Re: Proposal for a centralized Eclipse update manager site for Apache projects/software
Niclas Hedhman wrote: On Wednesday 04 May 2005 21:26, Mark R. Diggory wrote: Sorry if my response sounded abrasive, I'm not trying to be. No problem. And ditto sorry. I think I belong to a group who is not totally Eclipse savvy/friendly, and somewhat negative to an explicit support of Eclipse and not for other IDEs. Niclas I think that as long as we maintain that an Eclipse plugin is just a distributable artifact, then we do not provide any more support for Eclipse than we would for other IDE's. cheers, Mark
Re: Synchronization report for Apache Software Foundation
Yes, I'm hoping though, that Jason would set this to only report when theres actually a transfer. The original script I wrote, which ran on ibiblio behaved so. -Mark Carlos Sanchez wrote: Hi, This is the report of the apache to ibiblio repo sync. I know it can be a bit annoying but isn't this the right place? Cheers Carlos Sanchez -Original Message- From: Niclas Hedhman [EMAIL PROTECTED] Date: Sun, 6 Feb 2005 22:39:09 +0800 Subject: Re: Synchronization report for Apache Software Foundation To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] On Sunday 06 February 2005 20:52, [EMAIL PROTECTED] wrote: mesg: ttyname: Operation not supported receiving file list ... done wrote 16 bytes read 128048 bytes 2640.49 bytes/sec total size is 428414805 speedup is 3345.32 You can view the syncronization reports for today here: http://repo1.maven.org/reports/apache/2005/02/06 Can someone inform us what this is all about?? Cheers Niclas
Re: Where to publish Xalan code on http://www.apache.org/dist (fwd)
Henk P. Penning wrote: Hm, it would seem the latest sanctioned 'maven' is in /www/www.apache.org/dist/maven/binaries/maven-1.0.2.tar.gz .. unpacking it shows me maven-1.0.2/plugins/maven-site-plugin-1.5.2.jar so the latest sanctioned maven-site-plugin appears to be '1.5.2'. Or isn't it ? Possibly, depends on which version maven decided to package, it could be an older version in the repo. I'm not sure this adiquates portrays the issue. Also, if SNAPSHOT is no different than LATEST or CURRENT, what does LATEST or CURRENT stand for ?? ( 1, 2, 3 ..) My point exactly! I look at where its used and I see mixed meanings. 1.) It could be a link to a interim build 2.) It could be a copy of a interim build. 3.) It could be a link to a full release. 4.) It could be a copy to a full release. Its used by Maven to set dependency resolution to be dynamic, so that if a dependecy deploys a new version (interim or release) to the repository and moves the SNAPSHOT link/copy to point at it, then the project dependency resolves to use it. I don't know how many projects take advantage of it, we've avoided it over time in the Jakarta Commons because its hard to cut a release when its dependent on an interim build that is very different than the previous release. -Mark -Mark HPP _ Henk P. Penning, Computer Systems Group R Uithof CGN-A232 _/ \_ Dept of Computer Science, Utrecht University T +31 30 253 4106 / \_/ \ Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/ http://www.cs.uu.nl/staff/henkp.html M [EMAIL PROTECTED] \_/ -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: Where to publish Xalan code on http://www.apache.org/dist (fwd)
As I was discussing in the jakarta-general list earlier. There are a number of projects with mavan project properties setup with the following parameter. maven.repo.remote=http://www.apache.org/dist/java-repository/,http://www.ibiblio.org Bretts correct that in this case the requests should fall over to ibibilio. It would be wise that Projects probably shouldn't be hardcoding the java-repository here. They should leave assigning this param upto the release manager for the project and use the default for all their development. There is another case: maven.repo.central.directory=/www/www.apache.org/dist/java-repository this is actually bad as well, because the developers cutting interim builds will deploy them accidentally into the java-repository. I feel that this should be avoided as well by everyone but the release manager. -Mark Henk P. Penning wrote: On Tue, 11 Jan 2005, Mark R. Diggory wrote: Date: Tue, 11 Jan 2005 19:31:22 -0500 From: Mark R. Diggory [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: Where to publish Xalan code on http://www.apache.org/dist (fwd) [ I wrote : ] Remove ? [ Mark : ] I've been planning to, I'm just concerned of the impact, I'm trying to be thorough and verify it will not cause others major problems when I remove them. [ but Brett wrote somewhere else : ] Nobody is building against java-repository, they are using ibiblio, so there is no harm in cleaning these up AFAICT. Mark, what kind of problems could result in removing things ? According to Brett we could remove the entire repository, and nobody's build would fail (not that I'm suggesting that :-). Are there other worries ? HPP _ Henk P. Penning, Computer Systems Group R Uithof CGN-A232 _/ \_ Dept of Computer Science, Utrecht University T +31 30 253 4106 / \_/ \ Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/ http://www.cs.uu.nl/staff/henkp.html M [EMAIL PROTECTED] \_/ -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: Where to publish Xalan code on http://www.apache.org/dist (fwd)
Brett Porter wrote: There is another case: maven.repo.central.directory=/www/www.apache.org/dist/java-repository By Maven 1.0 this was deprecated. You can now specify multiple deployment targets, so I have: maven.repo.apache=scp://www.apache.org maven.repo.apache.directory=/www/www.apache.org/dist/java-repository and maven.repo.apachecvs=scp://cvs.apache.org maven.repo.apachecvs.directory=/www/cvs.apache.org/repository with maven.repo.list=apachecvs by default. The release manager uses -Dmaven.repo.list=apache to publish to the other location. This can be enforced by permissions if we really have a problem (though once people get harassed about snapshots when they turn up, I think it'll quickly stop). Bingo! Very cool. It's definitly not very clear in the Maven docs that one can do this. I think this should be in the project.properties of all Maven based projects. -Mark -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: [ASF Repository Project Wiki] Updated: Participants
Please drop by the newly migrated project wiki and update your status if your still interested in working in the group. http://wiki.apache.org/ASFRepository/Participants cheers, Mark [EMAIL PROTECTED] wrote: Date: 2004-12-06T15:49:08 Editor: MarkDiggory [EMAIL PROTECTED] Wiki: ASF Repository Project Wiki Page: Participants URL: http://wiki.apache.org/ASFRepository/Participants Update Membership Roles. Change Log: -- @@ -1,5 +1,9 @@ People involved in formalizing the ASFRepository + * MarkDiggory + +Previous List of Members (Move back up if your still involved): + * AdamJack * AnouMana * MichalMaczka -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: md5 format decision
This should cause no problems with ASF boxes. We would prefer to see this format used. As well, I'd like to make a recommendation that we make sure that when any files are created in the repository, that they are not group writable. More specifically: Directories: group writable (drwxrwxr-x) Files: not group readable (lrw-r--r--) -Mark Brett Porter wrote: Hi, Was there a final decision made to change the format of md5's to: d1dcb0fbee884bb855bb327b8190af36 commons-collections-3.1.jar ie, md5 hash, 1 space, filename If so, I'd like to drop the change into Maven 1.1. Will this cause any problems for any scripts running on ASF boxes? Cheers, Brett -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: Ant and repositories
Hi Steve, Steve Loughran wrote: Hello, I'm Steve Loughran of the Ant project; Nicolaken said I should get on this mail list 1. I have just added to Ant CVS_HEAD a task to get libraries from a repository; built in support is for maven layouts, though others are possible. This is a great idea. 2. I worry about the security aspects. I dont think it is enough to verify the MD5 signatures, because they are served up on the same (http) server. What should I be doing for verifying remote downloads are the intended ones, or what changes are planned in the near future that our task should ready itself for? Note that the task is focused on JAR/WAR/Ear archives only, so we can do full jar signature checking if that is felt the best solution. And we can ship with the public key of an Apache/Maven/Gump CA to verify signatures. Indeed, the fact that nothing has shipped at all yet (and wont till 1.7 alpha) means that we have time to get things right here -Steve This subject is going to be dependent on the overall capabilities of Maven itself. I think, as Maven moves forward your going to see more requirements for signatures. I think that in your case, all the Ant task would probably maintain is some warning or interactive y/n/a/na concerning the signature being missing or bad. This is because no matter what policies we put in place for the ASF Repository, they are but a subset of possible outcomes in Maven. Ultimately, users of the task should be using http://www.ibiblio.org/maven an Apache mirror or another local Maven repository as the target for downloading dependencies and not ever the /dist/java-repository on minotaur directly. In theory. All pgp signatures on files in the repository should have public keys stored somewhere under KEYS like other contents of /dist/ but I don't currently think this a well maintained or organized practice in the ASF Repository. It should be better maintained and we've had discussions about improving it. -Mark -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: md5's
