 | "python", on some unix platforms. (#174)</li> |
|---|
| 342 | <li>"tahoe debug trial" can be used to run the test suite (#1296)</li> |
|---|
| 343 | <li>the SFTP frontend now reports unknown sizes as "0" instead of "?", |
|---|
| 344 | to improve compatibility with clients like FileZilla (#1337)</li> |
|---|
| 345 | <li>"tahoe --version" should now report correct values in situations |
|---|
| 346 | where 1.8.1 might have been wrong (#1287)</li> |
|---|
| 347 | </ul> |
|---|
| 348 | </div> |
|---|
| 349 | </div> |
|---|
| 350 | <div class="section" id="release-1-8-1-2010-10-28"> |
|---|
| 351 | <h1>Release 1.8.1 (2010-10-28)</h1> |
|---|
| 352 | <div class="section" id="bugfixes-and-improvements"> |
|---|
| 353 | <h2>Bugfixes and Improvements</h2> |
|---|
| 354 | <ul class="simple"> |
|---|
| 355 | <li>Allow the repairer to improve the health of a file by uploading some |
|---|
| 356 | shares, even if it cannot achieve the configured happiness |
|---|
| 357 | threshold. This fixes a regression introduced between v1.7.1 and |
|---|
| 358 | v1.8.0. (#1212)</li> |
|---|
| 359 | <li>Fix a memory leak in the ResponseCache which is used during mutable |
|---|
| 360 | file/directory operations. (#1045)</li> |
|---|
| 361 | <li>Fix a regression and add a performance improvement in the |
|---|
| 362 | downloader. This issue caused repair to fail in some special |
|---|
| 363 | cases. (#1223)</li> |
|---|
| 364 | <li>Fix a bug that caused 'tahoe cp' to fail for a grid-to-grid copy |
|---|
| 365 | involving a non-ASCII filename. (#1224)</li> |
|---|
| 366 | <li>Fix a rarely-encountered bug involving printing large strings to the |
|---|
| 367 | console on Windows. (#1232)</li> |
|---|
| 368 | <li>Perform ~ expansion in the --exclude-from filename argument to |
|---|
| 369 | 'tahoe backup'. (#1241)</li> |
|---|
| 370 | <li>The CLI's 'tahoe mv' and 'tahoe ln' commands previously would try to |
|---|
| 371 | use an HTTP proxy if the HTTP_PROXY environment variable was set. |
|---|
| 372 | These now always connect directly to the WAPI, thus avoiding giving |
|---|
| 373 | caps to the HTTP proxy (and also avoiding failures in the case that |
|---|
| 374 | the proxy is failing or requires authentication). (#1253)</li> |
|---|
| 375 | <li>The CLI now correctly reports failure in the case that 'tahoe mv' |
|---|
| 376 | fails to unlink the file from its old location. (#1255)</li> |
|---|
| 377 | <li>'tahoe start' now gives a more positive indication that the node has |
|---|
| 378 | started. (#71)</li> |
|---|
| 379 | <li>The arguments seen by 'ps' or other tools for node processes are now |
|---|
| 380 | more useful (in particular, they include the path of the 'tahoe' |
|---|
| 381 | script, rather than an obscure tool named 'twistd'). (#174)</li> |
|---|
| 382 | </ul> |
|---|
| 383 | </div> |
|---|
| 384 | <div class="section" id="removed-features"> |
|---|
| 385 | <h2>Removed Features</h2> |
|---|
| 386 | <ul class="simple"> |
|---|
| 387 | <li>The tahoe start/stop/restart and node creation commands no longer |
|---|
| 388 | accept the -m or --multiple option, for consistency between |
|---|
| 389 | platforms. (#1262)</li> |
|---|
| 390 | </ul> |
|---|
| 391 | </div> |
|---|
| 392 | <div class="section" id="packaging"> |
|---|
| 393 | <h2>Packaging</h2> |
|---|
| 394 | <ul class="simple"> |
|---|
| 395 | <li>We now host binary packages so that users on certain operating |
|---|
| 396 | systems can install without having a compiler. |
|---|
| 397 | <<a class="reference external" href="http://tahoe-lafs.org/source/tahoe-lafs/deps/tahoe-lafs-dep-eggs/README.html">http://tahoe-lafs.org/source/tahoe-lafs/deps/tahoe-lafs-dep-eggs/README.html</a>></li> |
|---|
| 398 | <li>Use a newer version of a dependency if needed, even if an older |
|---|
| 399 | version is installed. This would previously cause a VersionConflict |
|---|
| 400 | error. (#1190)</li> |
|---|
| 401 | <li>Use a precompiled binary of a dependency if one with a sufficiently |
|---|
| 402 | high version number is available, instead of attempting to compile |
|---|
| 403 | the dependency from source, even if the source version has a higher |
|---|
| 404 | version number. (#1233)</li> |
|---|
| 405 | </ul> |
|---|
| 406 | </div> |
|---|
| 407 | <div class="section" id="documentation"> |
|---|
| 408 | <h2>Documentation</h2> |
|---|
| 409 | <ul class="simple"> |
|---|
| 410 | <li>All current documentation in .txt format has been converted to .rst |
|---|
| 411 | format. (#1225)</li> |
|---|
| 412 | <li>Added docs/backdoors.rst declaring that we won't add backdoors to |
|---|
| 413 | Tahoe-LAFS, or add anything to facilitate government access to data. |
|---|
| 414 | (#1216)</li> |
|---|
| 415 | </ul> |
|---|
| 416 | </div> |
|---|
| 417 | </div> |
|---|
| 418 | <div class="section" id="release-1-8-0-2010-09-23"> |
|---|
| 419 | <h1>Release 1.8.0 (2010-09-23)</h1> |
|---|
| 420 | <div class="section" id="new-features"> |
|---|
| 421 | <h2>New Features</h2> |
|---|
| 422 | <ul class="simple"> |
|---|
| 423 | <li>A completely new downloader which improves performance and |
|---|
| 424 | robustness of immutable-file downloads. It uses the fastest K |
|---|
| 425 | servers to download the data in K-way parallel. It automatically |
|---|
| 426 | fails over to alternate servers if servers fail in mid-download. It |
|---|
| 427 | allows seeking to arbitrary locations in the file (the previous |
|---|
| 428 | downloader which would only read the entire file sequentially from |
|---|
| 429 | beginning to end). It minimizes unnecessary round trips and |
|---|
| 430 | unnecessary bytes transferred to improve performance. It sends |
|---|
| 431 | requests to fewer servers to reduce the load on servers (the |
|---|
| 432 | previous one would send a small request to every server for every |
|---|
| 433 | download) (#287, #288, #448, #798, #800, #990, #1170, #1191)</li> |
|---|
| 434 | <li>Non-ASCII command-line arguments and non-ASCII outputs now work on |
|---|
| 435 | Windows. In addition, the command-line tool now works on 64-bit |
|---|
| 436 | Windows. (#1074)</li> |
|---|
| 437 | </ul> |
|---|
| 438 | </div> |
|---|
| 439 | <div class="section" id="id1"> |
|---|
| 440 | <h2>Bugfixes and Improvements</h2> |
|---|
| 441 | <ul class="simple"> |
|---|
| 442 | <li>Document and clean up the command-line options for specifying the |
|---|
| 443 | node's base directory. (#188, #706, #715, #772, #1108)</li> |
|---|
| 444 | <li>The default node directory for Windows is ".tahoe" in the user's |
|---|
| 445 | home directory, the same as on other platforms. (#890)</li> |
|---|
| 446 | <li>Fix a case in which full cap URIs could be logged. (#685, #1155)</li> |
|---|
| 447 | <li>Fix bug in WUI in Python 2.5 when the system clock is set back to |
|---|
| 448 | 1969. Now you can use Tahoe-LAFS with Python 2.5 and set your system |
|---|
| 449 | clock to 1969 and still use the WUI. (#1055)</li> |
|---|
| 450 | <li>Many improvements in code organization, tests, logging, |
|---|
| 451 | documentation, and packaging. (#983, #1074, #1108, #1127, #1129, |
|---|
| 452 | #1131, #1166, #1175)</li> |
|---|
| 453 | </ul> |
|---|
| 454 | </div> |
|---|
| 455 | <div class="section" id="dependency-updates"> |
|---|
| 456 | <h2>Dependency Updates</h2> |
|---|
| 457 | <ul class="simple"> |
|---|
| 458 | <li>on x86 and x86-64 platforms, pycryptopp >= 0.5.20</li> |
|---|
| 459 | <li>pycrypto 2.2 is excluded due to a bug</li> |
|---|
| 460 | </ul> |
|---|
| 461 | </div> |
|---|
| 462 | </div> |
|---|
| 463 | <div class="section" id="release-1-7-1-2010-07-18"> |
|---|
| 464 | <h1>Release 1.7.1 (2010-07-18)</h1> |
|---|
| 465 | <div class="section" id="id2"> |
|---|
| 466 | <h2>Bugfixes and Improvements</h2> |
|---|
| 467 | <ul class="simple"> |
|---|
| 468 | <li>Fix bug in which uploader could fail with AssertionFailure or report |
|---|
| 469 | that it had achieved servers-of-happiness when it hadn't. (#1118)</li> |
|---|
| 470 | <li>Fix bug in which servers could get into a state where they would |
|---|
| 471 | refuse to accept shares of a certain file (#1117)</li> |
|---|
| 472 | <li>Add init scripts for managing the gateway server on Debian/Ubuntu |
|---|
| 473 | (#961)</li> |
|---|
| 474 | <li>Fix bug where server version number was always 0 on the welcome page |
|---|
| 475 | (#1067)</li> |
|---|
| 476 | <li>Add new command-line command "tahoe unlink" as a synonym for "tahoe |
|---|
| 477 | rm" (#776)</li> |
|---|
| 478 | <li>The FTP frontend now encrypts its temporary files, protecting their |
|---|
| 479 | contents from an attacker who is able to read the disk. (#1083)</li> |
|---|
| 480 | <li>Fix IP address detection on FreeBSD 7, 8, and 9 (#1098)</li> |
|---|
| 481 | <li>Fix minor layout issue in the Web User Interface with Internet |
|---|
| 482 | Explorer (#1097)</li> |
|---|
| 483 | <li>Fix rarely-encountered incompatibility between Twisted logging |
|---|
| 484 | utility and the new unicode support added in v1.7.0 (#1099)</li> |
|---|
| 485 | <li>Forward-compatibility improvements for non-ASCII caps (#1051)</li> |
|---|
| 486 | </ul> |
|---|
| 487 | </div> |
|---|
| 488 | <div class="section" id="code-improvements"> |
|---|
| 489 | <h2>Code improvements</h2> |
|---|
| 490 | <ul class="simple"> |
|---|
| 491 | <li>Simplify and tidy-up directories, unicode support, test code (#923, |
|---|
| 492 | #967, #1072)</li> |
|---|
| 493 | </ul> |
|---|
| 494 | </div> |
|---|
| 495 | </div> |
|---|
| 496 | <div class="section" id="release-1-7-0-2010-06-18"> |
|---|
| 497 | <h1>Release 1.7.0 (2010-06-18)</h1> |
|---|
| 498 | <div class="section" id="id3"> |
|---|
| 499 | <h2>New Features</h2> |
|---|
| 500 | <ul class="simple"> |
|---|
| 501 | <li>SFTP support |
|---|
| 502 | Your Tahoe-LAFS gateway now acts like a full-fledged SFTP server. It |
|---|
| 503 | has been tested with sshfs to provide a virtual filesystem in Linux. |
|---|
| 504 | Many users have asked for this feature. We hope that it serves them |
|---|
| 505 | well! See the docs/frontends/FTP-and-SFTP.txt document to get |
|---|
| 506 | started.</li> |
|---|
| 507 | <li>support for non-ASCII character encodings |
|---|
| 508 | Tahoe-LAFS now correctly handles filenames containing non-ASCII |
|---|
| 509 | characters on all supported platforms:</li> |
|---|
| 510 | </ul> |
|---|
| 511 | <blockquote> |
|---|
| 512 | <ul class="simple"> |
|---|
| 513 | <li>when reading files in from the local filesystem (such as when you |
|---|
| 514 | run "tahoe backup" to back up your local files to a Tahoe-LAFS |
|---|
| 515 | grid);</li> |
|---|
| 516 | <li>when writing files out to the local filesystem (such as when you |
|---|
| 517 | run "tahoe cp -r" to recursively copy files out of a Tahoe-LAFS |
|---|
| 518 | grid);</li> |
|---|
| 519 | <li>when displaying filenames to the terminal (such as when you run |
|---|
| 520 | "tahoe ls"), subject to limitations of the terminal and locale;</li> |
|---|
| 521 | <li>when parsing command-line arguments, except on Windows.</li> |
|---|
| 522 | </ul> |
|---|
| 523 | </blockquote> |
|---|
| 524 | <ul class="simple"> |
|---|
| 525 | <li>Servers of Happiness |
|---|
| 526 | Tahoe-LAFS now measures during immutable file upload to see how well |
|---|
| 527 | distributed it is across multiple servers. It aborts the upload if |
|---|
| 528 | the pieces of the file are not sufficiently well-distributed. |
|---|
