[jbossws-issues] [JBoss JIRA] Commented: (JBWS-2743) Make sure all maven dependencies are downloaded only from JBoss repositories

[Alessio Soldano (JIRA)]

    [ https://jira.jboss.org/jira/browse/JBWS-2743?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12483275#action_12483275 ] 

Alessio Soldano commented on JBWS-2743:
---------------------------------------

I agree on the general idea of reproducable builds. The snapshot repos don't actually hurt for that (as we never commit a pom pointing to a cxf/metro snapshot component). Anyeay we can just keep them on local m2 conf as you suggest.

> Make sure all maven dependencies are downloaded only from JBoss repositories
> ----------------------------------------------------------------------------
>
>                 Key: JBWS-2743
>                 URL: https://jira.jboss.org/jira/browse/JBWS-2743
>             Project: JBoss Web Services
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: jbossws-cxf, jbossws-metro, jbossws-native
>            Reporter: Richard Opalka
>            Assignee: Alessio Soldano
>             Fix For:  jbossws-cxf-3.2.1, jbossws-native-3.2.1,  jbossws-metro-3.2.1
>
>
> The problem in general is we're depending on thirdparty maven repositories.
> This is not acceptable because of reproducability of the builds in the future.
> We need to remove the following repositories from our poms:
> maven/parent/trunk/pom.xml
>     <repository>
>       <id>maven2.java.net</id>
>       <name>Java.net Repository for Maven 2</name>
>       <url>http://download.java.net/maven/2/</url>
>     </repository>
>     <repository>
>       <id>java.net</id>
>       <url>http://download.java.net/maven/1/</url>
>       <layout>legacy</layout>
>     </repository>
> stack/cxf/trunk/pom.xml
>     <repository>
>       <id>repository-snapshots-apache</id>
>       <url>http://repository.apache.org/snapshots</url>
>       <releases>
>         <enabled>false</enabled>
>       </releases>
>       <snapshots>
>         <enabled>true</enabled>
>       </snapshots>
>     </repository>
> and make sure all artifacts we're downloading from these repositories are available in jboss repositories.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira