Merge remote-tracking branch 'origin/docs'
This commit is contained in:
Cheng
commit
13ad01fdc6
@ -1,6 +1,7 @@
|
||||
[core]
|
||||
autocrlf = input
|
||||
whitespace = -tab-in-indent,tabwidth=4,indent-with-non-tab,trailing-space,space-before-tab
|
||||
whitespace = fix
|
||||
safecrlf=warn
|
||||
[apply]
|
||||
whitespace = fix
|
||||
@ -13,4 +14,6 @@
|
||||
gpgSign = true
|
||||
[submodule]
|
||||
recurse = true
|
||||
[diff]
|
||||
submodule = log
|
||||
|
||||
|
||||
84
LICENSE.html
84
LICENSE.html
@ -1,84 +0,0 @@
|
||||
<!DOCTYPE html>
|
||||
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8" />
|
||||
<meta name="generator" content="pandoc" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
|
||||
<title>LICENSE</title>
|
||||
<style>
|
||||
code{white-space: pre-wrap;}
|
||||
span.smallcaps{font-variant: small-caps;}
|
||||
span.underline{text-decoration: underline;}
|
||||
div.column{display: inline-block; vertical-align: top; width: 50%;}
|
||||
div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}
|
||||
ul.task-list{list-style: none;}
|
||||
.display.math{display: block; text-align: center; margin: 0.5rem auto;}
|
||||
</style>
|
||||
<style type="text/css">body {
|
||||
max-width: 30em;
|
||||
margin-left: 1em;
|
||||
}
|
||||
table {
|
||||
border-collapse: collapse;
|
||||
}
|
||||
td, th {
|
||||
border: 1px solid #999;
|
||||
padding: 0.5rem;
|
||||
text-align: left;
|
||||
}
|
||||
code{white-space: pre-wrap;
|
||||
}
|
||||
span.smallcaps{font-variant: small-caps;
|
||||
}
|
||||
span.underline{text-decoration: underline;
|
||||
}
|
||||
div.column{display: inline-block; vertical-align: top; width: 50%;
|
||||
}
|
||||
div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;
|
||||
}
|
||||
ul.task-list{list-style: none;
|
||||
}
|
||||
.display.math{display: block; text-align: center; margin: 0.5rem auto;
|
||||
}
|
||||
h1.title{text-align: center; font-size: xxx-large;
|
||||
}
|
||||
div.center {text-align:center;
|
||||
}
|
||||
div.centre {text-align:center;
|
||||
}
|
||||
table {
|
||||
border-collapse: collapse;
|
||||
}
|
||||
td, th {
|
||||
border: 1px solid #999;
|
||||
padding: 0.5rem;
|
||||
text-align: left;
|
||||
}
|
||||
</style>
|
||||
<!--[if lt IE 9]>
|
||||
<script src="//cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.3/html5shiv-printshiv.min.js"></script>
|
||||
<![endif]-->
|
||||
</head>
|
||||
<body>
|
||||
<header id="title-block-header">
|
||||
<h1 class="title">LICENSE</h1>
|
||||
</header>
|
||||
<p>Copyright © 2021 reaction.la gpg key 154588427F2709CD9D7146B01C99BB982002C39F</p>
|
||||
<p>This distribution of free software contains numerous other
|
||||
distributions with other compatible free software licenses and copyrights.
|
||||
Those files and directories are governed by their own license, and their
|
||||
combination and integration into this project by this license and this
|
||||
copyright, and anything in this distribution not otherwise licensed and
|
||||
copyrighted in this distribution is governed by this license, and this
|
||||
copyright.</p>
|
||||
<p>Licensed under the Apache License, Version 2.0 (the “License”);
|
||||
you may not use this distribution of software except in compliance with the License.
