From: Lasse Collin <lasse.collin@tukaani.org>
To: "Ludovic Courtès" <ludo@gnu.org>
Cc: 21784@debbugs.gnu.org
Subject: bug#21784: Old XZ tarballs
Date: Sat, 31 Oct 2015 20:29:08 +0200 [thread overview]
Message-ID: <20151031202908.5548817d@tukaani.org> (raw)
In-Reply-To: <87si4sb02k.fsf_-_@gnu.org>
On 2015-10-30 Ludovic Courtès wrote:
> Lasse Collin <lasse.collin@tukaani.org> skribis:
> > For some reason the old XZ Utils versions are more popular downloads
> > than the latest versions (5.0.8 and 5.2.2). Perhaps I should move
> > the downloads somewhere else to avoid bandwidth quota issues,
>
> Some people move old tarballs to an old/ sub-directory, to make sure
> people do not mistakenly take an old version. I don’t know if that
> would help here?
I don't like to break links intentionally. I know I did exactly that a
few days ago, but it cannot be the long-term solution. The links to old
versions are on a separate page already, so those using a web browser
are unlikely to get an old version by accident.
> > but on the other hand I feel that it's not nice if source-based
> > distributions rely on upstream servers instead of providing their
> > own distro-specific mirrors. If you think this isn't a reasonable
> > wish, feel free to say so.
>
> Guix does automatically mirror tarballs via its “substitute”
> mechanism. However, users can turn it off, in which case they end up
> downloading the tarball from the upstream URL specified in the
> package recipe.
OK. :-) Why would users turn it off though? I would guess that one good
mirror would be more reliable than dozens of upstream sites of which
just one needs to be down to be a problem for a user. A package manager
should know the hash or signature of the file, so from security point
of view it doesn't matter where the file comes.
Note that I have nothing against including the upstream URL in the
build scripts. I just wish that it doesn't cause a *large* number of
users downloading the file from the upstream instead of distro's
mirror. To be fair, xz-5.0.4.tar.gz hasn't been a popular download
(xz-5.0.4.tar.bz2 is somewhat popular though), so I believe Guix users
haven't caused a significant amount of traffic for me. :-)
> > By the way, is there a reason why you use 5.0.4 instead of 5.0.8 (or
> > even 5.2.2)?
>
> No good reason! We’ll upgrade it as soon as this can be done without
> triggering too much rebuild/redownloads for users.
API/ABI is backward compatible so one shouldn't need to rebuild other
packages. There's a mailing list "xz-announce" in case you want a
notification when a new version is released:
<http://tukaani.org/xz/lists.html>
--
Lasse Collin | IRC: Larhzu @ IRCnet & Freenode
next prev parent reply other threads:[~2015-10-31 18:31 UTC|newest]
Thread overview: 28+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-10-29 7:30 bug#21784: cannot install icecat! -=}\*/{=-
2015-10-29 19:20 ` Efraim Flashner
2015-10-29 19:23 ` Efraim Flashner
2015-10-29 19:30 ` -=}\*/{=-
2015-10-29 19:39 ` -=}\*/{=-
2015-10-29 19:51 ` Efraim Flashner
2015-10-30 17:06 ` bug#21784: Alternate xz-5.0.4.tar.gz URL Ludovic Courtès
2015-10-30 17:12 ` Andreas Enge
2015-10-31 10:41 ` Ludovic Courtès
2015-10-31 21:20 ` Andreas Enge
2015-11-01 10:20 ` Ludovic Courtès
2015-11-01 12:06 ` Andreas Enge
2015-11-01 20:05 ` Ludovic Courtès
2015-10-29 20:27 ` bug#21784: cannot install icecat! Ludovic Courtès
2015-10-29 23:07 ` -=}\*/{=-
2015-10-29 23:20 ` -=}\*/{=-
2015-10-30 7:53 ` -=}\*/{=-
2015-10-30 8:02 ` Efraim Flashner
2015-10-30 8:14 ` -=}\*/{=-
2015-10-30 15:45 ` -=}\*/{=-
2015-10-30 17:47 ` Lasse Collin
2015-10-30 19:58 ` bug#21784: Old XZ tarballs Ludovic Courtès
2015-10-31 18:29 ` Lasse Collin [this message]
2015-11-01 10:20 ` Ludovic Courtès
2015-11-02 12:07 ` Lasse Collin
2015-11-02 13:37 ` Ludovic Courtès
2015-11-02 14:24 ` Lasse Collin
2015-11-02 15:07 ` Ludovic Courtès
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20151031202908.5548817d@tukaani.org \
--to=lasse.collin@tukaani.org \
--cc=21784@debbugs.gnu.org \
--cc=ludo@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).