Mailing-List: contact users-help@maven.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Maven Users List" <users@maven.apache.org>
Received-SPF: pass (athena.apache.org: domain of anders.g.hammar@gmail.com
 designates 74.125.82.172 as permitted sender)
MIME-Version: 1.0
Sender: anders.g.hammar@gmail.com
In-Reply-To: 
 <CA+nPnMxLkQsBVHZrTECwzdn3jqmp6Moc1NLOB7yWF1jw1KsGJg@mail.gmail.com>
References: 
 <CADZL2=sF-ZKuBixe8d0-_chTubcSTMh8azFBc8qRFg5FBMuZrQ@mail.gmail.com>
	<CA+nPnMxvGGyLS2PC1NimmN7iFZgP__rsTO6YamPgdsEAizkqzw@mail.gmail.com>
	<CADZL2=sJRtxhTSCi6L5c8DqZzs=2j0bL2i4_P6_gUkQDaJoUfg@mail.gmail.com>
	<CA+nPnMxVW2=cR67sFe=TPmCUz5tnNBXQnkAo-z==CtukrwwkGg@mail.gmail.com>
	<CADZL2=sJpksXBbKTYCpp0exGU1VmLffOvhcv23S6UGm=5jH8XQ@mail.gmail.com>
	<BLU172-W48F0D7A0DEA73E3FE0DE3AE9F0@phx.gbl>
	<CADZL2=vNC_=f_+PyzQANHnSRNVaRUV3_jLAWYpdBHJkSHNktyQ@mail.gmail.com>
	<CAKDUN1sJgEa88iri6tRNsts2zJ89NGTPKr63yQH4bvh8XCacOw@mail.gmail.com>
	<CADZL2=vYM8Hp2Rq6wTxB4M0C9e36TfNqswaZx6pEZ1nQid9CTg@mail.gmail.com>
	<CA+nPnMxLkQsBVHZrTECwzdn3jqmp6Moc1NLOB7yWF1jw1KsGJg@mail.gmail.com>
Date: Wed, 5 Jun 2013 16:40:42 +0200
Message-ID: 
 <CAKDUN1sPQT-q=QBfYkTc+n=BPWpmShqFAYfoMQ+gt5PJ4ZFiSQ@mail.gmail.com>
Subject: Re: Release dependencies keep getting downloaded
From: Anders Hammar <anders@hammar.net>
To: Maven Users List <users@maven.apache.org>
Content-Type: multipart/alternative; boundary=f46d043bdee4aafb7204de692eaa

--f46d043bdee4aafb7204de692eaa
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

I also happen to know that there are/used to be "features" in Nexus groups
that leave orphan checksum files hanging around. As well as metadata files
*I think*...

/Anders


On Wed, Jun 5, 2013 at 2:34 PM, Stephen Connolly <
stephen.alan.connolly@gmail.com> wrote:

