Subject: bug#35462: maven ignoring mirror-settings in ~/.m2/settings.xml

From: Arne Babenhauserheide <[email-masked]>
Date: Sat, 27 Apr 2019 22:53:37 +0200

Hi,

When I set a mirror in ~/.m2/settings.xml, that mirror is not used by
the maven in Guix.

To reproduce:

    mkdir -p ~/.m2/
    echo '
    <settings>
      <servers>
        <server>
          <id>internal</id>
          <username>foo</username>
          <password>bar</password>
        </server>
      </servers>
      <mirrors>
        <mirror>
          <id>nexus</id>
          <name>nexus</name>
          <url>http://nexus.example.com/nexus/content/groups/public/</url>
          <mirrorOf>*</mirrorOf>
        </mirror>
      </mirrors>
    </settings>
    ' > ~/.m2/settings.xml
    # run maven somewhere

With this setting, maven should run every request through the configured
nexus (which in this case means that any try to download should fail).

In my setup, maven just ignores this setting and keeps downloading from
repo.maven.apache.org which (a) could leak internal information and (b)
does not get our internal packages.

Best wishes,
Arne
-- 
Unpolitisch sein
heißt politisch sein
ohne es zu merken