WG: question about Apache Jenkins and Sonar

[Christofer Dutz]

Von: Christofer Dutz 
Gesendet: Donnerstag, 12. Dezember 2019 08:49:48
An: atoiLiu 
Betreff: AW: question about Apache Jenkins and Sonar

Hi all,

In Jenkins you can log in and create a "credential" where you can put the 
generated token and assign a name to it.

Then you reference this name in the withCredentials block.

Chris

Von: atoiLiu 
Gesendet: Donnerstag, 12. Dezember 2019 07:28:26
An: dev@iotdb.apache.org 
Betreff: Re: question about Apache Jenkins and Sonar

Hi,
Perhaps this token is not a required parameter or instead of using a personal 
account, how about using an account specifically created for ci?

> 在 2019年12月12日，下午2:02，Xiangdong Huang  写道：
>
> Hi,
>
> The analysis repo on SounarCloud has been created [1].
>
> I read the guide [2] and the example of PLC4x [3]  and Sling projects.
> I noticed that all of them mentioned "sonar_token", e.g., "
> withCredentials([string(credentialsId: 'chris-sonarcloud-token', variable: '
> SONAR_TOKEN')]".
>
> I have created a token called xiangdong-iotdb-sonarcloud-token, but my
> question is, don't I need to put the value of the token into the
> configuration file? If I publish the token value, is that suitable?
> (According to my understanding, the token should be protected as a privacy).
>
> (I am trying how to config can work. But if someone can give a guide, it
> will be very helpful :-D ).
>
> [1] https://sonarcloud.io/dashboard?id=apache_incubator-iotdb
> [2] https://cwiki.apache.org/confluence/display/INFRA/SonarQube+Analysis
> [3] https://github.com/apache/plc4x/blob/develop/Jenkinsfile#L124
>
> Best,
> ---
> Xiangdong Huang
> School of Software, Tsinghua University
>
> 黄向东
> 清华大学 软件学院
>
>
> Xiangdong Huang  于2019年12月1日周日 下午1:57写道：
>
>> Hi,
>>
>> thanks Chris and Willem.
>> I have created a jira ticket for applying creating a project on
>> sonarcloud.io [1].
>> Before the application is complete, I disable the sonar analysis from
>> jenkins temporary.
>>
>> [1] https://issues.apache.org/jira/browse/INFRA-19507
>> ---
>> Xiangdong Huang
>> School of Software, Tsinghua University
>>
>> 黄向东
>> 清华大学 软件学院
>>
>>
>> Willem Jiang  于2019年12月1日周日 上午9:39写道：
>>
>>> You need to some setup[1] to enable the Sonar Cloud Service for Apache
>>> project.
>>>
>>> [1]https://cwiki.apache.org/confluence/display/INFRA/SonarQube+Analysis
>>>
>>> Willem Jiang
>>>
>>> Twitter: willemjiang
>>> Weibo: 姜宁willem
>>>
>>> Willem Jiang
>>>
>>> Twitter: willemjiang
>>> Weibo: 姜宁willem
>>>
>>> On Sat, Nov 30, 2019 at 10:31 PM Christofer Dutz
>>>  wrote:

 Hi Xiangdong,

 The ASF SonarCube instance is no longer being run.
 The build has to be changed to SounarCloud.

 Have a look at the PLC4X build (Jenkinsfile).
 We did the change there some time ago.

 Chris

 Am 29.11.19, 17:24 schrieb "Xiangdong Huang" :

Hi,

I find Apache Jenkins build failed because "SonarQube installation
>>> defined
in this job (ASF Sonar Analysis) does not match any configured
installation. Number of installations that can be configured: 0."

I checked recent commits, and find the most possible code
>>> modification is
that  `vulnerability-checks` is moved to `apache-release` profile.

So, is this task who triggers Jenkins to submit a job to SonarQube?

If so, you'd better revoke your modification on the pom file,
>>> @jialin Qiao.

