maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Veit Guna (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ARCHETYPE-521) Cannot specify remote repository for generate project from archetype
Date Mon, 24 Apr 2017 12:22:04 GMT

    [ https://issues.apache.org/jira/browse/ARCHETYPE-521?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15981079#comment-15981079
] 

Veit Guna commented on ARCHETYPE-521:
-------------------------------------

Hi guys.

That really sucks :(. How is specifying an url via cmdline considered a security risk :)?
Whether I specify it on cmdline or settings.xml is same "risky", no?
Please describe how this can be used as an attack vector - for my better understanding.

Besides that, I now can't just paste a cmdline and create a project from a non-central archetype
repository anymore. I now have to add that custom archetype repository to my settings.xml
first, before I can invoke the generate step. And I will do that most likely only once, maybe
twice. So I have to remove it after the project has been generate. Yay! That's what I call
making your life more difficult than it has to be.

Sorry for sounding that harsh, but I'm currently not getting the reason for such a breaking
change.


> Cannot specify remote repository for generate project from archetype
> --------------------------------------------------------------------
>
>                 Key: ARCHETYPE-521
>                 URL: https://issues.apache.org/jira/browse/ARCHETYPE-521
>             Project: Maven Archetype
>          Issue Type: Question
>          Components: Generator
>    Affects Versions: 3.0.0
>         Environment: cmd
>            Reporter: Dmytro Sylaiev
>            Assignee: Robert Scholte
>              Labels: bug, command-line, question
>             Fix For: 3.0.1
>
>
> I wanted to create new project using mvn archetype:generate command.
> Desired archetype was absent in the central repo, so I tried to use -DarchetypeRepository=repo.url
param. But this param is out of date in 3.0.0 version of plugin.
> So I needed to use  mvn org.apache.maven.plugins:maven-archetype-plugin:2.4:generate
command. 
> Question: How can I specify specific repository for generating project (without editing
settings.xml file)? 
> (-DarchetypeCatalog=repo.url doesn't work too)



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message