pfSense Forum

Development/Documentation => Development => Topic started by: dl1234 on February 25, 2014, 12:46:42 pm

Title: pfsense-tools missing from repository
Post by: dl1234 on February 25, 2014, 12:46:42 pm
Has the location changed by any chance?

Code: [Select]
[dev@dev ~/pfsense]$ git clone git://github.com/pfsense/pfsense-tools.git tools
Initialized empty Git repository in /home/dev/pfsense/tools/.git/
fatal: remote error:
  Repository not found.
[dev@dev ~/pfsense]$
Title: Re: pfsense-tools missing from repository
Post by: pingpong on February 25, 2014, 04:17:49 pm
Your not alone with this error.  It just disappeared... Perhaps a pfSense team member can add some input here....
Title: Re: pfsense-tools missing from repository
Post by: charliem on February 25, 2014, 05:14:40 pm
https://forum.pfsense.org/index.php/topic,72941.0.html

There used to be a thread here about how to build 2.2, but it's been removed too.

Policy change?


Title: Re: pfsense-tools missing from repository
Post by: zandr on February 25, 2014, 05:20:17 pm
This is concerning, as I've just lobbied for a pfSense solution for a customer. I'd hate to have to start over.
Title: Re: pfsense-tools missing from repository
Post by: charliem on February 25, 2014, 06:46:24 pm
This is concerning, as I've just lobbied for a pfSense solution for a customer. I'd hate to have to start over.
That's no reason to not use pfSense!  I'm pretty sure they just want to control posting of un-authorized and premature images of development versions.

Only people I see it affecting are ones eager to be cut by immature bleeding edge, and truly paranoid types who want to build their own images.
Title: Re: pfsense-tools missing from repository
Post by: zandr on February 25, 2014, 07:17:15 pm
Well, this happened at the same time that the xml-rpc server for custom packages disappeared. Not being able to build my own packages is a showstopper... I need rinetd installed and manageable for this application.

Sorry for the threadjack, I guess. :)
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on February 25, 2014, 07:19:47 pm
Un-authorized? WTH? Seriously hope this is not the direction the project is taking. So yeah, this would be really concerning.
Title: Re: pfsense-tools missing from repository
Post by: dl1234 on February 25, 2014, 07:32:33 pm
This is concerning, as I've just lobbied for a pfSense solution for a customer. I'd hate to have to start over.
That's no reason to not use pfSense!  I'm pretty sure they just want to control posting of un-authorized and premature images of development versions.

Only people I see it affecting are ones eager to be cut by immature bleeding edge, and truly paranoid types who want to build their own images.

Controlling the posting of binary images of development versions is itself a questionable act in an open source project. Somewhat more alarming, there appears to be active censorship occurring here by the site admins as demonstrated by an attempt to follow the link posted above.

More practically speaking, I can't even build the current release tree without these tools. Almost everything I run, including my OpenWrt, is a custom build (for reasons that aren't really germane to this thread). This seems like a very large hammer to crack a very small nut if its aim is to prevent posting of binary images as you surmise.

Would the admins care to comment to set the record straight?
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on February 25, 2014, 07:38:51 pm
More practically speaking, I can't even build the current release tree without these tools.

This would also hampers bug fixing badly, recall multiple recent serious issues with apinger, prominently.
Title: Re: pfsense-tools missing from repository
Post by: phil.davis on February 25, 2014, 09:51:29 pm
From Jeremy Porter on the dev mailing list, in response to an email query about the missing pfsense-tools repository:
Quote
We are in  the middle of migrating repositories and services to new hosts and datacenters, to support our work on pfSense 2.2.
I really don't think they are going to make pfsene-tools closed source! You guys have been reading too many posts in the "NSA" thread :)
And they do have to protect the pfSense brand - even I, with absolutely no financial interest in ESF, do not want images built and publicly published with full pfSense logos etc that have real problems. New users will end up finding them accidentally in searches and will install them thinking they are good-to-go. Then they will psot on the forum and... As I understand it, FreeBSD10/pfSense2.2 in its current state is really not useable by anyone other then real dev-nerds, for development purposes only. In that case, it really is best that there not be public images available yet. People who really want to join in at this stage of development can build it all themselves or contact ESF and really make an offer to contribute their time/skills to work together with the other devs on driver issues, patches and...

But it would have been nice if ESF had posted here first, letting everyone know the repository would be off-line for x time, rather than letting a thread like this develop.
I was also looking at apinger and the patches to it in pfsense-tools just to see if I could spot what might be causing the varied latency and packet loss figures that happen sometimes.
Title: Re: pfsense-tools missing from repository
Post by: charliem on February 25, 2014, 11:11:59 pm
Would the admins care to comment to set the record straight?
+1

Then, don't delete the thread.
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on February 26, 2014, 01:42:57 am
And they do have to protect the pfSense brand - even I, with absolutely no financial interest in ESF, do not want images built and publicly published with full pfSense logos etc that have real problems. New users will end up finding them accidentally in searches and will install them thinking they are good-to-go.

You know, when someone has such concerns for whatever reason (I personally absolutely hate such politics, from the days of Debian vs. Firefox idiocy), you provide a --without-branding or whatever similar switch with the build tools. I personally see zero need for handholding idiots. You think publishing canary/nightly builds for things like Chrome or Firefox damages their trademark? Gah, nonsense...

But it would have been nice if ESF had posted here first, letting everyone know the repository would be off-line for x time, rather than letting a thread like this develop.
I was also looking at apinger and the patches to it in pfsense-tools just to see if I could spot what might be causing the varied latency and packet loss figures that happen sometimes.

