scraperbot protection - Patchwork and Bunsen behind Anubis

[Frank Ch. Eigler]

Hi -

> We were wondering if it would be possible / suitable to have https
> requests served by one container,
> and ssh ones by another? Maybe that's already the case though...

SSH stuff is already (un)contained.

> [...]
> so maybe it would help if we switched to ssh access for our CI user
> when cloning GCC / binuitls / etc sources?

What you'd need is a ssh identity with logon access for the bots.
That's not something we normally do (sourceware accounts are personal
and usually have read-write access to -some- git repos.)  But we could
support read-only ssh accounts for bots.  (read-only for safety, i.e.,
not member of any particular git unix-group/project.)

- FChE