The ball is in play. http://jira.codehaus.org/browse/MPARTIFACT-39 -Mark Henk P. Penning wrote: On Wed, 6 Oct 2004, Mark R. Diggory wrote: Date: Wed, 06 Oct 2004 14:08:38 -0400 From: Mark R. Diggory [EMAIL PROTECTED] To: Dion Gillard [EMAIL PROTECTED] Cc: Henk P. Penning [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], Maven Developers List dev@maven.apache.org Subject: Re: md5's Ultimately it would, as well, be of great benefit if the artifact publishing worked initially in a staging area as not to confuse existing cron jobs attempting to validate md5's on the server. This would probably be best served in the systems default tmp directory. That would be great. I think, the best way for adding/replace stuff is -- write a 'temp' -- rename 'temp' to 'file' because a rename is truly atomic if 'temp' and 'file' are in the same file system. If you can implement the 'temp' for 'file' to be, for instance, '.tmp.file', I can easily teach the checkers to ignore '.tmp.*' files. I think rsync does something like that (even better .tmp.$$.file). Just a thought. -Mark HPP _ Henk P. Penning, Computer Systems Group R Uithof CGN-A232 _/ \_ Dept of Computer Science, Utrecht University T +31 30 253 4106 / \_/ \ Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/ http://www.cs.uu.nl/staff/henkp.html M [EMAIL PROTECTED] \_/ -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: md5's
Henk P. Penning wrote: On Tue, 5 Oct 2004, Mark R. Diggory wrote: Date: Tue, 05 Oct 2004 14:11:03 -0400 From: Mark R. Diggory [EMAIL PROTECTED] To: Henk P. Penning [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], dion [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: md5's In the opposite direction, individual ownership without group write capabilities blocks individuals from removing releases when it is time for them to be excised. I don't think it does. If you have write permission on a directory, you can remove any file in it, including the files you don't own and can't write. On Solaris 'rm' asks first, but you can remove. I can't check the situation on minotaur. I assume the same thing goes. HPP Your right, that makes sense, I was being shortsighted. So your saying that if the directory is group writable and the files are not, then any member of the group can still delete the file and replace it with a new one, in which case I don't need to give write permissions on the files for others to take ownership by copy/moving them individually. Ok, so I'll put the permissions back on those files, if others want to take ownership of the files great. So, I agree files shouldn't be group writable in this case. Directories, yes, but files, no... But this still doesn't solve the fact that at the project level members of separate projects can still manipulate the contents of other projects within that unix group. Maybe back when the unix groups were established the the number of projects under a groups wasn't an issue, now however, this isn't scalable, with so many projects in jakarta, there's little control across the project permissions, in terms of distributions. -Mark -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: md5's
Sigh, yes I did, but it was to allow Dion to take ownership of them, now
I see he has not.
But, I'm not wholly convinced having what I was suggesting about groups
taking ownership of their files is now tractable.
But I'm slowly becoming convinced that this cannot be maintained based
on the current unix groups and historical policies behind the dist
directory. The unix groups are not fine-grained enough to support
adequate restriction at that project level. Further restriction, for
instance jakarta-commons or jakarta-tomcat is required the group
jakarta can't adequately protect project level ownership/modification
of these files. In the opposite direction, individual ownership without
group write capabilities blocks individuals from removing releases
when it is time for them to be excised.
I just do not have the proper permissions to process all these files and
set them to be owned by the appropriate groups. This is why I started to
suggest that svn may be a more appropriate location for the
java-repository, because at least then we can have much greater control
of these characteristics as well as historical logging of changes if any
do occur.
-Mark
Henk P. Penning wrote:
On Tue, 5 Oct 2004, Mark R. Diggory wrote:
Date: Tue, 05 Oct 2004 13:04:40 -0400
From: Mark R. Diggory [EMAIL PROTECTED]
To: Henk P. Penning [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], dion [EMAIL PROTECTED]
Subject: Re: md5's
I just wanted to verify if this was corrected, I saw the jelly files
that were not matching yesterday, I went back today to look into fixing
these and I believe that Dion made some corrections? Or was it someone else?
Not getting a reaction, I waved the problems through, this morning.
I mean, the 'problem' was that the files changed, together with the
md'5 (The checker notices, because it remembers the original md5's).
In my database, I set the 'orig md5' to the 'current md5'.
All I was looking for was a message saying: yes, I changed the files.
If you didn't change those files, there might be a (security) problem.
I should have been clearer.
Note that the changed files are (again) group writable, so,
some 400 users can change them (everyone in group jakarta).
Since our last exchange, I've seen the recomandation,
to set the umask to '002' ;
http://cvs.apache.org/~bodewig/mirror.html
This makes files group writable by default.
It seems to be common apache practice.
Just curious:
-- Did you change the files ?
-- Is your umask 002 ?
Apmirror,
Isn't is time to change this 'umask 002' practice ?
Even a cronjob like
find dist -type d -exec chmod g+w {} \;
is to be preferred, I think.
As things are now, file ownership means nothing.
Regards.
