Uploaded image for project: 'Cassandra'
  1. Cassandra
  2. CASSANDRA-17748

Move deb/rpm repositories from dist/downloads .a.o to apache.jfrog.io

    XMLWordPrintableJSON

Details

    Description

      Move our official debian and redhat repositories from downloads.apache.org to Apache's JFrog Artifactory server at apache.jfrog.io 

      That is, the following URLs would be moved from
      ```
      https://downloads.apache.org/cassandra/debian/
      https://downloads.apache.org/cassandra/redhat/
      ```
      to
      ```
      https://apache.jfrog.io/artifactory/cassandra-deb/
      https://apache.jfrog.io/artifactory/cassandra-rpm/
      ```

      The rationale to do this is to avoid the strict opinionated checksum and signature requirements on downloads.a.o (dist.a.o), as the debian and redhat repositories have their own system for integrity and signing (which we already do).

      Furthermore, as these repositories and their binaries are "convenience binaries" and not the official Cassandra source binaries, they do not need to be on downloads.a.o and can be served from apache.jfrog.io. This is similar to maven binaries (and docker images). Apache Arrow is already taking this approach: https://arrow.apache.org/install/

      An advantage to using apache.frog.io is that these repositories maintain all past patch versions on each repo series (major/minor). This has been requested by users a number of times, for the sake of rolling back to a previous patch version. downloads.a.o can only contain the latest version.

      This will BREAK everyone's existing `/etc/apt/sources.list.d/cassandra.sources.list` and `/etc/yum.repos.d/cassandra.repo` files. Folk will need to update these files to point to the new repo URLs. This would require an announcement to both users@ and dev@. I do not know how we can avoid this breakage. We could put in a simple README.md in the original URL locations explaining the breakage and how to fix.

      Attachments

        Issue Links

          Activity

            People

              mck Michael Semb Wever
              mck Michael Semb Wever
              Michael Semb Wever
              Brandon Williams
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 20m
                  20m