From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=40.107.71.129; helo=nam05-by2-obe.outbound.protection.outlook.com; envelope-from=jerecox@microsoft.com; receiver=edk2-devel@lists.01.org Received: from NAM05-BY2-obe.outbound.protection.outlook.com (mail-eopbgr710129.outbound.protection.outlook.com [40.107.71.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id E7F562117FD5E for ; Wed, 28 Nov 2018 10:19:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=w5+BXdDNnSxddjoe4HE+nF04ZggnJcXdVyYha865eZw=; b=jA/pc8r9dt5LoLQOrK7vKAmUEez1leJ80jJwrr4qx8bOJzYyIlpq5jUYhXxgcXI6tf3SceqjdDdN1huLxTl4WxKCcXzMGFt/QmOV+leR3Q4sCwrlB5V+clYtvrTaZXpxro4NbZsmMNNItyrw02em6JAa05doyAbnvM28dPmZ8oU= Received: from MWHPR21MB0176.namprd21.prod.outlook.com (10.173.52.22) by MWHPR21MB0157.namprd21.prod.outlook.com (10.173.52.15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1404.4; Wed, 28 Nov 2018 18:19:33 +0000 Received: from MWHPR21MB0176.namprd21.prod.outlook.com ([fe80::5dea:4f10:1303:63f4]) by MWHPR21MB0176.namprd21.prod.outlook.com ([fe80::5dea:4f10:1303:63f4%10]) with mapi id 15.20.1404.002; Wed, 28 Nov 2018 18:19:33 +0000 From: Jeremiah Cox To: Rebecca Cran , "edk2-devel@lists.01.org" Thread-Topic: [edk2] [edk2-announce] Research Request Thread-Index: AQHUfEnTtPiE/WSrPUuPSmMH8XYInKVZXZIAgAAUkYCACRyb4IAA4T0AgAB7zaCAAFtfAIABS9fw Date: Wed, 28 Nov 2018 18:19:33 +0000 Message-ID: References: <4330857f-4e27-632f-6f82-6fc6ec636b2e@linux.intel.com> <01F0790E56F0534D8DCAD4AC5838792F618A554A@irsmsx111.ger.corp.intel.com> <5160554.8gLySxXtyI@photon.int.bluestop.org> In-Reply-To: <5160554.8gLySxXtyI@photon.int.bluestop.org> Accept-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=jerecox@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-11-28T18:19:32.4858643Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:2:467f:d9ea:22de:1c86] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MWHPR21MB0157; 6:DbYq4AqX+bJbq2VswBsbkpsV7/unAwYbsPZLfbWsC35ARSum95CdHkIcBjzzgSRCawHm+fCtB10S/Fsn2lKKJhnY3oW3eqH99HfB7IucGJDEUC2UY6MzUPW+Lb7TGB52WE7Vfk5orMWZ9jw+V8YMwYFXNVJilonN+HspNDY9rkFdJE3h7jr6EcYG6WCvcp8wKILV5f8GpKOOH5fTudUDWf+Lc8PVYk5s7TnppE7sTo8dzaG3gyg0KmhH96mzunhS7TYOn6ArjOYiuugkPiDjyxRWB8GtlVmu0oop6Ka3+4k054EO8fw0jpCP6695M117aoQVrM9DZIKL6wFk/yv6z72ZI4rFyg3As9CoDBrtbRbAU40ok1ElIC8nlCw+3RcZKLEip6sUUWaVc8OnC5/xut103ErX3+/SUeZOaAZCfJulq4DXDjQfz4utjEq0GjnAvAORap3wSi1ubQbenP611w==; 5:BKLmJGSQ/BLUzUEeObfrIFX9uE0ZK+WVwBOSiWHMLyjlRjbOzL0jgBouLBpwf5IKgP2T6oDEKihJYL6/QatEtuWYNpgI7vZCQO4urinxDesQAaxO4k4SLfJ6rSMtxjEfsjuxzyzQP+OIlPPKZCNaPji+sPNIMy2+2XYWIuqb26U=; 7:fbTPOBD0cIutfWa4e0OpLjQp/AsoI9XcZGtlUga1PauSWvxHdRT/tAE6jlf7JbercvldnMHPoOvCoKzmBfJ/04uON35eD3IGjFbdOCKKnsdIEL8ArQcZBjRw/EtVh4xrxTXOZOK2lO4OiVyy/unQLA== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: a0cf30e5-dcce-4445-cd0b-08d6555e0c17 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:MWHPR21MB0157; x-ms-traffictypediagnostic: MWHPR21MB0157: x-ms-exchange-purlcount: 1 authentication-results: spf=none (sender IP is ) smtp.mailfrom=jerecox@microsoft.