Maven downloads

[adrian.brock]

I thought we were supposed to have everything in the jboss repository.

When I look at docbook for example, it is downloading many things from
the maven repository,

e.g.

Downloading: http://repository.jboss.org/maven2/batik/batik-parser/1.6-1/batik-parser-1.6-1.jar
Downloading: http://snapshots.jboss.org/maven2/batik/batik-parser/1.6-1/batik-parser-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-parser/1.6-1/batik-parser-1.6-1.jar
Downloading: http://snapshots.jboss.org/maven2/batik/batik-parser/1.6-1/batik-parser-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-parser/1.6-1/batik-parser-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-parser/1.6-1/batik-parser-1.6-1.jar
Downloading: http://repo1.maven.org/maven2/batik/batik-parser/1.6-1/batik-parser-1.6-1.jar
36K downloaded
Downloading: http://repository.jboss.org/maven2/batik/batik-awt-util/1.6-1/batik-awt-util-1.6-1.jar
Downloading: http://snapshots.jboss.org/maven2/batik/batik-awt-util/1.6-1/batik-awt-util-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-awt-util/1.6-1/batik-awt-util-1.6-1.jar
Downloading: http://snapshots.jboss.org/maven2/batik/batik-awt-util/1.6-1/batik-awt-util-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-awt-util/1.6-1/batik-awt-util-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-awt-util/1.6-1/batik-awt-util-1.6-1.jar
Downloading: http://repo1.maven.org/maven2/batik/batik-awt-util/1.6-1/batik-awt-util-1.6-1.jar
360K downloaded
Downloading: http://repository.jboss.org/maven2/batik/batik-util/1.6/batik-util-1.6.jar
Downloading: http://snapshots.jboss.org/maven2/batik/batik-util/1.6/batik-util-1.6.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-util/1.6/batik-util-1.6.jar
Downloading: http://repo1.maven.org/maven2/batik/batik-util/1.6/batik-util-1.6.jar
79K downloaded
Downloading: http://repository.jboss.org/maven2/batik/batik-ext/1.6-1/batik-ext-1.6-1.jar
Downloading: http://snapshots.jboss.org/maven2/batik/batik-ext/1.6-1/batik-ext-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-ext/1.6-1/batik-ext-1.6-1.jar
Downloading: http://snapshots.jboss.org/maven2/batik/batik-ext/1.6-1/batik-ext-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-ext/1.6-1/batik-ext-1.6-1.jar
Downloading: http://repository.jboss.org/maven2/batik/batik-ext/1.6-1/batik-ext-1.6-1.jar
Downloading: http://repo1.maven.org/maven2/batik/batik-ext/1.6-1/batik-ext-1.6-1.jar
74K downloaded

[pgier]

Yes, this is an ongoing problem. It's just difficult to keep up with the dependency changes. I think we need to have our own rsync'ed mirror of the central repository. That way we can have a copy of everything controlled by us. And we won't have this issue of continuously checking new dependencies into our repository.

WDYT?

[starksm64]

Absolutely. Isn't this a requirement for Fedora using a maven repo for any bundled contents? I don't see how else they have an auditable path to the source for every component.

[pgier]

The central repository can be mirrored using rsync. http://maven.apache.org/guides/mini/guide-mirror-settings.html

Ideally I think we want a mirror that is available publicly so that it can be used on or off the vpn. And we want some method of keeping a history of changes as they come in (maybe using svn or git)?

Internally we are trying to get a process for reproducing everything from source, but since this is not available yet, having a mirror of central I think will solve the short term problem.

[wolfc]

Yes, I definitely want to see history.

We don't want to lose anything just because something is overwritten or deleted on repo1.