Netgate SG-1000 microFirewall

Author Topic: Tools Repo  (Read 17035 times)

0 Members and 1 Guest are viewing this topic.

Offline Mat Simon

  • Full Member
  • ***
  • Posts: 148
  • Karma: +9/-2
    • View Profile
Re: Tools Repo
« Reply #15 on: May 17, 2014, 05:49:38 am »
Thanks Chris, that's what I guessed.

As author of patches and thus copyright holder one can always define the compatible license when passing upstream.
However as contributor I have to stick with the license it comes to me which is the OpenSSL-style license in the top directory.

I don't see an issue for code from pfSense itself, it's only about the bits that pfSense takes from upstream FreeBSD and makes patches for it: base and ports.
With the old license it was simple as it was the same license, now there is a little difference, and if there is something stupid happening I can't take a fix in pfSense and send upstream if I'm not the original author.

I'm not a lawyer so if you tell us that without additional mentionings it's just fine, then I shall stay silent :-)
Otherwise what about clarification in the top-level license or explicit license file or information for pfPorts and patches directories (i.e. ~ "These files are governed by same license as unpatched upstream source.").

gonzopancho

  • Guest
Re: Tools Repo
« Reply #16 on: May 20, 2014, 10:35:44 am »
Here are the facts:

https://www.pfsense.org/ESF_Individual_Contributor_License_Agreement_v1.0.pdf

Quote
2.
Grant of Copyright License
.Subject to the terms and conditions of this Agreement, You hereby grant to ESF and to recipients of the Work a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Your Contributions and derivative works thereto, including but not limited to combination(s) of Your Contributions with the Work

Your company is asking individual contributor to grant ownership of their code to your company, without compensation other than access to their source code.

You're wallowing in your FUD.

Point in fact, we are not "asking individual contributor to grant ownership of their code". 

"ownership" of the copyright on the code would require an *assignment*, which we are *explicitly* NOT asking for.

This is about a non-exclusive license.



pfSense licence agreement is available here:
https://www.pfsense.org/ESF_License_Agreement_v1.0.pdf

Quote
Copyright © 2014. Electric Sheep Fencing LLC. The pfSense®
software is offered under license from Electric Sheep Fencing LLC
(“ESF”)


The ESF licence is a very restrictive licence, including a copyright where your company owns everything and people only have the right to ask for permission.
i.e. there is no freedom to modify the source code, i.e. no copyleft. The problem is that all community is about copyleft, so are killing the community and destroying the project.



Let's take your points in order here:
  • "a copyright where your company owns everything" -- false.  just a non-exclusive license to the copyright
  • "there is no freedom to modify the source code" -- 100% false.  You just can't call the result pfSense.
  • "i.e. no copyleft" -- Here you are 100% right.  There is NO WAY IN HELL we're going to GPL the code.
  • "The problem is that all community is about copyleft."  -- You appear to have missed the turn that takes you to the linux village.  This is BSD-land.
  • "so are killing the community and destroying the project." -- you offer no proof here.


You are simply REBRANDING THE WORK OF THE COMMUNITY, putting an Electric Sheep Fencing STICKER on it to pretend it is YOURS.


Seriously?   Let's look at some data.

https://forum.pfsense.org/index.php?topic=76140.0

Also, the brand applied is "pfSense", not ESF.



We would prefer:

Quote
Copyright © 2014. Electric Sheep Fencing LLC. The pfSense®
software is offered under the FreeBSD licence without any limitation.

The difference is that the FreeBSD offers copyleft and the ESF does not.
The FreeBSD would still allow you to make commercial works from pfsense source code.

You would prefer a license which does not exist?   There is no such thing as "the FreeBSD license" (or licence).   There is a **BSD** license (several versions exist.  Most people know about the 2-clause and 3-clause variants.)

This, along with your call for GPL, and your misunderstanding of the difference between assignment and license, tends to show that you really don't know what you're talking about.

gonzopancho

  • Guest
Re: Tools Repo
« Reply #17 on: May 20, 2014, 10:46:59 am »
https://portal.pfsense.org/members/signup/ICLA 
is unacceptable, as it transfers copyright free developer work to a company without compensation.

If it was an assignment (which it is not), then yes, it would transfer copyright to ESF.   It does not, but rather grants a non-exclusive license.
There is a big difference here.

BTW, your call for GPL est très drôle, parce que le FSF exige assignment (transfer of ownership) of copyright when you contribute to their projects.