Henk Penning
-Mark
Henk P. Penning wrote:
Hi,
... and another batch. See
http://www.apache.org/~henkp/md5/
HPP
_
Henk P. Penning, Computer Systems Group R Uithof CGN-A232 _/ \_
Dept of Computer Science, Utrecht University T +31 30 253 4106 / \_/ \
Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/
http://www.cs.uu.nl/staff/henkp.html M [EMAIL PROTECTED] \_/
-- Forwarded message --
Date: 1 Oct 2004 06:23:18 -
From: Cron Daemon [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Cron [EMAIL PROTECTED] ( cd /home/henkp/md5 ; /usr/bin/make
-s cron )
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-20030902.160215.jar
hist=d1e3117b90f697e6503e4ddf76bc0402 curr=b171e535366191e437cff6d64df33561
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-tags-antlr-20030211.143720.jar
hist=94cc61cbdcdfd3b75139d0ce2725138d curr=fe1ae9e40f3fd66031c781e9030b03b9
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-tags-define-20030211.142932.jar
hist=8ce6559775be62cfae8df109b2457a9c curr=5cc2cf3c1937887c1573ef1582fb3591
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-tags-html-20030317.100924.jar
hist=481b3ef3a7787ba232c4e1c43c32fe90 curr=040346a692601e498f4ea246d073f624
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-tags-interaction-20030211.143817.jar
hist=5e4fdc5465c3219b76aea54d7f2d47f3 curr=5450333754b59865bab146caf84c80df
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-tags-jsl-20030211.143151.jar
hist=f9d5c4302f9159217456e360217dc8b6 curr=24ea6cfe760c82d0707608fc785bc446
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-tags-log-20030211.142821.jar
hist=a8caadca9a8b82e0739e22742533592f curr=ba37d770969889069ad4fdddaf79209a
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-tags-swing-20030211.143925.jar
hist=55b0117e87a2e5b022ba9ed81d4008f8 curr=5bfe394074ecf17f48c9091e34044823
*** md5 changed
java-repository/commons-jelly/jars/commons-jelly-tags-util-20030211.141939.jar
hist=b0ef2b0baf9bcbaf86ea9d1591dfd487 curr=908ff22e0ea4a28f31223d90aef63ae9
*** md5
Re: No jars at Ibiblio
We appear to have a permissions issue happening mesg: ttyname: Operation not supported receiving file list ... done mkstemp hivemind/jars/.hivemind-1.0-rc-2.jar.yxE71a failed: Permission denied mkstemp hivemind/jars/.hivemind-1.0-rc-2.jar.md5.sV2j93 failed: Permission denied mkstemp hivemind/jars/.hivemind-lib-1.0-rc-2.jar.PviAgX failed: Permission denied mkstemp hivemind/jars/.hivemind-lib-1.0-rc-2.jar.md5.04VRrQ failed: Permission denied wrote 80 bytes read 463709 bytes 16865.05 bytes/sec total size is 352725880 speedup is 760.53 rsync error: some files could not be transferred (code 23) at main.c(1046) -Mark Howard Lewis Ship wrote: I pasted the wrong URL. It was failing, is now ok ... but the hivemind rc2 jars are NOT showing up at ibiblio, even though they are in the apache java-repository properly. On Tue, 21 Sep 2004 12:37:54 -0400, Mark R. Diggory [EMAIL PROTECTED] wrote: Did you look under http://www.ibiblio.org/maven/hivemind/jars/ -Mark Howard Lewis Ship wrote: Something is up at ibiblio. Try pointing a browser at http://www.ibiblio.org/maven/hivemind/ The files are in place with the right permissions at /x1/www/www.apache.org/dist/java-repository/hivemind/jars and should have been mirrored out to ibiblio. On Tue, 21 Sep 2004 09:55:31 -0400, Howard Lewis Ship [EMAIL PROTECTED] wrote: I'll get this put together shortly. - Original Message - From: James Carman [EMAIL PROTECTED] Date: Fri, 17 Sep 2004 15:02:06 -0400 Subject: No jars at Ibiblio To: hivemind-dev@jakarta.apache.org The build file for my article automatically downloads the necessary jars from the maven repository at www.ibiblio.org. However, the rc2 jars are not there. Can we get them published up there? -- Howard M. Lewis Ship Independent J2EE / Open-Source Java Consultant Creator, Jakarta Tapestry Creator, Jakarta HiveMind http://howardlewisship.com -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: No jars at Ibiblio
Believe I corrected this on the ibiblio side. We will see during the next pass. -Mark Howard Lewis Ship wrote: I pasted the wrong URL. It was failing, is now ok ... but the hivemind rc2 jars are NOT showing up at ibiblio, even though they are in the apache java-repository properly. On Tue, 21 Sep 2004 12:37:54 -0400, Mark R. Diggory [EMAIL PROTECTED] wrote: Did you look under http://www.ibiblio.org/maven/hivemind/jars/ -Mark Howard Lewis Ship wrote: Something is up at ibiblio. Try pointing a browser at http://www.ibiblio.org/maven/hivemind/ The files are in place with the right permissions at /x1/www/www.apache.org/dist/java-repository/hivemind/jars and should have been mirrored out to ibiblio. On Tue, 21 Sep 2004 09:55:31 -0400, Howard Lewis Ship [EMAIL PROTECTED] wrote: I'll get this put together shortly. - Original Message - From: James Carman [EMAIL PROTECTED] Date: Fri, 17 Sep 2004 15:02:06 -0400 Subject: No jars at Ibiblio To: hivemind-dev@jakarta.apache.org The build file for my article automatically downloads the necessary jars from the maven repository at www.ibiblio.org. However, the rc2 jars are not there. Can we get them published up there? -- Howard M. Lewis Ship Independent J2EE / Open-Source Java Consultant Creator, Jakarta Tapestry Creator, Jakarta HiveMind http://howardlewisship.com -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Re: No jars at Ibiblio
