This page is not created by, affiliated with, or supported by Slack Technologies, Inc.
2016-01-02
Channels
- # admin-announcements (1)
- # alda (1)
- # aws (4)
- # boot (276)
- # cljs-dev (3)
- # cljsjs (1)
- # cljsrn (3)
- # clojars (22)
- # clojure (174)
- # clojure-austin (1)
- # clojure-italy (2)
- # clojure-russia (20)
- # clojurecup (1)
- # clojurescript (233)
- # cursive (4)
- # datavis (97)
- # datomic (122)
- # hoplon (80)
- # ldnclj (8)
- # leiningen (6)
- # om (82)
- # reagent (10)
- # spacemacs (8)
- # specter (5)
Oh, boot -h
is trying to connect to a server but INFO: I/O exception (java.net.SocketException) caught when connecting to the target host: Network is unreachable
It's gone now, but probably a good idea to make the failure silent if network can't be reached.
@flyboarder: offline does not give me a jar :)
@seancorfield: 0.2.1
is better than no jar. thx
@tolitius: i was asking if there was a flag, sorry for confusion
@flyboarder: all good, caused by the timing issue
Help needed please: without having knowingly changed anything, when I try running boot, I'm now seeing endless repeats of this error message:
Jan 02, 2016 10:56:37 AM org.apache.http.impl.client.DefaultRequestDirector tryConnect
INFO: I/O exception (java.net.SocketException) caught when connecting to the target host: Network is unreachable
There's nothing wrong with my network, ping'ing or loading external websites etc. works fine. Any ideas how to get boot working again? Thanks!@s_zharinov: Wow, a DDOS that's been running for almost a day?
If the DDOS is at cause, is there a way to tell Boot to temporarily avoid external network access?
Thanks for the explanation, I least I know it's not my machine/fault. But damn, this external dependency sucks.
@s_zharinov: Thanks for the idea, I just let the boot process run; it got through eventually.
obviously this doesn't apply to boot's own internal bootstrapping process, like if you're running boot for the first time
@micha: cool - would you mind adding the relevant instructions to https://github.com/clojars/clojars-web/wiki/Mirrors?
you could blackhole http://clojars.org in /etc/hosts for testing
i tried that and (set-env! :mirrors ...
in my profile.boot doesn't seem to help 😦
hm, i can un-blackhole http://clojars.org by pointing to your mirror in etc/hosts
err, no dice - certs
with :mirrors
, it probably treats the mirror as the same as the src for metadata purposes
Caused by: org.sonatype.aether.resolution.ArtifactResolutionException: Could not transfer artifact alandipert:desiderata:pom:1.0.2 from/to clojars ( ): sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
that's after i added 104.236.235.3
to my /etc/hosts
ah, in that case, the hostname wouldn't match the cert. try replacing clojars in :repositories
with the mirror url
it depends on what i already have locally right?
well the problem is that maven stores the nameo for the repo you downloaded from with the local jar
i'm cool with that
the essence of the issue is that local m2 can only contain one instance of a given artifact
and in the java world people push artifacts with different contents to different repos but with the same coords
seems like a bad decision when they designed the maven stuff, not to have the artifact coordinates be just the url to the pom
if you want to have a poxy like nexus it would be easy enough to just have varnish or nginx handle those urls
well, http://clojars.org is down again, so now's a good time to test mirrors :)
@micha: that's ivy's major plus, right?
iirc they have a url resolver thing
yeah it's weird because clearly https://github.com/boot-clj/boot/blob/master/boot/aether/src/boot/aether.clj#L75
or a BOOT_REPO env var?
@tcrawley: i'm gettin a cert error using lein w/ the mirror,
Could not transfer artifact clojure-complete:clojure-complete:pom:0.2.3 from/to clojars mirror ( ): sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
what version of java? justin_smith is seeing the same issue with an early java 8 build
oracle 1.8.0_66
i'll switch to openjdk and see how it do
looks like it's https://community.letsencrypt.org/t/will-the-cross-root-cover-trust-by-the-default-list-in-the-jdk-jre/134/26
@alandipert: I replaced the cert - things should work betterer for you now
@tcrawley: re: your recent PR, the gpg signature verification, do you consider gpg signatures on jars to be an adequate solution there?
like if someone managed to get my clojars creds and uploaded a boot jar with malicious code in it, couldn't they just sign the jar with any disposable gpg key and upload the public key to the mit keyserver?
