-
-
Notifications
You must be signed in to change notification settings - Fork 13.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
temporary sourceforge sources are being used #16900
Comments
Is adding a travis check to prevent addition of sourceforge.net links a good idea? |
@phanimahesh The problem is that downloads.sourceforge.net is actually the official way to download tarballs from SourceForge. What makes it so unreliable is the same ticketing and load-balancing system SourceForge wants us to use... That's to say, before modifying travis, the list in pkgs/build-support/fetchurl/mirrors.nix should be edited to start with the official downloads.sourceforge.net to give SF a chance to regulate itself, and only fallback on the known servers list if the download fails or hangs. |
No wonder people don't like SF. :/ Okay, I'm opening a new PR to update mirrors. Will follow up with editing out the sourceforge.net links to use mirrors, and then add a travis job to enforce the convention. |
We actually lucked out here. Windows users get their binaries packed with extra malware...
Sounds great :) I'll close this issue now that you're on it. Thanks! |
downloads.sourceforge.net is the official way to download tarballs from SourceForge. However, it is reported as unreliable due to SF's weird load balancing system. This commit gives the official mirror utmost priority, and will use other configured mirrors (which may be temporary) as a fallback only when the official one can't be reached/download fails/hangs. References: NixOS#16900
Multiple packages are broken over using sourceforge.net links which are temporary.
Some directly refer to a specific mirror so they succeed so long as the server isn't down-throttled by sourceforge. Others are completely broken. The correct syntax for sourceforge source packages should be "mirror://sourceforge/...".
The following is a partial list compiled from git grep sourceforge.net | grep tar and some light manual editing. It might have false negatives and there could be other offending packages that aren't listed:
Also note that occasionally sourceforge crashes to "disaster recovery mode" and requires javascript to download tarballs.
The text was updated successfully, but these errors were encountered: