GNU bug report logs - #35462
maven ignoring mirror-settings in ~/.m2/settings.xml

Previous Next

To reply to this bug, email your comments to 35462 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Arne Babenhauserheide <arne_bab <at> web.de>
To: bug-guix <at> gnu.org
Subject: maven ignoring mirror-settings in ~/.m2/settings.xml
Date: Sat, 27 Apr 2019 22:53:37 +0200

[Message part 1 (text/plain, inline)]

Hi,

When I set a mirror in ~/.m2/settings.xml, that mirror is not used by
the maven in Guix.

To reproduce:

    mkdir -p ~/.m2/
    echo '
    <settings>
      <servers>
        <server>
          <id>internal</id>
          <username>foo</username>
          <password>bar</password>
        </server>
      </servers>
      <mirrors>
        <mirror>
          <id>nexus</id>
          <name>nexus</name>
          <url>http://nexus.example.com/nexus/content/groups/public/</url>
          <mirrorOf>*</mirrorOf>
        </mirror>
      </mirrors>
    </settings>
    ' > ~/.m2/settings.xml
    # run maven somewhere

With this setting, maven should run every request through the configured
nexus (which in this case means that any try to download should fail).

In my setup, maven just ignores this setting and keeps downloading from
repo.maven.apache.org which (a) could leak internal information and (b)
does not get our internal packages.

Best wishes,
Arne
-- 
Unpolitisch sein
heißt politisch sein
ohne es zu merken

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 35462 <at> debbugs.gnu.org (full text, mbox):

From: Julien Lepiller <julien <at> lepiller.eu>
To: Arne Babenhauserheide <arne_bab <at> web.de>
Cc: 35462 <at> debbugs.gnu.org
Subject: Re: bug#35462: maven ignoring mirror-settings in ~/.m2/settings.xml
Date: Tue, 30 Apr 2019 12:57:05 +0200

Le Sat, 27 Apr 2019 22:53:37 +0200,
Arne Babenhauserheide <arne_bab <at> web.de> a écrit :

> Hi,
> 
> When I set a mirror in ~/.m2/settings.xml, that mirror is not used by
> the maven in Guix.
> 
> To reproduce:
> 
>     mkdir -p ~/.m2/
>     echo '
>     <settings>
>       <servers>
>         <server>
>           <id>internal</id>
>           <username>foo</username>
>           <password>bar</password>
>         </server>
>       </servers>
>       <mirrors>
>         <mirror>
>           <id>nexus</id>
>           <name>nexus</name>
>           <url>http://nexus.example.com/nexus/content/groups/public/</url>
>           <mirrorOf>*</mirrorOf>
>         </mirror>
>       </mirrors>
>     </settings>
>     ' > ~/.m2/settings.xml
>     # run maven somewhere
> 
> With this setting, maven should run every request through the
> configured nexus (which in this case means that any try to download
> should fail).
> 
> In my setup, maven just ignores this setting and keeps downloading
> from repo.maven.apache.org which (a) could leak internal information
> and (b) does not get our internal packages.
> 
> Best wishes,
> Arne

Hi,

I've given a look at this bug and it seems that our maven package
totally ignores settings, even if given on the CLI:

mvn help:effective-settings --debug -s ~/.m2/settings.xml
-gs ~/.m2/settings.xml

has no effect...

strace -f mvn ... doesn't show any reference to a settings.xml either
(not even the globabl one in the store...).

Message #11 received at 35462 <at> debbugs.gnu.org (full text, mbox):

From: Arne Babenhauserheide <arne_bab <at> web.de>
To: Julien Lepiller <julien <at> lepiller.eu>
Cc: 35462 <at> debbugs.gnu.org
Subject: Re: bug#35462: maven ignoring mirror-settings in ~/.m2/settings.xml
Date: Tue, 30 Apr 2019 22:15:25 +0200

[Message part 1 (text/plain, inline)]

Hi Julien,

Julien Lepiller <julien <at> lepiller.eu> writes:
>> In my setup, maven just ignores this setting and keeps downloading
>> from repo.maven.apache.org which (a) could leak internal information
>> and (b) does not get our internal packages.
> I've given a look at this bug and it seems that our maven package
> totally ignores settings, even if given on the CLI:
>
> mvn help:effective-settings --debug -s ~/.m2/settings.xml
> -gs ~/.m2/settings.xml
>
> has no effect...
>
> strace -f mvn ... doesn't show any reference to a settings.xml either
> (not even the globabl one in the store...).

Thank you for checking! Do you have an idea how we can fix that?

Best wishes,
Arne
-- 
Unpolitisch sein
heißt politisch sein
ohne es zu merken

[signature.asc (application/pgp-signature, inline)]

Message #14 received at 35462 <at> debbugs.gnu.org (full text, mbox):

From: Julien Lepiller <julien <at> lepiller.eu>
To: Arne Babenhauserheide <arne_bab <at> web.de>
Cc: 35462 <at> debbugs.gnu.org
Subject: Re: bug#35462: maven ignoring mirror-settings in ~/.m2/settings.xml
Date: Wed, 01 May 2019 08:44:12 +0200

Le 30 avril 2019 22:15:25 GMT+02:00, Arne Babenhauserheide <arne_bab <at> web.de> a écrit :
>Hi Julien,
>
>Julien Lepiller <julien <at> lepiller.eu> writes:
>>> In my setup, maven just ignores this setting and keeps downloading
>>> from repo.maven.apache.org which (a) could leak internal information
>>> and (b) does not get our internal packages.
>> I've given a look at this bug and it seems that our maven package
>> totally ignores settings, even if given on the CLI:
>>
>> mvn help:effective-settings --debug -s ~/.m2/settings.xml
>> -gs ~/.m2/settings.xml
>>
>> has no effect...
>>
>> strace -f mvn ... doesn't show any reference to a settings.xml either
>> (not even the globabl one in the store...).
>
>Thank you for checking! Do you have an idea how we can fix that?
>
>Best wishes,
>Arne

I hade no idea :/

Maybe there's something wrong wuth our maven-settings or something maven expects is not there which leads it to not load config?

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.