[Buildbot-devel] Build step confirmation on slaves, was Re: Some questions

[Dennis Schridde]

Hi!

As requested by Ben Finney, I split up my questions into seperate emails.

I assume this is probably a feature request:
Is it possible for buildslave admins to verify the commands their slaves will 
be running?

Currently, if someone would takeover the master (or just make a mistake in 
configuration), this would immediately spread over all the slaves, possibly 
causing damage of some form.

What I currently have in mind is that when the buildslave recieves a set of 
commands to run, it checksums it and compares that with a checksum stored in 
buildbot.tac. The build would only be run if the checksums match.

If they do not match, it fires an email (to the master/notifiers, or the slave 
admin in case his emailaddress is known).

That email would include the new commands to be run, and their checksum, plus 
the request to please run "buildbot confirm-build /path checksum" in case the 
commands are correct.

The checksum stored there could have some special values (real values 
depending on the checksuming algorithm, of course):
0: Never confirmed anything, confirmation request will always be send.
-1: Opted out of confirmation. Treat as if checksums always match.
The latter would be the default for migrated setups.

Thanks in advance,
Dennis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://buildbot.net/pipermail/devel/attachments/20080620/6239e7f2/attachment.bin>