Mailing-List: contact dev-help@commons.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jakarta Commons Developers List" <dev@commons.apache.org>
Received-SPF: pass (athena.apache.org: domain of flamefew@gmail.com designates
 209.85.146.183 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=i76xxfKIEp2SW9m2HASvtfZwvf/YlOZI/3TsYpPsBcxeYPTMdpiuXuVkRRhel8TI2FA4qa4EYU2yL+j40bun1cxAYd43vleluW8nDTjyaTus33tXiRjX9p0AiEgdOeg5OTA4BpzIwBNcU8O39lCTjCGqPisourg/vu51YSScPGs=
Message-ID: <31cc37360708260643ka0709e2ocf2d29ad58948f5c@mail.gmail.com>
Date: Sun, 26 Aug 2007 14:43:07 +0100
From: "Henri Yandell" <flamefew@gmail.com>
To: "Jakarta Commons Developers List" <dev@commons.apache.org>
Subject: Re: [all][poll] How should nigthlies / CI work?
In-Reply-To: <16d6c6200708251005s5061792dl7f64aaa6992006f4@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <16d6c6200708250857r2100bee5g1d9533dab75a64c4@mail.gmail.com>
	 <NBBBJGEAGJAKLIDBKJOPKEMMABAD.noel@devtech.com>
	 <8a81b4af0708251000i7236fbd1t931d671a9ff28841@mail.gmail.com>
	 <16d6c6200708251005s5061792dl7f64aaa6992006f4@mail.gmail.com>

On 8/25/07, Martin Cooper <martinc@apache.org> wrote:
> On 8/25/07, Phil Steitz <phil.steitz@gmail.com> wrote:
> >
> > On 8/25/07, Noel J. Bergman <noel@devtech.com> wrote:
> > > Martin Cooper wrote:
> > >
> > > > > GUMP builds are deemed non-trusted, since GUMP downloads from
> > > > > non-ASF sites and includes them in builds without any vetting
> > > > > of the third party dependencies.
> > >
> > > > True, but it's not clear that everything in the public Maven repo
> > > > should be considered as "vetted" either.
> > >
> > > Exactly.  Maven continues to be remiss in delivering on their goal of
> > > ensuring authenticated packages.  I view anyone who uses the public
> > Maven
> > > repository as being foolish; competent Maven users have their own
> > private
> > > repositories.
> > >
> > > And, yes, the corollary that GUMP is building from the latest of
> > everything
> > > is another key reason not to use it for nightly builds.
> > >
> >
> > Another reason is that it is a little easier for us to manage
> > "publication" of the CI artifacts using Continuum / vmbuild.  We can
> > publish both jars and zips/tarballs to a local maven repo on vmbuild
> > and set up rsynch to people.apache.org, eliminating some of the
> > ugliness in the bash setup.
> >
> > So can I get some feedback on the "what to publish" question?
>
>
> I'd say #1. The nightly builds are purely a convenience. If someone really
> needs something prior to the most recent nightly, they should be able to
> build it themselves, and it's not clear that us picking an arbitrary number
> would provide what they need in any case.

+1. #1 Most successful build only.

Hen

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@commons.apache.org
For additional commands, e-mail: dev-help@commons.apache.org