Yes, the permissions issue was corrected. mesg: ttyname: Operation not supported receiving file list ... done hivemind/jars/hivemind-1.0-rc-2.jar hivemind/jars/hivemind-1.0-rc-2.jar.md5 hivemind/jars/hivemind-lib-1.0-rc-2.jar hivemind/jars/hivemind-lib-1.0-rc-2.jar.md5 wrote 80 bytes read 463983 bytes 48848.74 bytes/sec total size is 353256473 speedup is 761.23 -Mark Howard Lewis Ship wrote: I pasted the wrong URL. It was failing, is now ok ... but the hivemind rc2 jars are NOT showing up at ibiblio, even though they are in the apache java-repository properly. On Tue, 21 Sep 2004 12:37:54 -0400, Mark R. Diggory [EMAIL PROTECTED] wrote: Did you look under http://www.ibiblio.org/maven/hivemind/jars/ -Mark Howard Lewis Ship wrote: Something is up at ibiblio. Try pointing a browser at http://www.ibiblio.org/maven/hivemind/ The files are in place with the right permissions at /x1/www/www.apache.org/dist/java-repository/hivemind/jars and should have been mirrored out to ibiblio. On Tue, 21 Sep 2004 09:55:31 -0400, Howard Lewis Ship [EMAIL PROTECTED] wrote: I'll get this put together shortly. - Original Message - From: James Carman [EMAIL PROTECTED] Date: Fri, 17 Sep 2004 15:02:06 -0400 Subject: No jars at Ibiblio To: hivemind-dev@jakarta.apache.org The build file for my article automatically downloads the necessary jars from the maven repository at www.ibiblio.org. However, the rc2 jars are not there. Can we get them published up there? -- Howard M. Lewis Ship Independent J2EE / Open-Source Java Consultant Creator, Jakarta Tapestry Creator, Jakarta HiveMind http://howardlewisship.com -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Mark Diggory Open Source Software Developer Apache Jakarta Project http://jakarta.apache.org
Rsync From Address and Source changing.
Jason has taken over the management of the ibiblio rsync emails (he's standardized the rsync process for all organizations rsyncing content to ibiblio. Currently rsync logs are sent to the [EMAIL PROTECTED] list, but I I suspect the moderation is rejecting them? Can we have this adjusted again? thanks, -Mark -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: [rsync] Repository rsync to ibiblio
I was able to move them to commons-validator/distributions. -Mark James Mitchell wrote: For some reason, I was able to copy those there, but I cannot remove them. -- James Mitchell Software Engineer / Open Source Evangelist EdgeTech, Inc. 678.910.8017 AIM: jmitchtx - Original Message - From: Mark R. Diggory [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, August 27, 2004 11:24 PM Subject: Re: [rsync] Repository rsync to ibiblio Good point, these should be in separate src/bin artifact directories. These were deployed by jmitchell. I've forwarded this message to him as well. -Mark matthew.hawthorne wrote: Why are there tar.gz files in the 'jars' directory? That doesn't seem right... [EMAIL PROTECTED] wrote: receiving file list ... done commons-validator/jars/commons-validator-1.1.3-src.tar.gz commons-validator/jars/commons-validator-1.1.3-src.tar.gz.MD5 commons-validator/jars/commons-validator-1.1.3-src.zip commons-validator/jars/commons-validator-1.1.3-src.zip.MD5 commons-validator/jars/commons-validator-1.1.3.jar commons-validator/jars/commons-validator-1.1.3.tar.gz commons-validator/jars/commons-validator-1.1.3.tar.gz.MD5 commons-validator/jars/commons-validator-1.1.3.zip commons-validator/jars/commons-validator-1.1.3.zip.MD5 commons-validator/jars/struts-help.html lucene/jars/lucene-1.4.1.jar lucene/jars/lucene-1.4.1.jar.md5 wrote 295 bytes read 2379035 bytes 8763.65 bytes/sec total size is 326237504 speedup is 137.11 -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: Cron mdiggory@tribal /export/sunsite/users/mdiggory/bin/sync-apache
I've added my own sendmail scripting to have the rsync announce from my email address directly when files are transfered. So you will not need to add [EMAIL PROTECTED] cheers, Mark Noel J. Bergman wrote: The only issue I can see is that the From address is [EMAIL PROTECTED] I will leave it to you to figure out. When you've done, please let me know. Right now I have to moderate these through. I'll add it to allow list after you're done fixing the address, although it it ends up being yours, I won't have to worry about it. --- Noel -- Mark R. Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: Cron mdiggory@tribal /export/sunsite/users/mdiggory/bin/sync-apache
Just doublechecking, did everyone on the repository list recieve this? -Mark Cron Daemon wrote: receiving file list ... done commons-configuration/poms/commons-configuration-1.0-rc1.pom turbine/jars/turbine-2.4-M1.jar wrote 135 bytes read 760909 bytes 16021.98 bytes/sec total size is 317115246 speedup is 416.68 -- Mark R. Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: any ideas why beanutils 1.7.0 jars can't be downloaded by maven?