I have - about a year ago - requested branching off the -dev version of pfsense-tools. The way it's done causes regressions. As is it now, it seriously hampers debugging, prevents people with legit need of building their customized 2.1.x images from doing so; and when you pull the repo altogether, you manage to upset the community as a "bonus".

But it would have been nice if ESF had posted here first, letting everyone know the repository would be off-line for x time, rather than letting a thread like this develop.

It started with the contributor license (https://forum.pfsense.org/index.php/topic,71553.0.html) red tape. Then you go and pull the -tools repo and start wiping threads when some enthusiast guy provides his own bleeding edge images. Why, just why? Makes me wonder - what's next? All this has been badly handled, to put it mildly.
Title: Re: pfsense-tools missing from repository
Post by: Oliver on February 26, 2014, 03:35:12 am
I really don't think they are going to make pfsene-tools closed source!
They can't turn pfSense into a closed source project, simply because of the inherited BSD license.

And they do have to protect the pfSense brand - even I, with absolutely no financial interest in ESF, do not want images built and publicly published with full pfSense logos etc that have real problems. New users will end up finding them accidentally in searches and will install them thinking they are good-to-go.

You know, when someone has such concerns for whatever reason (I personally absolutely hate such politics, from the days of Debian vs. Firefox idiocy), you provide a --without-branding or whatever similar switch with the build tools. I personally see zero need for handholding idiots. You think publishing canary/nightly builds for things like Chrome or Firefox damages their trademark? Gah, nonsense...
this exactly
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on February 26, 2014, 05:47:25 pm
Nothing for two days? Ridiculous. Wake up, guys, seriously.
Title: Re: pfsense-tools missing from repository
Post by: freebee on February 27, 2014, 08:26:45 am
Hi,

Somebody has the /home/pfsense 2.1.1 backup ?. gzip...
I porting pfsense to the new pcengines apu motherboard and need customize the kernel.

Thanks.
Title: Re: pfsense-tools missing from repository
Post by: zandr on February 27, 2014, 09:25:31 pm
I just offered volunteer ops help on the dev mailing list. This is amateurish at best.

EDIT: Some helpful responses from their ops team on the dev list. They're working on it.
Title: Re: pfsense-tools missing from repository
Post by: bryan.paradis on February 28, 2014, 02:27:40 am
I am trying to debug something and I cannot get the pfPorts source I need... Looking for a fork
Title: Re: pfsense-tools missing from repository
Post by: phil.davis on February 28, 2014, 03:21:47 am
This looks to be up-to-date with what was last on GitHub a few days ago:
https://github.com/Podilarius/pfsense-tools (https://github.com/Podilarius/pfsense-tools)
Title: Re: pfsense-tools missing from repository
Post by: bryan.paradis on February 28, 2014, 04:01:29 am
This looks to be up-to-date with what was last on GitHub a few days ago:
https://github.com/Podilarius/pfsense-tools (https://github.com/Podilarius/pfsense-tools)

Thanks already found that one! Got the source I needed.
Title: Re: pfsense-tools missing from repository
Post by: freebee on February 28, 2014, 10:37:28 am
Thank you very much!.
Title: Re: pfsense-tools missing from repository
Post by: charliem on March 01, 2014, 09:41:59 am
It started with the contributor license (https://forum.pfsense.org/index.php/topic,71553.0.html) red tape. Then you go and pull the -tools repo and start wiping threads when some enthusiast guy provides his own bleeding edge images. Why, just why? Makes me wonder - what's next? All this has been badly handled, to put it mildly.

Seems to be a rushed / poorly handled split into a community version and a commercial version, with differences yet-to-be-defined in the feature set between the two. 

This post (http://lists.pfsense.org/pipermail/dev/2014-February/000520.html) on the devel mailing list explains a lot.
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on March 01, 2014, 10:50:18 am
Not really sure what to say... When you don't provide any build tools switch to remove the trademarks nonsense, you'd better not accuse people of "misappropriating the trademark". (Note: this (http://devwiki.pfsense.org/ReBrandingSupport) outdated rudimentary "howto" does not count as tool. Related rebranding thread (https://forum.pfsense.org/index.php?topic=73136.0).)  ::) >:(

Seriously concerned about the heading of this project!!!
Title: Re: pfsense-tools missing from repository
Post by: phil.davis on March 01, 2014, 11:17:45 am
Sad to see the end coming. I had found this to be a really good project. FreeBSD 8.3 security support ends soon, so for real/audited/... installations they will want to move up to FreeBSD10. That means 2.2, and if 2.2 is just a commercial offering that means some non-ESF people had better get working on how to make a version of this thing (with another name, I guess) run nicely on FreeBSD10, and not using whatever bits of the code ESF claim they have some copyright to (I haven't looked at the detail of that - maybe it has all been published under an OpenSource license and it is just the brand that is copyright?). I had not expected to need to bother about the legal fine-print on this project - everything I had seen up to this point was friendly and co-operative.
I wonder what will be the next thing to be taken off-line without warning? This forum?
Sorry, having a brain dump here, I am not feeling happy about the way this all feels. I have happily contributed in various ways, and am happy to have done that and hopefully helped people and reduced the number of bugs... so everyone benefits. And now the ongoing project turns commercial and shuts things away - I better read the fine print of their new Individual Contributor License Agreement now - https://www.pfsense.org/ESF_Individual_Contributor_License_Agreement.pdf (https://www.pfsense.org/ESF_Individual_Contributor_License_Agreement.pdf)
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on March 01, 2014, 11:31:47 am
Yeah, indeed. Just after I've switched multiple projects from m0n0wall to pfSense because it felt to be more flexible... Now people can have some more fun explaining how much BSD license "rocks" (https://www.freebsd.org/doc/en/articles/bsdl-gpl/article.html) - NOT!