Best,
--
Xiangdong Huang
School of Software, Tsinghua University

 黄向东
清华大学 软件学院


>>>
>>

About the iotdb website

[atoiLiu]

Hi,
I do n’t know if you invited friends to open the official website of iotdb, did 
they encounter any problems?
1. The official website style is very old and feels like a framework website 
opened a few years ago
2. The website opens slowly, and the carousel pictures sometimes cannot be 
displayed correctly.
3. No internationalization, making reading relatively difficult

I think the site may need to be updated to attract new customers

Here are some really cool and fast websites：
[1] http://servicecomb.apache.org/cn/ 
[2] https://pingcap.com/ 
[3] http://dubbo.apache.org/zh-cn/ 

Re: question about Apache Jenkins and Sonar

[atoiLiu]

Hi,
Perhaps this token is not a required parameter or instead of using a personal 
account, how about using an account specifically created for ci?

> 在 2019年12月12日，下午2:02，Xiangdong Huang  写道：
> 
> Hi,
> 
> The analysis repo on SounarCloud has been created [1].
> 
> I read the guide [2] and the example of PLC4x [3]  and Sling projects.
> I noticed that all of them mentioned "sonar_token", e.g., "
> withCredentials([string(credentialsId: 'chris-sonarcloud-token', variable: '
> SONAR_TOKEN')]".
> 
> I have created a token called xiangdong-iotdb-sonarcloud-token, but my
> question is, don't I need to put the value of the token into the
> configuration file? If I publish the token value, is that suitable?
> (According to my understanding, the token should be protected as a privacy).
> 
> (I am trying how to config can work. But if someone can give a guide, it
> will be very helpful :-D ).
> 
> [1] https://sonarcloud.io/dashboard?id=apache_incubator-iotdb
> [2] https://cwiki.apache.org/confluence/display/INFRA/SonarQube+Analysis
> [3] https://github.com/apache/plc4x/blob/develop/Jenkinsfile#L124
> 
> Best,
> ---
> Xiangdong Huang
> School of Software, Tsinghua University
> 
> 黄向东
> 清华大学 软件学院
> 
> 
> Xiangdong Huang  于2019年12月1日周日 下午1:57写道：
> 
>> Hi,
>> 
>> thanks Chris and Willem.
>> I have created a jira ticket for applying creating a project on
>> sonarcloud.io [1].
>> Before the application is complete, I disable the sonar analysis from
>> jenkins temporary.
>> 
>> [1] https://issues.apache.org/jira/browse/INFRA-19507
>> ---
>> Xiangdong Huang
>> School of Software, Tsinghua University
>> 
>> 黄向东
>> 清华大学 软件学院
>> 
>> 
>> Willem Jiang  于2019年12月1日周日 上午9:39写道：
>> 
>>> You need to some setup[1] to enable the Sonar Cloud Service for Apache
>>> project.
>>> 
>>> [1]https://cwiki.apache.org/confluence/display/INFRA/SonarQube+Analysis
>>> 
>>> Willem Jiang
>>> 
>>> Twitter: willemjiang
>>> Weibo: 姜宁willem
>>> 
>>> Willem Jiang
>>> 
>>> Twitter: willemjiang
>>> Weibo: 姜宁willem
>>> 
>>> On Sat, Nov 30, 2019 at 10:31 PM Christofer Dutz
>>>  wrote:
 
 Hi Xiangdong,
 
 The ASF SonarCube instance is no longer being run.
 The build has to be changed to SounarCloud.
 
 Have a look at the PLC4X build (Jenkinsfile).
 We did the change there some time ago.
 
 Chris
 
 Am 29.11.19, 17:24 schrieb "Xiangdong Huang" :
 
Hi,
 
I find Apache Jenkins build failed because "SonarQube installation
>>> defined
in this job (ASF Sonar Analysis) does not match any configured
installation. Number of installations that can be configured: 0."
 
I checked recent commits, and find the most possible code
>>> modification is
that  `vulnerability-checks` is moved to `apache-release` profile.
 
So, is this task who triggers Jenkins to submit a job to SonarQube?
 
If so, you'd better revoke your modification on the pom file,
>>> @jialin Qiao.
 
Best,
--
Xiangdong Huang
School of Software, Tsinghua University
 
 黄向东
清华大学 软件学院
 
 
>>> 
>> 

Re: question about Apache Jenkins and Sonar

[Xiangdong Huang]

Hi,

The analysis repo on SounarCloud has been created [1].