Read these and ponder your hero:
http://www.gnu.org/licenses/why-assign.html
http://www.gnu.org/prep/maintain/html_node/Copyright-Papers.html
http://www.fsf.org/licensing/assigning.html

This assignment also suggest that pfSense codebase (not pfSense brand) is the ownership of all developers and this is an interesting information, thank you.

As a member of the future developer alliance incorporated under a foundation, we don't recommend signing this agreement.
Please read pfSense Internet neutrality and FreeBSD licence post.

You are entitled to your opinions, of course.   Even when they're laughably wrong.

BTW, don't post here again on this subject.  There is a forum for licensing discussions.  Any further postings by you in Development, which are about licensing, will be deleted.

Online rudivd

  • Newbie
  • *
  • Posts: 19
  • Karma: +0/-0
    • View Profile
Re: Tools Repo
« Reply #18 on: May 28, 2014, 06:41:28 am »
hi Jeremy,

You stated that in the https://portal.pfsense.org/ there should be an $0 developer option, for subscribing.
I cannot find it. The subscription form only states $99 and up subscriptions, and I just want to have acces
to the repo.

Rudi

Online kpa

  • Hero Member
  • *****
  • Posts: 1188
  • Karma: +132/-6
    • View Profile
Re: Tools Repo
« Reply #19 on: May 28, 2014, 12:57:08 pm »
hi Jeremy,

You stated that in the https://portal.pfsense.org/ there should be an $0 developer option, for subscribing.
I cannot find it. The subscription form only states $99 and up subscriptions, and I just want to have acces
to the repo.

Rudi

The instructions are quite wrong and incomplete because you can't create an account unless you either subscribe for support or sign the ICLA at the same time. Unfortunately the only piece of information that directs you to the ICLA is here on forums and not on the portal page (you hear me admins?) Go here and fill in the form to sign the ICLA and create your account:

https://portal.pfsense.org/members/signup/ICLA



« Last Edit: May 28, 2014, 01:07:47 pm by kpa »

Offline jdillard

  • Administrator
  • Sr. Member
  • *****
  • Posts: 534
  • Karma: +124/-1
  • Web Dude
    • View Profile
    • Personal Website
Re: Tools Repo
« Reply #20 on: May 29, 2014, 04:05:35 pm »
I modified the original post to clear up the instructions.

Online kpa

  • Hero Member
  • *****
  • Posts: 1188
  • Karma: +132/-6
    • View Profile
Re: Tools Repo
« Reply #21 on: May 30, 2014, 08:28:17 am »
Thanks :) Could you also look into adding a link to the ICLA on the portal page?

Offline dreamcat4

  • Newbie
  • *
  • Posts: 7
  • Karma: +2/-0
    • View Profile
Re: Tools Repo
« Reply #22 on: July 12, 2014, 08:55:42 am »
I cannot for the life of me get this to work.

If you are being prompted for a password your ssh-key is not working.

This ^^

Check your local ssh-agent and make sure it is running.  Check that your ssh public key is valid and correct in your profile.  Sometimes cutting and pasting can introduce unwanted whitespace/newlines.

Checked.

DSA Keys longer than 512 characters will fail work in the portal.  Keys encoded up to 1024 bytes are ok.  Still avoid newlines.

Checked.

If there are other pointers suggestions you can add them here, and I'll update the post.

What is really missing is a full example of all the little steps from scratch. By that, I mean showing the correct sequence of "ssh-agent" commands, and so on for generating a key file. With some kind of example of what the public key should actually look like, once pasted into the web form / input box.


See here for other such guides:

* https://confluence.atlassian.com/pages/viewpage.action?pageId=271943168
* https://help.github.com/articles/generating-ssh-keys
[EDIT]
+ https://help.github.com/articles/error-permission-denied-publickey


[EDIT]
On IRC, someone say they signed up long ago with this link, to get LA:

https://portal.pfsense.org/members/signup/la

However that not work anymore. So I wonder it that have anything to do with it. Because my subscription only have ICLA and LA accepted (but not TLA). Many thanks.

