Uploaded image for project: 'Infrastructure'
  1. Infrastructure
  2. INFRA-2914

Fix mirror https://repo.jenkins-ci.org/netbeans/

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now redirects then returns 200 for any request to an html screen.

      Artifactory is not checking checksums and seems to consider this is a valid artifact so is caching it, which pollutes all consumers downstream.

      /cc Jesse Glick

        Attachments

          Issue Links

            Activity

            vlatombe Vincent Latombe created issue -
            vlatombe Vincent Latombe made changes -
            Field Original Value New Value
            Description The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now returns 200 for any request with an html screen. Artifactory is not checking checksum and seem to consider this is a valid artifact so is caching it, which pollutes all consumers downstream. The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now returns 200 for any request with an html screen.

            Artifactory is not checking checksums and seems to consider this is a valid artifact so is caching it, which pollutes all consumers downstream.
            vlatombe Vincent Latombe made changes -
            Description The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now returns 200 for any request with an html screen.

            Artifactory is not checking checksums and seems to consider this is a valid artifact so is caching it, which pollutes all consumers downstream.
            The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now returns 200 for any request with an html screen.

            Artifactory is not checking checksums and seems to consider this is a valid artifact so is caching it, which pollutes all consumers downstream.

            /cc [~jglick]
            vlatombe Vincent Latombe made changes -
            Description The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now returns 200 for any request with an html screen.

            Artifactory is not checking checksums and seems to consider this is a valid artifact so is caching it, which pollutes all consumers downstream.

            /cc [~jglick]
            The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now redirects then returns 200 for any request with an html screen.

            Artifactory is not checking checksums and seems to consider this is a valid artifact so is caching it, which pollutes all consumers downstream.

            /cc [~jglick]
            vlatombe Vincent Latombe made changes -
            Description The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now redirects then returns 200 for any request with an html screen.

            Artifactory is not checking checksums and seems to consider this is a valid artifact so is caching it, which pollutes all consumers downstream.

            /cc [~jglick]
            The Netbeans repo https://bits.netbeans.org/maven2/ has been retired by Oracle, and now redirects then returns 200 for any request to an html screen.

            Artifactory is not checking checksums and seems to consider this is a valid artifact so is caching it, which pollutes all consumers downstream.

            /cc [~jglick]
            Hide
            jglick Jesse Glick added a comment -

            As per https://issues.apache.org/jira/browse/INFRA-21004 this could be switched to http://netbeans.apidesign.org/maven2/ if necessary. AFAIK this is mainly useful for org.netbeans.modules:org-netbeans-insane, used by jenkins-test-harness. Newer releases are supposed to be on Central.

            Show
            jglick Jesse Glick added a comment - As per https://issues.apache.org/jira/browse/INFRA-21004 this could be switched to http://netbeans.apidesign.org/maven2/ if necessary. AFAIK this is mainly useful for org.netbeans.modules:org-netbeans-insane , used by jenkins-test-harness . Newer releases are supposed to be on Central.
            Hide
            teilo James Nord added a comment - - edited

            > Newer releases are supposed to be on Central.

            in which case (not knowing about artifactorys features) I would just switch it to read-only mode so that existing things are kept but nothing new is ever requested.
            otherwise a manual copy of the artifacts to a isolated hosted repo with no deploy access.

            I really do not think we should be adding more proxies to grab moar new stuff if we do not need it.

            can be accomplished apparently with setting the repo to offline
            https://www.jfrog.com/confluence/display/JFROG/Remote+Repositories#RemoteRepositories-SingleRepositoryOffline

            Show
            teilo James Nord added a comment - - edited > Newer releases are supposed to be on Central. in which case (not knowing about artifactorys features) I would just switch it to read-only mode so that existing things are kept but nothing new is ever requested. otherwise a manual copy of the artifacts to a isolated hosted repo with no deploy access. I really do not think we should be adding more proxies to grab moar new stuff if we do not need it. can be accomplished apparently with setting the repo to offline https://www.jfrog.com/confluence/display/JFROG/Remote+Repositories#RemoteRepositories-SingleRepositoryOffline
            Hide
            jglick Jesse Glick added a comment -

            Not needed for JTH builds as of https://github.com/jenkinsci/jenkins-test-harness/releases/tag/jenkins-test-harness-2.56 over a year ago. I filed https://github.com/jenkinsci/cobertura-plugin/pull/128 for cleanup. We could drop this mirror but then builds of plugins using old versions of JTH (typically due to an old parent POM) would fail.

