I don't know how we'd get around it without patching the upstreams' dependencies or convincing the upstream projects to use the Apache repos
On Thu, Sep 10, 2015 at 11:46 AM, Konstantin Boudnik <[email protected]> wrote: > On Thu, Sep 10, 2015 at 11:06AM, Olaf Flebbe wrote: > > > even hue is downloading cloudera snapshots (sic!) from maven to compile > > against. IIRC these binaries are not bundled with "our" packaging. > > Yeah, Hue is another of those. Are you saying these dependencies are > 'compile-time' only? If we aren't bundling anything of these 3rd party > binaries to our convenience packages - I am ok. Still feels icky though > > Thanks. > Cos > > > > Am 10.09.2015 um 03:18 schrieb Konstantin Boudnik <[email protected]>: > > > > > > I have been running the full build to validate the DSL patch and have > noticed > > > that kite downloads an enormous amount of Apache stuff from Cloudera's > repo. > > > While is bad by itself, as we have no clue what's in there, I don't > understand > > > why we have to bring things like httpcomponents, ant, etc from a 3rd > party > > > repo-server. That's seems quite bad to me. > > > > > > Also, looking at it I see that the build creates things like > > > [INFO] Building Kite Hadoop CDH5 Dependencies Module 1.1.0 > > > > > > which creates a bad impression that Apache Bigtop is providing a > commercial's > > > vendors binaries. Can anyone who has the knowledge about this component > > > address these issues somehow? > > > > > > Thank you very much! > > > Cos > > > > > > > >
