Mailing-List: contact shiro-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: shiro-dev@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of kalle.o.korhonen@gmail.com
 designates 209.85.160.175 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        b=JYklQln3YSewspe4Qzn+Nnj0ZXZQEVANHx5vXvfh9RHiXZoSGVZP/yFULFs46rYrT1
         j6dcesRCO7psl7Kdw6pG7LzmFzaIRZ58SFYgcZ2QkOmI9ZDfKbgWRjCT2yAPE28zOOjt
         wLAEEVCCNHAOUVtKmjF9WeRTbsBLth1L/Ugc4=
MIME-Version: 1.0
In-Reply-To: <AANLkTimvo9bmR2oLyv8Bf1z-SxmugN05ZiMjp1YZQjgC@mail.gmail.com>
References: <AANLkTi=bBYAVk3h6e6bSs2KhybtUB6yCBfp2-Hbe2j+2@mail.gmail.com>
	<AANLkTi=4O5dE52Y7Nj7zM_1D07FZOfO7Myu4JXjXRHX=@mail.gmail.com>
	<AANLkTinYHU-VLGNGcFuTNBT_KWzzBo_F2Hz6Y36F1oBU@mail.gmail.com>
	<AANLkTikkXTXYnG1rGZY7P2Nx-LWDnJU6oPhwF2zHt7hj@mail.gmail.com>
	<AANLkTimvo9bmR2oLyv8Bf1z-SxmugN05ZiMjp1YZQjgC@mail.gmail.com>
Date: Tue, 17 Aug 2010 12:27:13 -0700
Message-ID: <AANLkTi=tbw7+Xx8Urf73W95+W1XVEixjmmTimptPWphe@mail.gmail.com>
Subject: Re: Shiro artifact distribution
From: Kalle Korhonen <kalle.o.korhonen@gmail.com>
To: shiro-dev@incubator.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Tue, Aug 17, 2010 at 12:10 PM, Les Hazlewood <lhazlewood@apache.org> wro=
te:
>> From my reading of the release documentation either is fine. As a TLP
>> I don't think we have a strict requirement to publish to /dist, it's
>> just an option. However, Clutch checks for the existence of release
>> artifacts at /dist so we better keep the duplicates there. Going
>> forward, I don't think we need to worry about cgi scripts for using
>> mirros either, central is already load-balanced (and proxied and
>> cached).
> We unfortunately can't use m2 central as our primary distribution
> source since that is not considered ASF infrastructure. =A0At least
> according to the publishing page:
> "The Apache infrastructure must be the primary source for all
> artifacts officially released by the ASF."

Right, ok I see now why you had the links originally pointing at the
repository.apache.org. Pointing to /dist instead would solve that
problem.

> I think it's ok at the moment to have the links for the binary .jars
> point to m2 central because they're not really official ASF releases -
> we do it as a convenience. =A0Although it would be a little nicer to
> have all of our artifacts hosted by the ASF: someone has to pay the
> download bandwidth costs, and it'd be better if the ASF (or one of
> it's agreed mirror partners) did that instead of us passing the bill
> transparently to Sonatype. =A0Just a thought...

We can figure out how to best use and integrate publishing to the
/dist as a TLP later, but because we are a library project (as opposed
to an application such as Tomcat), I'm pretty certain that most people
will get the libs from Central even if we have them available
somewhere else. Sonatype has a vested interest in seeing Maven succeed
and if people get the jars directly from Central they are much leaner
(and will be cached) than the single source distro zip, so I doubt
Sonatype has that much of a problem with it.

Kalle

PS. Making the release with Maven was a pleasure. I can see how it
might have been tripping up and annoying lots of non-Maven-built
Apache projects before us and obviously it helped that I've done the
same several times over with different Maven projects but overall,
it's about as streamlined as it currently can be.