            Show
            jglick Jesse Glick added a comment - Not needed for JTH builds as of https://github.com/jenkinsci/jenkins-test-harness/releases/tag/jenkins-test-harness-2.56 over a year ago. I filed https://github.com/jenkinsci/cobertura-plugin/pull/128 for cleanup. We could drop this mirror but then builds of plugins using old versions of JTH (typically due to an old parent POM) would fail.
            Hide
            jglick Jesse Glick added a comment -

            Yes if we can make the mirror read-only that would be ideal.

            Show
            jglick Jesse Glick added a comment - Yes if we can make the mirror read-only that would be ideal.
            jglick Jesse Glick made changes -
            Summary Netbeans proxy is messing up not found artifacts. Fix mirror https://repo.jenkins-ci.org/netbeans/
            jglick Jesse Glick made changes -
            Link This issue relates to INFRA-2915 [ INFRA-2915 ]
            danielbeck Daniel Beck made changes -
            Assignee Daniel Beck [ danielbeck ]
            danielbeck Daniel Beck made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            Hide
            danielbeck Daniel Beck added a comment -

            Started by setting the repo to offline, so we don't fetch new artifacts.

            Show
            danielbeck Daniel Beck added a comment - Started by setting the repo to offline , so we don't fetch new artifacts.
            Hide
            danielbeck Daniel Beck added a comment -

            Would have been nice to have some broken artifacts as examples.

            Show
            danielbeck Daniel Beck added a comment - Would have been nice to have some broken artifacts as examples.
            Hide
            danielbeck Daniel Beck added a comment -

            Looks likeĀ 8bec48433de288ee7c8e225122a8a9038f209f090fbf23bedd9f4003021d10f1 is the bad artifact, at least it's not dynamic.

            Show
            danielbeck Daniel Beck added a comment - Looks likeĀ  8bec48433de288ee7c8e225122a8a9038f209f090fbf23bedd9f4003021d10f1 is the bad artifact, at least it's not dynamic.
            Hide
            danielbeck Daniel Beck added a comment -

            The first broken artifact was deployed 2021-03-05T16:04:48.581Z.

            The last correct-looking artifacts were deployed on Feb 15, various artifacts related to "RELEASE69".

            Show
            danielbeck Daniel Beck added a comment - The first broken artifact was deployed 2021-03-05T16:04:48.581Z. The last correct-looking artifacts were deployed on Feb 15, various artifacts related to "RELEASE69".
            Hide
            danielbeck Daniel Beck added a comment -

            The full list of artifacts that were wrongly created in that repo: https://gist.github.com/daniel-beck/a2ef095f84fb3df37008fd5dd737531a

            Show
            danielbeck Daniel Beck added a comment - The full list of artifacts that were wrongly created in that repo: https://gist.github.com/daniel-beck/a2ef095f84fb3df37008fd5dd737531a
            Hide
            danielbeck Daniel Beck added a comment - - edited

            Looks like the netbeans repo started sending HTTP 401, which would explain why there were no further bad artifacts since 2021-03-07T22:44:15.083Z.

            Show
            danielbeck Daniel Beck added a comment - - edited Looks like the netbeans repo started sending HTTP 401, which would explain why there were no further bad artifacts since 2021-03-07T22:44:15.083Z.
            Hide
            danielbeck Daniel Beck added a comment -

            Deleting artifacts, probably done by 10 AM CET.

            Show
            danielbeck Daniel Beck added a comment - Deleting artifacts, probably done by 10 AM CET.
            Hide
            danielbeck Daniel Beck added a comment -

            Deleted all bad artifacts and put the repo offline.

            Show
            danielbeck Daniel Beck added a comment - Deleted all bad artifacts and put the repo offline.
            danielbeck Daniel Beck made changes -
            Resolution Fixed [ 1 ]
            Status In Progress [ 3 ] Resolved [ 5 ]

              People

              Assignee:
              danielbeck Daniel Beck
              Reporter:
              vlatombe Vincent Latombe
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: