methods.

Change a bunch of queries that join on the users table to use the idx
instead of the uid. This will need to be completed before we can really
archive users away, but close at this point.

setuid nobody.

between when something is installed and when post-install runs. Short
of a global lock (which we probably need anyway someday), my solution
is this. In your makefiles, add these variables before the line that
has the include of $(TESTBED_SRCDIR)/GNUmakerules:

	SETUID_BIN_SCRIPTS   =
	SETUID_SBIN_SCRIPTS  =

I have added three new rules to GNUmakerules that look like this:

	$(addprefix $(SBINDIR)/, $(SETUID_SBIN_SCRIPTS)): $(SBINDIR)/%: %
		echo "Installing (setuid) $<"
		-mkdir -p $(INSTALL_SBINDIR)
		$(SUDO) $(INSTALL) -o root -m 4755 $< $@

Yep, your eyes ain't lying to you; use sudo to run the target so that
install does the right thing (which is that the old file is not
replaced until the new one has the proper attributes on it).

Note that post-install is still needed for the initial install, but
should no longer be needed for day to day installs since all that other
stuff post-install does is mkdir/chmod on directories.

will go to one place; flyspray@emulab.net

into flyspray DB and send out email to everyone on the notifications
list. This is all done in perl, not php of course.

Database to make it usable for emulab.

thought it would be cause of our current hacked up source code. I also
chased a cookie bug that is caused by domain confusion between inner
and outer emulab. No solutions for this yet, but its not likely to
bother anyone, except the dope that is trying to debug the inner
flyspray web site.

project.

interface with cross machine login support.

the repo in case I decide to stay in Switzerland, eating chocolate and
cheeseballs.