801792 - Make pyrepo public.

Status: RESOLVED FIXED

(Cloud Services :: Operations: Marketplace, task)

Description

[Jeremy Orem [:oremj]]

We'll host this at pyrepo.addons.mozilla.org.

We should probably buy an ssl cert for this and host it on port 443.

Should we add a disclaimer?

Comment 1

[Guillaume Destuynder [:kang] [this account is no longer active]]

would that be hosting a pip/pypi mirror or RPMs?

Comment 2

[Jeremy Orem [:oremj]]

Neither. This hosts python packages in tarball format that our devs upload.

Comment 3

[Andy McKay]

I think this needs a disclaimer or at least an explanation of what it is.

Comment 4

[Jeremy Orem [:oremj]]

kang, note that this bug is only for read only directory listing via nginx/zeus. We will not be making the ability to upload public.

Comment 5

[Jeremy Orem [:oremj]]

Looks like this is fine from a security standpoint. Although, everyone must be aware that anything uploaded here is public, so we need to make sure no tarballs contain password or PII.

Comment 6

[Jeremy Orem [:oremj]]

http://pyrepo1.addons.phx1.mozilla.com/