|
||||
You may obtain a copy of the License at
|
||||
<a href="https://directory.fsf.org/wiki/License:Apache-2.0" class="uri">https://directory.fsf.org/wiki/License:Apache-2.0</a></p>
|
||||
<p>Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an “AS IS” BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.</p>
|
||||
</body>
|
||||
</html>
|
||||
83
NOTICE.html
83
NOTICE.html
@ -1,83 +0,0 @@
|
||||
<!DOCTYPE html>
|
||||
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8" />
|
||||
<meta name="generator" content="pandoc" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
|
||||
<title>NOTICE</title>
|
||||
<style>
|
||||
code{white-space: pre-wrap;}
|
||||
span.smallcaps{font-variant: small-caps;}
|
||||
span.underline{text-decoration: underline;}
|
||||
div.column{display: inline-block; vertical-align: top; width: 50%;}
|
||||
div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}
|
||||
ul.task-list{list-style: none;}
|
||||
.display.math{display: block; text-align: center; margin: 0.5rem auto;}
|
||||
</style>
|
||||
<style type="text/css">body {
|
||||
max-width: 30em;
|
||||
margin-left: 1em;
|
||||
}
|
||||
table {
|
||||
border-collapse: collapse;
|
||||
}
|
||||
td, th {
|
||||
border: 1px solid #999;
|
||||
padding: 0.5rem;
|
||||
text-align: left;
|
||||
}
|
||||
code{white-space: pre-wrap;
|
||||
}
|
||||
span.smallcaps{font-variant: small-caps;
|
||||
}
|
||||
span.underline{text-decoration: underline;
|
||||
}
|
||||
div.column{display: inline-block; vertical-align: top; width: 50%;
|
||||
}
|
||||
div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;
|
||||
}
|
||||
ul.task-list{list-style: none;
|
||||
}
|
||||
.display.math{display: block; text-align: center; margin: 0.5rem auto;
|
||||
}
|
||||
h1.title{text-align: center; font-size: xxx-large;
|
||||
}
|
||||
div.center {text-align:center;
|
||||
}
|
||||
div.centre {text-align:center;
|
||||
}
|
||||
table {
|
||||
border-collapse: collapse;
|
||||
}
|
||||
td, th {
|
||||
border: 1px solid #999;
|
||||
padding: 0.5rem;
|
||||
text-align: left;
|
||||
}
|
||||
</style>
|
||||
<!--[if lt IE 9]>
|
||||
<script src="//cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.3/html5shiv-printshiv.min.js"></script>
|
||||
<![endif]-->
|
||||
</head>
|
||||
<body>
|
||||
<header id="title-block-header">
|
||||
<h1 class="title">NOTICE</h1>
|
||||
</header>
|
||||
<p>Copyright © 2021 reaction.la gpg key 154588427F2709CD9D7146B01C99BB982002C39F</p>
|
||||
<p>The license of this software, and the licenses of the packages on which it
|
||||
relies, grant the four software freedoms:</p>
|
||||
<ol start="0" type="1">
|
||||
<li>The freedom to run the program as you wish, for any purpose.</li>
|
||||
<li>The freedom to study how the program works, and change it so it
|
||||
does your computing as you wish.</li>
|
||||
<li>The freedom to redistribute copies so you can help others.</li>
|
||||
<li>The freedom to distribute copies of your modified versions to
|
||||
others.</li>
|
||||
</ol>
|
||||
<p>This software is licensed under the <a href="LICENSE.html">apache 2.0 license</a>.</p>
|
||||
<p>This product includes several packages, each with their own free software licence, referenced in the relevant files or subdirectories.</p>
|
||||
<p>Or, in the case of Sqlite, the Sqlite blessing in place of a license, which is
|
||||
morally though not legally obligatory on those that obey the
|
||||
commandments of Gnon. See also the <a href="docs/contributor_code_of_conduct.html">contributor code of conduct</a>.</p>
|
||||
</body>
|
||||
</html>
|
||||
@ -1,72 +0,0 @@
|
||||
<!DOCTYPE html>
|
||||
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8" />
|
||||
<meta name="generator" content="pandoc" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes" />
|
||||
<title>Release Notes</title>
|
||||
<style>
|
||||
code{white-space: pre-wrap;}
|
||||
span.smallcaps{font-variant: small-caps;}
|
||||
span.underline{text-decoration: underline;}
|
||||
div.column{display: inline-block; vertical-align: top; width: 50%;}
|
||||
div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;}
|
||||
ul.task-list{list-style: none;}
|
||||
.display.math{display: block; text-align: center; margin: 0.5rem auto;}
|
||||
</style>
|
||||
<style type="text/css">body {
|
||||
max-width: 30em;
|
||||
margin-left: 1em;
|
||||
}
|
||||
table {
|
||||
border-collapse: collapse;
|
||||
}
|
||||
td, th {
|
||||
border: 1px solid #999;
|
||||
padding: 0.5rem;
|
||||
text-align: left;
|
||||
}
