"THE BEER-WARE LICENSE" (Revision 42):
<joerg@FreeBSD.org> wrote this file. As long as you retain this notice you
can do whatever you want with this stuff. If we meet some day, and you think
this stuff is worth it, you can buy me a beer in return. Joerg Wunsch
----------------------------------------------------------------------------
This manual page is partially obtained from Poul-Hennings CTM README
file.
CTM and ctm(1) by <phk@FreeBSD.org>
$FreeBSD: releng/10.3/usr.sbin/ctm/ctm/ctm.1 292534 2015-12-21 09:34:45Z brueffer $
.Dd December 14, 2015 .Dt CTM 1 .Os .Sh NAME .Nm ctm .Nd source code mirror program .Sh SYNOPSIS .Nm .Op Fl cFklquv .Op Fl b Ar basedir .Op Fl B Ar backup-file .Op Fl e Ar include-regex .Op Fl t Ar tar-command .Op Fl T Ar tmpdir .Op Fl V Ar level .Op Fl x Ar exclude-regex .Ar .Sh DESCRIPTION The .Nm utility was originally .Dq Cvs Through eMail , but now instead it seems more fitting to call it .Dq Current Through eMail .
p The .Nm utility is now meant to be the definitive way to make and apply a delta between two versions of a directory tree.
p There are two parts to this, making the delta and applying it. These are two entirely different things. .Ss Usage To apply a CTM delta, you pass it to the .Nm command. You can pass a CTM delta on stdin, or you can give the filename as an argument. If you do the latter, you make life a lot easier for your self, since the program can accept gzip'ed files and since it will not have to make a temporary copy of your file. You can specify multiple deltas at one time, they will be processed one at a time. Deltas that are already applied will be ignored.
p The .Nm command runs in a number of passes. It will process the entire input file in each pass, before commencing with the next pass.
p Before working on a file .Ar name .Nm first checks for the existence of the file .Ar name.ctm . If this file exists, .Nm works on it instead.
p Pass 1 will verify that the input file is OK. The syntax, the data and the global MD5 checksum will be checked. If any of these fail, .Nm will simply reject the input file.
p Pass 2 will validate that the directory tree is in the state expected by the CTM delta. This is done by looking for files and directories which should/should not exist and by checking the MD5 checksums of files.
p If a .Ar backup-file had been specified using the .Fl B option, all files that would be modified by this .Nm invocation are backed up to this file using the archiver command specified by the .Fl t option. The default archiver command is .Nm "tar -rf %s -T -" .
p Pass 3 will actually apply the delta.
p The list of files that would be modified by .Nm is subject to filtering regular expressions specified using the .Fl e and .Fl x options. The .Fl e and .Fl x options are applied in order of appearance on the command line. The last filter that matched a given file name determines whether the file would be operated on or left alone by .Nm .
p The .Nm utility will extract the file hierarchy below its working directory. Absolute filenames or filenames containing references through .Sq Pa .\& and .Sq Pa ..\& are explicitly prohibited as a security measure. .Ss Options l -tag -width indent t Fl b Ar basedir Prepend the path .Ar basedir to every filename. t Fl B Ar backup-file Backup all files that would be modified by this CTM run to .Ar backup-file . If any filters are specified using the .Fl e and .Fl x options, then the final set of files backed up are those that would be modified by CTM after the filters are applied. t Fl c Check it out, do not do anything. t Fl e Ar regular_expression Match each name in the CTM file against .Ar regular_expression , and if it matches process the file, otherwise leave it alone. There may be any number of these options. Use of this option disables the
a .ctm_status sequence number checks. For example, the expression c ^usr.sbin/ctm for example, will select the
a usr.sbin/ctm source directory and all pathnames under it.
