Re: [PAX EXAM] Release 4.13.2

[Jean-Baptiste Onofré]

Hi,

Pax Exam 4.13.2 has been released. I'm preparing the news on OPS4J site and
I will send the announcement email.

Regards
JB

On Wed, Feb 19, 2020 at 11:11 PM Oliver Lietz  wrote:

> On Wednesday, February 19, 2020 11:40:53 AM CET Jean-Baptiste Onofré wrote:
> > Sure. I will.
>
> Done. PAXEXAM-934 and dependency updates (fixing HTTP issue with Maven
> Central).
>
> Please go ahead, JB.
>
> Thanks,
> O.
>
> > Le mer. 19 févr. 2020 à 11:23, Oliver Lietz  a
> écrit :
> > > On Wednesday, February 19, 2020 7:07:24 AM CET Jean-Baptiste Onofré
> wrote:
> > > > Hi
> > > >
> > > > I will.
> > >
> > > Let me add some dependency updates and improvements before cutting the
> > > release. Can you add version 4.13.2 to JIRA?
> > >
> > > Thanks,
> > > O.
> > >
> > > > Regards
> > > > JB
> > > >
> > > > Le mer. 19 févr. 2020 à 00:35, Oliver Lietz  a
> > >
> > > écrit :
> > > > > Hi *,
> > > > >
> > > > > I need a new release of Pax Exam: 4.13.2
> > > > > Who can manage versions in JIRA?
> > > > >
> > > > > Thanks,
> > > > > O.
> [...]
>
>
>
> --
> --
> --
> OPS4J - http://www.ops4j.org - ops4j@googlegroups.com
>
> ---
> You received this message because you are subscribed to the Google Groups
> "OPS4J" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ops4j+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ops4j/6567372.OaYqkxrSbj%40madness.front.ruhr
> .
>

-- 
-- 
--
OPS4J - http://www.ops4j.org - ops4j@googlegroups.com

--- 
You received this message because you are subscribed to the Google Groups 
"OPS4J" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ops4j+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ops4j/CAB8EV3SXR2F_Yd2THvwGROG6vpZKHED5Gh7CR%3Dfz3bpkzmL-ZQ%40mail.gmail.com.

Re: Maven Aether configuration

[Jared Whiklo]

Thanks Oliver, I'll watch for the release.

On 2020-02-19 4:09 p.m., Oliver Lietz wrote:
> On Wednesday, February 19, 2020 10:52:49 PM CET Jared Whiklo wrote:
>> Hi all,
> 
> Hi Jared,
> 
>> I'm relatively new to Pax-Exam stuff, but have been using it to test
>> deployment of some resources in a Karaf container. This was working until
>> such time as the recent switch to required SSL for maven central. So I need
>> to switch out any default repositories urls from
>> "http://repo1.maven.org/maven2/; to "https://repo1.maven.org/maven2/;.
>>
>> Currently we are getting the error
>>
>> -
>> Gradle Test Run :islandora-karaf:test > Gradle Test Executor 31 >
>> ca.islandora.alpaca.karaf.KarafIT > classMethod FAILED
>> java.lang.RuntimeException: Problem starting container
>>
>> Caused by:
>> java.io.IOException: Error resolving artifact
>> org.apache.karaf:apache-karaf:jar:zip:4.0.6: Could not transfer artifact
>> org.apache.karaf:apache-karaf:jar:zip:4.0.6 from/to central
>> (http://repo1.maven.org/maven2/): Failed to transfer file:
>> http://repo1.maven.org/maven2/org/apache/karaf/apache-karaf/4.0.6/apache-kar
>> af-4.0.6-zip.jar. Return code is: 501 , ReasonPhrase:HTTPS Required.
>>
>> Gradle Test Run :islandora-karaf:test > Gradle Test Executor 31 >
>> ca.islandora.alpaca.karaf.KarafIT > executionError FAILED
>> java.lang.RuntimeException: Container never came up
>> 
>>
>> I'm trying to set either the "org.ops4j.pax.url.mvn.repositories" or
>> "org.ops4j.pax.url.mvn.settings" property. I have tried using the
>> CoreOptions.systemProperty and
>> CoreOptions.frameworkProperty but neither is used by the
>> AetherBasedResolver class and instead it seems to fallback to...my maven
>> settings?
>>
>> The only thing that has worked was to add a  to my local
>> ~/.m2/settings.xml for central. But this seems very user specific.
>>
>> The test class can be found here
>> https://github.com/Islandora/Alpaca/blob/dev/karaf/src/test/java/ca/islandor
>> a/alpaca/karaf/KarafIT.java
>>
>> I feel like there something obvious I am missing here, any help is
>> appreciated.
> 
> No, I fixed it just yesterday for 4.x by upgrading Pax URL.
> New release is outstanding.
> 
> Regards,
> O.
> 
>> cheers,
>> jared
> 
> 
> 

-- 
Jared Whiklo
Pronouns: he/him/his
jwhi...@gmail.com
--
People are more violently opposed to fur than leather because it's safer
to harass rich women than motorcycle gangs.