|
||||
code{white-space: pre-wrap;
|
||||
}
|
||||
span.smallcaps{font-variant: small-caps;
|
||||
}
|
||||
span.underline{text-decoration: underline;
|
||||
}
|
||||
div.column{display: inline-block; vertical-align: top; width: 50%;
|
||||
}
|
||||
div.hanging-indent{margin-left: 1.5em; text-indent: -1.5em;
|
||||
}
|
||||
ul.task-list{list-style: none;
|
||||
}
|
||||
.display.math{display: block; text-align: center; margin: 0.5rem auto;
|
||||
}
|
||||
h1.title{text-align: center; font-size: xxx-large;
|
||||
}
|
||||
div.center {text-align:center;
|
||||
}
|
||||
div.centre {text-align:center;
|
||||
}
|
||||
table {
|
||||
border-collapse: collapse;
|
||||
}
|
||||
td, th {
|
||||
border: 1px solid #999;
|
||||
padding: 0.5rem;
|
||||
text-align: left;
|
||||
}
|
||||
</style>
|
||||
<!--[if lt IE 9]>
|
||||
<script src="//cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.3/html5shiv-printshiv.min.js"></script>
|
||||
<![endif]-->
|
||||
</head>
|
||||
<body>
|
||||
<header id="title-block-header">
|
||||
<h1 class="title">Release Notes</h1>
|
||||
</header>
|
||||
<p>To build and run <a href="./README.html">README</a></p>
|
||||
<p><a href="docs/index.htm">pre alpha documentation (mostly a wish list)</a> (In order to read these on this local system, you must first execute the document build script <code>mkdocs.sh</code>, with <code>bash</code>, <code>sed</code> and <code>pandoc</code>)</p>
|
||||
<p>This software is pre alpha and should not yet be released. It does
|
||||
not work well enough to even show what it would do if it was
|
||||
working</p>
|
||||
</body>
|
||||
</html>
|
||||
@ -188,7 +188,7 @@ way. Going to use base52 for any purposes for which my bright idea
|
||||
would have been useful, so should be rewritten to base64 regardless.
|
||||
|
||||
Using the hash of shared state goes together with immutable
|
||||
append only Merkle-patricia trees like ham and eggs, though you
|
||||
append only Merkle‑patricia trees like ham and eggs, though you
|
||||
don't need to keep the potentially enormous data structure around.
|
||||
When a connection has no activity for a little while, you can discard
|
||||
everything except a very small amount of data, primarily the keys,
|
||||
|
||||
@ -81,6 +81,13 @@ of Trust is too complicated and too user hostile to be workable or safe.
|
||||
|
||||
Never --sign any Gpg key related to this project. --lsign it.
|
||||
|
||||
`gitconfig` disallows merges unless you have told `gpg` to trust the
|
||||
public key corresponding to the private key that signed the tip of
|
||||
the root. So part of the pull request process is getting the puller to
|
||||
trust your public key, and you will not be able to pull updates
|
||||
unless you tell `gpg` to trust the key that is in the root directory as
|
||||
`public_key.gpg`.
|
||||
|
||||
Never check any Gpg key related to this project against a public
|
||||
gpg key repository. It should not be there.
|
||||
|
||||
|
||||
@ -176,6 +176,38 @@ Setting up an actual server is similar to setting up the virtual machine
|
||||
modelling it, except you have to worry about the server getting overloaded
|
||||
and locking up.
|
||||
|
||||
On an actual server, it is advisable to enable passwordless sudo for one user.
|
||||
|
||||
issue the command `visudo` and edit the sudoers file to contain the line:
|
||||
|
||||
``` default
|
||||
cherry ALL=(ALL) NOPASSWD:ALL
|
||||
```
|
||||
|
||||
That user can now sudo any root command, with no password login nor ssh in for root. And can also get into the root shell with `sudo su -l root`
|
||||
|
||||
On an actual server, you may want to totally disable passwords to
|
||||
accounts that have sensitive information by corrupting the shadow file
|
||||
|
||||
```bash
|
||||
usermod -L cherry
|
||||
```
|
||||
When an account is disabled in this manner, you cannot login at the
|
||||
terminal, and may be unable to ssh in, but you can still get into it by `su -l cherry` from the root account. And if you have disabled the root account,
|
||||
but have enabled passwordless sudo for one special user, you can still get
|
||||
into the root account with `sudo -s` or `sudo su -l root` But if you disable
|
||||
the root account in this manner without creating an account that can sudo
|
||||
into root passwordless, you are hosed big time. So instead, once `ssh` is
|
||||
working, give one user passwordless sudo, make sure you can ssh into that
|
||||
account, and disable password and ssh access to the root account.
