What is the managment overhead of decentrilized version control?
Aaron Bentley
aaron.bentley at utoronto.ca
Wed Jun 21 14:23:06 BST 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Ben Edwards (lists) wrote:
> On Tue, 2006-06-20 at 09:14 -0400, Aaron Bentley wrote:
> Cons? What cons? :-)
>
>
>> Without any cons bazaar will become tooGoodToBeTreeWare, which is of
>> coarse a very good reason to avoid it like the plage;).
Hey, trees aren't so hot. Bazaar is much better than a tree, because
has branches all over the world. :-)
>> If you have at leas one small con people are a lot more likely to
>> believe the pros.
But seriously, Bazaar doesn't have a smart server yet-- it just uses
dumb file-access methods. There are some security advantages from that:
Our remote-write protocol is just as secure as the OpenSSH suite
(because SFTP is part of the OpenSSH suite).
But there are also some disadvangages
1. A malicious user can delete or alter any part of the system that
SFTP/NFS/SMB grants them access to.
2. It's tricky (but doable) to set up an SFTP server that grants only
SFTP access, not shell access.
I assume you'd use SMB or NFS, so the second probably doesn't apply.
Um, some other differences from SVN are that we don't have tags (yet) or
externals(yet) or keyword expansion.
Aaron
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFEmUg60F+nu1YWqI0RAhucAJ9DUiAE92zxQHBo2eSeDtQYMC9B6ACffOEc
InndJ6oSF+XkhDD402Zk+uU=
=236r
-----END PGP SIGNATURE-----
More information about the bazaar
mailing list