Toaster 1.7 design: Difference between revisions
| Line 20: | Line 20: | ||
A build farm manager (and their shared Toaster instance) may accept build sets from clients, in which case it is important to know who initiates and owns each specific build, for completion notifications and project space recycling. | A build farm manager (and their shared Toaster instance) may accept build sets from clients, in which case it is important to know who initiates and owns each specific build, for completion notifications and project space recycling. | ||
===== Discussion ===== | |||
[FARRELL] You presented the notion of a user - in the movie it was 'Belen'. I think it may be necessary to formalize this | |||
idea with a login screen and at least rudimentary permission and protection. Here is a use case: Imagine a vendor | |||
deploys Toaster on a server which serves all of its customers. The customers are very diverse and are often competitors | |||
of one another and do not want their configuration/information/ideas shared with other vendor customers. | |||
[BELEN] Very true: access control is a big deal and very important. However, we don't think we can tackle this in the 1.7 release. That's why in the video I speak of "owners" instead of "users". Our "owner" concept derives from the need to identify who created a certain project, but they are not really users since, for example, they don't involve authentication (there is no password). | |||
Here is a possible description of these "owners". Each client accessing a Toaster instance might have an owner linked to it. You don't explicitly create these owners: you just set them in the process of creating your first project. Then, we remember them. Owners involve only 3 pieces of information: a name, an optional email address and the client they are associated with. You can change the details at any time. So "owners" don't involve access control: they just tell me who created (and therefore owns) a certain project. You can have the same owner details in several clients: I might have a laptop and a builds machine, I access Toaster from both, and I can use the same owner name and email address in both. | |||
The above opens some questions: | |||
* can others edit the configuration of a project I own? | |||
* can others start builds against a project I own? | |||
* can others download artifacts of a project I own? | |||
* can others even see the projects I own? | |||
The simplest thing would be either: | |||
* 'yes' to all of the above, but that means that people creating Toaster instances that can be accessed by more than one person have to be mindful of the fact that everything in them is open. | |||
* 'no' to all of the above, and channel all collaboration through the export / import projects functionality, which is safer but also stifles co-operation. | |||
=== Ability to identify build host and build directory === | === Ability to identify build host and build directory === | ||
Revision as of 11:22, 15 April 2014
Feature list
Ability to create new projects
This is the ability to use the Toaster interface to create new project directories, manage the content, and initiate the builds of selectable target images.
Hide builds from a project
This option simply removes or hides selected builds from the Toaster display, for example builds quickly halted because the owner realized that they missed a setting. The database records and the project on the disk is untouched. This un-clutters the display, yet requires little programing (and development time).
Delete builds from a project
This option is where a selected build and all its related database records are removed from the database. This removes the database overhead for this unwanted builds. The project on the disk is untouched. Since the database should be normalized, this operation should be clean and not interfere with other builds. I believe we have a command line version of this operation with Toaster-1.6.
Ability to add/remove layers
Add and delete from the project layer directories. These layers may be within repositories or in plain directories on the disk.
Ability to identify/set project owner/user
A build farm manager (and their shared Toaster instance) may accept build sets from clients, in which case it is important to know who initiates and owns each specific build, for completion notifications and project space recycling.
Discussion
[FARRELL] You presented the notion of a user - in the movie it was 'Belen'. I think it may be necessary to formalize this idea with a login screen and at least rudimentary permission and protection. Here is a use case: Imagine a vendor deploys Toaster on a server which serves all of its customers. The customers are very diverse and are often competitors of one another and do not want their configuration/information/ideas shared with other vendor customers.
[BELEN] Very true: access control is a big deal and very important. However, we don't think we can tackle this in the 1.7 release. That's why in the video I speak of "owners" instead of "users". Our "owner" concept derives from the need to identify who created a certain project, but they are not really users since, for example, they don't involve authentication (there is no password).
Here is a possible description of these "owners". Each client accessing a Toaster instance might have an owner linked to it. You don't explicitly create these owners: you just set them in the process of creating your first project. Then, we remember them. Owners involve only 3 pieces of information: a name, an optional email address and the client they are associated with. You can change the details at any time. So "owners" don't involve access control: they just tell me who created (and therefore owns) a certain project. You can have the same owner details in several clients: I might have a laptop and a builds machine, I access Toaster from both, and I can use the same owner name and email address in both.
The above opens some questions:
- can others edit the configuration of a project I own?
- can others start builds against a project I own?
- can others download artifacts of a project I own?
- can others even see the projects I own?
The simplest thing would be either:
- 'yes' to all of the above, but that means that people creating Toaster instances that can be accessed by more than one person have to be mindful of the fact that everything in them is open.
- 'no' to all of the above, and channel all collaboration through the export / import projects functionality, which is safer but also stifles co-operation.
Ability to identify build host and build directory
To support distributed build hosts sharing a common Toaster database, there needs to be a way in the database to identify which host (IP address and or host name) and local directory the project was built in.
Ability to download files
While developers would presumably have access to all build files within the intranet for the build logs and generated target image files, there are cases where that is not so. For example, the owner may be using a Windows host or a portable device to access Toaster, and may wish to download and view the error logs to determine their next course of action. Also, it may be the case that the specific build host is accessible only to the build farm manager and not the individual project owner, and having Toaster serve the file(s) would resolve this barrier.
This is the capture and sharing of the minimal project configuration data, such that a remote developer can replicate the same project against their own Yocto Project installation.