> What Anders is saying is that Nexus should not be proxying proxies, but
> rather proxying the original source.
>
> i.e. you have something like
>
> http://your-nexus/content/groups/public
>
> which is an aggregate view of
>
> http://my-nexus/content/groups/public
> http://his-nexus/content/groups/public
>
> What you really should be doing is have it as an aggregate view of
>
> http://my-nexus/content/repositories/foo
> http://my-nexus/content/repositories/bar
> http://his-nexus/content/repositories/manchu
> http://his-nexus/content/repositories/barfoo
> http://repo1.maven.org/maven2
>
> That would allow you to set the priorities for each appropriately and
> ensure that you have e.g. central hosted artifacts resolved from central.
>
> By aggregating the aggregates you have duplicate artifacts and conflicts
> and start to rely on the priority rules, plus you cannot move and
> reprioritise content as easily.
>
>
>
>
> On 5 June 2013 13:26, Henri Tremblay <henri.tremblay@gmail.com> wrote:
>
> > Why? Maven allows a mirror to be a mirror of many repositories. So why
> > should I avoid it?
> >
> > Knowing that, unless I'm mistaken, doing this grouping prevent maven to
> > look into many repositories for each download.
> >
> >
> > On 5 June 2013 14:15, Anders Hammar <anders@hammar.net> wrote:
> >
> > > You shouldn't be proxying a Nexus group, but rather the specific
> repo(s)
> > > that you need.
> > >
> > > /Anders
> > >
> > >
> > > On Wed, Jun 5, 2013 at 1:46 PM, Henri Tremblay <
> henri.tremblay@gmail.com
> > > >wrote:
> > >
> > > > I digged a bit and, helped by your thought, seem to have found the
> > cause.
> > > >
> > > > We use Nexus to be a mirror of many repositories. All these public
> > > > repositories are in a group which is defined to be the mirror in ou=
r
> > > > settings.xml.
> > > >
> > > > On of these public repositories is JBoss (
> > > >
> > > >
> > >
> >
> https://repository.jboss.org/nexus/content/groups/public/org/jvnet/staxex=
/stax-ex/
> > > > ).
> > > > And if you have a look at the url, for version 1.2 there is only a
> md5
> > > and
> > > > a sha1. No actual maven-metadata.xml file. My guess is that it's wh=
at
> > > keeps
> > > > the download to happen.
> > > >
> > > > I tried to put maven central first in the group hoping it will solv=
e
> > the
> > > > issue. It didn't.
> > > >
> > > > Someone have a workaround apart from removing JBoss from there? (or
> > > using a
> > > > higher version of stax-ex which I will need to test)
> > > >
> > > > Thanks,
> > > > Henri
> > > >
> > > >
> > > >
> > > > On 5 June 2013 12:19, Martin Gainty <mgainty@hotmail.com> wrote:
> > > >
> > > > > it is possible the remote repositories cannot be reached so a
> > metadata
> > > > > stub is put into your local repository indicating the attributes =
of
> > the
> > > > > plugin maven is looking for..here is an example
> > > > >
> > > > > <?xml version=3D"1.0" encoding=3D"UTF-8"?>
> > > > > <metadata>
> > > > >   <groupId>com.opensymphony</groupId>
> > > > >   <artifactId>xwork</artifactId>
> > > > >   <version>2.1.6-SNAPSHOT</version>
> > > > >   <versioning>
> > > > >     <snapshot>
> > > > >       <timestamp>20090909.201054</timestamp>
> > > > >       <buildNumber>1</buildNumber>
> > > > >     </snapshot>
> > > > >     <lastUpdated>20090909201054</lastUpdated>
> > > > >   </versioning>
> > > > > </metadata>
> > > > >
> > > > > personally I always install all necessary plugins to my
> > > local-repository
> > > > > and then operate off of my local repository to avoid any guesswor=
k
> on
> > > > which
> > > > > repository is online or offline
> > > > > mvn -o $COMMAND
> > > > >
> > > > > can you send us your pom.xml and the exact command syntax with a
> list
> > > of
> > > > > all the repositories you are referencing
> > > > > from $M2_HOME/conf/settings.xml so we can replicate this issue
> > > > >
> > > > > Bon Chance,
> > > > > Martin
> > > > > ______________________________________________
> > > > > Note de d=E9ni et de confidentialit=E9
> > > > >
> > > > > Ce message est confidentiel et peut =EAtre privil=E9gi=E9. Si vou=
s n'=EAtes
> > pas
> > > > le
> > > > > destinataire pr=E9vu, nous te demandons avec bont=E9 que pour
> satisfaire
> > > > > informez l'exp=E9diteur. N'importe quelle diffusion non autoris=
=E9e ou
> la
> > > > copie
> > > > > de ceci est interdite. Ce message sert =E0 l'information seulemen=
t et
> > > > n'aura
> > > > > pas n'importe quel effet l=E9galement obligatoire. =C9tant donn=
=E9 que
> les
> > > > email
> > > > > peuvent facilement =EAtre sujets =E0 la manipulation, nous ne pou=
vons
> > > > accepter
> > > > > aucune responsabilit=E9 pour le contenu fourni.
> > > > >
> > > > >
> > > > > > From: henri.tremblay@gmail.com
> > > > > > Date: Wed, 5 Jun 2013 11:48:27 +0200
> > > > > > Subject: Re: Release dependencies keep getting downloaded
> > > > > > To: users@maven.apache.org
> > > > > >
> > > > > > Ok. I managed to check.
> > > > > >
> > > > > > So no, there is no range like in your example from what I see.
> The
> > > > > > dependency tree tells me that com.sun.xml.ws:jaxws-rt:jar:2.1.7
> is
> > > > > > referencing version 1.2 and that's it.
> > > > > >
> > > > > > I just realized that the problem occurs when I'm using the -U
> > option.
> > > > The
> > > > > > help is telling that it "Forces a check for updated releases an=
d
> > > > > snapshots
> > > > > > on remote". It's a bit weird that rekeases are checked but why
> not.
> > > BUT
> > > > > why
> > > > > > is staxex maven-metadata.xml file the only one the keeps being
> > > > > downloaded?
> > > > > > (with groovy-eclipse-batch that also is)??? Some timestamp issu=
e?
> > > > > >
> > > > > >
> > > > > >
> > > > > > On 29 May 2013 15:40, Stephen Connolly <
> > > > stephen.alan.connolly@gmail.com
> > > > > >wrote:
> > > > > >
> > > > > > > it would look something like <version>[1.7.3,)</version> but
> most
> > > > > likely it
> > > > > > > will be a transitive dependency that some dependency of yours
> is
> > > > > pulling
> > > > > > > in.
> > > > > > >
> > > > > > > have a look at the output of dependency:tree
> > > > > > >
> > > > > > >
> > > > > > > On 29 May 2013 14:35, Henri Tremblay <henri.tremblay@gmail.co=
m
> >
> > > > wrote:
> > > > > > >
> > > > > > > > A version range?
> > > > > > > >
> > > > > > > > How can I have a version range in a dependency tree? Aren't
> > > > > dependencies
> > > > > > > > always fixed values?
> > > > > > > >
> > > > > > > > How can I check that?
> > > > > > > >
> > > > > > > >
> > > > > > > > On 29 May 2013 14:34, Stephen Connolly <
> > > > > stephen.alan.connolly@gmail.com
> > > > > > > > >wrote:
> > > > > > > >
> > > > > > > > > I would guess you might have a version range in your
> > dependency
> > > > > tree
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > On 29 May 2013 13:30, Henri Tremblay <
> > henri.tremblay@gmail.com
> > > >
> > > > > wrote:
> > > > > > > > >
> > > > > > > > > > Hi,
> > > > > > > > > >
> > > > > > > > > > Some of metadata.xml files are downloaded for every bui=
ld
> > > done
> > > > > from
> > > > > > > > > > Jenkins.
> > > > > > > > > >
> > > > > > > > > > I don't know why. One example is
> > > org.jvnet.staxex:stax-ex:1.7.1
> > > > > > > > > >
> > > > > > > > > > -X doesn't tell me anything
> > > > > > > > > >
> > > > > > > > > > How can I find out? (including where to put a breakpoin=
t
> in
> > > the
> > > > > maven
> > > > > > > > > > source code)
> > > > > > > > > >
> > > > > > > > > > Thanks
> > > > > > > > > > Henri
> > > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > >
> > > > >
> > > > >
> > > >
> > >
> >
>

--f46d043bdee4aafb7204de692eaa--