p Pathnames can be disabled from being considered by CTM using the .Fl x option. t Fl F Force. t Fl k Keep files and directories and do not remove them even if the CTM file specifies they are to be removed. If the .Fl B option is specified, these files and directories will not be backed up. t Fl l List files that would be modified by this invocation of CTM and the actions that would be performed on them. Use of the .Fl l option disables the
a .ctm_status checks and integrity checks on the source tree being operated on. The .Fl l option can be combined with the .Fl e and .Fl x options to determine which files would be modified by the given set of command line options. t Fl q Tell us less. t Fl t Ar tar-command Use .Ar tar-command instead of the default archiver .Nm tar . This option takes effect only if a backup file had been specified using the .Fl B option. A %s in the tar command will be replaced by the name of the backup file. t Fl T Ar tmpdir Put temporary files under .Ar tmpdir . t Fl u Set modification time of created and modified files to the CTM delta creation time. t Fl v Tell us more. t Fl V Ar level Tell us more. .Ar Level is the level of verbosity. t Fl x Ar regular_expression Match each name in the CTM file against .Ar regular_expression and if it matches, leave the file alone. There may be any number of these options. Use of this option disables the
a .ctm_status sequence number checks.
p Pathnames can be selected for CTM's consideration using the .Fl e option. .El .Sh SECURITY On its own, CTM is an insecure protocol - there is no authentication performed that the changes applied to the source code were sent by a trusted party, and so care should be taken if the CTM deltas are obtained via an unauthenticated medium such as regular email. It is a relatively simple matter for an attacker to forge a CTM delta to replace or precede the legitimate one and insert malicious code into your source tree. If the legitimate delta is somehow prevented from arriving, this will go unnoticed until a later delta attempts to touch the same file, at which point the MD5 checksum will fail.
p To remedy this insecurity, CTM pieces generated by FreeBSD.org are cryptographically signed in a format compatible with the GNU Privacy Guard utility, available in /usr/ports/security/gpg, and the Pretty Good Privacy v5 utility, /usr/ports/security/pgp5. The relevant public key can be obtained by fingering ctm@FreeBSD.org.
p CTM deltas which are thus signed cannot be undetectably altered by an attacker. Therefore it is recommended that you make use of GPG or PGP5 to verify the signatures if you receive your CTM deltas via email. .Sh ENVIRONMENT .Ev TMPDIR , if set to a pathname, will cause ctm to use that pathname as the location of temporary file. See .Xr tempnam 3 , for more details on this. The same effect may be achieved with the .Fl T flag. .Sh FILES
a .ctm_status contains the sequence number of the last CTM delta applied. Changing or removing this file will greatly confuse .Nm .
p Using the .Fl e and .Fl x options can update a partial subset of the source tree and causes sources to be in an inconsistent state. It is assumed that you know what you are doing when you use these options. .Sh EXAMPLES d -literal cd ~cvs /usr/sbin/ctm ~ctm/cvs-* .Ed
p To extract and patch all sources under `lib' d -literal cd ~/lib-srcs /usr/sbin/ctm -e '^lib' ~ctm/src-cur* .Ed .Sh DIAGNOSTICS Numerous messages, hopefully self-explanatory. The .Dq noise level can be adjusted with the .Fl q , .Fl v and .Fl V options. .Sh SEE ALSO .Xr ctm_dequeue 1 , .Xr ctm_rmail 1 , .Xr ctm_smail 1 , .Xr ctm 5 .Rs .%B "The FreeBSD Handbook" .%T "Using CTM" .%U http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/ctm.html .Re .Rs .%T "Miscellaneous CTM on FreeBSD Resources" .%U http://ctm.berklix.org .Re .Sh HISTORY Initial trials were run during the work on .Fx 1.1.5 , and many bugs and methods were hashed out.
p The .Nm command appeared in .Fx 2.1 . .Sh AUTHORS The CTM system has been designed and implemented by .An Poul-Henning Kamp .Aq phk@FreeBSD.org .
p .An Joerg Wunsch .Aq joerg@FreeBSD.org wrote this man-page.