[OpenAFS] any experiences with OpenAFS client on the upcoming MacOS 10.10 (yosemite) release?

[Dave Botsch]

I can request it on our account, but I need a *clear* explanation, for
Apple, of ... "what your kernel extension does and why your customers
are required to install it".

If someone who knows the internals better than I can provide this text,
that'd be great.

Thanks.

On Mon, Oct 20, 2014 at 03:48:11PM -0400, Dave Botsch wrote:
> I used the git head, and first had to create the various darwin-140
> files as those were not there.
> 
> My attempt to compile the git head on a fresh install of Yosemite then
> failed with the following:
> 
> http://fpaste.org/143001/
> 
> I don't know if Cornell's developer level allows signing of kernel
> extensions or not. I can certainly check.
> 
> On Mon, Oct 20, 2014 at 03:40:49PM -0400, Benjamin Kaduk wrote:
> > On Mon, 20 Oct 2014, Mattias Pantzare wrote:
> > 
> > > I have tried to compile 1.6.10 on OS X 10.10.
> > >
> > > The first problem is that it will not compile with xcode 5 or 6. I have not
> > > checked if there is a way to change the compiler to gcc on xcode 6, so it
> > > might be possible (the command gcc starts c-lang).
> > 
> > The git master compiles just fine with xcode 6 on my Mavericks machine, so
> > if there are build failures, they are probably just small patches that
> > need to be merged from the master branch to the 1.6 branch.  (I don't
> > think you can get "real" gcc from xcode 6 or higher.)
> > 
> > > 10.10 requires all kernel extensions to be signed. They ship a list of
> > > hashes for old kernel extensions, that is why some versions of openafs will
> > > work on an upgraded system. But new openafs versions have to be signed.
> > 
> > Some individual or organization will need to step forward to do that
> > signing; I do not believe that there is an "OpenAFS" organization
> > currently able or prepared to do so.  (Perhaps the Foundation could, but I
> > am not sure.)  The Windows installers that OpenAFS distributes are signed
> > by Secure Endpoints or YFSI (I forget which), who have graciously been
> > using their codesigning certificates for this purpose.  I do not know if
> > they will be willing to perform the same service for OS X installers.
> > 
> > -Ben
> > _______________________________________________
> > OpenAFS-info mailing list
> > OpenAFS-info@openafs.org
> > https://lists.openafs.org/mailman/listinfo/openafs-info
> 
> -- 
> ********************************
> David William Botsch
> Programmer/Analyst
> @CNFComputing
> botsch@cnf.cornell.edu
> ********************************
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
********************************
David William Botsch
Programmer/Analyst
@CNFComputing
botsch@cnf.cornell.edu
********************************