On 10/01/18 21:15, Florent Daigniere wrote: > On Wed, 2018-01-10 at 21:10 +0000, Matthew Toseland wrote: >> Could somebody summarise what the plans are, and what the reasons >> behind >> them are for: >> >> 1. Gradle, >> >> 2. Deployment/updating of JARs etc. >> >> I get the impression that this has been a major factor preventing >> forward progress for over a year. >> >> This is particularly depressing given that more than five years ago I >> implemented good auto-update support in fred, including the ability to >> update different files separately, add new jars and so on, all from >> the >> simple file dependencies.properties. It would be very easy to generate >> the last-resort update scripts from that, provided we can provide a >> URL >> to get each component from. Any third-party deployment system will >> likely not work with Freenet, and even if it does, it won't work >> reliably with Freenet when nearly anything except the transport layer >> breaks (unlike the current system). >> >> If the goal is to split up freenet-ext.jar that's great, but again >> that >> is fundamentally very straightforward and does not require rewriting >> all >> the installers and depending on polling a third party web server. >> >> So what is going on, and why? >> >> > What's happening is that Arne is refusing to move forward... and keeps > releasing off the old release tools and Ant. > > The rest of the team has been working on next (I've done most of the > current gradle support, including deterministic builds, ... steve has > been working on the release tools, ...)
So you are checking the hashes of the downloaded components? I thought Gradle was just an evolution of Maven, with all the problems that implies: Recursively pulling random JAR files, with very little authentication, pay-for-only signature checking, and a guarantee that everyone who uploaded those JARs hasn't paid for that feature. In other words, malware galore. If that's the world that Gradle takes Freenet into, then I can entirely understand why Arne would have a problem with it. > On a personal level, I've given up. I'm not enjoying contributing as > much as I used to (mostly because I waste my time argueing with Xor and > Arne)... so nothing is moving forward. Have a look to the diff of the > last few released builds; it's depressing. > > Florent
signature.asc
Description: OpenPGP digital signature
