[OpenAFS] any experiences with OpenAFS client on the upcoming MacOS 10.10 (yosemite) release?

Stephan Wiesand stephan.wiesand@desy.de
Tue, 21 Oct 2014 15:33:41 +0200


I shouldn't try to provide that text, but this bit from =
http://www.openafs.org/credits.html may help:

"Several institutions have funded internal development of AFS code which =
has been contributed for inclusion in OpenAFS distributions.=20

	=95 Apple Computer, Inc - MacOS 10.3 client/server port
"

- Stephan

On 2014-10-20, at 21:58, Dave Botsch <botsch@cnf.cornell.edu> wrote:

> I can request it on our account, but I need a *clear* explanation, for
> Apple, of ... "what your kernel extension does and why your customers
> are required to install it".
>=20
> If someone who knows the internals better than I can provide this =
text,
> that'd be great.
>=20
> Thanks.
>=20
> On Mon, Oct 20, 2014 at 03:48:11PM -0400, Dave Botsch wrote:
>> I used the git head, and first had to create the various darwin-140
>> files as those were not there.
>>=20
>> My attempt to compile the git head on a fresh install of Yosemite =
then
>> failed with the following:
>>=20
>> http://fpaste.org/143001/
>>=20
>> I don't know if Cornell's developer level allows signing of kernel
>> extensions or not. I can certainly check.
>>=20
>> On Mon, Oct 20, 2014 at 03:40:49PM -0400, Benjamin Kaduk wrote:
>>> On Mon, 20 Oct 2014, Mattias Pantzare wrote:
>>>=20
>>>> I have tried to compile 1.6.10 on OS X 10.10.
>>>>=20
>>>> The first problem is that it will not compile with xcode 5 or 6. I =
have not
>>>> checked if there is a way to change the compiler to gcc on xcode 6, =
so it
>>>> might be possible (the command gcc starts c-lang).
>>>=20
>>> The git master compiles just fine with xcode 6 on my Mavericks =
machine, so
>>> if there are build failures, they are probably just small patches =
that
>>> need to be merged from the master branch to the 1.6 branch.  (I =
don't
>>> think you can get "real" gcc from xcode 6 or higher.)
>>>=20
>>>> 10.10 requires all kernel extensions to be signed. They ship a list =
of
>>>> hashes for old kernel extensions, that is why some versions of =
openafs will
>>>> work on an upgraded system. But new openafs versions have to be =
signed.
>>>=20
>>> Some individual or organization will need to step forward to do that
>>> signing; I do not believe that there is an "OpenAFS" organization
>>> currently able or prepared to do so.  (Perhaps the Foundation could, =
but I
>>> am not sure.)  The Windows installers that OpenAFS distributes are =
signed
>>> by Secure Endpoints or YFSI (I forget which), who have graciously =
been
>>> using their codesigning certificates for this purpose.  I do not =
know if
>>> they will be willing to perform the same service for OS X =
installers.
>>>=20
>>> -Ben

--=20
Stephan Wiesand
DESY - DV -
Platanenallee 6
15738 Zeuthen, Germany