@phil: Should not have any trouble with copyright, just the trademarks BS. (Basically, getting ESF/pfSense logos, names etc. out of the visible code output and not using ESF trademarks for marketing/shipping the product (if applicable). Basically as per the unmaintained rebranding howto.) Nice they have warned people that "The best way to accomplish this is to pay the developers to do it for you, because if you haven't done it before, it's extremely time consuming where we can get it done quickly" - and then go and complain about "misappropriating the trademark" at the same time and ignore the questions about rebranding posted at the forum. Similar attitude just rocks, wow. 

Not impressed in the least... plus wondering whether the guys behind this have given at least a couple of thoughts to things like how much recommendations is the new commercial product likely to get from the abandoned p****d off community. ::)
Title: Re: pfsense-tools missing from repository
Post by: stephenw10 on March 01, 2014, 01:10:20 pm
Don't speak too soon, there are plenty of projects running a similar business model successfully. Redhat/Fedora for example. The way I read it there will be a 2.2 community edition it just won't have some of the perks of the commercial distro. The fabled pfCenter perhaps. Anyway this is all speculation until we hear from the project leads.
As an example of how not to do it look at Smoothwall (https://twitter.com/EMEACloudGuy/status/313717756463833088). How many Soothie users switched to pfSense after feeling abandoned? I did.

Steve
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on March 01, 2014, 01:20:36 pm
Anyway this is all speculation until we hear from the project leads.

You know, reading more of legal threats like this (http://lists.pfsense.org/pipermail/dev/2014-March/000525.html), I'm not really sure I do care about the project any more.

Quote
How do these non-official "clones" help the project?

The balls. Someone nukes the public repo access, goes silent, meanwhile producing some fog about HW migration and related nonsense, and then asks how do forked repo backups "help the project"? What project? "Lets get more money out of this" is not my project. And I suspect it's not a project for lots of volunteer community testers, people who contributed by filing bugs, writing patches or just been hanging out in the forums, providing unpaid support, etc. etc. etc. The forked repos help the people who need to get work done and have deadlines and do not have time to write emails to a blackhole praying for repo access. Someone shows all these people a middle finger salute and then asks how does forking help. WTH!  ::)
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on March 02, 2014, 01:41:59 am
So well, that's pretty much it (http://lists.pfsense.org/pipermail/dev/2014-March/000537.html), guys. You'd better

- get ready to sign some contracts to get access to pfSense®-tools repo in the future
- not dare to use it for something that's not "genuine pfSense® software" (I guess this is supposed to be something like "Microsoft genuine advantage" program  ::))
- not dare to "abuse" these gyus' infrastructure and commit such horrible crimes like continuing to use the ESF repos for packages in case you "fork" your own code. You know, "[p]eople taking without giving back burden the company, and take from the community."

I have - for a long time - been a Linux Mint user. These guys produce nice, polished "forks" of Debian and Ubuntu with some twist, like Mate etc. They even call the Debian-based variant (http://www.linuxmint.com/download_lmde.php) "Linux Mint Debian Edition (LMDE)". And they openly and directly are involved in such "crimes" like "continue to use other resources of the [Debian/Ubuntu] project (such as the package servers, update servers, etc.)". Indeed, you can mix and match freely with whatever Debian/Ubuntu repo. People love it. Heck, I even report most bugs directly to Debian, because that's what the "upstream" for most packages happens to be. I have yet to hear from Debian/Ubuntu about sending "the most polite letter possible via the law firm" to them, with cease and desist threats. I have yet to hear about limiting access to Debian/Ubuntu repos "subject to certain contractual obligations". I have yet to hear about "non-genuine" accusations and trademarks abuse. Everyone can imagine what kind of PR would that cause to Debian/Ubuntu, in case they decided to take similar steps.

Guys, what you have done is completely incompatible with my view of what open source means, and tells one hell of a sad story about how "open" the BSD license is. Next time someone asks you why you should use a BSD style license for your Open Source Project (https://www.freebsd.org/doc/en/articles/bsdl-gpl/article.html) - well, what's going on here gives you the best answer. The license makes it extremely easy to show a middle finger salute to long-term contributors and community in general, should some electric people get upset about someone doing something to "their" baby. So, next time you think about contributing to a BSD-licensed project, maybe just think twice about it. And next time you think about just using a BSD-licensed work for your own purposes, maybe again think twice about it as well.

I don't want to sign contracts to get access to vital build tools. I do not want to sign Contributor License Agreement (https://www.pfsense.org/ESF_Individual_Contributor_License_Agreement.pdf) to be able to contribute. And - oh the irony - being a lawyer by education myself - the last thing I want is to get involved in similar ridiculous actions against people like the poor guy who posted a 2.2 image here on the forum only to be accused by jimp to be "violating ... registered trademark ... with an adulterated logo". I guess this guy who produced Hyper-V VHDs (https://forum.pfsense.org/index.php/topic,73258.0.html) will become the next target of jimp's/Netgate's/ Electric Sheep Fencing, LLC's wrath. No matter that it's obvious that he only meant to make life better/easier for those loads of people who wish to run pfSense® on a Hyper-V virtual machine, something which the developers miserably failed to deliver for years. Does not matter, "you do not understand trademark law."

Jimp, I actually do. And I am increasingly fed up by the patents, trademarks, copyrights and all that bloated nonsense that no longer contributes to any progress, in fact it hinders it severely. It got completely out of control and any reasonable limits. You indeed have balls when you tell people who "recycled" pfSense® software for their own purposes that they are "often doing a poor job" when removing your trademarks. So, to return you the favour: jimp/ESF, you have done one heck of a poor job while documenting it (http://devwiki.pfsense.org/ReBrandingSupport) (which you even admitted at the time the docs were written and tried to use to your own advantage offering a paid help with rebranding). As for providing usable tools for the purpose, you miserably failed altogether. Nevertheless, it apparently does not prevent you from accusing people to infringe your trademarks when they publish their own images (in vast majority of cases just for the sole purpose of community testing and improving the product). Instead of investing into lawyers who have been sending "the most polite letters", the money would have better been invested into coding so that pfsense®-tools grew itself a --[no|without]-branding switch. Incompatible thinking, right.

