On 09/17/2012 02:50 PM, Daniel Veillard wrote:
On Mon, Sep 17, 2012 at 02:32:03PM +0200, Wido den Hollander wrote:
On 17-09-12 14:20, Daniel Veillard wrote:
On Mon, Sep 17, 2012 at 10:35:02AM +0200, Wido den Hollander wrote:
[...]
However, maven central didn't fetch 0.4.9 yet. No clue why it ain't
fetching..
I wonder where we could get the needed informations ...
I've been searching and found: http://maven.apache.org/guides/mini/guide-central-repository-upload.html
"Publishing your artifacts to the Central Repository"
That seems to suggest that since January 2010 they no longer sync
from any location and you should use Sonatype OSS for that.
This seems to be the online way: https://docs.sonatype.org/display/Repository/Sonatype+OSS+Maven+Repository+Usage+Guide
Holy crap ... what a monstruosity.
And the reason:
"Additionally, there is no good mechanism currently for validating the
incoming data via the rsync, and this leads to bad metadata that affects
everyone. "
Put the damn metadata *in the package* and gpg sign it. Either you
trust the key or not is the question, but the problem was solved by rpm
more than a decade ago IMHO !
Not sure Maven is really the way to go that's seems seriously broken.
You could always leave it and not use the central repo. Under the Java
bindings you could make a section pointing to the Maven repo and a
pom.xml:
https://git-wip-us.apache.org/repos/asf?p=incubator-cloudstack.git;a=commitdiff;h=881a4be1264a7f7659f8356a494d45789e19dd01
If you're fine with that I'll submit a patch for libvirt.org
Wido
Daniel
--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list