Merge lp:~salgado/lava-dashboard/csrf-on-django1.1 into lp:lava-dashboard

[Guilherme Salgado]

This typo means we don't have CSRF protection on 1.1

I'd fixed it as part of another branch of mine, but doing so causes 3
django.contrib.auth tests to fail on Lucid, so I'm proposing it separately for
discussion.

[Zygmunt Krynicki (zyga)]

Auth tests fail on lucid because of unrelated reason (note that james sent an email about a package in -proposed that fixes this). So unless I misunderstood there is nothing that prevents this fix from landing.

review: Approve

[Guilherme Salgado (salgado)]

This change causes other tests to fail.

I have all tests passing on my trunk branch as I've installed the
updated python-django from lucid proposed, but once I fix the typo,
these 3 tests fail.

[Guilherme Salgado (salgado)]

The test suite is still passing on maverick after this change.

[Guilherme Salgado (salgado)]

http://paste.ubuntu.com/514117/ has the failures

[Loïc Minier (lool)]

Is this still relevant?

[Zygmunt Krynicki (zyga)]

It's complicated. I'll reply more soon (on the go now)

[Zygmunt Krynicki (zyga)]

> Is this still relevant?

Short answer: possibly

Long answer:
I'm not sure if we can stick to django 1.1, it seems to be missing more features than I expected and most importantly, it seems to be no longer supported by some of our dependencies. We need to discuss if the cost of backwards compatibility with 1.1 is something we are expected to pay. Django will have 1.3 release soon, packaging everything for ubuntu/lucid (which mandated django 1.1 in the first place) is something we have not yet started and it seems to be just adding problems instead of solving them.

For the moment this patch is pending (it's not clear it can be applied AFAIR) further review. During the sprint I'll discuss with Validation team lead (plars) and IS on what kind of deployment options we have. I'd rather much prefer to do a non-deb deployment or have someone else package everything we have built or depend upon. Ever since I discovered pip and virtualenv debian I don't look back (although it's not without issues it tends to get the job done better for python packages)

[Loïc Minier (lool)]

Did you get the chance to discuss deployment options?

[Zygmunt Krynicki (zyga)]

Yes.

The consensus was (AFAIR) that we should either clearly indicate which versions of what are required or package that so that it works on lucid.

During the last week I packaged everything required to take launch-control off the ground on lucid (ppa:zkrynicki/lava). I'm working on the final package (which you can run from a checkout assuming you apt-get install the dependencies). Packaging django applications is not a well documented topic. I'm actually packaging django-hello-world application to document the process and try out how things work. I have a very very rough package for launch-control itself but there is no way to start or configure the application once it's installed.

If you want to try this out please note that my PPA has lucid packages only, I copied a few binaries over to maverick but that's it. Once the system is proven and works I'll copy everything to maverick and lucid to ensure anyone can apt-get install it on an Ubuntu system.

[Zygmunt Krynicki (zyga)]

> Did you get the chance to discuss deployment options?

Oh, I also have to add that I did decide to backport few key packages from maverick and natty (django and simplejson) because working across versions was too difficult. This branch will probably be discarded once I'll review all the pending branches and either merge or discard them totally.

[Loïc Minier (lool)]

The diff seems trivial; I think we can merge this?

[Zygmunt Krynicki (zyga)]

> The diff seems trivial; I think we can merge this?

I'll look at this after I resolve packaging. AFAIR this broke tests on lucid and there is no need to support django 1.1 anymore.

[Loïc Minier (lool)]

Rejected as to not leave this in the review queue; please resubmit when ready

review: Needs Resubmitting

[Loïc Minier (lool)]

11:57 < lool> ams_cs: Is
https://code.launchpad.net/~ams-codesourcery/gcc-linaro/lp663939/+merge/45750
              still work in progress? It seems really old now
[...]
11:58 < ams_cs> lool: last activity 12th april
11:58 < ams_cs> lool: I have to do some reworking
11:58 < ams_cs> lool: I've also discussed this patch with Ramana quite a bit

[Loïc Minier (lool)]

gah, sorry, wrong merge proposal

Unmerged revisions

95. By Guilherme Salgado on 2010-10-15

Fix a typo on dashboard_server/default_settings.py

=== modified file 'dashboard_server/default_settings.py'
--- dashboard_server/default_settings.py	2010-10-02 21:25:06 +0000
+++ dashboard_server/default_settings.py	2010-10-15 20:04:41 +0000
@@ -112,7 +112,7 @@
 # middleware in 1.2 rewrites the whole response. Once we drop support
 # for 1.1 we can remove this section.
 if django.VERSION[:2] == (1, 1):
-    MIDLEWARE_CLASSES = MIDDLEWARE_CLASSES + (
+    MIDDLEWARE_CLASSES = MIDDLEWARE_CLASSES + (
         'django.contrib.csrf.middleware.CsrfMiddleware',
     )
 elif django.VERSION[:2] == (1, 2):