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(8220035)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231443)(999002)(944501436)(2018427008)(6055026)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123564045)(20161123562045)(201708071742011)(7699051)(76991095); SRVR:MWHPR21MB0157; BCL:0; PCL:0; RULEID:; SRVR:MWHPR21MB0157; x-forefront-prvs: 0870212862 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(136003)(376002)(346002)(366004)(39860400002)(189003)(199004)(13464003)(8990500004)(229853002)(478600001)(305945005)(966005)(6246003)(6436002)(7736002)(81166006)(74316002)(8936002)(10090500001)(6116002)(14444005)(4326008)(81156014)(86362001)(68736007)(256004)(71190400001)(2906002)(71200400001)(2501003)(14454004)(33656002)(93886005)(22452003)(186003)(54906003)(99286004)(7696005)(110136005)(316002)(76176011)(106356001)(86612001)(46003)(105586002)(6506007)(11346002)(55016002)(6306002)(53546011)(25786009)(53936002)(10290500003)(8676002)(476003)(9686003)(446003)(102836004)(5660300001)(486006)(97736004); DIR:OUT; SFP:1102; SCL:1; SRVR:MWHPR21MB0157; H:MWHPR21MB0176.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 6AhCwnZIBew8VCf/0W26ZQTKPxZAaxGhU2HBMGWZ8RlPQ0nTe8lKspuGaAwCtP26fR8orIZnAoRughW75vlqxrppViO+tLdDoBwOWIHIU0pmWa92ZgULVrXDs+2Cst2yMYc/hPLUG4RypJUuozro+IPsfx+TuJcY5MalQIPK1HV7nTgvJA4yVq2N18ohM5tv1sWQCjfUdMihzq+ndFeUg5aoNywvjn33bAhNGIce3+nOE4MJWTOcWyVyZex3SHTC0AuQA0c1WPkfMLIKwRnDvP2hOPR3pKqbWEsO7zD80MHrTjVut9sbGX6ai0Prf5TX6qjgULoj7SJMJm01xgxpHkLZYyltyJcyjhYQmbhtGOU= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: a0cf30e5-dcce-4445-cd0b-08d6555e0c17 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Nov 2018 18:19:33.6245 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR21MB0157 Subject: Re: [edk2-announce] Research Request X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2018 18:19:35 -0000 Content-Language: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable There is a question of how the below is automated such that when there is a= security advisory, a Phabricator instance is patched in a timely fashion. = Perhaps there is a mailing list that would announce these and that could t= rigger an auto-update script. It looks like Phabricator has publicly paid out 36 security bug bounties: https://hackerone.com/phabricator/hacktivity?sort_type=3Dlatest_disclosable= _activity_at&filter=3Dtype%3Abounty-awarded%20to%3Aphabricator&text_query= =3D&page=3D1=20 -----Original Message----- From: Rebecca Cran =20 Sent: Tuesday, November 27, 2018 2:24 PM To: edk2-devel@lists.01.org; Jeremiah Cox Cc: Knop, Ryszard ; stephano Subject: Re: [edk2] [edk2-announce] Research Request On Tuesday, 27 November 2018 14:16:18 MST Jeremiah Cox via edk2-devel wrote= : > Do we have data on what it takes to deploy and operate Phabricator=20 > with Harbormaster or Jenkins? The up front development/deployment=20 > activity/costs and then also the ongoing=20 > patching/servicing/maintenance costs? Is Intel planning to provide this? I haven't integrated Harbormaster or Jenkins, but for just Phabricator the = patching/servicing has ben really simple for the year+ I've been running it= .=20 I'd not consider it 'production' since I'm the only person using it and I'm= running from Git master, not a stable branch - but maintenance has been as= simple as the following (which could of course be put in a script to reduc= e the number of steps!): # Stop the Phabricator daemon ./bin/phd stop # Update Phabricator git pull # Update libphputil cd ../libphputil && git pull # Upgrade arcanist (commandline interface) cd ../arcanist && git pull # Upg= rade database schema ./bin/storage upgrade # Start Phabricator daemon ./bin= /phd start # Reload web server service nginx restart service php-fpm restar= t The "storage upgrade" command goes through the database looking for any inc= onsistencies - missing keys, wrong data types etc., and offers to fix them. -- Rebecca