Well, enough. This was nice while it lasted. The current direction of the project is not really something I'd want to be involved with and invest my time into. So Long, and Thanks for All the Fish.
Title: Re: pfsense-tools missing from repository
Post by: MatSim on March 02, 2014, 03:21:20 am
I don't know all the back-story of what happened since I consider myself more like a on-off contributor (when I have the time and need to contribute).

Though by following different OSS projects I've learned to distinguish between trademarks and code:
It's not so uncommon for a project-backing company to protect the name and logos of its project and that they set some rules under which the name can be used.

BSDPerimeter and now ESF have already had trademark usage rules and anyone (re-)distributing modified versions would - by those rules - have had to rename the resulting binary product and remove/replace the pfSense logos (both are trademarks). They were mostly OK with those who did so for fun or provided test images for testing a particular functionality they were working on. But when it comes to sell images or products with modified images, things are different, that's when they didn't like it anymore.

Honestly I'm not a enthusiastic about CLAs, but sometimes it better to set up some clear rules under which third-party contributors can bring in their code in (i.e. that they do state their code is theirs and not taken from somewhere else) There are other rather liberally licensed projects (i.e. SmartOS, node.js) that do come with trademark usage rules as well as CLAs, it's not a primer.
And the CLA linked via forums looks not that unreasonable. (i.e. the old Sun Contributor Agreement for OpenSolaris which used copyright transfer, not licensing)

P.S. Even FreeBSD(tm) is a trademark - of the FreeBSD foundation - and its use is also restricted by terms the foundations sets up, to use the FreeBSD term or the logos you also have to abide by some rules and ask for permission at the foundation. https://www.freebsdfoundation.org/faqs.shtml#FreeBSDTrademarkPermission (https://www.freebsdfoundation.org/faqs.shtml#FreeBSDTrademarkPermission), reinforcing code != marks
Title: Re: pfsense-tools missing from repository
Post by: Supermule on March 02, 2014, 04:33:13 am
What about contaction Manuel Kasper and M0n0wall since Pfsense is based on that?

Then develop what we need for the m0n0 and then forget about the greedy bunch that resides on what others produce ?
Title: Re: pfsense-tools missing from repository
Post by: stephenw10 on March 02, 2014, 07:12:04 am
Hmm, interesting (and worrying) stuff.
@doktornotor, assuming you might come back to read this thread, you have your Jims mixed up. Jim Thompson is who you're referring to whereas JimP (Jim Pingle) is a completely different guy.  ;)
Thanks Jim (T) for taking the time to clarify the situation. Obviously there are still many questions but until everything is out in the open it seems pointless speculating.

The most important question for me, if you're reading this, is: if there are going to be community and commercial releases what's the difference going to be? Will you be removing features from one or adding features to the other?

I never actually ran the offending 2.2 images that were posted (only because they weren't Nano) so I don't know, was the pfSense logo actually changed in some way? Even if it were I don't believe for a second that the guy who posted them meant to hurt pfSense in any way. Yes, technically, he may have infringed the trademark but it wasn't a malicious attempt to cash in.

There seems to be some confusion over the use of the word 'clone'. I would think (though I have no evidence) that by far the majority of those who cloned the pfSense git repos did so to be able to test a few fixes or add a few features in order to be able to contribute back. Very few of them will have re-branded the distro or in some way rebuilt pfSense for their own ends.

I don't think anyone here would begrudge the owners of pfSense attempting to restrict others using their trademark for profit.

Steve
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on March 02, 2014, 08:49:15 am
you have your Jims mixed up. Jim Thompson is who you're referring to whereas JimP (Jim Pingle) is a completely different guy.  ;)

Indeed. My bad, and apologies.

so I don't know, was the pfSense logo actually changed in some way? Even if it were I don't believe for a second that the guy who posted them meant to hurt pfSense in any way. Yes, technically, he may have infringed the trademark but it wasn't a malicious attempt to cash in.

Nah. AFAICT he used a modified pfSense logo in the thread only, with 2.2 or something similar added. Completely inadequate knee-jerk reaction on the thread, then the thread got deleted in addition, and then all went downhill pretty fast. :(


I would think (though I have no evidence) that by far the majority of those who cloned the pfSense git repos did so to be able to test a few fixes or add a few features in order to be able to contribute back. Very few of them will have re-branded the distro or in some way rebuilt pfSense for their own ends.

Indeed. And, for the latter cases, there seriously is nothing wrong with that when you rebrand it, nothing in the license prevents you from doing so. It's even been offered as a paid service before (see the links to devwiki posted above.)


I don't think anyone here would begrudge the owners of pfSense attempting to restrict others using their trademark for profit.

Of course not. These are cases which should be solved by the "law firm" and "polite letters". However, it has nothing to do with the community in general, and putting red tape over the whole project and wasting community time with nonsense such as contracts to access builds tools repo, or signing some contributor license agreements is way over board for my taste, and just not something I expect from an open-source project. Seriously annoyed and disappointed, There's enough of this crap with commercial closed source SW.
Title: Re: pfsense-tools missing from repository
Post by: freebee on March 02, 2014, 10:29:43 am
Maybe the answer to all this is Sense Foundation ?.
Companies and persons will be free to participate, and the code always free.
The same step of FreeBSD Foundation and trademark in the past.