| 529 | This behavior is controlled by a configuration parameter called |
|---|
| 530 | "servers of happiness". With the default settings for its erasure |
|---|
| 531 | coding, Tahoe-LAFS generates 10 shares for each file, such that any |
|---|
| 532 | 3 of those shares are sufficient to recover the file. The default |
|---|
| 533 | value of "servers of happiness" is 7, which means that Tahoe-LAFS |
|---|
| 534 | will guarantee that there are at least 7 servers holding some of the |
|---|
| 535 | shares, such that any 3 of those servers can completely recover your |
|---|
| 536 | file. The new upload code also distributes the shares better than the |
|---|
| 537 | previous version in some cases and takes better advantage of |
|---|
| 538 | pre-existing shares (when a file has already been previously |
|---|
| 539 | uploaded). See the architecture.txt document [3] for details.</li> |
|---|
| 540 | </ul> |
|---|
| 541 | </div> |
|---|
| 542 | <div class="section" id="id4"> |
|---|
| 543 | <h2>Bugfixes and Improvements</h2> |
|---|
| 544 | <ul class="simple"> |
|---|
| 545 | <li>Premature abort of upload if some shares were already present and some servers fail. (#608)</li> |
|---|
| 546 | <li>python ./setup.py install -- can't create or remove files in install directory. (#803)</li> |
|---|
| 547 | <li>Network failure => internal TypeError. (#902)</li> |
|---|
| 548 | <li>Install of Tahoe on CentOS 5.4. (#933)</li> |
|---|
| 549 | <li>CLI option --node-url now supports https url. (#1028)</li> |
|---|
| 550 | <li>HTML/CSS template files were not correctly installed under Windows. (#1033)</li> |
|---|
| 551 | <li>MetadataSetter does not enforce restriction on setting "tahoe" subkeys. (#1034)</li> |
|---|
| 552 | <li>ImportError: No module named setuptools_darcs.setuptools_darcs. (#1054)</li> |
|---|
| 553 | <li>Renamed Title in xhtml files. (#1062)</li> |
|---|
| 554 | <li>Increase Python version dependency to 2.4.4, to avoid a critical CPython security bug. (#1066)</li> |
|---|
| 555 | <li>Typo correction for the munin plugin tahoe_storagespace. (#968)</li> |
|---|
| 556 | <li>Fix warnings found by pylint. (#973)</li> |
|---|
| 557 | <li>Changing format of some documentation files. (#1027)</li> |
|---|
| 558 | <li>the misc/ directory was tied up. (#1068)</li> |
|---|
| 559 | <li>The 'ctime' and 'mtime' metadata fields are no longer written except by "tahoe backup". (#924)</li> |
|---|
| 560 | <li>Unicode filenames in Tahoe-LAFS directories are normalized so that names that differ only in how accents are encoded are treated as the same. (#1076)</li> |
|---|
| 561 | <li>Various small improvements to documentation. (#937, #911, #1024, #1082)</li> |
|---|
| 562 | </ul> |
|---|
| 563 | </div> |
|---|
| 564 | <div class="section" id="removals"> |
|---|
| 565 | <h2>Removals</h2> |
|---|
| 566 | <ul class="simple"> |
|---|
| 567 | <li>The 'tahoe debug consolidate' subcommand (for converting old |
|---|
| 568 | allmydata Windows client backups to a newer format) has been |
|---|
| 569 | removed.</li> |
|---|
| 570 | </ul> |
|---|
| 571 | </div> |
|---|
| 572 | <div class="section" id="id5"> |
|---|
| 573 | <h2>Dependency Updates</h2> |
|---|
| 574 | <ul class="simple"> |
|---|
| 575 | <li>the Python version dependency is raised to 2.4.4 in some cases |
|---|
| 576 | (2.4.3 for Redhat-based Linux distributions, 2.4.2 for UCS-2 builds) |
|---|
| 577 | (#1066)</li> |
|---|
| 578 | <li>pycrypto >= 2.0.1</li> |
|---|
| 579 | <li>pyasn1 >= 0.0.8a</li> |
|---|
| 580 | <li>mock (only required by unit tests)</li> |
|---|
| 581 | </ul> |
|---|
| 582 | </div> |
|---|
| 583 | </div> |
|---|
| 584 | <div class="section" id="release-1-6-1-2010-02-27"> |
|---|
| 585 | <h1>Release 1.6.1 (2010-02-27)</h1> |
|---|
| 586 | <div class="section" id="bugfixes"> |
|---|
| 587 | <h2>Bugfixes</h2> |
|---|
| 588 | <ul> |
|---|
| 589 | <li><p class="first">Correct handling of Small Immutable Directories</p> |
|---|
| 590 | <p>Immutable directories can now be deep-checked and listed in the web |
|---|
| 591 | UI in all cases. (In v1.6.0, some operations, such as deep-check, on |
|---|
| 592 | a directory graph that included very small immutable directories, |
|---|
| 593 | would result in an exception causing the whole operation to abort.) |
|---|
| 594 | (#948)</p> |
|---|
| 595 | </li> |
|---|
| 596 | </ul> |
|---|
| 597 | </div> |
|---|
| 598 | <div class="section" id="usability-improvements"> |
|---|
| 599 | <h2>Usability Improvements</h2> |
|---|
| 600 | <ul class="simple"> |
|---|
| 601 | <li>Improved user interface messages and error reporting. (#681, #837, |
|---|
| 602 | #939)</li> |
|---|
| 603 | <li>The timeouts for operation handles have been greatly increased, so |
|---|
| 604 | that you can view the results of an operation up to 4 days after it |
|---|
| 605 | has completed. After viewing them for the first time, the results |
|---|
| 606 | are retained for a further day. (#577)</li> |
|---|
| 607 | </ul> |
|---|
| 608 | </div> |
|---|
| 609 | </div> |
|---|
| 610 | <div class="section" id="release-1-6-0-2010-02-01"> |
|---|
| 611 | <h1>Release 1.6.0 (2010-02-01)</h1> |
|---|
| 612 | <div class="section" id="id6"> |
|---|
| 613 | <h2>New Features</h2> |
|---|
| 614 | <ul> |
|---|
| 615 | <li><p class="first">Immutable Directories</p> |
|---|
| 616 | <p>Tahoe-LAFS can now create and handle immutable directories. (#607, |
|---|
| 617 | #833, #931) These are read just like normal directories, but are |
|---|
| 618 | "deep-immutable", meaning that all their children (and everything |
|---|
| 619 | reachable from those children) must be immutable objects |
|---|
| 620 | (i.e. immutable or literal files, and other immutable directories).</p> |
|---|
| 621 | <p>These directories must be created in a single webapi call that |
|---|
| 622 | provides all of the children at once. (Since they cannot be changed |
|---|
| 623 | after creation, the usual create/add/add sequence cannot be used.) |
|---|
| 624 | They have URIs that start with "URI:DIR2-CHK:" or "URI:DIR2-LIT:", |
|---|
| 625 | and are described on the human-facing web interface (aka the "WUI") |
|---|
| 626 | with a "DIR-IMM" abbreviation (as opposed to "DIR" for the usual |
|---|
| 627 | read-write directories and "DIR-RO" for read-only directories).</p> |
|---|
| 628 | <p>Tahoe-LAFS releases before 1.6.0 cannot read the contents of an |
|---|
| 629 | immutable directory. 1.5.0 will tolerate their presence in a |
|---|
| 630 | directory listing (and display it as "unknown"). 1.4.1 and earlier |
|---|
| 631 | cannot tolerate them: a DIR-IMM child in any directory will prevent |
|---|
| 632 | the listing of that directory.</p> |
|---|
| 633 | <p>Immutable directories are repairable, just like normal immutable |
|---|
| 634 | files.</p> |
|---|
| 635 | <p>The webapi "POST t=mkdir-immutable" call is used to create immutable |
|---|
| 636 | directories. See docs/frontends/webapi.txt for details.</p> |
|---|
| 637 | </li> |
|---|
| 638 | <li><p class="first">"tahoe backup" now creates immutable directories, backupdb has |
|---|
| 639 | dircache</p> |
|---|
| 640 | <p>The "tahoe backup" command has been enhanced to create immutable |
|---|
| 641 | directories (in previous releases, it created read-only mutable |
|---|
| 642 | directories) (#828). This is significantly faster, since it does not |
|---|
| 643 | need to create an RSA keypair for each new directory. Also "DIR-IMM" |
|---|
| 644 | immutable directories are repairable, unlike "DIR-RO" read-only |
|---|
| 645 | mutable directories at present. (A future Tahoe-LAFS release should |
|---|
| 646 | also be able to repair DIR-RO.)</p> |
|---|
| 647 | <p>In addition, the backupdb (used by "tahoe backup" to remember what |
|---|
| 648 | it has already copied) has been enhanced to store information about |
|---|
| 649 | existing immutable directories. This allows it to re-use directories |
|---|
| 650 | that have moved but still contain identical contents, or that have |
|---|
| 651 | been deleted and later replaced. (The 1.5.0 "tahoe backup" command |
|---|
| 652 | could only re-use directories that were in the same place as they |
|---|
| 653 | were in the immediately previous backup.) With this change, the |
|---|
| 654 | backup process no longer needs to read the previous snapshot out of |
|---|
| 655 | the Tahoe-LAFS grid, reducing the network load considerably. (#606)</p> |
|---|
| 656 | <p>A "null backup" (in which nothing has changed since the previous |
|---|
| 657 | backup) will require only two Tahoe-side operations: one to add an |
|---|
| 658 | Archives/$TIMESTAMP entry, and a second to update the Latest/ |
|---|
| 659 | link. On the local disk side, it will readdir() all your local |
|---|
| 660 | directories and stat() all your local files.</p> |
|---|
| 661 | <p>If you've been using "tahoe backup" for a while, you will notice |
|---|
| 662 | that your first use of it after upgrading to 1.6.0 may take a long |
|---|
| 663 | time: it must create proper immutable versions of all the old |
|---|
| 664 | read-only mutable directories. This process won't take as long as |
|---|
| 665 | the initial backup (where all the file contents had to be uploaded |
|---|
| 666 | too): it will require time proportional to the number and size of |
|---|
| 667 | your directories. After this initial pass, all subsequent passes |
|---|
| 668 | should take a tiny fraction of the time.</p> |
|---|
| 669 | <p>As noted above, Tahoe-LAFS versions earlier than 1.5.0 cannot list a |
|---|
| 670 | directory containing an immutable subdirectory. Tahoe-LAFS versions |
|---|
| 671 | earlier than 1.6.0 cannot read the contents of an immutable |
|---|
| 672 | directory.</p> |
|---|
| 673 | <p>The "tahoe backup" command has been improved to skip over unreadable |
|---|
| 674 | objects (like device files, named pipes, and files with permissions |
|---|
| 675 | that prevent the command from reading their contents), instead of |
|---|
| 676 | throwing an exception and terminating the backup process. It also |
|---|
| 677 | skips over symlinks, because these cannot be represented faithfully |
|---|
| 678 | in the Tahoe-side filesystem. A warning message will be emitted each |
|---|
| 679 | time something is skipped. (#729, #850, #641)</p> |
|---|
| 680 | </li> |
|---|
| 681 | <li><p class="first">"create-node" command added, "create-client" now implies |
|---|
| 682 | --no-storage</p> |
|---|
| 683 | <p>The basic idea behind Tahoe-LAFS's client+server and client-only |
|---|
| 684 | processes is that you are creating a general-purpose Tahoe-LAFS |
|---|
| 685 | "node" process, which has several components that can be |
|---|
| 686 | activated. Storage service is one of these optional components, as |
|---|
| 687 | is the Helper, FTP server, and SFTP server. Web gateway |
|---|
| 688 | functionality is nominally on this list, but it is always active; a |
|---|
| 689 | future release will make it optional. There are three special |
|---|
| 690 | purpose servers that can't currently be run as a component in a |
|---|
| 691 | node: introducer, key-generator, and stats-gatherer.</p> |
|---|
| 692 | <p>So now "tahoe create-node" will create a Tahoe-LAFS node process, |
|---|
| 693 | and after creation you can edit its tahoe.cfg to enable or disable |
|---|
| 694 | the desired services. It is a more general-purpose replacement for |
|---|
| 695 | "tahoe create-client". The default configuration has storage |
|---|
| 696 | service enabled. For convenience, the "--no-storage" argument makes |
|---|
| 697 | a tahoe.cfg file that disables storage service. (#760)</p> |
|---|
| 698 | <p>"tahoe create-client" has been changed to create a Tahoe-LAFS node |
|---|
| 699 | without a storage service. It is equivalent to "tahoe create-node |
|---|
| 700 | --no-storage". This helps to reduce the confusion surrounding the |
|---|
| 701 | use of a command with "client" in its name to create a storage |
|---|
| 702 | <em>server</em>. Use "tahoe create-client" to create a purely client-side |
|---|
| 703 | node. If you want to offer storage to the grid, use "tahoe |
|---|
| 704 | create-node" instead.</p> |
|---|
| 705 | <p>In the future, other services will be added to the node, and they |
|---|
| 706 | will be controlled through options in tahoe.cfg . The most important |
|---|
| 707 | of these services may get additional --enable-XYZ or --disable-XYZ |
|---|
| 708 | arguments to "tahoe create-node".</p> |
|---|
| 709 | </li> |
|---|
| 710 | <li><p class="first">Performance Improvements</p> |
|---|
| 711 | <p>Download of immutable files begins as soon as the downloader has |
|---|
| 712 | located the K necessary shares (#928, #287). In both the previous |
|---|
| 713 | and current releases, a downloader will first issue queries to all |
|---|
| 714 | storage servers on the grid to locate shares before it begins |
|---|
| 715 | downloading the shares. In previous releases of Tahoe-LAFS, download |
|---|
| 716 | would not begin until all storage servers on the grid had replied to |
|---|
| 717 | the query, at which point K shares would be chosen for download from |
|---|
| 718 | among the shares that were located. In this release, download begins |
|---|
| 719 | as soon as any K shares are located. This means that downloads start |
|---|
| 720 | sooner, which is particularly important if there is a server on the |
|---|
| 721 | grid that is extremely slow or even hung in such a way that it will |
|---|
| 722 | never respond. In previous releases such a server would have a |
|---|
| 723 | negative impact on all downloads from that grid. In this release, |
|---|
| 724 | such a server will have no impact on downloads, as long as K shares |
|---|
| 725 | can be found on other, quicker, servers. This also means that |
|---|
| 726 | downloads now use the "best-alacrity" servers that they talk to, as |
|---|
| 727 | measured by how quickly the servers reply to the initial query. This |
|---|
| 728 | might cause downloads to go faster, especially on grids with |
|---|
| 729 | heterogeneous servers or geographical dispersion.</p> |
|---|
| 730 | </li> |
|---|
| 731 | </ul> |
|---|
| 732 | </div> |
|---|
| 733 | <div class="section" id="minor-changes"> |
|---|
| 734 | <h2>Minor Changes</h2> |
|---|
| 735 | <ul class="simple"> |
|---|
| 736 | <li>The webapi acquired a new "t=mkdir-with-children" command, to create |
|---|
| 737 | and populate a directory in a single call. This is significantly |
|---|
| 738 | faster than using separate "t=mkdir" and "t=set-children" operations |
|---|
| 739 | (it uses one gateway-to-grid roundtrip, instead of three or |
|---|
| 740 | four). (#533)</li> |
|---|
| 741 | <li>The t=set-children (note the hyphen) operation is now documented in |
|---|
| 742 | docs/frontends/webapi.txt, and is the new preferred spelling of the |
|---|
| 743 | old t=set_children (with an underscore). The underscore version |
|---|
| 744 | remains for backwards compatibility. (#381, #927)</li> |
|---|
| 745 | <li>The tracebacks produced by errors in CLI tools should now be in |
|---|
| 746 | plain text, instead of HTML (which is unreadable outside of a |
|---|
| 747 | browser). (#646)</li> |
|---|
| 748 | <li>The [storage]reserved_space configuration knob (which causes the |
|---|
| 749 | storage server to refuse shares when available disk space drops |
|---|
| 750 | below a threshold) should work on Windows now, not just UNIX. (#637)</li> |
|---|
| 751 | <li>"tahoe cp" should now exit with status "1" if it cannot figure out a |
|---|
| 752 | suitable target filename, such as when you copy from a bare |
|---|
| 753 | filecap. (#761)</li> |
|---|
| 754 | <li>"tahoe get" no longer creates a zero-length file upon error. (#121)</li> |
|---|
| 755 | <li>"tahoe ls" can now list single files. (#457)</li> |
|---|
| 756 | <li>"tahoe deep-check --repair" should tolerate repair failures now, |
|---|
| 757 | instead of halting traversal. (#874, #786)</li> |
|---|
| 758 | <li>"tahoe create-alias" no longer corrupts the aliases file if it had |
|---|
| 759 | previously been edited to have no trailing newline. (#741)</li> |
|---|
| 760 | <li>Many small packaging improvements were made to facilitate the |
|---|
| 761 | "tahoe-lafs" package being included in Ubuntu. Several mac/win32 |
|---|
| 762 | binary libraries were removed, some figleaf code-coverage files were |
|---|
| 763 | removed, a bundled copy of darcsver-1.2.1 was removed, and |
|---|
| 764 | additional licensing text was added.</li> |
|---|
| 765 | <li>Several DeprecationWarnings for python2.6 were silenced. (#859)</li> |
|---|
| 766 | <li>The checker --add-lease option would sometimes fail for shares |
|---|
| 767 | stored on old (Tahoe v1.2.0) servers. (#875)</li> |
|---|
| 768 | <li>The documentation for installing on Windows (docs/quickstart.rst) |
|---|
| 769 | has been improved. (#773)</li> |
|---|
| 770 | </ul> |
|---|
| 771 | <p>For other changes not mentioned here, see |
|---|
| 772 | <<a class="reference external" href="http://tahoe-lafs.org/trac/tahoe/query?milestone=1.6.0&keywords=!~news-done">http://tahoe-lafs.org/trac/tahoe/query?milestone=1.6.0&keywords=!~news-done</a>>. |
|---|
| 773 | To include the tickets mentioned above, go to |
|---|
| 774 | <<a class="reference external" href="http://tahoe-lafs.org/trac/tahoe/query?milestone=1.6.0">http://tahoe-lafs.org/trac/tahoe/query?milestone=1.6.0</a>>.</p> |
|---|
| 775 | </div> |
|---|
| 776 | </div> |
|---|
| 777 | <div class="section" id="release-1-5-0-2009-08-01"> |
|---|
| 778 | <h1>Release 1.5.0 (2009-08-01)</h1> |
|---|
| 779 | <div class="section" id="improvements"> |
|---|
| 780 | <h2>Improvements</h2> |
|---|
| 781 | <ul class="simple"> |
|---|
| 782 | <li>Uploads of immutable files now use pipelined writes, improving |
|---|
| 783 | upload speed slightly (10%) over high-latency connections. (#392)</li> |
|---|
| 784 | <li>Processing large directories has been sped up, by removing a O(N^2) |
|---|
| 785 | algorithm from the dirnode decoding path and retaining unmodified |
|---|
| 786 | encrypted entries. (#750, #752)</li> |
|---|
| 787 | <li>The human-facing web interface (aka the "WUI") received a |
|---|
| 788 | significant CSS makeover by Kevin Reid, making it much prettier and |
|---|
| 789 | easier to read. The WUI "check" and "deep-check" forms now include a |
|---|
| 790 | "Renew Lease" checkbox, mirroring the CLI --add-lease option, so |
|---|
| 791 | leases can be added or renewed from the web interface.</li> |
|---|
| 792 | <li>The CLI "tahoe mv" command now refuses to overwrite |
|---|
| 793 | directories. (#705)</li> |
|---|
| 794 | <li>The CLI "tahoe webopen" command, when run without arguments, will |
|---|
| 795 | now bring up the "Welcome Page" (node status and mkdir/upload |
|---|
| 796 | forms).</li> |
|---|
| 797 | <li>The 3.5MB limit on mutable files was removed, so it should be |
|---|
| 798 | possible to upload arbitrarily-sized mutable files. Note, however, |
|---|
| 799 | that the data format and algorithm remains the same, so using |
|---|
| 800 | mutable files still requires bandwidth, computation, and RAM in |
|---|
| 801 | proportion to the size of the mutable file. (#694)</li> |
|---|
| 802 | <li>This version of Tahoe-LAFS will tolerate directory entries that |
|---|
| 803 | contain filecap formats which it does not recognize: files and |
|---|
| 804 | directories from the future. This should improve the user |
|---|
| 805 | experience (for 1.5.0 users) when we add new cap formats in the |
|---|
| 806 | future. Previous versions would fail badly, preventing the user from |
|---|
| 807 | seeing or editing anything else in those directories. These |
|---|
| 808 | unrecognized objects can be renamed and deleted, but obviously not |
|---|
| 809 | read or written. Also they cannot generally be copied. (#683)</li> |
|---|
| 810 | </ul> |
|---|
| 811 | </div> |
|---|
| 812 | <div class="section" id="id7"> |
|---|
| 813 | <h2>Bugfixes</h2> |
|---|
| 814 | <ul class="simple"> |
|---|
| 815 | <li>deep-check-and-repair now tolerates read-only directories, such as |
|---|
| 816 | the ones produced by the "tahoe backup" CLI command. Read-only |
|---|
| 817 | directories and mutable files are checked, but not |
|---|
| 818 | repaired. Previous versions threw an exception when attempting the |
|---|
| 819 | repair and failed to process the remaining contents. We cannot yet |
|---|
| 820 | repair these read-only objects, but at least this version allows the |
|---|
| 821 | rest of the check+repair to proceed. (#625)</li> |
|---|
| 822 | <li>A bug in 1.4.1 which caused a server to be listed multiple times |
|---|
| 823 | (and frequently broke all connections to that server) was |
|---|
| 824 | fixed. (#653)</li> |
|---|
| 825 | <li>The plaintext-hashing code was removed from the Helper interface, |
|---|
| 826 | removing the Helper's ability to mount a |
|---|
| 827 | partial-information-guessing attack. (#722)</li> |
|---|
| 828 | </ul> |
|---|
| 829 | </div> |
|---|
| 830 | <div class="section" id="platform-packaging-changes"> |
|---|
| 831 | <h2>Platform/packaging changes</h2> |
|---|
| 832 | <ul class="simple"> |
|---|
| 833 | <li>Tahoe-LAFS now runs on NetBSD, OpenBSD, ArchLinux, and NixOS, and on |
|---|
| 834 | an embedded system based on an ARM CPU running at 266 MHz.</li> |
|---|
| 835 | <li>Unit test timeouts have been raised to allow the tests to complete |
|---|
| 836 | on extremely slow platforms like embedded ARM-based NAS boxes, which |
|---|
| 837 | may take several hours to run the test suite. An ARM-specific |
|---|
| 838 | data-corrupting bug in an older version of Crypto++ (5.5.2) was |
|---|
| 839 | identified: ARM-users are encouraged to use recent |
|---|
| 840 | Crypto++/pycryptopp which avoids this problem.</li> |
|---|
| 841 | <li>Tahoe-LAFS now requires a SQLite library, either the sqlite3 that |
|---|
| 842 | comes built-in with python2.5/2.6, or the add-on pysqlite2 if you're |
|---|
| 843 | using python2.4. In the previous release, this was only needed for |
|---|
| 844 | the "tahoe backup" command: now it is mandatory.</li> |
|---|
| 845 | <li>Several minor documentation updates were made.</li> |
|---|
| 846 | <li>To help get Tahoe-LAFS into Linux distributions like Fedora and |
|---|
| 847 | Debian, packaging improvements are being made in both Tahoe-LAFS and |
|---|
| 848 | related libraries like pycryptopp and zfec.</li> |
|---|
| 849 | <li>The Crypto++ library included in the pycryptopp package has been |
|---|
| 850 | upgraded to version 5.6.0 of Crypto++, which includes a more |
|---|
| 851 | efficient implementation of SHA-256 in assembly for x86 or amd64 |
|---|
| 852 | architectures.</li> |
|---|
| 853 | </ul> |
|---|
| 854 | </div> |
|---|
| 855 | <div class="section" id="id8"> |
|---|
| 856 | <h2>dependency updates</h2> |
|---|
| 857 | <ul class="simple"> |
|---|
| 858 | <li>foolscap-0.4.1</li> |
|---|
| 859 | <li>no python-2.4.0 or 2.4.1 (2.4.2 is good) (they contained a bug in base64.b32decode)</li> |
|---|
| 860 | <li>avoid python-2.6 on windows with mingw: compiler issues</li> |
|---|
| 861 | <li>python2.4 requires pysqlite2 (2.5,2.6 does not)</li> |
|---|
| 862 | <li>no python-3.x</li> |
|---|
| 863 | <li>pycryptopp-0.5.15</li> |
|---|
| 864 | </ul> |
|---|
| 865 | </div> |
|---|
| 866 | </div> |
|---|
| 867 | <div class="section" id="release-1-4-1-2009-04-13"> |
|---|
| 868 | <h1>Release 1.4.1 (2009-04-13)</h1> |
|---|
| 869 | <div class="section" id="garbage-collection"> |
|---|
| 870 | <h2>Garbage Collection</h2> |
|---|
| 871 | <ul> |
|---|
| 872 | <li><p class="first">The big feature for this release is the implementation of garbage |
|---|
| 873 | collection, allowing Tahoe storage servers to delete shares for old |
|---|
| 874 | deleted files. When enabled, this uses a "mark and sweep" process: |
|---|
| 875 | clients are responsible for updating the leases on their shares |
|---|
| 876 | (generally by running "tahoe deep-check --add-lease"), and servers |
|---|
| 877 | are allowed to delete any share which does not have an up-to-date |
|---|
| 878 | lease. The process is described in detail in |
|---|
| 879 | docs/garbage-collection.txt .</p> |
|---|
| 880 | <p>The server must be configured to enable garbage-collection, by |
|---|
| 881 | adding directives to the [storage] section that define an age limit |
|---|
| 882 | for shares. The default configuration will not delete any shares.</p> |
|---|
| 883 | <p>Both servers and clients should be upgraded to this release to make |
|---|
| 884 | the garbage-collection as pleasant as possible. 1.2.0 servers have |
|---|
| 885 | code to perform the update-lease operation but it suffers from a |
|---|
| 886 | fatal bug, while 1.3.0 servers have update-lease but will return an |
|---|
| 887 | exception for unknown storage indices, causing clients to emit an |
|---|
| 888 | Incident for each exception, slowing the add-lease process down to a |
|---|
| 889 | crawl. 1.1.0 servers did not have the add-lease operation at all.</p> |
|---|
| 890 | </li> |
|---|
| 891 | </ul> |
|---|
| 892 | </div> |
|---|
| 893 | <div class="section" id="security-usability-problems-fixed"> |
|---|
| 894 | <h2>Security/Usability Problems Fixed</h2> |
|---|
| 895 | <ul class="simple"> |
|---|
| 896 | <li>A super-linear algorithm in the Merkle Tree code was fixed, which |
|---|
| 897 | previously caused e.g. download of a 10GB file to take several hours |
|---|
| 898 | before the first byte of plaintext could be produced. The new |
|---|
| 899 | "alacrity" is about 2 minutes. A future release should reduce this |
|---|
| 900 | to a few seconds by fixing ticket #442.</li> |
|---|
| 901 | <li>The previous version permitted a small timing attack (due to our use |
|---|
| 902 | of strcmp) against the write-enabler and lease-renewal/cancel |
|---|
| 903 | secrets. An attacker who could measure response-time variations of |
|---|
| 904 | approximatly 3ns against a very noisy background time of about 15ms |
|---|
| 905 | might be able to guess these secrets. We do not believe this attack |
|---|
| 906 | was actually feasible. This release closes the attack by first |
|---|
| 907 | hashing the two strings to be compared with a random secret.</li> |
|---|
| 908 | </ul> |
|---|
| 909 | </div> |
|---|
| 910 | <div class="section" id="webapi-changes"> |
|---|
| 911 | <h2>webapi changes</h2> |
|---|
| 912 | <ul class="simple"> |
|---|
| 913 | <li>In most cases, HTML tracebacks will only be sent if an "Accept: |
|---|
| 914 | text/html" header was provided with the HTTP request. This will |
|---|
| 915 | generally cause browsers to get an HTMLized traceback but send |
|---|
| 916 | regular text/plain tracebacks to non-browsers (like the CLI |
|---|
| 917 | clients). More errors have been mapped to useful HTTP error codes.</li> |
|---|
| 918 | <li>The streaming webapi operations (deep-check and manifest) now have a |
|---|
| 919 | way to indicate errors (an output line that starts with "ERROR" |
|---|
| 920 | instead of being legal JSON). See docs/frontends/webapi.txt for |
|---|
| 921 | details.</li> |
|---|
| 922 | <li>The storage server now has its own status page (at /storage), linked |
|---|
| 923 | from the Welcome page. This page shows progress and results of the |
|---|
| 924 | two new share-crawlers: one which merely counts shares (to give an |
|---|
| 925 | estimate of how many files/directories are being stored in the |
|---|
| 926 | grid), the other examines leases and reports how much space would be |
|---|
| 927 | freed if GC were enabled. The page also shows how much disk space is |
|---|
| 928 | present, used, reserved, and available for the Tahoe server, and |
|---|
| 929 | whether the server is currently running in "read-write" mode or |
|---|
| 930 | "read-only" mode.</li> |
|---|
| 931 | <li>When a directory node cannot be read (perhaps because of insufficent |
|---|
| 932 | shares), a minimal webapi page is created so that the "more-info" |
|---|
| 933 | links (including a Check/Repair operation) will still be accessible.</li> |
|---|
| 934 | <li>A new "reliability" page was added, with the beginnings of work on a |
|---|
| 935 | statistical loss model. You can tell this page how many servers you |
|---|
| 936 | are using and their independent failure probabilities, and it will |
|---|
| 937 | tell you the likelihood that an arbitrary file will survive each |
|---|
| 938 | repair period. The "numpy" package must be installed to access this |
|---|
| 939 | page. A partial paper, written by Shawn Willden, has been added to |
|---|
| 940 | docs/proposed/lossmodel.lyx .</li> |
|---|
| 941 | </ul> |
|---|
| 942 | </div> |
|---|
| 943 | <div class="section" id="cli-changes"> |
|---|
| 944 | <h2>CLI changes</h2> |
|---|
| 945 | <ul class="simple"> |
|---|
| 946 | <li>"tahoe check" and "tahoe deep-check" now accept an "--add-lease" |
|---|
| 947 | argument, to update a lease on all shares. This is the "mark" side |
|---|
| 948 | of garbage collection.</li> |
|---|
| 949 | <li>In many cases, CLI error messages have been improved: the ugly |
|---|
| 950 | HTMLized traceback has been replaced by a normal python traceback.</li> |
|---|
| 951 | <li>"tahoe deep-check" and "tahoe manifest" now have better error |
|---|
| 952 | reporting. "tahoe cp" is now non-verbose by default.</li> |
|---|
| 953 | <li>"tahoe backup" now accepts several "--exclude" arguments, to ignore |
|---|
| 954 | certain files (like editor temporary files and version-control |
|---|
| 955 | metadata) during backup.</li> |
|---|
| 956 | <li>On windows, the CLI now accepts local paths like "c:dirfile.txt", |
|---|
| 957 | which previously was interpreted as a Tahoe path using a "c:" alias.</li> |
|---|
| 958 | <li>The "tahoe restart" command now uses "--force" by default (meaning |
|---|
| 959 | it will start a node even if it didn't look like there was one |
|---|
| 960 | already running).</li> |
|---|
| 961 | <li>The "tahoe debug consolidate" command was added. This takes a series |
|---|
| 962 | of independent timestamped snapshot directories (such as those |
|---|
| 963 | created by the allmydata.com windows backup program, or a series of |
|---|
| 964 | "tahoe cp -r" commands) and creates new snapshots that used shared |
|---|
| 965 | read-only directories whenever possible (like the output of "tahoe |
|---|
| 966 | backup"). In the most common case (when the snapshots are fairly |
|---|
| 967 | similar), the result will use significantly fewer directories than |
|---|
| 968 | the original, allowing "deep-check" and similar tools to run much |
|---|
| 969 | faster. In some cases, the speedup can be an order of magnitude or |
|---|
| 970 | more. This tool is still somewhat experimental, and only needs to |
|---|
| 971 | be run on large backups produced by something other than "tahoe |
|---|
| 972 | backup", so it was placed under the "debug" category.</li> |
|---|
| 973 | <li>"tahoe cp -r --caps-only tahoe:dir localdir" is a diagnostic tool |
|---|
| 974 | which, instead of copying the full contents of files into the local |
|---|
| 975 | directory, merely copies their filecaps. This can be used to verify |
|---|
| 976 | the results of a "consolidation" operation.</li> |
|---|
| 977 | </ul> |
|---|
| 978 | </div> |
|---|
| 979 | <div class="section" id="other-fixes"> |
|---|
| 980 | <h2>other fixes</h2> |
|---|
| 981 | <ul class="simple"> |
|---|
| 982 | <li>The codebase no longer rauses RuntimeError as a kind of |
|---|
| 983 | assert(). Specific exception classes were created for each previous |
|---|
| 984 | instance of RuntimeError.</li> |
|---|
| 985 | </ul> |
|---|
| 986 | <blockquote> |
|---|
| 987 | <dl class="docutils"> |
|---|
| 988 | <dt>-Many unit tests were changed to use a non-network test harness,</dt> |
|---|
| 989 | <dd>speeding them up considerably.</dd> |
|---|
| 990 | </dl> |
|---|
| 991 | </blockquote> |
|---|
| 992 | <ul class="simple"> |
|---|
| 993 | <li>Deep-traversal operations (manifest and deep-check) now walk |
|---|
| 994 | individual directories in alphabetical order. Occasional turn breaks |
|---|
| 995 | are inserted to prevent a stack overflow when traversing directories |
|---|
| 996 | with hundreds of entries.</li> |
|---|
| 997 | <li>The experimental SFTP server had its path-handling logic changed |
|---|
| 998 | slightly, to accomodate more SFTP clients, although there are still |
|---|
| 999 | issues (#645).</li> |
|---|
| 1000 | </ul> |
|---|
| 1001 | </div> |
|---|
| 1002 | </div> |
|---|
| 1003 | <div class="section" id="release-1-3-0-2009-02-13"> |
|---|
| 1004 | <h1>Release 1.3.0 (2009-02-13)</h1> |
|---|
| 1005 | <div class="section" id="checker-verifier-repairer"> |
|---|
| 1006 | <h2>Checker/Verifier/Repairer</h2> |
|---|
| 1007 | <ul class="simple"> |
|---|
| 1008 | <li>The primary focus of this release has been writing a checker / |
|---|
| 1009 | verifier / repairer for files and directories. "Checking" is the |
|---|
| 1010 | act of asking storage servers whether they have a share for the |
|---|
| 1011 | given file or directory: if there are not enough shares available, |
|---|
| 1012 | the file or directory will be unrecoverable. "Verifying" is the act |
|---|
| 1013 | of downloading and cryptographically asserting that the server's |
|---|
| 1014 | share is undamaged: it requires more work (bandwidth and CPU) than |
|---|
| 1015 | checking, but can catch problems that simple checking |
|---|
| 1016 | cannot. "Repair" is the act of replacing missing or damaged shares |
|---|
| 1017 | with new ones.</li> |
|---|
| 1018 | <li>This release includes a full checker, a partial verifier, and a |
|---|
| 1019 | partial repairer. The repairer is able to handle missing shares: new |
|---|
| 1020 | shares are generated and uploaded to make up for the missing |
|---|
| 1021 | ones. This is currently the best application of the repairer: to |
|---|
| 1022 | replace shares that were lost because of server departure or |
|---|
| 1023 | permanent drive failure.</li> |
|---|
| 1024 | <li>The repairer in this release is somewhat able to handle corrupted |
|---|
| 1025 | shares. The limitations are:</li> |
|---|
| 1026 | </ul> |
|---|
| 1027 | <blockquote> |
|---|
| 1028 | <ul class="simple"> |
|---|
| 1029 | <li>Immutable verifier is incomplete: not all shares are used, and not |
|---|
| 1030 | all fields of those shares are verified. Therefore the immutable |
|---|
| 1031 | verifier has only a moderate chance of detecting corrupted shares.</li> |
|---|
| 1032 | <li>The mutable verifier is mostly complete: all shares are examined, |
|---|
| 1033 | and most fields of the shares are validated.</li> |
|---|
| 1034 | <li>The storage server protocol offers no way for the repairer to |
|---|
| 1035 | replace or delete immutable shares. If corruption is detected, the |
|---|
| 1036 | repairer will upload replacement shares to other servers, but the |
|---|
| 1037 | corrupted shares will be left in place.</li> |
|---|
| 1038 | <li>read-only directories and read-only mutable files must be repaired |
|---|
| 1039 | by someone who holds the write-cap: the read-cap is |
|---|
| 1040 | insufficient. Moreover, the deep-check-and-repair operation will |
|---|
| 1041 | halt with an error if it attempts to repair one of these read-only |
|---|
| 1042 | objects.</li> |
|---|
| 1043 | <li>Some forms of corruption can cause both download and repair |
|---|
| 1044 | operations to fail. A future release will fix this, since download |
|---|
| 1045 | should be tolerant of any corruption as long as there are at least |
|---|
| 1046 | 'k' valid shares, and repair should be able to fix any file that is |
|---|
| 1047 | downloadable.</li> |
|---|
| 1048 | </ul> |
|---|
| 1049 | </blockquote> |
|---|
| 1050 | <ul class="simple"> |
|---|
| 1051 | <li>If the downloader, verifier, or repairer detects share corruption, |
|---|
| 1052 | the servers which provided the bad shares will be notified (via a |
|---|
| 1053 | file placed in the BASEDIR/storage/corruption-advisories directory) |
|---|
| 1054 | so their operators can manually delete the corrupted shares and |
|---|
| 1055 | investigate the problem. In addition, the "incident gatherer" |
|---|
| 1056 | mechanism will automatically report share corruption to an incident |
|---|
| 1057 | gatherer service, if one is configured. Note that corrupted shares |
|---|
| 1058 | indicate hardware failures, serious software bugs, or malice on the |
|---|
| 1059 | part of the storage server operator, so a corrupted share should be |
|---|
| 1060 | considered highly unusual.</li> |
|---|
| 1061 | <li>By periodically checking/repairing all files and directories, |
|---|
| 1062 | objects in the Tahoe filesystem remain resistant to recoverability |
|---|
| 1063 | failures due to missing and/or broken servers.</li> |
|---|
| 1064 | <li>This release includes a wapi mechanism to initiate checks on |
|---|
| 1065 | individual files and directories (with or without verification, and |
|---|
| 1066 | with or without automatic repair). A related mechanism is used to |
|---|
| 1067 | initiate a "deep-check" on a directory: recursively traversing the |
|---|
| 1068 | directory and its children, checking (and/or verifying/repairing) |
|---|
| 1069 | everything underneath. Both mechanisms can be run with an |
|---|
| 1070 | "output=JSON" argument, to obtain machine-readable check/repair |
|---|
| 1071 | status results. These results include a copy of the filesystem |
|---|
| 1072 | statistics from the "deep-stats" operation (including total number |
|---|
| 1073 | of files, size histogram, etc). If repair is possible, a "Repair" |
|---|
| 1074 | button will appear on the results page.</li> |
|---|
| 1075 | <li>The client web interface now features some extra buttons to initiate |
|---|
| 1076 | check and deep-check operations. When these operations finish, they |
|---|
| 1077 | display a results page that summarizes any problems that were |
|---|
| 1078 | encountered. All long-running deep-traversal operations, including |
|---|
| 1079 | deep-check, use a start-and-poll mechanism, to avoid depending upon |
|---|
| 1080 | a single long-lived HTTP connection. docs/frontends/webapi.txt has |
|---|
| 1081 | details.</li> |
|---|
| 1082 | </ul> |
|---|
| 1083 | </div> |
|---|
| 1084 | <div class="section" id="efficient-backup"> |
|---|
| 1085 | <h2>Efficient Backup</h2> |
|---|
| 1086 | <ul> |
|---|
| 1087 | <li><p class="first">The "tahoe backup" command is new in this release, which creates |
|---|
| 1088 | efficient versioned backups of a local directory. Given a local |
|---|
| 1089 | pathname and a target Tahoe directory, this will create a read-only |
|---|
| 1090 | snapshot of the local directory in $target/Archives/$timestamp. It |
|---|
| 1091 | will also create $target/Latest, which is a reference to the latest |
|---|
| 1092 | such snapshot. Each time you run "tahoe backup" with the same source |
|---|
| 1093 | and target, a new $timestamp snapshot will be added. These snapshots |
|---|
| 1094 | will share directories that have not changed since the last backup, |
|---|
| 1095 | to speed up the process and minimize storage requirements. In |
|---|
| 1096 | addition, a small database is used to keep track of which local |
|---|
| 1097 | files have been uploaded already, to avoid uploading them a second |
|---|
| 1098 | time. This drastically reduces the work needed to do a "null backup" |
|---|
| 1099 | (when nothing has changed locally), making "tahoe backup' suitable |
|---|
| 1100 | to run from a daily cronjob.</p> |
|---|
| 1101 | <p>Note that the "tahoe backup" CLI command must be used in conjunction |
|---|
| 1102 | with a 1.3.0-or-newer Tahoe client node; there was a bug in the |
|---|
| 1103 | 1.2.0 webapi implementation that would prevent the last step (create |
|---|
| 1104 | $target/Latest) from working.</p> |
|---|
| 1105 | </li> |
|---|
| 1106 | </ul> |
|---|
| 1107 | </div> |
|---|
| 1108 | <div class="section" id="large-files"> |
|---|
| 1109 | <h2>Large Files</h2> |
|---|
| 1110 | <ul class="simple"> |
|---|
| 1111 | <li>The 12GiB (approximate) immutable-file-size limitation is |
|---|
| 1112 | lifted. This release knows how to handle so-called "v2 immutable |
|---|
| 1113 | shares", which permit immutable files of up to about 18 EiB (about |
|---|
| 1114 | 3*10^14). These v2 shares are created if the file to be uploaded is |
|---|
| 1115 | too large to fit into v1 shares. v1 shares are created if the file |
|---|
| 1116 | is small enough to fit into them, so that files created with |
|---|
| 1117 | tahoe-1.3.0 can still be read by earlier versions if they are not |
|---|
| 1118 | too large. Note that storage servers also had to be changed to |
|---|
| 1119 | support larger files, and this release is the first release in which |
|---|
| 1120 | they are able to do that. Clients will detect which servers are |
|---|
| 1121 | capable of supporting large files on upload and will not attempt to |
|---|
| 1122 | upload shares of a large file to a server which doesn't support it.</li> |
|---|
| 1123 | </ul> |
|---|
| 1124 | </div> |
|---|
| 1125 | <div class="section" id="ftp-sftp-server"> |
|---|
| 1126 | <h2>FTP/SFTP Server</h2> |
|---|
| 1127 | <ul class="simple"> |
|---|
| 1128 | <li>Tahoe now includes experimental FTP and SFTP servers. When |
|---|
| 1129 | configured with a suitable method to translate username+password |
|---|
| 1130 | into a root directory cap, it provides simple access to the virtual |
|---|
| 1131 | filesystem. Remember that FTP is completely unencrypted: passwords, |
|---|
| 1132 | filenames, and file contents are all sent over the wire in |
|---|
| 1133 | cleartext, so FTP should only be used on a local (127.0.0.1) |
|---|
| 1134 | connection. This feature is still in development: there are no unit |
|---|
| 1135 | tests yet, and behavior with respect to Unicode filenames is |
|---|
| 1136 | uncertain. Please see docs/frontends/FTP-and-SFTP.txt for |
|---|
| 1137 | configuration details. (#512, #531)</li> |
|---|
| 1138 | </ul> |
|---|
| 1139 | </div> |
|---|
| 1140 | <div class="section" id="id9"> |
|---|
| 1141 | <h2>CLI Changes</h2> |
|---|
| 1142 | <ul class="simple"> |
|---|
| 1143 | <li>This release adds the 'tahoe create-alias' command, which is a |
|---|
| 1144 | combination of 'tahoe mkdir' and 'tahoe add-alias'. This also allows |
|---|
| 1145 | you to start using a new tahoe directory without exposing its URI in |
|---|
| 1146 | the argv list, which is publicly visible (through the process table) |
|---|
| 1147 | on most unix systems. Thanks to Kevin Reid for bringing this issue |
|---|
| 1148 | to our attention.</li> |
|---|
| 1149 | <li>The single-argument form of "tahoe put" was changed to create an |
|---|
| 1150 | unlinked file. I.e. "tahoe put bar.txt" will take the contents of a |
|---|
| 1151 | local "bar.txt" file, upload them to the grid, and print the |
|---|
| 1152 | resulting read-cap; the file will not be attached to any |
|---|
| 1153 | directories. This seemed a bit more useful than the previous |
|---|
| 1154 | behavior (copy stdin, upload to the grid, attach the resulting file |
|---|
| 1155 | into your default tahoe: alias in a child named 'bar.txt').</li> |
|---|
| 1156 | <li>"tahoe put" was also fixed to handle mutable files correctly: "tahoe |
|---|
| 1157 | put bar.txt URI:SSK:..." will read the contents of the local bar.txt |
|---|
| 1158 | and use them to replace the contents of the given mutable file.</li> |
|---|
| 1159 | <li>The "tahoe webopen" command was modified to accept aliases. This |
|---|
| 1160 | means "tahoe webopen tahoe:" will cause your web browser to open to |
|---|
| 1161 | a "wui" page that gives access to the directory associated with the |
|---|
| 1162 | default "tahoe:" alias. It should also accept leading slashes, like |
|---|
| 1163 | "tahoe webopen tahoe:/stuff".</li> |
|---|
| 1164 | <li>Many esoteric debugging commands were moved down into a "debug" |
|---|
| 1165 | subcommand:</li> |
|---|
| 1166 | </ul> |
|---|
| 1167 | <blockquote> |
|---|
| 1168 | <ul> |
|---|
| 1169 | <li><p class="first">tahoe debug dump-cap</p> |
|---|
| 1170 | </li> |
|---|
| 1171 | <li><p class="first">tahoe debug dump-share</p> |
|---|
| 1172 | </li> |
|---|
| 1173 | <li><p class="first">tahoe debug find-shares</p> |
|---|
| 1174 | </li> |
|---|
| 1175 | <li><p class="first">tahoe debug catalog-shares</p> |
|---|
| 1176 | </li> |
|---|
| 1177 | <li><p class="first">tahoe debug corrupt-share</p> |
|---|
| 1178 | <p>The last command ("tahoe debug corrupt-share") flips a random bit |
|---|
| 1179 | of the given local sharefile. This is used to test the file |
|---|
| 1180 | verifying/repairing code, and obviously should not be used on user |
|---|
| 1181 | data.</p> |
|---|
| 1182 | </li> |
|---|
| 1183 | </ul> |
|---|
| 1184 | </blockquote> |
|---|
| 1185 | <p>The cli might not correctly handle arguments which contain non-ascii |
|---|
| 1186 | characters in Tahoe v1.3 (although depending on your platform it |
|---|
| 1187 | might, especially if your platform can be configured to pass such |
|---|
| 1188 | characters on the command-line in utf-8 encoding). See |
|---|
| 1189 | <a class="reference external" href="http://tahoe-lafs.org/trac/tahoe/ticket/565">http://tahoe-lafs.org/trac/tahoe/ticket/565</a> for details.</p> |
|---|
| 1190 | </div> |
|---|
| 1191 | <div class="section" id="web-changes"> |
|---|
| 1192 | <h2>Web changes</h2> |
|---|
| 1193 | <ul class="simple"> |
|---|
| 1194 | <li>The "default webapi port", used when creating a new client node (and |
|---|
| 1195 | in the getting-started documentation), was changed from 8123 to |
|---|
| 1196 | 3456, to reduce confusion when Tahoe accessed through a Firefox |
|---|
| 1197 | browser on which the "Torbutton" extension has been installed. Port |
|---|
| 1198 | 8123 is occasionally used as a Tor control port, so Torbutton adds |
|---|
| 1199 | 8123 to Firefox's list of "banned ports" to avoid CSRF attacks |
|---|
| 1200 | against Tor. Once 8123 is banned, it is difficult to diagnose why |
|---|
| 1201 | you can no longer reach a Tahoe node, so the Tahoe default was |
|---|
| 1202 | changed. Note that 3456 is reserved by IANA for the "vat" protocol, |
|---|
| 1203 | but there are argueably more Torbutton+Tahoe users than vat users |
|---|
| 1204 | these days. Note that this will only affect newly-created client |
|---|
| 1205 | nodes. Pre-existing client nodes, created by earlier versions of |
|---|
| 1206 | tahoe, may still be listening on 8123.</li> |
|---|
| 1207 | <li>All deep-traversal operations (start-manifest, start-deep-size, |
|---|
| 1208 | start-deep-stats, start-deep-check) now use a start-and-poll |
|---|
| 1209 | approach, instead of using a single (fragile) long-running |
|---|
| 1210 | synchronous HTTP connection. All these "start-" operations use POST |
|---|
| 1211 | instead of GET. The old "GET manifest", "GET deep-size", and "POST |
|---|
| 1212 | deep-check" operations have been removed.</li> |
|---|
| 1213 | <li>The new "POST start-manifest" operation, when it finally completes, |
|---|
| 1214 | results in a table of (path,cap), instead of the list of verifycaps |
|---|
| 1215 | produced by the old "GET manifest". The table is available in |
|---|
| 1216 | several formats: use output=html, output=text, or output=json to |
|---|
| 1217 | choose one. The JSON output also includes stats, and a list of |
|---|
| 1218 | verifycaps and storage-index strings. The "return_to=" and |
|---|
| 1219 | "when_done=" arguments have been removed from the t=check and |
|---|
| 1220 | deep-check operations.</li> |
|---|
| 1221 | <li>The top-level status page (/status) now has a machine-readable form, |
|---|
| 1222 | via "/status/?t=json". This includes information about the |
|---|
| 1223 | currently-active uploads and downloads, which may be useful for |
|---|
| 1224 | frontends that wish to display progress information. There is no |
|---|
| 1225 | easy way to correlate the activities displayed here with recent wapi |
|---|
| 1226 | requests, however.</li> |
|---|
| 1227 | <li>Any files in BASEDIR/public_html/ (configurable) will be served in |
|---|
| 1228 | response to requests in the /static/ portion of the URL space. This |
|---|
| 1229 | will simplify the deployment of javascript-based frontends that can |
|---|
| 1230 | still access wapi calls by conforming to the (regrettable) |
|---|
| 1231 | "same-origin policy".</li> |
|---|
| 1232 | <li>The welcome page now has a "Report Incident" button, which is tied |
|---|
| 1233 | into the "Incident Gatherer" machinery. If the node is attached to |
|---|
| 1234 | an incident gatherer (via log_gatherer.furl), then pushing this |
|---|
| 1235 | button will cause an Incident to be signalled: this means recent log |
|---|
| 1236 | events are aggregated and sent in a bundle to the gatherer. The user |
|---|
| 1237 | can push this button after something strange takes place (and they |
|---|
| 1238 | can provide a short message to go along with it), and the relevant |
|---|
| 1239 | data will be delivered to a centralized incident-gatherer for later |
|---|
| 1240 | processing by operations staff.</li> |
|---|
| 1241 | <li>The "HEAD" method should now work correctly, in addition to the |
|---|
| 1242 | usual "GET", "PUT", and "POST" methods. "HEAD" is supposed to return |
|---|
| 1243 | exactly the same headers as "GET" would, but without any of the |
|---|
| 1244 | actual response body data. For mutable files, this now does a brief |
|---|
| 1245 | mapupdate (to figure out the size of the file that would be |
|---|
| 1246 | returned), without actually retrieving the file's contents.</li> |
|---|
| 1247 | <li>The "GET" operation on files can now support the HTTP "Range:" |
|---|
| 1248 | header, allowing requests for partial content. This allows certain |
|---|
| 1249 | media players to correctly stream audio and movies out of a Tahoe |
|---|
| 1250 | grid. The current implementation uses a disk-based cache in |
|---|
| 1251 | BASEDIR/private/cache/download , which holds the plaintext of the |
|---|
| 1252 | files being downloaded. Future implementations might not use this |
|---|
| 1253 | cache. GET for immutable files now returns an ETag header.</li> |
|---|
| 1254 | <li>Each file and directory now has a "Show More Info" web page, which |
|---|
| 1255 | contains much of the information that was crammed into the directory |
|---|
| 1256 | page before. This includes readonly URIs, storage index strings, |
|---|
| 1257 | object type, buttons to control checking/verifying/repairing, and |
|---|
| 1258 | deep-check/deep-stats buttons (for directories). For mutable files, |
|---|
| 1259 | the "replace contents" upload form has been moved here too. As a |
|---|
| 1260 | result, the directory page is now much simpler and cleaner, and |
|---|
| 1261 | several potentially-misleading links (like t=uri) are now gone.</li> |
|---|
| 1262 | <li>Slashes are discouraged in Tahoe file/directory names, since they |
|---|
| 1263 | cause problems when accessing the filesystem through the |
|---|
| 1264 | wapi. However, there are a couple of accidental ways to generate |
|---|
| 1265 | such names. This release tries to make it easier to correct such |
|---|
| 1266 | mistakes by escaping slashes in several places, allowing slashes in |
|---|
| 1267 | the t=info and t=delete commands, and in the source (but not the |
|---|
| 1268 | target) of a t=rename command.</li> |
|---|
| 1269 | </ul> |
|---|
| 1270 | </div> |
|---|
| 1271 | <div class="section" id="id10"> |
|---|
| 1272 | <h2>Packaging</h2> |
|---|
| 1273 | <ul class="simple"> |
|---|
| 1274 | <li>Tahoe's dependencies have been extended to require the |
|---|
| 1275 | "[secure_connections]" feature from Foolscap, which will cause |
|---|
| 1276 | pyOpenSSL to be required and/or installed. If OpenSSL and its |
|---|
| 1277 | development headers are already installed on your system, this can |
|---|
| 1278 | occur automatically. Tahoe now uses pollreactor (instead of the |
|---|
| 1279 | default selectreactor) to work around a bug between pyOpenSSL and |
|---|
| 1280 | the most recent release of Twisted (8.1.0). This bug only affects |
|---|
| 1281 | unit tests (hang during shutdown), and should not impact regular |
|---|
| 1282 | use.</li> |
|---|
| 1283 | <li>The Tahoe source code tarballs now come in two different forms: |
|---|
| 1284 | regular and "sumo". The regular tarball contains just Tahoe, nothing |
|---|
| 1285 | else. When building from the regular tarball, the build process will |
|---|
| 1286 | download any unmet dependencies from the internet (starting with the |
|---|
| 1287 | index at PyPI) so it can build and install them. The "sumo" tarball |
|---|
| 1288 | contains copies of all the libraries that Tahoe requires (foolscap, |
|---|
| 1289 | twisted, zfec, etc), so using the "sumo" tarball should not require |
|---|
| 1290 | any internet access during the build process. This can be useful if |
|---|
| 1291 | you want to build Tahoe while on an airplane, a desert island, or |
|---|
| 1292 | other bandwidth-limited environments.</li> |
|---|
| 1293 | <li>Similarly, tahoe-lafs.org now hosts a "tahoe-deps" tarball which |
|---|
| 1294 | contains the latest versions of all these dependencies. This |
|---|
| 1295 | tarball, located at |
|---|
| 1296 | <a class="reference external" href="http://tahoe-lafs.org/source/tahoe/deps/tahoe-deps.tar.gz">http://tahoe-lafs.org/source/tahoe/deps/tahoe-deps.tar.gz</a>, can be |
|---|
| 1297 | unpacked in the tahoe source tree (or in its parent directory), and |
|---|
| 1298 | the build process should satisfy its downloading needs from it |
|---|
| 1299 | instead of reaching out to PyPI. This can be useful if you want to |
|---|
| 1300 | build Tahoe from a darcs checkout while on that airplane or desert |
|---|
| 1301 | island.</li> |
|---|
| 1302 | <li>Because of the previous two changes ("sumo" tarballs and the |
|---|
| 1303 | "tahoe-deps" bundle), most of the files have been removed from |
|---|
| 1304 | misc/dependencies/ . This brings the regular Tahoe tarball down to |
|---|
| 1305 | 2MB (compressed), and the darcs checkout (without history) to about |
|---|
| 1306 | 7.6MB. A full darcs checkout will still be fairly large (because of |
|---|
| 1307 | the historical patches which included the dependent libraries), but |
|---|
| 1308 | a 'lazy' one should now be small.</li> |
|---|
| 1309 | <li>The default "make" target is now an alias for "setup.py build", |
|---|
| 1310 | which itself is an alias for "setup.py develop --prefix support", |
|---|
| 1311 | with some extra work before and after (see setup.cfg). Most of the |
|---|
| 1312 | complicated platform-dependent code in the Makefile was rewritten in |
|---|
| 1313 | Python and moved into setup.py, simplifying things considerably.</li> |
|---|
| 1314 | <li>Likewise, the "make test" target now delegates most of its work to |
|---|
| 1315 | "setup.py test", which takes care of getting PYTHONPATH configured |
|---|
| 1316 | to access the tahoe code (and dependencies) that gets put in |
|---|
| 1317 | support/lib/ by the build_tahoe step. This should allow unit tests |
|---|
| 1318 | to be run even when trial (which is part of Twisted) wasn't already |
|---|
| 1319 | installed (in this case, trial gets installed to support/bin because |
|---|
| 1320 | Twisted is a dependency of Tahoe).</li> |
|---|
| 1321 | <li>Tahoe is now compatible with the recently-released Python 2.6 , |
|---|
| 1322 | although it is recommended to use Tahoe on Python 2.5, on which it |
|---|
| 1323 | has received more thorough testing and deployment.</li> |
|---|
| 1324 | <li>Tahoe is now compatible with simplejson-2.0.x . The previous release |
|---|
| 1325 | assumed that simplejson.loads always returned unicode strings, which |
|---|
| 1326 | is no longer the case in 2.0.x .</li> |
|---|
| 1327 | </ul> |
|---|
| 1328 | </div> |
|---|
| 1329 | <div class="section" id="grid-management-tools"> |
|---|
| 1330 | <h2>Grid Management Tools</h2> |
|---|
| 1331 | <ul class="simple"> |
|---|
| 1332 | <li>Several tools have been added or updated in the misc/ directory, |
|---|
| 1333 | mostly munin plugins that can be used to monitor a storage grid.</li> |
|---|
| 1334 | </ul> |
|---|
| 1335 | <blockquote> |
|---|
| 1336 | <ul class="simple"> |
|---|
| 1337 | <li>The misc/spacetime/ directory contains a "disk watcher" daemon |
|---|
| 1338 | (startable with 'tahoe start'), which can be configured with a set |
|---|
| 1339 | of HTTP URLs (pointing at the wapi '/statistics' page of a bunch of |
|---|
| 1340 | storage servers), and will periodically fetch |
|---|
| 1341 | disk-used/disk-available information from all the servers. It keeps |
|---|
| 1342 | this information in an Axiom database (a sqlite-based library |
|---|
| 1343 | available from divmod.org). The daemon computes time-averaged rates |
|---|
| 1344 | of disk usage, as well as a prediction of how much time is left |
|---|
| 1345 | before the grid is completely full.</li> |
|---|
| 1346 | <li>The misc/munin/ directory contains a new set of munin plugins |
