]
Alessio Soldano commented on JBWS-2743:
---------------------------------------
I agree on the general idea of reproducable builds. The snapshot repos don't actually
hurt for that (as we never commit a pom pointing to a cxf/metro snapshot component).
Anyeay we can just keep them on local m2 conf as you suggest.
Make sure all maven dependencies are downloaded only from JBoss
repositories
----------------------------------------------------------------------------
Key: JBWS-2743
URL:
https://jira.jboss.org/jira/browse/JBWS-2743
Project: JBoss Web Services
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: jbossws-cxf, jbossws-metro, jbossws-native
Reporter: Richard Opalka
Assignee: Alessio Soldano
Fix For: jbossws-cxf-3.2.1, jbossws-native-3.2.1, jbossws-metro-3.2.1
The problem in general is we're depending on thirdparty maven repositories.
This is not acceptable because of reproducability of the builds in the future.
We need to remove the following repositories from our poms:
maven/parent/trunk/pom.xml
<repository>
<id>maven2.java.net</id>
<
name>Java.net Repository for Maven 2</name>
<
url>http://download.java.net/maven/2/</url>
</repository>
<repository>
<id>java.net</id>
<
url>http://download.java.net/maven/1/</url>
<layout>legacy</layout>
</repository>
stack/cxf/trunk/pom.xml
<repository>
<id>repository-snapshots-apache</id>
<
url>http://repository.apache.org/snapshots</url>
<releases>
<enabled>false</enabled>
</releases>
<snapshots>
<enabled>true</enabled>
</snapshots>
</repository>
and make sure all artifacts we're downloading from these repositories are available
in jboss repositories.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: