On 10 Mar 14:11, Bjoern Rabenstein wrote: > On 10.03.20 13:48, Julien Pivotto wrote: > > > > As far as I know the main go proxies are maintained by google, and we > > can not afford hosting one for the project in the long term. Google is > > not really known for their long-term commitments. > > > > I know that in the past we wanted to rebuild old releases of prometheus > > and could not (for unrelated reasons!). If now (or in X years) the > > goproxy decides to garbage collect dependencies untouched for x months > > and the upstream is gone, rebuilding old releases will be even more > > difficult. > > There are plenty of non-Google-run go-modules proxy. And should Google > really shutdown hosting go-modules, I'm sure there will be even more. > > And even if they all disappear, the git-hosting platforms that have > the source code can still give you the old versions of the source. > > And even if they all disappear, you or me or somebody else will still > have a clone of the Git repo on their laptop. > > In sum, I highly doubt that reconstructing the source code for an old > version will ever be impossible. It might be a bit inconvenient, but > the necessity of building old versions of Prometheus is rare enough > that it's not really of practical relevance. I would much prefer > leaner source repositories. > > -- > Björn Rabenstein > [PGP-ID] 0x851C3DA17D748D03 > [email] [email protected]
Note: CNCF will adapt the tooling to support go.mod and go.sum so that question is out of the table. -- (o- Julien Pivotto //\ Open-Source Consultant V_/_ Inuits - https://www.inuits.eu -- You received this message because you are subscribed to the Google Groups "Prometheus Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-developers/20200310133729.GB22487%40oxygen.
signature.asc
Description: PGP signature