Looks like the beanutils jar went through on the last scheduled rsync at 8pm EST. receiving file list ... done commons-beanutils/jars/commons-beanutils-1.7.0.jar commons-beanutils/jars/commons-beanutils-1.7.0.jar.asc commons-beanutils/jars/commons-beanutils-1.7.0.jar.md5 wrote 151 bytes read 300289 bytes 8011.73 bytes/sec total size is 284096595 speedup is 945.60 Mark R. Diggory wrote: I don't see anything wrong with the permissions, when did you add the file to java-repository? I also notice the SNAPSHOT symlinks are pretty ancient, you might want to update those links to point to the new release? -Mark Brett Porter wrote: I don't see it on ibiblio (beanutils-core and beanutils-collections are there, but beanutils itself is not). Do you have the correct permissions on java-repository? - Brett On Tue, 3 Aug 2004 22:04:51 +0100, robert burrell donkin [EMAIL PROTECTED] wrote: i uploaded the jars from the beanutils 1.7.0 release to the java repository. they have been mirrored to ibiblio. but maven does not seem able to automatically download them. this is a bit of a PITA since i'm currently trying to prepare a mavenized release whose dependencies need to be updated to the latest beanutils so any help would be really appreciated. - robert -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: Rsync Emails
Depends on how much publishing activity, for instance, heres the last one: receiving file list ... done commons-beanutils/jars/commons-beanutils-1.7.0.jar commons-beanutils/jars/commons-beanutils-1.7.0.jar.asc commons-beanutils/jars/commons-beanutils-1.7.0.jar.md5 wrote 151 bytes read 300289 bytes 8011.73 bytes/sec total size is 284096595 speedup is 945.60 otherwise, if no new content is found its just 3-4 lines: receiving file list ... done wrote 0 bytes read 300289 bytes 8011.73 bytes/sec total size is 0 speedup is 945.60 I could possibly tweek it to not send an email if there are no new files being moved. -Mark Adam R. B. Jack wrote: On Tue, 3 Aug 2004, Mark R. Diggory wrote: I'm curious, would others be interested in seeing the rsync emails from ibiblio for the rsync that runs every 4 hours on the login.ibibilio.org server? I could direct them to this list or possibly the maven devel list if its more appropriate. Are they verbose, or only in errors? This list seems a good place, unless overly verbose. regards Adam -- Mark R. Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: any ideas why beanutils 1.7.0 jars can't be downloaded by maven?
I don't see anything wrong with the permissions, when did you add the file to java-repository? I also notice the SNAPSHOT symlinks are pretty ancient, you might want to update those links to point to the new release? -Mark Brett Porter wrote: I don't see it on ibiblio (beanutils-core and beanutils-collections are there, but beanutils itself is not). Do you have the correct permissions on java-repository? - Brett On Tue, 3 Aug 2004 22:04:51 +0100, robert burrell donkin [EMAIL PROTECTED] wrote: i uploaded the jars from the beanutils 1.7.0 release to the java repository. they have been mirrored to ibiblio. but maven does not seem able to automatically download them. this is a bit of a PITA since i'm currently trying to prepare a mavenized release whose dependencies need to be updated to the latest beanutils so any help would be really appreciated. - robert -- Mark R. Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
RE: Thoughts on CJAN
On Tue, 2004-03-16 at 15:02, Alex Karasulu wrote: So really, who cares about CJAN. The spec that goes defacto is the one manifest in the mechanism used by the most people. Unless of course SUN steps in at some point and tries to propose a JSR which wouldn't surprise me at all. It's such an undertaking that it might be good to have a JSR around it but that could take so long :(. Alex Yes, an by that time, I doubt a JSR would be of value because there would already be tools and specs in place and used by the community... I suspect a JSR would be valuable if the network existed already and we were talking about native support for resolving and downloading dependencies in the J2RE/SDK. -- Mark R. Diggory Software Developer - VDC Project Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: adding jaxme jars
Robert, the jars are there, we should probably do a little renaming. My fault for not looking yesterday. http://www.ibiblio.org/maven/apache-jaxme/jars/ !! http://www.ibiblio.org/maven/apache-jaxme/jars/jaxme-incubation-0.2.jar we should probably have it more simply be http://www.ibiblio.org/maven/jaxme/jars/jaxme-0.2.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-SNAPSHOT.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-rt-0.2.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-rt-SNAPSHOT.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-api-0.2.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-api-SNAPSHOT.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-js-0.2.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-js-SNAPSHOT.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-pm-0.2.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-pm-SNAPSHOT.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-xs-0.2.jar http://www.ibiblio.org/maven/jaxme/jars/jaxme-xs-SNAPSHOT.jar -Mark robert burrell donkin wrote: hi mark i can see the jaxme jars on apache but not in the maven repository on ibiblio. is there anything else i need to do to push the content over there? (or have i just make some mistake in the upload...) - robert On 8 Mar 2004, at 22:20, Mark R. Diggory wrote: robert burrell donkin wrote: hi mark i've given it a go myself but i have a few questions and i'd appreciate it if you'd check my work so far. On 7 Mar 2004, at 16:18, Mark R. Diggory wrote: You need to establish what your groups id will be. The current naming trend for Apache xml projects has been a bit haphazard. xercies xml-security xml-resolver xalan Some standardization here would be good. But that will not effect maven. i've had a chat on IRC and gone for apache-jaxme There is currently a problem with Maven publishing to a BSD system and md5 signature generation, if you do not want to use maven to do the publishing then these are the tasks you need to complete: 1.) The easiest way right now is for you to place the jars into java-repository/xml-jaxme/jars/... gone (but apache-jaxme rather than xml-jaxme) 2.) Generate an md5 signature for each one in the same directory. For instance as an examples md5 xml-jaxme-1.0.jar xml-jaxme-1.0.jar.md5 will produce: java-repository/xml-jaxme/jars/xml-jaxme-1.0.jar java-repository/xml-jaxme/jars/xml-jaxme-1.0.jar.md5 done 3.) Generate the following symlinks the above files from java-repository/xml-jaxme/jars/xml-jaxme-SNAPSHOT.jar java-repository/xml-jaxme/jars/xml-jaxme-SNAPSHOT.jar.md5 done 4.) and create a file java-repository/xml-jaxme/jars/xml-jaxme-snapshot-version with the contents 1.0 these releases are versioned 0.2: should this file contain 0.2 (since it refers to the version of the jars) or 1.0 (since it's a mavenesque version number) It would be wise, so yes, apache-jaxme-0.2.jar 5.) use the following POM in the java-repository/xml-jaxme/poms/project/pom project pomVersion3/pomVersion idxml-jaxme/id namexml-jaxme/name currentVersion1.0/currentVersion organization nameApache Software Foundation/name urlwww.apache.org/url /organization licenses license nameASL 2.0/name url???/url comments???/comments /license /licenses /project there are a number of jar in the release. i'd been working on the theory that each needs a separate artifact id. what should the contents of the file be in this case? - robert Yes, it should look like: /java-repository/apache-jaxme/jars/artifact-version.jar /java-repository/apache-jaxme/poms/project/pom project pomVersion3/pomVersion groupIdapache-jaxme/groupId nameApache Jaxme/name currentVersion0.2/currentVersion organization nameApache Software Foundation/name urlwww.apache.org/url /organization licenses license nameASL 2.0/name urlhttp://www.apache.org/licenses/LICENSE-2.0/url /license /licenses /project sound good, I'll take a look in the directory and verify all looks well. -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: adding jaxme jars
More likely the mirroring process is still being problematic. I'll grill Jason for a few minutes and get things updated. -Mark robert burrell donkin wrote: hi mark i can see the jaxme jars on apache but not in the maven repository on ibiblio. is there anything else i need to do to push the content over there? (or have i just make some mistake in the upload...) - robert On 8 Mar 2004, at 22:20, Mark R. Diggory wrote: robert burrell donkin wrote: hi mark i've given it a go myself but i have a few questions and i'd appreciate it if you'd check my work so far. On 7 Mar 2004, at 16:18, Mark R. Diggory wrote: You need to establish what your groups id will be. The current naming trend for Apache xml projects has been a bit haphazard. xercies xml-security xml-resolver xalan Some standardization here would be good. But that will not effect maven. i've had a chat on IRC and gone for apache-jaxme There is currently a problem with Maven publishing to a BSD system and md5 signature generation, if you do not want to use maven to do the publishing then these are the tasks you need to complete: 1.) The easiest way right now is for you to place the jars into java-repository/xml-jaxme/jars/... gone (but apache-jaxme rather than xml-jaxme) 2.) Generate an md5 signature for each one in the same directory. For instance as an examples md5 xml-jaxme-1.0.jar xml-jaxme-1.0.jar.md5 will produce: java-repository/xml-jaxme/jars/xml-jaxme-1.0.jar java-repository/xml-jaxme/jars/xml-jaxme-1.0.jar.md5 done 3.) Generate the following symlinks the above files from java-repository/xml-jaxme/jars/xml-jaxme-SNAPSHOT.jar java-repository/xml-jaxme/jars/xml-jaxme-SNAPSHOT.jar.md5 done 4.) and create a file java-repository/xml-jaxme/jars/xml-jaxme-snapshot-version with the contents 1.0 these releases are versioned 0.2: should this file contain 0.2 (since it refers to the version of the jars) or 1.0 (since it's a mavenesque version number) It would be wise, so yes, apache-jaxme-0.2.jar 5.) use the following POM in the java-repository/xml-jaxme/poms/project/pom project pomVersion3/pomVersion idxml-jaxme/id namexml-jaxme/name currentVersion1.0/currentVersion organization nameApache Software Foundation/name urlwww.apache.org/url /organization licenses license nameASL 2.0/name url???/url comments???/comments /license /licenses /project there are a number of jar in the release. i'd been working on the theory that each needs a separate artifact id. what should the contents of the file be in this case? - robert Yes, it should look like: /java-repository/apache-jaxme/jars/artifact-version.jar /java-repository/apache-jaxme/poms/project/pom project pomVersion3/pomVersion groupIdapache-jaxme/groupId nameApache Jaxme/name currentVersion0.2/currentVersion organization nameApache Software Foundation/name urlwww.apache.org/url /organization licenses license nameASL 2.0/name urlhttp://www.apache.org/licenses/LICENSE-2.0/url /license /licenses /project sound good, I'll take a look in the directory and verify all looks well. -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: adding jaxme jars
