tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Distributed bulk builds really need passwordless SSH ?



Hello!

Following recent sparc binary packages disappearance I wondered about how distributed pkgsrc builds can be done. According to documentation:

https://www.netbsd.org/docs/pkgsrc/bulk.html

====

Note

The pbulk.sh script supports running unprivileged bulk build and helps configuring distributed bulk builds. Distributed bulk builds support either building in worker chroots (each node is a path to a different chroot) that replicate the target system, including the pbulk prefix, or remote machines (each node is an IP address that must be accessible over SSH without a password).

====

This sounds .. a bit dangerous, considering all those ssh bruteforce bots living around ...

Is there chance someone mods this script so it will accept list of nodes and their passwords?

Or may be for exotic qemu builds just restrict accepting ssh connections from few configured IPs ?



Home | Main Index | Thread Index | Old Index