-- 
-- 
--
OPS4J - http://www.ops4j.org - ops4j@googlegroups.com

--- 
You received this message because you are subscribed to the Google Groups 
"OPS4J" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ops4j+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ops4j/a4b45f27-2b3d-f431-6f07-75e41ca58255%40gmail.com.


signature.asc
Description: OpenPGP digital signature

Re: ops4j domain names

[Niclas Hedhman]

Since I know one thing or two about Apache and the Apache License...
perhaps I should chime in.

1. Pax Logger was actually donated to Felix once before, but nothing came
out of it. It was a simple IP clearance paper to fill in and upload
together with a tarball. This was simple because no community came with it.

2. Since re-licensing is not needed, all contributions in OPS4J can be
handed over to Apache Software Foundation without getting approvals from
individuals. Legally, Karaf could take the bits it wants and continue "over
there", but that is against the tradition in Apache to not fork if the
community doesn't want it.

3. IMHO, the main issue with Apache (or any other foundation) would be the
"community". I would expect that everyone that has contributed anything
would "come along" to Apache, in which case Karaf PMC might not be OK of
accepting that many committers in one go, although they could do it. Going
in via the Incubator is something I probably would recommend against. I
haven't checked recently, but many years ago there were >100 contributors
that had made commits to the Pax codebase. Of course, many just showed up
for a single commit, and many are no longer around. But they shouldn't be
ignored.

Niclas

On Thu, Feb 20, 2020 at 4:22 PM 'Christoph Läubrich' via OPS4J <
ops4j@googlegroups.com> wrote:

> This does not mean that it would only be possible under any
> "governance-umbrella", but I also understand that Karaf is the main
> consumer and/or driver of current development.
>
> Thus I'm not completely against it (and would not have any obligations
> to give any organization the required permission for any contribution I
> have made to pax projects), my only fear is that this process will even
> be going further so things are getting more and more "karaf-like" and
> other requirements are not taken into account anymore.
>
> So whatever is decided, I have really enjoyed all the years even though
> contributions from my side are not always constant over time it was the
> entry-point for me to getting started with OpenSource contributions.
>
>

-- 
-- 
--
OPS4J - http://www.ops4j.org - ops4j@googlegroups.com

--- 
You received this message because you are subscribed to the Google Groups 
"OPS4J" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ops4j+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ops4j/CADmm%2BKdr%3DgFHo5d7_aSLTm_uucaHW%3DyrEeQat%3DjjUth_BJDdGw%40mail.gmail.com.

Re: Upgrade Jetty Dependency to 9.4.24 or newer.

[Jean-Baptiste Onofré]

Hi

Yes I’m upgrading to jetty 9.4.26 in pax web 7.2 and 7.3.

I just have to fix a package change about jaspi.

It should be done today.

Regards
JB

Le jeu. 20 févr. 2020 à 09:10, Grzegorz Grzybek  a
écrit :

> Hello
>
> Jean-Baptiste - I saw you're upgrading Jetty in pax-web. Will you do it in
> 7.2.x and 7.3.x?
>
> regards
> Grzegorz Grzybek
>
> pt., 24 sty 2020 o 19:24 Rasmus Olesen 
> napisał(a):
>
>> Awesome
>>
>> We are currently using version 7.3.5.
>>
>> On Fri, 24 Jan 2020, 18:52 Grzegorz Grzybek, 
>> wrote:
>>
>>> Hello
>>>
>>> I'm reviewing Pax Web now and I'll take care of the upgrade. Which Pax
>>> Web version are you using? 7.2.x?
>>>
>>> regards
>>> Grzegorz Grzybek
>>>
>>> czw., 23 sty 2020 o 12:35 Rasmus Olesen 
>>> napisał(a):
>>>
 For some reason i can't access the Jira bug reporting system. its just
 an infinite loop of cant sign up because account already exists and cant
 login because you account is doesnt have access...

 So i hope that someone else will create a issue for this upgrade.

 Jetty 9.4.21 to 9.4.23 are all affected by the following CVE
 https://nvd.nist.gov/vuln/detail/CVE-2019-17632

 PAX currently builds against 9.4.22

 I know that newer of versions of Jetty might be "api"/runtime
 compatible, but it would still be nice to have PAX building against a newer
 and non CVE affected jetty version.

 /Rasmus

 --
 --
 --
 OPS4J - http://www.ops4j.org - ops4j@googlegroups.com

 ---
 You received this message because you are subscribed to the Google
 Groups "OPS4J" group.
 To unsubscribe from this group and stop receiving emails from it, send
 an email to ops4j+unsubscr...@googlegroups.com.
 To view this discussion on the web visit
 https://groups.google.com/d/msgid/ops4j/a21deba1-653e-4d04-b005-c9ed1f19f152%40googlegroups.com
 
 .

>>> --
>>> --
>>> --
>>> OPS4J - http://www.ops4j.org - ops4j@googlegroups.com
>>>
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "OPS4J" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to ops4j+unsubscr...@googlegroups.com.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/ops4j/CAAdXmhoSv%2B8BX6S-GBZwQQBWc8Ww62%2BGPb6OxevkFOM9FB0wJA%40mail.gmail.com
>>> 
>>> .
>>>
>> --
>> --
>> --
>> OPS4J - http://www.ops4j.org - ops4j@googlegroups.com
>>
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "OPS4J" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to ops4j+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/ops4j/CAA_naH8bEwc1L8KeAP%3DZrcHDQWbVREMut-2HMo4b8Q-OFxwySw%40mail.gmail.com
>> 
>> .
>>
> --
> --
> --
> OPS4J - http://www.ops4j.org - ops4j@googlegroups.com
>
> ---
> You received this message because you are subscribed to the Google Groups
> "OPS4J" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ops4j+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ops4j/CAAdXmhqo-dL4Q0e6uDHyNAeYDzcq8iuc4BDGiX%2B4nKZqWfdiVA%40mail.gmail.com
> 
> .
>

-- 
-- 
--
OPS4J - http://www.ops4j.org - ops4j@googlegroups.com

--- 
You received this message because you are subscribed to the Google Groups 
"OPS4J" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ops4j+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ops4j/CAB8EV3SrSc6Db3gCLSk3pS3qA1Z0qercjot9VKX5qN1wC_9M3w%40mail.gmail.com.

Re: ops4j domain names

['Christoph Läubrich' via OPS4J]

This does not mean that it would only be possible under any 
"governance-umbrella", but I also understand that Karaf is the main 
consumer and/or driver of current development.


Thus I'm not completely against it (and would not have any obligations 
to give any organization the required permission for any contribution I 
have made to pax projects), my only fear is that this process will even 
be going further so things are getting more and more "karaf-like" and 
other requirements are not taken into account anymore.


So whatever is decided, I have really enjoyed all the years even though 
contributions from my side are not always constant over time it was the 
entry-point for me to getting started with OpenSource contributions.


Am 20.02.20 um 08:06 schrieb Jean-Baptiste Onofré:

That's true, but I think that's also a drawback.

The leak of governance and the fact we don't have any staging on 
releases could be seen as an issue.


That's why it could be interesting to have this under the "Karaf Umbrella".

Regards
JB

On Thu, Feb 20, 2020 at 7:58 AM 'Christoph Läubrich' via OPS4J 
mailto:ops4j@googlegroups.com>> wrote:


I always enjoyed the ease of contribution via github with minimal
effort. While for apache-projects has always felt like a mess
because of
different hurdles.

So I would defiantly vote for staying with github, dropping JIRA in
favour of github issues (they improved the issue/project handling a
lot)
to centralize development to one place.

Github even offers building "Actions" now so maybe this is also an
alternative for custom build-server.