Its ok, half the projects in Maven repository never deployed pom's so its usage is somewhat speculative in the first place. -Mark Erik Abele wrote: On 08.03.2004, at 23:20, Mark R. Diggory wrote: project pomVersion3/pomVersion groupIdapache-jaxme/groupId nameApache Jaxme/name currentVersion0.2/currentVersion organization nameApache Software Foundation/name The official name is 'The Apache Software Foundation', as incorporated within the State of Delaware. See http://apache.org/foundation/records/certificate.html. urlwww.apache.org/url /organization licenses license nameASL 2.0/name It's AL 2.0 not ASL 2.0 (Apache License not Apache Software License). urlhttp://www.apache.org/licenses/LICENSE-2.0/url /license /licenses /project Perhaps a bit pedantic but... :-) Cheers, Erik -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: adding jaxme jars
robert burrell donkin wrote: hi mark i've given it a go myself but i have a few questions and i'd appreciate it if you'd check my work so far. On 7 Mar 2004, at 16:18, Mark R. Diggory wrote: You need to establish what your groups id will be. The current naming trend for Apache xml projects has been a bit haphazard. xercies xml-security xml-resolver xalan Some standardization here would be good. But that will not effect maven. i've had a chat on IRC and gone for apache-jaxme There is currently a problem with Maven publishing to a BSD system and md5 signature generation, if you do not want to use maven to do the publishing then these are the tasks you need to complete: 1.) The easiest way right now is for you to place the jars into java-repository/xml-jaxme/jars/... gone (but apache-jaxme rather than xml-jaxme) 2.) Generate an md5 signature for each one in the same directory. For instance as an examples md5 xml-jaxme-1.0.jar xml-jaxme-1.0.jar.md5 will produce: java-repository/xml-jaxme/jars/xml-jaxme-1.0.jar java-repository/xml-jaxme/jars/xml-jaxme-1.0.jar.md5 done 3.) Generate the following symlinks the above files from java-repository/xml-jaxme/jars/xml-jaxme-SNAPSHOT.jar java-repository/xml-jaxme/jars/xml-jaxme-SNAPSHOT.jar.md5 done 4.) and create a file java-repository/xml-jaxme/jars/xml-jaxme-snapshot-version with the contents 1.0 these releases are versioned 0.2: should this file contain 0.2 (since it refers to the version of the jars) or 1.0 (since it's a mavenesque version number) It would be wise, so yes, apache-jaxme-0.2.jar 5.) use the following POM in the java-repository/xml-jaxme/poms/project/pom project pomVersion3/pomVersion idxml-jaxme/id namexml-jaxme/name currentVersion1.0/currentVersion organization nameApache Software Foundation/name urlwww.apache.org/url /organization licenses license nameASL 2.0/name url???/url comments???/comments /license /licenses /project there are a number of jar in the release. i'd been working on the theory that each needs a separate artifact id. what should the contents of the file be in this case? - robert Yes, it should look like: /java-repository/apache-jaxme/jars/artifact-version.jar /java-repository/apache-jaxme/poms/project/pom project pomVersion3/pomVersion groupIdapache-jaxme/groupId nameApache Jaxme/name currentVersion0.2/currentVersion organization nameApache Software Foundation/name urlwww.apache.org/url /organization licenses license nameASL 2.0/name urlhttp://www.apache.org/licenses/LICENSE-2.0/url /license /licenses /project sound good, I'll take a look in the directory and verify all looks well. -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
Re: cool uris don't change, don't they ?
With the amount of versioning going on, eventually a release falls into a state of non-usage, I suspect there should be room for such a mechanism, otherwise mirrors will become bloated with unused, outdated, antiquated and obsolete content. I suspect some sort of redirect mechanism would be sufficient in cases where an unmirrored archive is used. Something that most web servers support (for instance Apache Httpd and .htaccess files) Existing Example: archives.apache.org represents content from www.apache.org/dist that has been decommissioned from the mirroring process, of course mirrors may maintain copies of these files by not deleting contents. Ideally, such a mechanism could even be automated based on historical download information on the resource. I.E. if the resource hasn't been downloaded in 5 years, move it into an archive and provide a redirect or notice. -Mark Nick Chalko wrote: Patrick Chanezon wrote: Did you specify a lifecycle for artifacts, with some durations, and a process to decommision them ? Good question. This may be something to put to the board. My general thought are. Released version should live forever, unless a security or other fatal flaw is found in a release. As a minimum I think the latest version of each point release should be kept ie 1.2.x. R, Nick -- Mark Diggory Software Developer Harvard MIT Data Center http://www.hmdc.harvard.edu