I read the guide [2] and the example of PLC4x [3]  and Sling projects.
I noticed that all of them mentioned "sonar_token", e.g., "
withCredentials([string(credentialsId: 'chris-sonarcloud-token', variable: '
SONAR_TOKEN')]".

I have created a token called xiangdong-iotdb-sonarcloud-token, but my
question is, don't I need to put the value of the token into the
configuration file? If I publish the token value, is that suitable?
(According to my understanding, the token should be protected as a privacy).

(I am trying how to config can work. But if someone can give a guide, it
will be very helpful :-D ).

[1] https://sonarcloud.io/dashboard?id=apache_incubator-iotdb
[2] https://cwiki.apache.org/confluence/display/INFRA/SonarQube+Analysis
[3] https://github.com/apache/plc4x/blob/develop/Jenkinsfile#L124

Best,
---
Xiangdong Huang
School of Software, Tsinghua University

 黄向东
清华大学 软件学院


Xiangdong Huang  于2019年12月1日周日 下午1:57写道：

> Hi,
>
> thanks Chris and Willem.
> I have created a jira ticket for applying creating a project on
> sonarcloud.io [1].
> Before the application is complete, I disable the sonar analysis from
> jenkins temporary.
>
> [1] https://issues.apache.org/jira/browse/INFRA-19507
> ---
> Xiangdong Huang
> School of Software, Tsinghua University
>
>  黄向东
> 清华大学 软件学院
>
>
> Willem Jiang  于2019年12月1日周日 上午9:39写道：
>
>> You need to some setup[1] to enable the Sonar Cloud Service for Apache
>> project.
>>
>> [1]https://cwiki.apache.org/confluence/display/INFRA/SonarQube+Analysis
>>
>> Willem Jiang
>>
>> Twitter: willemjiang
>> Weibo: 姜宁willem
>>
>> Willem Jiang
>>
>> Twitter: willemjiang
>> Weibo: 姜宁willem
>>
>> On Sat, Nov 30, 2019 at 10:31 PM Christofer Dutz
>>  wrote:
>> >
>> > Hi Xiangdong,
>> >
>> > The ASF SonarCube instance is no longer being run.
>> > The build has to be changed to SounarCloud.
>> >
>> > Have a look at the PLC4X build (Jenkinsfile).
>> > We did the change there some time ago.
>> >
>> > Chris
>> >
>> > Am 29.11.19, 17:24 schrieb "Xiangdong Huang" :
>> >
>> > Hi,
>> >
>> > I find Apache Jenkins build failed because "SonarQube installation
>> defined
>> > in this job (ASF Sonar Analysis) does not match any configured
>> > installation. Number of installations that can be configured: 0."
>> >
>> > I checked recent commits, and find the most possible code
>> modification is
>> > that  `vulnerability-checks` is moved to `apache-release` profile.
>> >
>> > So, is this task who triggers Jenkins to submit a job to SonarQube?
>> >
>> > If so, you'd better revoke your modification on the pom file,
>> @jialin Qiao.
>> >
>> > Best,
>> > --
>> > Xiangdong Huang
>> > School of Software, Tsinghua University
>> >
>> >  黄向东
>> > 清华大学 软件学院
>> >
>> >
>>
>

[jira] [Created] (IOTDB-361) Refactor session management by inducing sessionId

[Tian Jiang (Jira)]

Tian Jiang created IOTDB-361:


 Summary: Refactor session management by inducing sessionId
 Key: IOTDB-361
 URL: https://issues.apache.org/jira/browse/IOTDB-361
 Project: Apache IoTDB
  Issue Type: Improvement
Reporter: Tian Jiang


We are using ThreadLocals in TSServiceImpl to distinguish different clients, 
which rely on the underlined server pool to provide a thread for each client 
and blocks us from using more efficient pooling techs.

To resolve this, each client should be given a sessionId (or you may call it 
clientId) as an identifier to replace the usages of ThreadLocal.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Re: [Discuss] about collecting info to know who are using IoTDB

[Justin Mclean]

HI,

> I thought it is common... e.g., Hadoop and Spark also have the similar pages 
> [1] and [2].

It’s common in a certain group of projects. Spark and Hadoop are not the best 
examples for podlings to copy from for a number of reasons. Just because they 
do something doesn’t mean you should.

Thanks,
Justin

Re: [Discuss] about collecting info to know who are using IoTDB

[Xiangdong Huang]

Hi,

I thought it is common... e.g., Hadoop and Spark also have the similar
pages [1] and [2].

[1] https://cwiki.apache.org/confluence/display/HADOOP2/PoweredBy
[2] https://spark.apache.org/powered-by.html

Best,
---
Xiangdong Huang
School of Software, Tsinghua University

 黄向东
清华大学 软件学院


Willem Jiang  于2019年12月12日周四 上午8:54写道：

> I guess they just want to tell the new coming user, lots of companies
> are build production system on top of this project.
>
> Willem Jiang
>
> Twitter: willemjiang
> Weibo: 姜宁willem
>
> On Thu, Dec 12, 2019 at 5:26 AM Justin Mclean 
> wrote:
> >
> > Hi,
> >
> > > I notice that ShardingSpehere incubating project has a page for
> collecting
> > > who are using IoTDB[1].  They use github issue to collect the data [2].
> >
> > I not sure this is that useful, people contribute to ASF projects as
> individuals not companies. While it nice to know your project is being used
> I don’t think there’s a lot of value in displaying that list. The ASF is
> also vender neutral, why do some companies listed there have logos and some
> do not?
> >
> > Thanks,
> > Justin
>

Re: [Discuss] about collecting info to know who are using IoTDB

[Willem Jiang]

I guess they just want to tell the new coming user, lots of companies
are build production system on top of this project.

Willem Jiang

Twitter: willemjiang
Weibo: 姜宁willem

On Thu, Dec 12, 2019 at 5:26 AM Justin Mclean  wrote:
>
> Hi,
>
> > I notice that ShardingSpehere incubating project has a page for collecting
> > who are using IoTDB[1].  They use github issue to collect the data [2].
>
> I not sure this is that useful, people contribute to ASF projects as 
> individuals not companies. While it nice to know your project is being used I 
> don’t think there’s a lot of value in displaying that list. The ASF is also 
> vender neutral, why do some companies listed there have logos and some do not?
>
> Thanks,
> Justin

Re: [Discuss] about collecting info to know who are using IoTDB

[Justin Mclean]

Hi,

> I notice that ShardingSpehere incubating project has a page for collecting
> who are using IoTDB[1].  They use github issue to collect the data [2].

I not sure this is that useful, people contribute to ASF projects as 
individuals not companies. While it nice to know your project is being used I 
don’t think there’s a lot of value in displaying that list. The ASF is also 
vender neutral, why do some companies listed there have logos and some do not?

Thanks,
Justin

Re: [jira] [Closed] (IOTDB-150) Try some other web fonts

[Justin Mclean]

Hi,

Just curious why this was closed as “Wont Do” with no explanation.

Thanks,
Justin

Re: [Discuss] about collecting info to know who are using IoTDB

[atoiLiu]

Add Guestbook 

 in http://iotdb.incubator.apache.org/#/ 
open issue on GitHub 


> 在 2019年12月11日，下午2:24，Xiangdong Huang  > 写道：
> 
> Hi,
> 
> I notice that ShardingSpehere incubating project has a page for collecting
> who are using IoTDB[1].  They use github issue to collect the data [2].
> 
> I think it is helpful for the project graduation
> 
> So, if IoTDB also collects the info, how to do that? Any ideas?
> 
> 1. We do not open the issue module on Github.
> 2. For Chinese users, many of them do not have a Apache JIRA account and
> opening the jira may requires some skills in China because of Chinese
> network problem.
> 
> So, how about opening a tickets on jira for collecting users out of China,
> and opening a online document, e.g., QQ document, to collect users in China
> (But it is hard to record that who maintains the document. (Everyone can
> modify the document, while on JIRA and github, the contents is binding with
> accounts)).
> 
> [1] https://shardingsphere.apache.org/community/en/poweredby/ 
> 
> [2] https://github.com/sharding-sphere/sharding-sphere/issues/234 
> 
> 
> Best,
> ---
> Xiangdong Huang
> School of Software, Tsinghua University
> 
> 黄向东
> 清华大学 软件学院