EDIT: moderator edit to correct incorrect link
« Last Edit: August 08, 2014, 07:19:19 pm by jdillard »

Offline jporter

  • pfSense/Netgate Operations
  • Jr. Member
  • **
  • Posts: 30
  • Karma: +12/-0
  • NSSLabs Devops
    • View Profile
    • Freeside
Re: Tools Repo
« Reply #23 on: July 16, 2014, 11:50:48 am »
Fyi there is currently a bug with the tools repo, we are working on it:
https://forum.pfsense.org/index.php?topic=79413.0
Jessica Porter

Offline tamldt

  • Jr. Member
  • **
  • Posts: 27
  • Karma: +1/-0
    • View Profile
Re: Tools Repo
« Reply #24 on: September 29, 2014, 11:11:12 pm »
Hi all!

I try " git clone git@git.pfsense.org:pfsense-tools" but unsucessfull. It ask me type password for git@git.pfsense.org

I think i have mistake about ssh public key.

But my ssh public key (/root/.ssh/id_rsa.pub) and key on https://portal.pfsense.org/members/signup/LA (my profile) are same.

people can help me fix it...!

thanks...!
Le Doan Thanh Tam
ldtt.s2l@gmail.com

Offline GruensFroeschli

  • Little Green Frog
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 5424
  • Karma: +86/-3
  • No i will not fix your computer!
    • View Profile
Re: Tools Repo
« Reply #25 on: September 30, 2014, 04:45:24 am »
Open/create ~/.ssh/config in an editor of you choice.
Put stuff there similar to:

Host git.pfsense.org
   Hostname git.pfsense.org
   User git
   IdentityFile /home/me/.ssh/me.privkey
We do what we must, because we can.

Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

Offline none

  • Jr. Member
  • **
  • Posts: 25
  • Karma: +0/-0
    • View Profile
Re: Tools Repo
« Reply #26 on: September 30, 2014, 02:55:45 pm »
Tried this idea, no good here :(

Code: [Select]
root@pfsense-22:/tmp/git-teste # git clone git@git.pfsense.org:pfsense-tools tools
Cloning into 'tools'...
ssh_exchange_identification: Connection closed by remote host
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

created the config file, and no good. Tried without also, same problem. sometimes I get this error above, other times ask for password.


Offline Key4ce_angelo

  • Newbie
  • *
  • Posts: 3
  • Karma: +1/-0
    • View Profile
Re: Tools Repo
« Reply #27 on: October 02, 2014, 02:48:03 am »
Same issue in this thread --> https://forum.pfsense.org/index.php?topic=79413.0

Seems to be a DNS issue ..

Quote
git clone git@git.pfsense.org:pfsense-tools tools
Cloning into 'tools'...
Password for git@git.pfense.org:

notice it returns as pfense.org not pfSense.org.
Before I could circumvent this by lookup up git.pfsense.org and simply punching in the IP directly... This obviously shouldnt be working like that... but it did..
Anyway that no longer works.

So I guess we are waiting for someone to fix this in the config.

Please fix this ...
Thanks!

Offline shaqan

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +4/-0
    • View Profile
Re: Tools Repo
« Reply #28 on: October 04, 2014, 01:43:12 pm »
Can't be that admins/devs/mods are unaware of the issue. That's just improbable mathematically. Help has been asked in public forums over past 3 weeks quite a lot of times. If one browses forum even by skimming trough the topics, it should be noticeable enough.

Including in topics they have communicated in earlier times (It would show up in "Show new replies to your posts")

EDIT: :)
https://forum.pfsense.org/index.php?topic=79413.0
I had some private e-mail communications on Saturday with the maintainer of the Tools repo SSH access.  He is aware of the problems and working on it.

Bill
« Last Edit: October 05, 2014, 02:51:19 am by shaqan »

Offline rrouzbeh

  • Newbie
  • *
  • Posts: 2
  • Karma: +0/-0
    • View Profile
Re: Tools Repo
« Reply #29 on: October 21, 2014, 06:37:43 am »
i have problem with tools-repo

Code: [Select]
DNS lookup error: general failure
debug1: Host 'git.pfsense.org' is known and matches the ECDSA host key.
debug1: Found key in /root/.ssh/known_hosts:1
debug1: ssh_ecdsa_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: Roaming not allowed by server
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Next authentication method: publickey
debug1: Offering RSA public key: /root/.ssh/id_rsa
debug1: Authentications that can continue: publickey,keyboard-interactive
debug1: Trying private key: /root/.ssh/id_dsa
debug1: Trying private key: /root/.ssh/id_ecdsa
debug1: Next authentication method: keyboard-interactive
Password for git@git.pfense.org: