Re: Maven2 support
I note the maven2 .md5 files are binary. I think I prefer hex, as it is easier to manually verify. I ended up checking the md5 sum off the maven1 files. That's a bug in the m1-m2 repository converter. I'll check it out. Here is what I'd like -a 'dotted' project to test that logic -something without an extension -something with a .txt extension -some classifier examples sounds good - I'll put it in JIRA -something with a different .md5 checksum than its real checksum. The repository is scanned every 4 hours and repairs missing/broken md5s (bearing in mind that we don't consider them as a security option, but a download integrity check) Also, and this is just for generic cool demo effects, who can point me to a good (AWT/swing) app that the repository has? I'd like to demo the repository as the open source successor to java web start: all your favourite OSS apps, all your favourite libraries, one shared local cache. I can't think of anything off the top of my head... if you find something, you can send it through the Maven upload process. NB, next week I'll do ant1.7 support; Maven2 *will* be the default there. I dont know what we'll do about tools for preparing packages for upload; maybe a library later will address that. Upload to ibiblio, or upload to an internal repository? You're definitely getting into optional libraries there - so I'll resurrect Wagon's ant tasks from CVS and get them working again to offer up, as I mentioned in my previous email. Cheers, Brett
Re: Maven2 support
On 4/15/05, Brett Porter [EMAIL PROTECTED] wrote: -something with a different .md5 checksum than its real checksum. The repository is scanned every 4 hours and repairs missing/broken md5s (bearing in mind that we don't consider them as a security option, but a download integrity check) OK, no problem. I'm not actually testing those MD5s, and I have my own tests with different SHA1 and MD5 signatures from what is expected. Also, and this is just for generic cool demo effects, who can point me to a good (AWT/swing) app that the repository has? I'd like to demo the repository as the open source successor to java web start: all your favourite OSS apps, all your favourite libraries, one shared local cache. I can't think of anything off the top of my head... if you find something, you can send it through the Maven upload process. will do. Where is the upload process documented? NB, next week I'll do ant1.7 support; Maven2 *will* be the default there. I dont know what we'll do about tools for preparing packages for upload; maybe a library later will address that. Upload to ibiblio, or upload to an internal repository? You're definitely getting into optional libraries there - so I'll resurrect Wagon's ant tasks from CVS and get them working again to offer up, as I mentioned in my previous email. Yes, ant support for uploading stuff will be useful, and that is where we can use wagon. I only need the download stuff to be self contained, for bootstrapping purposes.
Re: Maven2 support
On Fri, 15 Apr 2005, Steve Loughran wrote: Date: Fri, 15 Apr 2005 13:30:56 +0100 From: Steve Loughran [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Maven2 support On 4/15/05, Brett Porter [EMAIL PROTECTED] wrote: -something with a different .md5 checksum than its real checksum. The repository is scanned every 4 hours and repairs missing/broken md5s (bearing in mind that we don't consider them as a security option, but a download integrity check) OK, no problem. I'm not actually testing those MD5s, and I have my own tests with different SHA1 and MD5 signatures from what is expected. I'm wondering if uploading pgp signatures is still somewhere on the agenda. They are important for integrity checks of the repository. I try to follow your exchanges but I'm afraid it's all abacadabra to me. Henk Penning _ Henk P. Penning, Computer Systems Group R Uithof CGN-A232 _/ \_ Dept of Computer Science, Utrecht University T +31 30 253 4106 / \_/ \ Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/ http://www.cs.uu.nl/staff/henkp.html M [EMAIL PROTECTED] \_/
Re: Maven2 support
On 4/15/05, Henk P. Penning [EMAIL PROTECTED] wrote: On Fri, 15 Apr 2005, Steve Loughran wrote: Date: Fri, 15 Apr 2005 13:30:56 +0100 From: Steve Loughran [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Maven2 support On 4/15/05, Brett Porter [EMAIL PROTECTED] wrote: -something with a different .md5 checksum than its real checksum. The repository is scanned every 4 hours and repairs missing/broken md5s (bearing in mind that we don't consider them as a security option, but a download integrity check) OK, no problem. I'm not actually testing those MD5s, and I have my own tests with different SHA1 and MD5 signatures from what is expected. I'm wondering if uploading pgp signatures is still somewhere on the agenda. They are important for integrity checks of the repository. I try to follow your exchanges but I'm afraid it's all abacadabra to me. I'll point you to the code then http://cvs.sourceforge.net/viewcvs.py/smartfrog/core/smartfrog/src/org/smartfrog/services/os/java/ the work is done in the library component http://cvs.sourceforge.net/viewcvs.py/smartfrog/core/smartfrog/src/org/smartfrog/services/os/java/LibraryImpl.java?rev=1.4view=markup and the artifacts themselves http://cvs.sourceforge.net/viewcvs.py/smartfrog/core/smartfrog/src/org/smartfrog/services/os/java/LibraryArtifactImpl.java?rev=1.6view=log with the various policy classes providing rules about local and remote layout local: maven1, maven2, flat remote: maven1, maven2 you can declare a maven2 remote layout and a flat local, maven1 remote and maven2 local, etc, etc. A weakness in this design is that the artifacts know about the transport, and uses URL-derived download; I think a transporter interface/class would best handle transportation., so we could plug in multicast sharing etc. I think i am about to refactor the ant stuff to have a smilarish design of policy components and a transport,. right now everything is intermixed into a single repository class.