|---|
| 1347 | (tahoe_diskleft, tahoe_diskusage, tahoe_doomsday) which talk to the |
|---|
| 1348 | disk-watcher and provide graphs of its calculations.</li> |
|---|
| 1349 | <li>To support the disk-watcher, the Tahoe statistics component |
|---|
| 1350 | (visible through the wapi at the /statistics/ URL) now includes |
|---|
| 1351 | disk-used and disk-available information. Both are derived through |
|---|
| 1352 | an equivalent of the unix 'df' command (i.e. they ask the kernel |
|---|
| 1353 | for the number of free blocks on the partition that encloses the |
|---|
| 1354 | BASEDIR/storage directory). In the future, the disk-available |
|---|
| 1355 | number will be further influenced by the local storage policy: if |
|---|
| 1356 | that policy says that the server should refuse new shares when less |
|---|
| 1357 | than 5GB is left on the partition, then "disk-available" will |
|---|
| 1358 | report zero even though the kernel sees 5GB remaining.</li> |
|---|
| 1359 | <li>The 'tahoe_overhead' munin plugin interacts with an |
|---|
| 1360 | allmydata.com-specific server which reports the total of the |
|---|
| 1361 | 'deep-size' reports for all active user accounts, compares this |
|---|
| 1362 | with the disk-watcher data, to report on overhead percentages. This |
|---|
| 1363 | provides information on how much space could be recovered once |
|---|
| 1364 | Tahoe implements some form of garbage collection.</li> |
|---|
| 1365 | </ul> |
|---|
| 1366 | </blockquote> |
|---|
| 1367 | </div> |
|---|
| 1368 | <div class="section" id="configuration-changes-single-ini-format-tahoe-cfg-file"> |
|---|
| 1369 | <h2>Configuration Changes: single INI-format tahoe.cfg file</h2> |
|---|
| 1370 | <ul class="simple"> |
|---|
| 1371 | <li>The Tahoe node is now configured with a single INI-format file, |
|---|
| 1372 | named "tahoe.cfg", in the node's base directory. Most of the |
|---|
| 1373 | previous multiple-separate-files are still read for backwards |
|---|
| 1374 | compatibility (the embedded SSH debug server and the |
|---|
| 1375 | advertised_ip_addresses files are the exceptions), but new |
|---|
| 1376 | directives will only be added to tahoe.cfg . The "tahoe |
|---|
| 1377 | create-client" command will create a tahoe.cfg for you, with sample |
|---|
| 1378 | values commented out. (ticket #518)</li> |
|---|
| 1379 | <li>tahoe.cfg now has controls for the foolscap "keepalive" and |
|---|
| 1380 | "disconnect" timeouts (#521).</li> |
|---|
| 1381 | <li>tahoe.cfg now has controls for the encoding parameters: |
|---|
| 1382 | "shares.needed" and "shares.total" in the "[client]" section. The |
|---|
| 1383 | default parameters are still 3-of-10.</li> |
|---|
| 1384 | <li>The inefficient storage 'sizelimit' control (which established an |
|---|
| 1385 | upper bound on the amount of space that a storage server is allowed |
|---|
| 1386 | to consume) has been replaced by a lightweight 'reserved_space' |
|---|
| 1387 | control (which establishes a lower bound on the amount of remaining |
|---|
| 1388 | space). The storage server will reject all writes that would cause |
|---|
| 1389 | the remaining disk space (as measured by a '/bin/df' equivalent) to |
|---|
| 1390 | drop below this value. The "[storage]reserved_space=" tahoe.cfg |
|---|
| 1391 | parameter controls this setting. (note that this only affects |
|---|
| 1392 | immutable shares: it is an outstanding bug that reserved_space does |
|---|
| 1393 | not prevent the allocation of new mutable shares, nor does it |
|---|
| 1394 | prevent the growth of existing mutable shares).</li> |
|---|
| 1395 | </ul> |
|---|
| 1396 | </div> |
|---|
| 1397 | <div class="section" id="id11"> |
|---|
| 1398 | <h2>Other Changes</h2> |
|---|
| 1399 | <ul class="simple"> |
|---|
| 1400 | <li>Clients now declare which versions of the protocols they |
|---|
| 1401 | support. This is part of a new backwards-compatibility system: |
|---|
| 1402 | <a class="reference external" href="http://tahoe-lafs.org/trac/tahoe/wiki/Versioning">http://tahoe-lafs.org/trac/tahoe/wiki/Versioning</a> .</li> |
|---|
| 1403 | <li>The version strings for human inspection (as displayed on the |
|---|
| 1404 | Welcome web page, and included in logs) now includes a platform |
|---|
| 1405 | identifer (frequently including a linux distribution name, processor |
|---|
| 1406 | architecture, etc).</li> |
|---|
| 1407 | <li>Several bugs have been fixed, including one that would cause an |
|---|
| 1408 | exception (in the logs) if a wapi download operation was cancelled |
|---|
| 1409 | (by closing the TCP connection, or pushing the "stop" button in a |
|---|
| 1410 | web browser).</li> |
|---|
| 1411 | <li>Tahoe now uses Foolscap "Incidents", writing an "incident report" |
|---|
| 1412 | file to logs/incidents/ each time something weird occurs. These |
|---|
| 1413 | reports are available to an "incident gatherer" through the flogtool |
|---|
| 1414 | command. For more details, please see the Foolscap logging |
|---|
| 1415 | documentation. An incident-classifying plugin function is provided |
|---|
| 1416 | in misc/incident-gatherer/classify_tahoe.py .</li> |
|---|
| 1417 | <li>If clients detect corruption in shares, they now automatically |
|---|
| 1418 | report it to the server holding that share, if it is new enough to |
|---|
| 1419 | accept the report. These reports are written to files in |
|---|
| 1420 | BASEDIR/storage/corruption-advisories .</li> |
|---|
| 1421 | <li>The 'nickname' setting is now defined to be a UTF-8 -encoded string, |
|---|
| 1422 | allowing non-ascii nicknames.</li> |
|---|
| 1423 | <li>The 'tahoe start' command will now accept a --syslog argument and |
|---|
| 1424 | pass it through to twistd, making it easier to launch non-Tahoe |
|---|
| 1425 | nodes (like the cpu-watcher) and have them log to syslogd instead of |
|---|
| 1426 | a local file. This is useful when running a Tahoe node out of a USB |
|---|
| 1427 | flash drive.</li> |
|---|
| 1428 | <li>The Mac GUI in src/allmydata/gui/ has been improved.</li> |
|---|
| 1429 | </ul> |
|---|
| 1430 | </div> |
|---|
| 1431 | </div> |
|---|
| 1432 | <div class="section" id="release-1-2-0-2008-07-21"> |
|---|
| 1433 | <h1>Release 1.2.0 (2008-07-21)</h1> |
|---|
| 1434 | <div class="section" id="security"> |
|---|
| 1435 | <h2>Security</h2> |
|---|
| 1436 | <ul> |
|---|
| 1437 | <li><p class="first">This release makes the immutable-file "ciphertext hash tree" |
|---|
| 1438 | mandatory. Previous releases allowed the uploader to decide whether |
|---|
| 1439 | their file would have an integrity check on the ciphertext or not. A |
|---|
| 1440 | malicious uploader could use this to create a readcap that would |
|---|
| 1441 | download as one file or a different one, depending upon which shares |
|---|
| 1442 | the client fetched first, with no errors raised. There are other |
|---|
| 1443 | integrity checks on the shares themselves, preventing a storage |
|---|
| 1444 | server or other party from violating the integrity properties of the |
|---|
| 1445 | read-cap: this failure was only exploitable by the uploader who |
|---|
| 1446 | gives you a carefully constructed read-cap. If you download the file |
|---|
| 1447 | with Tahoe 1.2.0 or later, you will not be vulnerable to this |
|---|
| 1448 | problem. #491</p> |
|---|
| 1449 | <p>This change does not introduce a compatibility issue, because all |
|---|
| 1450 | existing versions of Tahoe will emit the ciphertext hash tree in |
|---|
| 1451 | their shares.</p> |
|---|
| 1452 | </li> |
|---|
| 1453 | </ul> |
|---|
| 1454 | </div> |
|---|
| 1455 | <div class="section" id="dependencies"> |
|---|
| 1456 | <h2>Dependencies</h2> |
|---|
| 1457 | <ul class="simple"> |
|---|
| 1458 | <li>Tahoe now requires Foolscap-0.2.9 . It also requires pycryptopp 0.5 |
|---|
| 1459 | or newer, since earlier versions had a bug that interacted with |
|---|
| 1460 | specific compiler versions that could sometimes result in incorrect |
|---|
| 1461 | encryption behavior. Both packages are included in the Tahoe source |
|---|
| 1462 | tarball in misc/dependencies/ , and should be built automatically |
|---|
| 1463 | when necessary.</li> |
|---|
| 1464 | </ul> |
|---|
| 1465 | </div> |
|---|
| 1466 | <div class="section" id="web-api"> |
|---|
| 1467 | <h2>Web API</h2> |
|---|
| 1468 | <ul class="simple"> |
|---|
| 1469 | <li>Web API directory pages should now contain properly-slash-terminated |
|---|
| 1470 | links to other directories. They have also stopped using absolute |
|---|
| 1471 | links in forms and pages (which interfered with the use of a |
|---|
| 1472 | front-end load-balancing proxy).</li> |
|---|
| 1473 | <li>The behavior of the "Check This File" button changed, in conjunction |
|---|
| 1474 | with larger internal changes to file checking/verification. The |
|---|
| 1475 | button triggers an immediate check as before, but the outcome is |
|---|
| 1476 | shown on its own page, and does not get stored anywhere. As a |
|---|
| 1477 | result, the web directory page no longer shows historical checker |
|---|
| 1478 | results.</li> |
|---|
| 1479 | <li>A new "Deep-Check" button has been added, which allows a user to |
|---|
| 1480 | initiate a recursive check of the given directory and all files and |
|---|
| 1481 | directories reachable from it. This can cause quite a bit of work, |
|---|
| 1482 | and has no intermediate progress information or feedback about the |
|---|
| 1483 | process. In addition, the results of the deep-check are extremely |
|---|
| 1484 | limited. A later release will improve this behavior.</li> |
|---|
| 1485 | <li>The web server's behavior with respect to non-ASCII (unicode) |
|---|
| 1486 | filenames in the "GET save=true" operation has been improved. To |
|---|
| 1487 | achieve maximum compatibility with variously buggy web browsers, the |
|---|
| 1488 | server does not try to figure out the character set of the inbound |
|---|
| 1489 | filename. It just echoes the same bytes back to the browser in the |
|---|
| 1490 | Content-Disposition header. This seems to make both IE7 and Firefox |
|---|
| 1491 | work correctly.</li> |
|---|
| 1492 | </ul> |
|---|
| 1493 | </div> |
|---|
| 1494 | <div class="section" id="id12"> |
|---|
| 1495 | <h2>Checker/Verifier/Repairer</h2> |
|---|
| 1496 | <ul> |
|---|
| 1497 | <li><p class="first">Tahoe is slowly acquiring convenient tools to check up on file |
|---|
| 1498 | health, examine existing shares for errors, and repair files that |
|---|
| 1499 | are not fully healthy. This release adds a mutable |
|---|
| 1500 | checker/verifier/repairer, although testing is very limited, and |
|---|
| 1501 | there are no web interfaces to trigger repair yet. The "Check" |
|---|
| 1502 | button next to each file or directory on the wapi page will perform |
|---|
| 1503 | a file check, and the "deep check" button on each directory will |
|---|
| 1504 | recursively check all files and directories reachable from there |
|---|
| 1505 | (which may take a very long time).</p> |
|---|
| 1506 | <p>Future releases will improve access to this functionality.</p> |
|---|
| 1507 | </li> |
|---|
| 1508 | </ul> |
|---|
| 1509 | </div> |
|---|
| 1510 | <div class="section" id="operations-packaging"> |
|---|
| 1511 | <h2>Operations/Packaging</h2> |
|---|
| 1512 | <ul class="simple"> |
|---|
| 1513 | <li>A "check-grid" script has been added, along with a Makefile |