|
||||
|
||||
You can always undo the deliberate corruption by setting a new password,
|
||||
providing you can somehow get into root.
|
||||
|
||||
```bash
|
||||
passwd -D cherry
|
||||
```
|
||||
|
||||
If a server is configured with an [ample swap file] an overloaded server will
|
||||
lock up and have to be ungracefully powered down, which can corrupt the data
|
||||
on the server. If the swap file is inadequate, the OOM killer will shut
|
||||
@ -192,6 +224,26 @@ on wake. Swapping should never escalate to lockup, and if it does, bad
|
||||
memory management design, though this misfeature seems common to
|
||||
most operating systems.
|
||||
|
||||
When the OS detects the cpu idling while waiting for pages to be loaded
|
||||
into memory, should disable one process so its pages do not get loaded for
|
||||
a while, and derank all pages in memory that belong to that process, and
|
||||
derank all pages that belong to processes waiting on that process. When the
|
||||
cpu has idle time, and nothing to do for enabled processes, because
|
||||
everything they need has been done, and is only awaiting for disabled
|
||||
processes to get their pages loaded, then the OS can re-enable a disabled
|
||||
process, whereupon its virtualed paged get loaded back into physical
|
||||
memory, possibly resulting in some other process starting to thrash and
|
||||
getting disabled. So instead paging out the least recently used page, pages out an entire process, and stalls it until the cpu is adequately responsive to the remaining processes, and has been adequately responsive for a little
|
||||
while. This is inefficient, but it is a lot more efficient than a computer
|
||||
thrashing on paging. If the computer is stalling waiting on page load, then
|
||||
it is just running more processes than it can run, and the least recently used page algorithm is not going to accomplish anything useful. Some entire
|
||||
processes just have to be paged out, and stay paged out, until the
|
||||
remaining processes have completed and are idling. A thrashing computer
|
||||
is not running anything at all. Better that is run some things, and from time
|
||||
to time changes those things.
|
||||
|
||||
When the cpu has nothing to do because all the processes are waiting for pages to be loaded, something has to be done.
|
||||
|
||||
I prefer an ample swap file, larger than total memory, plus [thrash protect],
|
||||
which will result in comparatively graceful degradation, plus the existence of
|
||||
the file `/tmp/thrash-protect-frozen-pid-list` will tell you that your
|
||||
|
||||
@ -264,47 +264,57 @@ So, you can navigate to whole world’s public conversation through
|
||||
approved links and reply-to links – but not every spammer, scammer, and
|
||||
shill in the world can fill your feed with garbage.
|
||||
|
||||
approved links and reply-to links – but not every spammer, scammer, and
|
||||
shill in the world can fill your feed with garbage.
|
||||
## Algorithm and data structure.
|
||||
|
||||
For this to work, the underlying structure needs to be something based on
|
||||
the same principles as Git and git repositories, except that Git relies on
|
||||
SSL and the Certificate Authority system to locate a repository, which
|
||||
dangerous centralization would fail under the inevitable attack. It needs to
|
||||
have instead for its repository name system a Kamelia distributed has
|
||||
table within which local repositories find the network addresses of remote
|
||||
repositories on the basis of the public key of a Zooko identity of a person
|
||||
who pushed a tag or a branch to that repository, a branch being a thread,
|
||||
and the branch head in this case being the most recent response to a thread
|
||||
by a person you are following.
|
||||
|
||||
The Distributed hash table key will be:\
|
||||
<<<<<<< Updated upstream
|
||||
`human readable area of interest name/#public key of zooko name/
|
||||
=======
|
||||
`#public key of zooko name/
|
||||
>>>>>>> Stashed changes
|
||||
human readable branch name/#hash of data item`\
|
||||
so that items that are likely to be looked up together will likely be near
|
||||
each other on the same physical disk, and transmitted over the same
|
||||
network connection. When someone approves of a text, then it goes into a
|
||||
repository he controls or has write access to, and gets a corresponding key
|
||||
in the distributed hash table.
