laozhoubuluo opened a new issue, #40760:
URL: https://github.com/apache/arrow/issues/40760

   ### Describe the enhancement requested
   
   Currently, `apache.jfrog.io` is the only release channel for various Binary 
Artifacts of Apache Arrow. Therefore, if `apache.jfrog.io` stops serving, there 
will be no other channel to obtain Binary Artifacts. However, `apache.jfrog.io` 
does not provide stable service. The following is a list of multiple service 
outages in recent years.
   
   https://github.com/apache/arrow/issues/12686
   https://github.com/apache/arrow/issues/34675
   https://github.com/apache/arrow/issues/40744
   https://github.com/apache/arrow/issues/40759
   
   Considering that this problem has occurred many times, it has seriously 
affected various downstream software that relies on Apache Arrow. Whether to 
consider adding at least one other release channel for the Binary Artifacts of 
Apache Arrow, such as GitHub Releases or `downloads.apache.org` to avoid 
`apache.jfrog.io` becoming the only release channel for Binary Artifacts. And 
provide alternatives for obtaining Binary Artifacts in the installation 
instructions, even if it may require more troublesome methods such as manual 
installation of DPKG.
   
   The implementation of this measure can effectively reduce risks in the 
downstream software supply chain and avoid the risk that a single component 
cannot be installed, resulting in the entire software being unable to be 
installed, or even the software being unable to continue to work normally.
   
   ### Component(s)
   
   Release


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to