Am 20.02.20 um 07:17 schrieb Jean-Baptiste Onofré:
 > Hi,
 >
 > If option 4 is interesting, we have to remember:
 >
 > 1. First, in which Apache umbrella project. I don't think Felix is a
 > good match as we might have some overlap with existing projects
(felix
 > http, ...). Maybe Karaf ?
 > 2. We need to transfer IP and "PMC" set and ask in the Apache
project
 > community with a formal vote.
 > 3. We will have to follow Apache process, especially for releases
 > (meaning at least 3 days vote, 3 binding votes, etc), extending
Apache
 > pom, etc.
 >
 > So, IMHO, we have really two options:
 >
 > 1. We keep OPS4J community, do a cleanup (announcing non active
projects)
 > 2. We move active Pax projects to Apache (obviously my preference
would
 > be Karaf).
 >
 > Thoughts ?
 >
 > Regards
 > JB
 >
 > On Wed, Feb 19, 2020 at 1:01 PM Toni Menzel
mailto:toni.men...@rebaze.com>
 > >>
wrote:
 >
 >     *TL/TR:*
 >     I'd be also happy to pay for ops4j.org 
 (the one
 >     that is actively used atm).
 >
 >     *Long version:*
 >     Since this is coming up now, there is a general question were
to go
 >     with OPS4J in general.
 >
 >     It predated github and probably was back then the easiest way
to get
 >     hands dirty in a non-trivial java based OSS community where trust
 >     was default. Think about it, back then everyone could get write
 >     access to the subversion repo and start hacking on new or
existing
 >     projects. Including admin access to jira and whatever else was
 >     existing back then. Pax URL, Pax Runner, Pax Exam, Pax Construct
 >     etc. all got initiated by individuals without asking for
permission.
 >     I mean.. thats Names like Pax Tinybundles got to life.. but
oh well.
 >
 >     Now, why am I writing this: there is - at least for pax url,
web and
 >     exam - a huge user base that seems to be quite healthy. Even if
 >     there is just that "ops4j" name of the github organization
now, no
 >     website etc.
 >
 >     So, question: what are the options? Let me just drop them
here that
 >     come to my mind (ordered from easy-as-py to more complicated
options):
 >
 >       * keep things as is, find individual sponsors like I do
with the
 >         Build Server (who uses that still by the way??), and JB or me
 >         (this means I'd be also fine to pay for the org domain
that is
 >         in active use,too btw). It would be good to have two
different
 >         companies or legal entities backing this anyway.
 >       * Modernize OPS4J a bit. Get it a landing page at least and a
 >         clear who is behind all this, who pays etc. Maybe look at
Github
 >         Sponsoring to spread costs across user base - avoid single
 >         entity control.
 >       * Maybe look into making it a proper foundation or at least an
 >         entity that makes the work here eligible for future
donations. I
 >         am not sure of this is worth it. 

Re: Upgrade Jetty Dependency to 9.4.24 or newer.

[Grzegorz Grzybek]

Hello

Jean-Baptiste - I saw you're upgrading Jetty in pax-web. Will you do it in
7.2.x and 7.3.x?

regards
Grzegorz Grzybek

pt., 24 sty 2020 o 19:24 Rasmus Olesen 
napisał(a):

> Awesome
>
> We are currently using version 7.3.5.
>
> On Fri, 24 Jan 2020, 18:52 Grzegorz Grzybek,  wrote:
>
>> Hello
>>
>> I'm reviewing Pax Web now and I'll take care of the upgrade. Which Pax
>> Web version are you using? 7.2.x?
>>
>> regards
>> Grzegorz Grzybek
>>
>> czw., 23 sty 2020 o 12:35 Rasmus Olesen 
>> napisał(a):
>>
>>> For some reason i can't access the Jira bug reporting system. its just
>>> an infinite loop of cant sign up because account already exists and cant
>>> login because you account is doesnt have access...
>>>
>>> So i hope that someone else will create a issue for this upgrade.
>>>
>>> Jetty 9.4.21 to 9.4.23 are all affected by the following CVE
>>> https://nvd.nist.gov/vuln/detail/CVE-2019-17632
>>>
>>> PAX currently builds against 9.4.22
>>>
>>> I know that newer of versions of Jetty might be "api"/runtime
>>> compatible, but it would still be nice to have PAX building against a newer
>>> and non CVE affected jetty version.
>>>
>>> /Rasmus
>>>
>>> --
>>> --
>>> --
>>> OPS4J - http://www.ops4j.org - ops4j@googlegroups.com
>>>
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "OPS4J" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to ops4j+unsubscr...@googlegroups.com.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/ops4j/a21deba1-653e-4d04-b005-c9ed1f19f152%40googlegroups.com
>>> 
>>> .
>>>
>> --
>> --
>> --
>> OPS4J - http://www.ops4j.org - ops4j@googlegroups.com
>>
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "OPS4J" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to ops4j+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/ops4j/CAAdXmhoSv%2B8BX6S-GBZwQQBWc8Ww62%2BGPb6OxevkFOM9FB0wJA%40mail.gmail.com
>> 
>> .
>>
> --
> --
> --
> OPS4J - http://www.ops4j.org - ops4j@googlegroups.com
>
> ---
> You received this message because you are subscribed to the Google Groups
> "OPS4J" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ops4j+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ops4j/CAA_naH8bEwc1L8KeAP%3DZrcHDQWbVREMut-2HMo4b8Q-OFxwySw%40mail.gmail.com
> 
> .
>

-- 
-- 
--
OPS4J - http://www.ops4j.org - ops4j@googlegroups.com

--- 
You received this message because you are subscribed to the Google Groups 
"OPS4J" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ops4j+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ops4j/CAAdXmhqo-dL4Q0e6uDHyNAeYDzcq8iuc4BDGiX%2B4nKZqWfdiVA%40mail.gmail.com.