Title: Re: pfsense-tools missing from repository
Post by: cmb on March 03, 2014, 01:13:19 am
This has been addressed more on the dev list by me and others in multiple February and March threads.
http://lists.pfsense.org/pipermail/dev/2014-March/thread.html
http://lists.pfsense.org/pipermail/dev/2014-February/thread.html

One complaint here I didn't see addressed there is the contributor agreement. Every open source project that's in solid legal standing has one, we should have a decade ago. Hasn't proven to be a problem thus far, but we don't want to be in a situation where we have to pull or rewrite code because someone makes claims against their past contributions. This is of benefit to the project as a whole, and it's common among significant open source projects.
Title: Re: pfsense-tools missing from repository
Post by: bryan.paradis on March 06, 2014, 11:00:47 am
This has been addressed more on the dev list by me and others in multiple February and March threads.
http://lists.pfsense.org/pipermail/dev/2014-March/thread.html
http://lists.pfsense.org/pipermail/dev/2014-February/thread.html

One complaint here I didn't see addressed there is the contributor agreement. Every open source project that's in solid legal standing has one, we should have a decade ago. Hasn't proven to be a problem thus far, but we don't want to be in a situation where we have to pull or rewrite code because someone makes claims against their past contributions. This is of benefit to the project as a whole, and it's common among significant open source projects.

Are you going to be pulling the builder related code from that git repository and put the rest back up on git? People need pfPorts for debugging things also what about package builders and understanding that process?
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on March 16, 2014, 10:51:35 am
Hi,

Somebody has the /home/pfsense 2.1.1 backup ?. gzip...
I porting pfsense to the new pcengines apu motherboard and need customize the kernel.

Thanks.

Pascal reported that it "just works".   We have it running internally as well.
We are doing some work to enable the LEDs and the sw reset button.
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on March 16, 2014, 10:59:40 am
you have your Jims mixed up. Jim Thompson is who you're referring to whereas JimP (Jim Pingle) is a completely different guy.  ;)

Indeed. My bad, and apologies.
To be clear, I am Jim Thompson, and JimP (Pingle) works for ESF as well.


so I don't know, was the pfSense logo actually changed in some way? Even if it were I don't believe for a second that the guy who posted them meant to hurt pfSense in any way. Yes, technically, he may have infringed the trademark but it wasn't a malicious attempt to cash in.

Nah. AFAICT he used a modified pfSense logo in the thread only, with 2.2 or something similar added. Completely inadequate knee-jerk reaction on the thread, then the thread got deleted in addition, and then all went downhill pretty fast. :(

He built something called "pfSense 2.2", used an adulterated logo, and then posted about it in the forum.
I responded asking him to take it down.   Someone else (not me, and not cmb) deleted the thread.

I would think (though I have no evidence) that by far the majority of those who cloned the pfSense git repos did so to be able to test a few fixes or add a few features in order to be able to contribute back. Very few of them will have re-branded the distro or in some way rebuilt pfSense for their own ends.

Indeed. And, for the latter cases, there seriously is nothing wrong with that when you rebrand it, nothing in the license prevents you from doing so. It's even been offered as a paid service before (see the links to devwiki posted above.)

See?  You do understand the issue.  Thank you.

I don't think anyone here would begrudge the owners of pfSense attempting to restrict others using their trademark for profit.

Of course not. These are cases which should be solved by the "law firm" and "polite letters". However, it has nothing to do with the community in general, and putting red tape over the whole project and wasting community time with nonsense such as contracts to access builds tools repo, or signing some contributor license agreements is way over board for my taste, and just not something I expect from an open-source project. Seriously annoyed and disappointed, There's enough of this crap with commercial closed source SW.

If you really are trained as a lawyer, you'll more than understand why we need a CLA.
I've already said that I'm trying to restore access to the -tools repo in a way that meets our needs without a contract.   That would just be frictional, and a load of work for us.
Title: Re: pfsense-tools missing from repository
Post by: stephenw10 on March 16, 2014, 02:24:15 pm
Thanks for clearing some things up here Jim.

You've allayed some of my fears, hopefully those of others.

Steve
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on April 13, 2014, 10:09:52 am
OK, enough is enough... been almost two months! Simple question - simple answer!

(http://i.imgur.com/uueNDAn.png)

Where is the source code for this "open source" firewall?

Since you are actually selling services (https://www.pfsense.org/get-support/index.html#commercial-support) and hardware (https://store.pfsense.org/) around the product, I'd say this kind of BS is a nice example of deceptive advertising.
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 20, 2014, 01:28:10 pm
Thanks for clearing some things up here Jim.

You've allayed some of my fears, hopefully those of others.

Steve

I'm responding to you, since I've sworn off responding to abusive a-holes like doktornotor.

While it took too long (my bad), the -tools access has been restored.  Those who had sent in a ssh-key have been invited to the early rounds, so we could test the system.
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on April 20, 2014, 02:04:57 pm
the -tools access has been restored.

ORLY?

(http://i.imgur.com/G2mMOwE.png)
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 20, 2014, 02:15:38 pm

Those who repeatedly post based on unwarranted assumptions will be ignored.

Title: Re: pfsense-tools missing from repository
Post by: doktornotor on April 20, 2014, 02:18:36 pm
Where's the -tools repo? Will you either make it available or stop this deceptive advertising? How old are you? 5 yrs? Extremely mature behaviour.
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 20, 2014, 02:19:33 pm
The '-tools' repo is available.
Title: Re: pfsense-tools missing from repository
Post by: Supermule on April 20, 2014, 02:21:27 pm
Linky??
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on April 20, 2014, 02:23:49 pm
The '-tools' repo is available.

GOTO (https://forum.pfsense.org/index.php?topic=73101.msg412546#msg412546) - now perhaps you should take a break and let someone else handle this fiasco before you totally kill the project.
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 20, 2014, 02:49:20 pm
Linky??

explained here: https://forum.pfsense.org/index.php?topic=75651.msg412566
Title: Re: pfsense-tools missing from repository
Post by: doktornotor on April 20, 2014, 02:52:56 pm
explained here

Not really.
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 20, 2014, 04:07:43 pm
!(Not really.)

Keep reading, dude.
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 12:31:22 am
Is the process to request access to pfsense-tools documented somewhere? Once the current trial period is over, will there be any prerequisites to getting access, or will it be more or less automatic? (I didn't see these points addressed in Jim's linked post; sorry if I missed something.)
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 21, 2014, 12:43:31 am
My understanding is that all the kinks were worked out late Friday, or we would have announced it then.

Chris or I (more likely) will make a blog post sometime tomorrow, if the team agrees we're ready.

The only "pre-requisites" to gaining access are to run the process.  You'll need to make an account on the pfSense portal (if you don't already have one), then agree to (and click-through) both the contributor agreement, and the trademark agreement, then put a ssh pubkey in the provided form and submit.  Heck, it's possible that if you can follow those directions, you'll have access in the next 30 minutes.

People who violate the agreements are obviously not going to stay in the program.
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 01:03:57 am
So, just to clarify, that means access will be available to paying customers only?
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 21, 2014, 01:04:44 am
Please go to https://portal.pfsense.org/ and create an account if you don't have one.  Note that there is now a $0 'developer' account.  Thus, you don't *need* to be a paying member, though if you already are one, you don't *need* to create a new account.

Next if you execute the ICA/CCA (pick one) and then the License Agreement, there will a place to put your ssh public key in and, once the sync occurs, you will be able to access the tools repo.

https://portal.pfsense.org/members/signup/ICLA   (if you're signing as an individual)
https://portal.pfsense.org/members/signup/CCLA  (if you're signing on behalf of a corporation)
https://portal.pfsense.org/members/signup/LA

The only reason we haven't posted about it is that it was late on Friday before we verified everything was working.

The git server pulls the keys from the portal system every 5 minutes, so once you have both agreements checked, and your key in you have access.

(Edit: Obviously, this needs some editing.)
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 01:23:08 am
I must be missing something... The only options for "membership type" that I see there are "Gold Subscription" ($99/yr), "pfSense Support" ($400/yr) and "pfSense After-Hours Support" ($250/wk). This is on the "subscribe for access" tab, which is where the "signup here" link takes me; I did't see a registration link anywhere else.
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 01:27:12 am
I guess what you're saying is the URLs you mentioned are used both for creating an account and for signing the agreement?
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 21, 2014, 01:30:14 am
If you sign the ICLA or CCLA first, then the TLA, you should be able to do the rest.
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 01:49:16 am
Seems to have worked, thanks.
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 02:05:53 am
So once all that is in place, how do I find out how to actually access the repository? I can't seem to find any pointers to it on the portal side; will I just get an email once my key has been set up?
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 21, 2014, 11:46:07 am
git pull.

All will be explained in a longer post, later today (possibly tonight).
Title: Re: pfsense-tools missing from repository
Post by: jporter on April 21, 2014, 02:39:17 pm
"git clone git@git.pfsense.org/pfsense-tools"

Most people that are having trouble are not getting both agreements, and putting their key in, without those won't work.
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 05:28:12 pm
"git clone git@git.pfsense.org/pfsense-tools"

Most people that are having trouble are not getting both agreements, and putting their key in, without those won't work.

Thanks, the URL is what I was looking for (and couldn't find anywhere on the member site).
Title: Re: pfsense-tools missing from repository
Post by: ohmantics on April 21, 2014, 05:50:22 pm
"git clone git@git.pfsense.org/pfsense-tools"

Most people that are having trouble are not getting both agreements, and putting their key in, without those won't work.

I've executed the ICLA, the TLA, provided id_rsa.pub in the proper spot, etc.

I corrected the above command to ssh://git@... and it's not working.

What am I missing?
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 05:59:15 pm
I think he probably intended to say "[username]@" instead of "git@", presumably with "[username]" matching what you registered as on the portal site.

That said, like you, I signed both the ICLA and the TLA, and submitted a public key; all of this was done last night, and it all shows up on my profile on the portal site. Nevertheless, when I try to actually connect, I still get a password prompt, so it looks like there's something wrong with my key. Could somebody please clarify what format the web form expects the key to be in? I just copied the entire line from my ssh public key file, including the leading "ssh-rsa" and trailing user name. Are there any restrictions on key type or size?
Title: Re: pfsense-tools missing from repository
Post by: ohmantics on April 21, 2014, 06:01:58 pm
I think he probably intended to say "[username]@" instead of "git@", presumably with "[username]" matching what you registered as on the portal site.

That said, like you, I signed both the ICLA and the TLA, and submitted a public key; all of this was done last night, and it all shows up on my profile on the portal site. Nevertheless, when I try to actually connect, I still get a password prompt, so it looks like there's something wrong with my key. Could somebody please clarify what format the web form expects the key to be in? I just copied the entire line from my ssh public key file, including the leading "ssh-rsa" and trailing user name. Are there any restrictions on key type or size?

I also tried my username and got a password prompt. Copying the key exactly as you describe has worked with other instances where I need to provide such a key.
Title: Re: pfsense-tools missing from repository
Post by: bmeeks on April 21, 2014, 06:39:46 pm
I think he probably intended to say "[username]@" instead of "git@", presumably with "[username]" matching what you registered as on the portal site.

