#349 closed defect (wontfix)

Find a middle ground on access to the Build button

Reported by: zandr Owned by: zandr
Priority: minor Milestone: undecided
Component: dev-infrastructure Version: 0.8.0
Keywords: buildbot Cc: zooko
Launchpad Bug:


It's come to my attention that there are builders for some projects (pycryptopp) that have publically accessible build buttons.

This is less than desirable, because it allows DoS attacks on the slaves. On the other hand, we'd like people who are contributing slaves to be able to test them.

Short term solution: Wrap the build buttons in http basic auth with the buildslave passwords added to the htpasswd file.

Long term solution: Convince the buildbot maintainer of the merits of http://buildbot.net/trac/ticket/200

Change History (4)

comment:1 Changed at 2008-03-13T19:05:56Z by zooko

  • Cc zooko added

comment:2 Changed at 2008-06-01T20:47:10Z by warner

  • Milestone changed from eventually to undecided

comment:3 Changed at 2010-06-12T22:17:45Z by davidsarah

  • Keywords buildbot added

comment:4 Changed at 2010-09-02T04:36:26Z by zooko

  • Resolution set to wontfix
  • Status changed from new to closed

For now I'm happy letting anyone in the world poke our "force build" buttons. We've been doing it for years and nobody has abused it yet. When they do someone will reopen this ticket...

Note: See TracTickets for help on using tickets.