Page MenuHomePhabricator

Migrating from Github
Closed, ResolvedPublic

Description

In the longterm it would be a good idea to migrate from github. Lets discuss alternatives in this ticket. Fortunately our bugtracker issues have long been migrated to our infrastructure.

The first question is whether we should self-host the code or use third parties. If we decide on a third party we should see which cannot impose lock-in on our git data.

Details

Impact
Normal

Event Timeline

HulaHoop triaged this task as Normal priority.Jun 22 2018, 5:13 PM
HulaHoop created this task.

I've done a little research into this. I found the following (free) self-hosted alternatives to GitHub.

https://qubes-os.org/faq/#what-does-it-mean-to-distrust-the-infrastructure

What does it mean to “distrust the infrastructure”?

A core tenet of the Qubes philosophy is “distrust the infrastructure,” where “the infrastructure” refers to things like hosting providers, CDNs, DNS services, package repositories, email servers, PGP keyservers, etc. As a project, we focus on securing endpoints instead of attempting to secure “the middle” (i.e., the infrastructure), since one of our primary goals is to free users from being forced to entrust their security to unknown third parties. Instead, our aim is for users to be required to trust as few entities as possible (ideally, only themselves and any known persons whom they voluntarily decide to trust).

Users can never fully control all the infrastructure they rely upon, and they can never fully trust all the entities who do control it. Therefore, we believe the best solution is not to attempt to make the infrastructure trustworthy, but instead to concentrate on solutions that obviate the need to do so. We believe that many attempts to make the infrastructure appear trustworthy actually provide only the illusion of security and are ultimately a disservice to real users. Since we don’t want to encourage or endorse this, we make our distrust of the infrastructure explicit.

https://qubes-os.org/faq/#why-do-you-use-github

Why do you use GitHub?

Three main reasons:

  1. We distrust the infrastructure, including GitHub (though there are aspects we’re still working on).
  2. It’s free (as in beer). We’d have to spend either time or money to implement a solution ourselves or pay someone to do so, and we can’t spare either one right now.
  3. It has low admin/overhead requirements, which is very important, given how little time we have to spare.
Patrick lowered the priority of this task from Normal to Wishlist.Jan 3 2019, 1:22 PM
Patrick added a subscriber: 0brand.
Patrick raised the priority of this task from Wishlist to High.Jun 4 2020, 7:00 PM

Alternative to github.com now needed.

Github allows maximum file size 100 MB and at time of writing monero-wallet-gui was slightly bigger.

git push origin master
remote: Resolving deltas: 100% (24/24), completed with 13 local objects.
remote: error: GH001: Large files detected. You may want to try Git Large File Storage - https://git-lfs.github.com.
remote: error: Trace: 524ad74301f8bed01b8fae36025cbadf
remote: error: See http://git.io/iEPt8g for more information.
remote: error: File usr/bin/monero-wallet-gui is 110.91 MB; this exceeds GitHub's file size limit of 100.00 MB
To ssh://github.com/Whonix/monero-gui.git
 ! [remote rejected] master -> master (pre-receive hook declined)
error: failed to push some refs to 'ssh://git@github.com/Whonix/monero-gui.git'

http://git.io/iEPt8g

Can't use gitlab... There is...

https://gitlab.com/whonix

...but... gitlab.com blocking Tor users:
https://forum.gitlab.com/t/gitlab-com-blocking-tor/38195