GNU bug report logs - #35462
maven ignoring mirror-settings in ~/.m2/settings.xml

Previous Next

Package: guix;

Reported by: Arne Babenhauserheide <arne_bab <at> web.de>

Date: Sat, 27 Apr 2019 20:54:02 UTC

Severity: normal

Full log


Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Arne Babenhauserheide <arne_bab <at> web.de>
To: bug-guix <at> gnu.org
Subject: maven ignoring mirror-settings in ~/.m2/settings.xml
Date: Sat, 27 Apr 2019 22:53:37 +0200
[Message part 1 (text/plain, inline)]
Hi,

When I set a mirror in ~/.m2/settings.xml, that mirror is not used by
the maven in Guix.

To reproduce:

    mkdir -p ~/.m2/
    echo '
    <settings>
      <servers>
        <server>
          <id>internal</id>
          <username>foo</username>
          <password>bar</password>
        </server>
      </servers>
      <mirrors>
        <mirror>
          <id>nexus</id>
          <name>nexus</name>
          <url>http://nexus.example.com/nexus/content/groups/public/</url>
          <mirrorOf>*</mirrorOf>
        </mirror>
      </mirrors>
    </settings>
    ' > ~/.m2/settings.xml
    # run maven somewhere

With this setting, maven should run every request through the configured
nexus (which in this case means that any try to download should fail).

In my setup, maven just ignores this setting and keeps downloading from
repo.maven.apache.org which (a) could leak internal information and (b)
does not get our internal packages.

Best wishes,
Arne
-- 
Unpolitisch sein
heißt politisch sein
ohne es zu merken
[signature.asc (application/pgp-signature, inline)]

This bug report was last modified 6 years and 44 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.