[SAC] [support.osuosl.org #27802] Mirroring OSGeo Downloads over OSUOSL ftp Service

[Alex M]

On 10/15/2015 08:48 AM, Alex Mandel wrote:
> On 10/15/2015 04:55 AM, Martin Spott via RT wrote:
>> On Mon, Oct 12, 2015 at 08:21:26AM -0700, Alex Mandel wrote:
>>
>>> Seems this might be easiest if you give us an account so we can push the
>>> files when needed (let us determine the schedule).
>>
>> From my perspective I'd say no individual account is required. Let's
>> keep the profile as low as possible and instead provide an Rsync-
>> service to OSL, they just need to provide an IP address they use for
>> pulling from Rsync.
>>
>> OSL folks, does this sound reasonable to you ?
>>
>> 	Martin.
>>
> 
> The only issue with that is that we can't control the timing in the
> event we need to push files, or re-arrange the source machines.
> 
> Maybe we should discuss a little more 1st. It's not a bad thing to know
> the IPs they plan to sync with anyways.
> 
> Thanks,
> Alex

I thought about this some more, I see issues with either setup.

1. We simply open an rsync process restricted to IP and allow OSUOSL to
pull.

The problem here is we don't have direct control to allow for changing
sources, using multiple sources, throttling the speed, picking the timing.

2. We get an account with a set list of SAC admins keys allowed.

The problem here is we'd need a key to push with from a cron job. Seems
somewhat unsafe to create a passphrase-less key for this.


Solution: Both

Why don't we have osuosl create an account, with a set list of SAC admin
keys. This allows us to login and configure the rsync pull ourselves and
time it with crontab. They might even be able to delegate the http conf
file for our domain to us too.


I recommend the following SAC admin keys, and solicit suggestion for
anyone else that should have configuration access:
Alex M.
Martin S.
Jurgen F.
Frank W.

I'd like to get this figured out by the end of this week.

Thanks,
Alex