-
Notifications
You must be signed in to change notification settings - Fork 50
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
libflux: drop flux_sec_t class from public API #1846
Conversation
In Otherwise, LGMT! Thanks @garlick! |
a556045
to
09de8c9
Compare
Thanks @SteVwonder! That was timely as I've got to put my laptop away and hit the road. I had misspelled "python" in one of those commits, so I just went ahead and forced a push with your suggested changes. |
Problem: libflux/security calls flux_strerror() which creates an unnecessary dependency on libflux. Switch to zmq_strerror() or strerror() where appropriate.
Problem: flux_sec_t is being removed from the public API. Drop the python wrapper for it.
Problem: the flux_sec_t "class" is only used by the broker and flux-keygen, and should be removed from the public API. Relocate to libutil/zsecurity. Fixes flux-framework#1843
Problem: flux_sec_ functions, now intended to be private to flux-core, still leak out because of flux_ prefix. Rename flux_sec_* to zsecurity_*. Rneame FLUX_SEC_* to ZSECURITY_*. Leave the FLUX_SEC_DIRECTORY environment variable that points to the location of certs as is. Update valgrind.supp.
09de8c9
to
eb3350c
Compare
Crud, still looks like it's failing something in python land. I went ahead and rebased. |
Looks like pylint is unhappy because Pylint error message:
I'm not sure why the first builder (with no configure flags) failed. All I found was:
Maybe just a transient error? Restarting that builder just to see what happens. |
Codecov Report
@@ Coverage Diff @@
## master #1846 +/- ##
==========================================
- Coverage 79.91% 79.87% -0.04%
==========================================
Files 196 196
Lines 35267 35267
==========================================
- Hits 28185 28171 -14
- Misses 7082 7096 +14
|
Looks like that restarted builder must've completed OK. Thanks for the |
This might be OK to merge despite the so-so coverage, since it's for the most part a straightforward move, coverage problems are pre-existing, and code needs to be reworked at some point. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, seems fine to me too
Merging so we can move other PRs along |
Thanks! |
As suggested in #1843, the
flux_sec_t
code is only used by the broker andflux-keygen
and doesn't have an out of tree use case that I can think of. It's also old code in need of a makeover.Hence, move it to
libutil/zecurity.[ch]
and re-namespace fromflux_sec_*
tozsecurity_*