That said, like you, I signed both the ICLA and the TLA, and submitted a public key; all of this was done last night, and it all shows up on my profile on the portal site. Nevertheless, when I try to actually connect, I still get a password prompt, so it looks like there's something wrong with my key. Could somebody please clarify what format the web form expects the key to be in? I just copied the entire line from my ssh public key file, including the leading "ssh-rsa" and trailing user name. Are there any restrictions on key type or size?

I also tried my username and got a password prompt. Copying the key exactly as you describe has worked with other instances where I need to provide such a key.

The URL that Jeremy posted is correct and worked fine for me.  I initially had some problems with the git setup on my local workstation.  The first thing you need to verify is that you can correctly authenticate to this URL from a bash prompt in your git installation.

Code: [Select]
ssh -T git@github.com
Until that correctly authenticates you, the other URL is not going to work either.  My problem on Windows 7 was the ssh_agent was not running.  Manually starting it fixed the problem.  You can then configure it to automatically start with each git session.

There is a Help page on the Github site detailing how to setup SSH keys.  Here is the link I used: https://help.github.com/articles/generating-ssh-keys (https://help.github.com/articles/generating-ssh-keys)

You can also run this command to print more detailed troubleshooting information

Code: [Select]
ssh -Tv git@git.pfsense.org
... or run the same command against the base git@github.com URL.  If you run the test against the git@git.pfsense.org URL, it will say during the output that "Authentication succeeded".  You won't actually get a shell prompt because that is disabled, but you should see that it authenticates your ID.  If it fails to authenticate, you will hopefully find out why by inspecting the detailed output.
Title: Re: pfsense-tools missing from repository
Post by: ohmantics on April 21, 2014, 07:02:26 pm
I think he probably intended to say "[username]@" instead of "git@", presumably with "[username]" matching what you registered as on the portal site.

That said, like you, I signed both the ICLA and the TLA, and submitted a public key; all of this was done last night, and it all shows up on my profile on the portal site. Nevertheless, when I try to actually connect, I still get a password prompt, so it looks like there's something wrong with my key. Could somebody please clarify what format the web form expects the key to be in? I just copied the entire line from my ssh public key file, including the leading "ssh-rsa" and trailing user name. Are there any restrictions on key type or size?

I also tried my username and got a password prompt. Copying the key exactly as you describe has worked with other instances where I need to provide such a key.

The URL that Jeremy posted is correct and worked fine for me.  I initially had some problems with the git setup on my local workstation.  The first thing you need to verify is that you can correctly authenticate to this URL from a bash prompt in your git installation.

Code: [Select]
ssh -T git@github.com
Until that correctly authenticates you, the other URL is not going to work either.  My problem on Windows 7 was the ssh_agent was not running.  Manually starting it fixed the problem.  You can then configure it to automatically start with each git session.

There is a Help page on the Github site detailing how to setup SSH keys.  Here is the link I used: https://help.github.com/articles/generating-ssh-keys (https://help.github.com/articles/generating-ssh-keys)

You can also run this command to print more detailed troubleshooting information

Code: [Select]
ssh -Tv git@git.pfsense.org
... or run the same command against the base git@github.com URL.  If you run the test against the git@git.pfsense.org URL, it will say during the output that "Authentication succeeded".  You won't actually get a shell prompt because that is disabled, but you should see that it authenticates your ID.  If it fails to authenticate, you will hopefully find out why by inspecting the detailed output.

Thanks for the detailed walkthrough. I've used ssh keys with other sites just fine. ssh -Tv says
Code: [Select]
debug1: Authentication succeeded (public key).
Authenticated to git.pfsense.org ([208.123.73.74]:22).

For the originally provided command, "git clone git@git.pfsense.org/pfsense-tools" I get:

Code: [Select]
fatal: repository 'git@git.pfsense.org/pfsense-tools' does not exist

Which is why I prepended ssh:// and tried a few other things.

With "git clone ssh://git@git.pfsense.org/pfsense-tools", I get:

Code: [Select]
fatal: '/pfsense-tools' does not appear to be a git repository
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 21, 2014, 07:18:51 pm
The URL that Jeremy posted is correct and worked fine for me.

I'm pretty sure there should either be a colon between the host name and the path ("git@git.pfsense.org:/pfsense-tools") or a protocol prefix to make it a proper URL.

In any case, I, too, get successful authentication via ssh ("fatal: Interactive git shell is not enabled."), but "repository not found" errors when using git.
Title: Re: pfsense-tools missing from repository
Post by: bmeeks on April 21, 2014, 10:56:26 pm
The URL that Jeremy posted is correct and worked fine for me.

I'm pretty sure there should either be a colon between the host name and the path ("git@git.pfsense.org:/pfsense-tools") or a protocol prefix to make it a proper URL.

In any case, I, too, get successful authentication via ssh ("fatal: Interactive git shell is not enabled."), but "repository not found" errors when using git.

You are correct.  My bad in not noticing Jeremy's URL was not 100% correct.  I looked at it too fast... :-[

Here is the correct one:

Code: [Select]
git clone git@git.pfsense.org:pfsense-tools tools.git
You can replace the tools.git part with whatever you want your local copy of the repository to be named.  This exact command worked for me this morning.  It does take about 5 minutes for the SSH keys to replicate from one server to the other, but I assume that should have happened by now.

Bill
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on April 22, 2014, 01:47:26 am
Ah, so it's a relative path. Poking around a bit, it looks like the full path is /git/pfsense-tools[.git]; both of the following do work for me:

Code: [Select]
git clone git@git.pfsense.org:/git/pfsense-tools.git
git clone ssh://git@git.pfsense.org/git/pfsense-tools.git
Title: Re: pfsense-tools missing from repository
Post by: kpa on April 28, 2014, 05:29:11 am
I just signed the ICLA and the TLA and I pasted my SSH public key to the field reserved for it. However I'm using a DSS key instead of the standard RSA key and it looks like the web interface is truncating my key. Do I really have create a new RSA key just for this purpose?
Title: Re: pfsense-tools missing from repository
Post by: kpa on April 28, 2014, 05:40:36 am
I just signed the ICLA and the TLA and I pasted my SSH public key to the field reserved for it. However I'm using a DSS key instead of the standard RSA key and it looks like the web interface is truncating my key. Do I really have create a new RSA key just for this purpose?