|---|
| 1514 | target. This is intended (with the help of a pre-configured node |
|---|
| 1515 | directory) to check upon the health of a Tahoe grid, uploading and |
|---|
| 1516 | downloading a few files. This can be used as a monitoring tool for a |
|---|
| 1517 | deployed grid, to be run periodically and to signal an error if it |
|---|
| 1518 | ever fails. It also helps with compatibility testing, to verify that |
|---|
| 1519 | the latest Tahoe code is still able to handle files created by an |
|---|
| 1520 | older version.</li> |
|---|
| 1521 | <li>The munin plugins from misc/munin/ are now copied into any generated |
|---|
| 1522 | debian packages, and are made executable (and uncompressed) so they |
|---|
| 1523 | can be symlinked directly from /etc/munin/plugins/ .</li> |
|---|
| 1524 | <li>Ubuntu "Hardy" was added as a supported debian platform, with a |
|---|
| 1525 | Makefile target to produce hardy .deb packages. Some notes have been |
|---|
| 1526 | added to docs/debian.txt about building Tahoe on a debian/ubuntu |
|---|
| 1527 | system.</li> |
|---|
| 1528 | <li>Storage servers now measure operation rates and |
|---|
| 1529 | latency-per-operation, and provides results through the /statistics |
|---|
| 1530 | web page as well as the stats gatherer. Munin plugins have been |
|---|
| 1531 | added to match.</li> |
|---|
| 1532 | </ul> |
|---|
| 1533 | </div> |
|---|
| 1534 | <div class="section" id="other"> |
|---|
| 1535 | <h2>Other</h2> |
|---|
| 1536 | <ul class="simple"> |
|---|
| 1537 | <li>Tahoe nodes now use Foolscap "incident logging" to record unusual |
|---|
| 1538 | events to their NODEDIR/logs/incidents/ directory. These incident |
|---|
| 1539 | files can be examined by Foolscap logging tools, or delivered to an |
|---|
| 1540 | external log-gatherer for further analysis. Note that Tahoe now |
|---|
| 1541 | requires Foolscap-0.2.9, since 0.2.8 had a bug that complained about |
|---|
| 1542 | "OSError: File exists" when trying to create the incidents/ |
|---|
| 1543 | directory for a second time.</li> |
|---|
| 1544 | <li>If no servers are available when retrieving a mutable file (like a |
|---|
| 1545 | directory), the node now reports an error instead of hanging |
|---|
| 1546 | forever. Earlier releases would not only hang (causing the wapi |
|---|
| 1547 | directory listing to get stuck half-way through), but the internal |
|---|
| 1548 | dirnode serialization would cause all subsequent attempts to |
|---|
| 1549 | retrieve or modify the same directory to hang as well. #463</li> |
|---|
| 1550 | <li>A minor internal exception (reported in logs/twistd.log, in the |
|---|
| 1551 | "stopProducing" method) was fixed, which complained about |
|---|
| 1552 | "self._paused_at not defined" whenever a file download was stopped |
|---|
| 1553 | from the web browser end.</li> |
|---|
| 1554 | </ul> |
|---|
| 1555 | </div> |
|---|
| 1556 | </div> |
|---|
| 1557 | <div class="section" id="release-1-1-0-2008-06-11"> |
|---|
| 1558 | <h1>Release 1.1.0 (2008-06-11)</h1> |
|---|
| 1559 | <div class="section" id="cli-new-alias-model"> |
|---|
| 1560 | <h2>CLI: new "alias" model</h2> |
|---|
| 1561 | <ul class="simple"> |
|---|
| 1562 | <li>The new CLI code uses an scp/rsync -like interface, in which |
|---|
| 1563 | directories in the Tahoe storage grid are referenced by a |
|---|
| 1564 | colon-suffixed alias. The new commands look like:</li> |
|---|
| 1565 | </ul> |
|---|
| 1566 | <blockquote> |
|---|
| 1567 | <ul class="simple"> |
|---|
| 1568 | <li>tahoe cp local.txt tahoe:virtual.txt</li> |
|---|
| 1569 | <li>tahoe ls work:subdir</li> |
|---|
| 1570 | </ul> |
|---|
| 1571 | </blockquote> |
|---|
| 1572 | <ul class="simple"> |
|---|
| 1573 | <li>More functionality is available through the CLI: creating unlinked |
|---|
| 1574 | files and directories, recursive copy in or out of the storage grid, |
|---|
| 1575 | hardlinks, and retrieving the raw read- or write- caps through the |
|---|
| 1576 | 'ls' command. Please read docs/CLI.txt for complete details.</li> |
|---|
| 1577 | </ul> |
|---|
| 1578 | </div> |
|---|
| 1579 | <div class="section" id="wapi-new-pages-new-commands"> |
|---|
| 1580 | <h2>wapi: new pages, new commands</h2> |
|---|
| 1581 | <ul class="simple"> |
|---|
| 1582 | <li>Several new pages were added to the web API:</li> |
|---|
| 1583 | </ul> |
|---|
| 1584 | <blockquote> |
|---|
| 1585 | <ul class="simple"> |
|---|
| 1586 | <li>/helper_status : to describe what a Helper is doing</li> |
|---|
| 1587 | <li>/statistics : reports node uptime, CPU usage, other stats</li> |
|---|
| 1588 | <li>/file : for easy file-download URLs, see #221</li> |
|---|
| 1589 | <li>/cap == /uri : future compatibility</li> |
|---|
| 1590 | </ul> |
|---|
| 1591 | </blockquote> |
|---|
| 1592 | <ul class="simple"> |
|---|
| 1593 | <li>The localdir=/localfile= and t=download operations were |
|---|
| 1594 | removed. These required special configuration to enable anyways, but |
|---|
| 1595 | this feature was a security problem, and was mostly obviated by the |
|---|
| 1596 | new "cp -r" command.</li> |
|---|
| 1597 | <li>Several new options to the GET command were added:</li> |
|---|
| 1598 | </ul> |
|---|
| 1599 | <blockquote> |
|---|
| 1600 | <ul> |
|---|
| 1601 | <li><p class="first">t=deep-size : add up the size of all immutable files reachable from the directory</p> |
|---|
| 1602 | </li> |
|---|
| 1603 | <li><dl class="first docutils"> |
|---|
| 1604 | <dt>t=deep-stats <span class="classifier-delimiter">:</span> <span class="classifier">return a JSON-encoded description of number of files, size</span></dt> |
|---|
| 1605 | <dd><p class="first last">distribution, total size, etc</p> |
|---|
| 1606 | </dd> |
|---|
| 1607 | </dl> |
|---|
| 1608 | </li> |
|---|
| 1609 | </ul> |
|---|
| 1610 | </blockquote> |
|---|
| 1611 | <ul class="simple"> |
|---|
| 1612 | <li>POST is now preferred over PUT for most operations which cause |
|---|
| 1613 | side-effects.</li> |
|---|
| 1614 | <li>Most wapi calls now accept overwrite=, and default to overwrite=true</li> |
|---|
| 1615 | <li>"POST /uri/DIRCAP/parent/child?t=mkdir" is now the preferred API to |
|---|
| 1616 | create multiple directories at once, rather than ...?t=mkdir-p .</li> |
|---|
| 1617 | <li>PUT to a mutable file ("PUT /uri/MUTABLEFILECAP", "PUT |
|---|
| 1618 | /uri/DIRCAP/child") will modify the file in-place.</li> |
|---|
| 1619 | <li>more munin graphs in misc/munin/</li> |
|---|
| 1620 | </ul> |
|---|
| 1621 | <blockquote> |
|---|
| 1622 | <ul class="simple"> |
|---|
| 1623 | <li>tahoe-introstats</li> |
|---|
| 1624 | <li>tahoe-rootdir-space</li> |
|---|
| 1625 | <li>tahoe_estimate_files</li> |
|---|
| 1626 | <li>mutable files published/retrieved</li> |
|---|
| 1627 | <li>tahoe_cpu_watcher</li> |
|---|
| 1628 | <li>tahoe_spacetime</li> |
|---|
| 1629 | </ul> |
|---|
| 1630 | </blockquote> |
|---|
| 1631 | </div> |
|---|
| 1632 | <div class="section" id="new-dependencies"> |
|---|
| 1633 | <h2>New Dependencies</h2> |
|---|
| 1634 | <ul class="simple"> |
|---|
| 1635 | <li>zfec 1.1.0</li> |
|---|
| 1636 | <li>foolscap 0.2.8</li> |
|---|
| 1637 | <li>pycryptopp 0.5</li> |
|---|
| 1638 | <li>setuptools (now required at runtime)</li> |
|---|
| 1639 | </ul> |
|---|
| 1640 | </div> |
|---|
| 1641 | <div class="section" id="new-mutable-file-code"> |
|---|
| 1642 | <h2>New Mutable-File Code</h2> |
|---|
| 1643 | <ul class="simple"> |
|---|
| 1644 | <li>The mutable-file handling code (mostly used for directories) has |
|---|
| 1645 | been completely rewritten. The new scheme has a better API (with a |
|---|
| 1646 | modify() method) and is less likely to lose data when several |
|---|
| 1647 | uncoordinated writers change a file at the same time.</li> |
|---|
| 1648 | <li>In addition, a single Tahoe process will coordinate its own |
|---|
| 1649 | writes. If you make two concurrent directory-modifying wapi calls to |
|---|
| 1650 | a single tahoe node, it will internally make one of them wait for |
|---|
| 1651 | the other to complete. This prevents auto-collision (#391).</li> |
|---|
| 1652 | <li>The new mutable-file code also detects errors during publish |
|---|
| 1653 | better. Earlier releases might believe that a mutable file was |
|---|
| 1654 | published when in fact it failed.</li> |
|---|
| 1655 | </ul> |
|---|
| 1656 | </div> |
|---|
| 1657 | <div class="section" id="other-features"> |
|---|
| 1658 | <h2>other features</h2> |
|---|
| 1659 | <ul class="simple"> |
|---|
| 1660 | <li>The node now monitors its own CPU usage, as a percentage, measured |
|---|
| 1661 | every 60 seconds. 1/5/15 minute moving averages are available on the |
|---|
| 1662 | /statistics web page and via the stats-gathering interface.</li> |
|---|
| 1663 | <li>Clients now accelerate reconnection to all servers after being |
|---|
| 1664 | offline (#374). When a client is offline for a long time, it scales |
|---|
| 1665 | back reconnection attempts to approximately once per hour, so it may |
|---|
| 1666 | take a while to make the first attempt, but once any attempt |
|---|
| 1667 | succeeds, the other server connections will be retried immediately.</li> |
|---|
| 1668 | <li>A new "offloaded KeyGenerator" facility can be configured, to move |
|---|
| 1669 | RSA key generation out from, say, a wapi node, into a separate |
|---|
| 1670 | process. RSA keys can take several seconds to create, and so a wapi |
|---|
| 1671 | node which is being used for directory creation will be unavailable |
|---|
| 1672 | for anything else during this time. The Key Generator process will |
|---|
| 1673 | pre-compute a small pool of keys, to speed things up further. This |
|---|
| 1674 | also takes better advantage of multi-core CPUs, or SMP hosts.</li> |
|---|
| 1675 | <li>The node will only use a potentially-slow "du -s" command at startup |
|---|
| 1676 | (to measure how much space has been used) if the "sizelimit" |
|---|
| 1677 | parameter has been configured (to limit how much space is |
|---|
| 1678 | used). Large storage servers should turn off sizelimit until a later |
|---|
| 1679 | release improves the space-management code, since "du -s" on a |
|---|
| 1680 | terabyte filesystem can take hours.</li> |
|---|
| 1681 | <li>The Introducer now allows new announcements to replace old ones, to |
|---|
| 1682 | avoid buildups of obsolete announcements.</li> |
|---|
| 1683 | <li>Immutable files are limited to about 12GiB (when using the default |
|---|
| 1684 | 3-of-10 encoding), because larger files would be corrupted by the |
|---|
| 1685 | four-byte share-size field on the storage servers (#439). A later |
|---|
| 1686 | release will remove this limit. Earlier releases would allow >12GiB |
|---|
| 1687 | uploads, but the resulting file would be unretrievable.</li> |
|---|
| 1688 | <li>The docs/ directory has been rearranged, with old docs put in |
|---|
| 1689 | docs/historical/ and not-yet-implemented ones in docs/proposed/ .</li> |
|---|
| 1690 | <li>The Mac OS-X FUSE plugin has a significant bug fix: earlier versions |
|---|
| 1691 | would corrupt writes that used seek() instead of writing the file in |
|---|
| 1692 | linear order. The rsync tool is known to perform writes in this |
|---|
| 1693 | order. This has been fixed.</li> |
|---|
| 1694 | </ul> |
|---|
| 1695 | </div> |
|---|
| 1696 | </div> |
|---|
| 1697 | </div> |
|---|
| 1698 | </body> |
|---|
| 1699 | </html> |
|---|