|
||||
|
||||
<<<<<<< Updated upstream
|
||||
=======
|
||||
Which is not exactly a distributed hash table, for a hash table relies on the uniform distribution of hashes for its efficiency, and, because we want things likely to be looked up together at the same network address on the same physical machine, this is a very non uniform distribution. But it will still be efficient, because by the time you walk the network past the zooko
|
||||
key, you will seldom have very far to walk. Walk the network to the end of
|
||||
the zooko key, you are at a machine to which that identity has write
|
||||
access, and thus, he has the authority and incentive to make things work.
|
||||
|
||||
Rather than being a distributed hash table, this is a distributed patricia tree.
|
||||
But it will work if the person who controls a particular Zooko name
|
||||
structures the data under his name in accordance with the characteristics of
|
||||
the lookup process, and if he does not, other people will fail to find the material in his repositories, and that is his problem, which he can fix.
|
||||
|
||||
>>>>>>> Stashed changes
|
||||
The messages of the people you are following are likely to be in a
|
||||
relatively small number of repositories, even if the total number of
|
||||
repositories out there is enormous and the number of hashes in each
|
||||
repository is enormous, so this algorithm and data structure will scale, and
|
||||
the responses to that thread that they have approved, by people you are not
|
||||
following, will be commits in that repository, that, by pushing their latest
|
||||
response to that thread to a public repository, they committed to that
|
||||
repository.
|
||||
|
||||
Each repository contains all the material the poster has approved, resulting
|
||||
in considerable duplication, but not enormous duplication.
|
||||
|
||||
-## Algorithm and data structure.
|
||||
-
|
||||
-For this to work, the underlying structure needs to be something based on
|
||||
-the same principles as Git and git repositories, except that Git relies on
|
||||
-SSL and the Certificate Authority system to locate a repository, which
|
||||
-dangerous centralization would fail under the inevitable attack. It needs to
|
||||
-have instead for its repository name system a Kademlia distributed hash
|
||||
-table within which local repositories find the network addresses of remote
|
||||
-repositories on the basis of the public key of a Zooko identity of a person
|
||||
-who pushed a tag or a branch to that repository, a branch being a thread,
|
||||
-and the branch head in this case being the most recent response to a thread
|
||||
-by a person you are following.
|
||||
-
|
||||
-So the hashes of identities are tracked by the distributed hash table, but the
|
||||
-hashes of posts are not, because that would result in excessive numbers of
|
||||
-lookups in a table that would very quickly hit its scaling limits. The hashes
|
||||
-of posts are tracked by the repository of the feed that you are looking at, so
|
||||
-require only local lookup, which is faster and less costly than a distributed
|
||||
-lookup. This is equivalent to a fully distributed hash table where the key is
|
||||
-not hash of post, but global name of area of interest, zooko nickname,
|
||||
-zooko public key followed by his human readable thread name (branch
|
||||
-name or tag name in git terminology) followed by hash of post, so that
|
||||
-items that are likely to be looked up together are likely to be located
|
||||
-physically close together on the same disk and will be sent along the same
|
||||
-network connection.
|
||||
-
|
||||
-The messages of the people you are following are likely to be in a
|
||||
-relatively small number of repositories, even if the total number of
|
||||
-repositories out there is enormous and the number of hashes in each
|
||||
-repository is enormous, so this algorithm and data structure will scale, and
|
||||
-the responses to that thread that they have approved, by people you are not
|
||||
-following, will be commits in that repository, that, by pushing their latest
|
||||
-response to that thread to a public repository, they did the equivalent of a
|
||||
-git commit and push to that repository.
|
||||
-
|
||||
-Each repository contains all the material the poster has approved, resulting
|
||||
-in considerable duplication, but not enormous duplication.
|
||||
-
|
||||
The underlying protocol and mechanism is that when you are following
|
||||
Bob, you get a Bob feed from a machine controlled by Bob, or controlled
|
||||
by someone that Bob has chosen to act on his behalf, and that when Bob
|
||||
|
||||
@ -3,7 +3,7 @@ set -e
|
||||
set -x
|
||||
git submodule foreach --recursive 'git reset --hard'
|
||||
git submodule foreach --recursive 'git clean -xdf'
|
||||
git submodule update --init --recursive
|
||||
git submodule update --init --recursive --remote
|
||||
git config --local include.path ../.gitconfig
|
||||
set +e
|
||||
set +x
|
||||
|
||||
Loading…
Reference in New Issue
Block a user