I got it working with a new RSA key and the web interface didn't truncate it this time. Please fix it so that people can use their existing DSS keys, thanks in advance.

Title: Re: pfsense-tools missing from repository
Post by: jdillard on April 28, 2014, 04:06:34 pm
kpa, what was the total length of your DSS key? Do you know if it may have copied newlines in with it?
Title: Re: pfsense-tools missing from repository
Post by: kpa on April 28, 2014, 04:20:26 pm
I copy/pasted both keys the same way by using pbcopy on my macbook and pasting the keys with cmd-V to the input box, only the RSA key didn't get truncated. I'm sure there weren't any newlines. The DSA public key file is 617 characters long and the RSA public key file is 409 characters.
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on April 29, 2014, 05:14:31 pm
Jeremy just patched things up to handle up to 1K char keys.
Title: Re: pfsense-tools missing from repository
Post by: Erreu Gedmon on July 07, 2014, 09:27:51 pm
Jeremy just patched things up to handle up to 1K char keys.
I'm having some trouble too. My key is 395 bytes total, but it keeps getting truncated to 256 bytes on the profile page.

# wc -lc .ssh/id_rsa.pub
  1 395 .ssh/id_rsa.pub

# ssh-keygen -v -lf .ssh/id_rsa.pub
2048 d8:ea:18:bb:4c:0e:24:81:2c:3a:50:39:7a:d1:22:20  mindfulcoyote (RSA)
+--[ RSA 2048]----+
|E .o             |
|=.= .            |
|=+ +             |
|=..    o         |
|+..   . S        |
| +     .         |
|  . o .          |
|   = =           |
|    *..          |
+-----------------+


Here's what I paste:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTYaQ2wNz6fh7cB/NNpYhT07IuDRtGc5QPWqH+1o3kNy3rR4O/gxk4bWC/F7ccWrfeHfzjJWdwrOFc/9OuOdWEVM2NqZb7vqZqWx1wA18ELwnNWKSYpC9lkz+ElMI7F1maGcLDCAwsjT/c/EZV68I3mk+TWZ9KS0Vue1GoxbPR8i7aC5xaln+Y2SYjhpjeIEGDFiKfKEQerQ3ymXZ/OqGPlr/YI9X0Mr7/ypZfXkZrbkAcHK/vFejnD5BL7QA1YmPnaS2HTdKfRcga5rkjWTOKMpQCHdfASPCaC5TilfZcOJpQsXSrcl17ncB66zUZ9bexT4YSsQxXGHFJHY93Z50/ mindfulcoyote

Here's what comes back after saving:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTYaQ2wNz6fh7cB/NNpYhT07IuDRtGc5QPWqH+1o3kNy3rR4O/gxk4bWC/F7ccWrfeHfzjJWdwrOFc/9OuOdWEVM2NqZb7vqZqWx1wA18ELwnNWKSYpC9lkz+ElMI7F1maGcLDCAwsjT/c/EZV68I3mk+TWZ9KS0Vue1GoxbPR8i7aC5xaln+Y2SYjhpjeIEGDFiKfKEQerQ3ymXZ/OqGPlr/

No line feeds or carriage returns. The only white space is after ssh-rsa and between the key and the name at the end.
Any tips? Are we supposed to paste just the fingerprint? Or add a newline every 76 characters?
Title: Re: pfsense-tools missing from repository
Post by: jdillard on July 08, 2014, 11:32:28 am
There was a database corruption issue. If your key isn't working please re-enter it as it should work now.
Title: Re: pfsense-tools missing from repository
Post by: Erreu Gedmon on July 08, 2014, 06:52:47 pm
There was a database corruption issue. If your key isn't working please re-enter it as it should work now.
Oh sorry, I'd better stop uploading buffer overruns.  ;D  j/k!
Title: Re: pfsense-tools missing from repository
Post by: razzfazz on July 11, 2014, 12:14:44 pm
Still can't seem to access the tools repo. portal.pfsense.org seems down, too?!
Title: Re: pfsense-tools missing from repository
Post by: dreamcat4 on July 12, 2014, 12:02:58 pm
There was a database corruption issue. If your key isn't working please re-enter it as it should work now.

Nope. Didn't work. pfsense server still fails to authenticate.
Title: Re: pfsense-tools missing from repository
Post by: jporter on July 16, 2014, 11:49:55 am
https://forum.pfsense.org/index.php?topic=79413.0

Repo access is currently intermittent, until we get it fixed.  Updating your key, will fix it until it breaks again.
Title: Re: pfsense-tools missing from repository
Post by: dreamcat4 on July 16, 2014, 01:43:39 pm
https://forum.pfsense.org/index.php?topic=79413.0

Repo access is currently intermittent, until we get it fixed.  Updating your key, will fix it until it breaks again.

Ah OK. Thanks for this infos. Actually, I had updated my key about 10 or 20 times and it never worked once. But hey. Ever considered putting it up on Github? Hahaha. They don't have such reliability problems over there.

No but seriously, you can have private Github repositories too! Maybe there is a too low restriction for the number of users however. There is Bitbucket too.
Title: Re: pfsense-tools missing from repository
Post by: gonzopancho on September 10, 2014, 09:53:28 am
Being insulting doesn't help