uportal 2 status andrew petro, yale bill thompson, rutgers

uPortal 2 Status

Andrew Petro, YaleBill Thompson, Rutgers

9/19/05 2

Software Maintenance and Evolution

“The majority of development … takes place after the software has seen its first release … is known as software maintenance (or software evolution)” Special Issue on Software Maintenance and Evolution,

IEEE Transactions on Software Engineering, October 2005

9/19/05 3

uPortal release process

Patch releases (frequent, no APIs change, uPortal 2.4.4)

Minor evolutionary releases (periodic, some APIs change where needed, uPortal 2.6)

Major revolutionary releases (rare, huge, uPortal 3)

9/19/05 4

Kinds of releases

Milestone: just a build. Provide a way to talk about and see progress, a goal.

Release candidate: A build for QA and review working towards a GA release.

GA release: “General audience” or “General availability” releases – a “final” release intended for deployers.

uPortal 2.4.x

Patches

9/19/05 6

uPortal 2.4.x strategy

The 2.4.x release strategy has been to: fix reported issues increase portal performance and

stability share fixes/optimizations with later

release branches incorporate important fixes/optimizations

from later releases

9/19/05 7

2.4.x releases

August 2005: uPortal 2.4.3 Memory and performance

October 2005: uPortal 2.4.3.1 Security release to fix “CWebProxy

proxies too much” issue. Expected December: 2.4.4

Bug fixes, JDK 1.5 support

9/19/05 8

What’s in a release?

uPortal 2.5.x

Patches

9/19/05 10

uP 2.5.x releases

uPortal 2.5.1 October 2005 CWebProxy security fix Dynamic channel titles

Expected in December: uPortal 2.5.2 Bugfixes and release process

engineering

9/19/05 11

Dynamic channel titles

Modest feature An example of evolving the codebase

9/19/05 12

Pluggable stats recorder

Enable use case of multiple stats recorders in use concurrently

9/19/05 13

Bugs – and their resolution

WSRP consumption doesn’t work in 2.5 But until Sakai 2.1.0, what WSRP did you

really want to consume?

Some JSR-168 support problems Making this more concrete Patching

CWebProxy security fix

In uPortal 2.4.3.1 and 2.5.1

9/19/05 15

Proxying too much

Exploit allowed the Adversary to proxy arbitrary files on the portal filesystem as the Tomcat user, e.g. your uPortal configuration files including database passwords.

9/19/05 16

The fix

Restrict what paths can be set at runtime.

9/19/05 17

On Reporting Security Exploits

uPortal is an opensource project. Our strength is, we thrive on, open

communication, sharing

But security exploits are special: Let’s not share them until they’re fixed.

In progress: new reporting process

uPortal 2.6

Evolution

9/19/05 19

DLM enhancements

uPortal 2.5 welcomed DLM into baseline uPortal

uPortal 2.6 will include enhancements to DLM in the way managed fragments are managed

9/19/05 20

Fine grained permission grants

Delegating permission to publish channels to a subset of portal users.

9/19/05 21

9/19/05 22

When will uPortal 2.6 be released?

When it’s ready When the uPortal developers

(sufficiently) agree that it’s time to release a new minor release

Prediction: Spring ‘06.

The on-going community process

“Community” means us.

9/19/05 24

Many ways to contribute

Many thanks to Vincent Mathieu for stepping up to produce quickstarts.

9/19/05 25

Lather, Rinse, Repeat:The patch/release march

Continue to incrementally improve uPortal 2.x so long as there’s interest and resources.

9/19/05 26

Many deployers of uP 2.x

9/19/05 27

9/19/05 28

Use cases

9/19/05 29

JIRA issue tracker

Bugfixes, new features, enhancements Patches Screenshots

Scheduling

9/19/05 30

Evolving supporting infrastructure

9/19/05 31

Patches are a wonderful thing

Concrete, specific, technical, unambiguous

9/19/05 32

Evolution

Our Release Process accommodates evolutionary change for minor releases.

Some of these requirements therefore can be realized for uP 2.6, in 2-5 and 2-4 patches.

There are important opportunities here.

9/19/05 33

Revolution

What are the killer features that make a major, revolutionary upgrade worth it? A “no brainer” upgrade?

9/19/05 34

Sustainability

Direct Stakeholder Involvement Funded Contributions Commercial Partners