letsencrpyt is pretty sweet, and will be handy in the future once keystores get updated
you are correct re:signing - it is really only useful if you can verify the artifacts are signed by certs that are in your web of trust
i wonder if maybe we should incorporate web of trust in the --verify-deps implementation?
hi, I’m trying to get started with boot, and I’m seeing
$ boot -h
Jan 02, 2016 1:51:39 PM org.apache.http.impl.client.DefaultRequestDirector tryConnect
INFO: I/O exception (java.net.NoRouteToHostException) caught when connecting to the target host: No route to host
. I assume it’s because of the clojars mess, is there a workaround?micha: I have that. I see 'Note: Boot does not currently support using mirrors for the initial downloading of its own dependencies (eg., the first time a new version of Boot is run).’. I guess this is my first time
you also need to configure the mirror in maven
hm, maybe not - if you comment out 'base' at the end of the makefile
I have :mirrors
in my lein profile, I assume that would work? Just set the maven mirror, we’ll see
i think that should work... i'm trying it now myself
(defproject foo "1"
:dependencies [[boot/boot "2.5.5"]
[boot/worker "2.5.5"]
[boot/aether "2.5.5"]
[boot/pod "2.5.5"]
[boot/core "2.5.5"]])
@micha: into it but that should be another BOOT_* var probly?
if it were a var that would be helpful for running a private mirror
i suspect every hardcoded URL everywhere in boot should be an env var
bahamut:boot arohner$ lein deps
Retrieving boot/boot/2.5.5/boot-2.5.5.pom from tcrawley
Retrieving boot/worker/2.5.5/worker-2.5.5.pom from tcrawley
Retrieving boot/core/2.5.5/core-2.5.5.pom from tcrawley
Retrieving boot/boot/2.5.5/boot-2.5.5.jar from tcrawley
Retrieving boot/worker/2.5.5/worker-2.5.5.jar from tcrawley
Retrieving boot/core/2.5.5/core-2.5.5.jar from tcrawley
bahamut:rasterize arohner$ boot -h
Jan 02, 2016 2:06:35 PM org.apache.http.impl.client.DefaultRequestDirector tryConnect
INFO: I/O exception (java.net.NoRouteToHostException) caught when connecting to the target host: No route to host
$ BOOT_VERSION=2.5.5 boot -h
Downloading .
Jan 02, 2016 2:10:02 PM org.apache.http.impl.client.DefaultRequestDirector tryConnect
INFO: I/O exception (java.net.NoRouteToHostException) caught when connecting to the target host: No route to host
no joy for me
i blackholed clojars in /etc/hosts and then ran boot -h
i think in App it's trying to get BOOT_CLOJURE_VERSION from clojars
did you blow away m2?
ok i blew away m2, then i did lein deps
in my 'seed' project, then i did boot -h and got this: https://gist.github.com/alandipert/a5c54b04ab8505a38f99
(clojars blackholed)
it appears now that it's trying and failing getting boot pod
weird it doesn't appear to look at anything in m2
in App that is
How should I be using :mirror with boot? I already did merge-env! still getting the netwok unreachable thing.
@mindbender: you had boot working before the clojars outage?
I even have a running boot instance already and just trying to use cemerick.pomegranate to add dependencies.
I already checked boot-env for :mirror and the value is already there.
Yes. it is. Just mispelled it here.
might it fail because in App we set update-always?
that should only affect snapshots, right?
@micha: Yes. From the repl
It's a usual for me
I also have set-env! configured for my next boot up
Or rather merge-env!
@micha: is the :mirrors working for you?
I only have tcrawley mirror in :mirrors
@micha I'm good now
I only needed to add the :mirrors key to cemerick.pomegranate directly
Thanks @tcrawley for the mirror!
@mindbender: set-env!
doesn't work?
@micha: i think the problem (for me at least) is https://github.com/boot-clj/boot/blob/master/boot/base/src/main/java/boot/App.java#L363 - it tries to talk to clojars before ever looking at disk, researching maven UPDATE_ALWAYS this looks to also apply to releases
i wonder also about deploying boot's jars to S3
i like the idea of the user coming up in an environment where anything they need to resolve they have control over where it comes from
i guess even w/ the S3 repo there should be an env var
BOOT_MAVEN_REPO
but to build the source you need some deps
i guess you build them too
yeah but the more repos you can configure the easier it is to mitigate
but it would be a breaking change, or we'd have to continue to push things to all the places
it's breaking and we haven't changed
the problem is we have places embedded in code instead of coming from env
how can it be? by the time shim is in play boot is already running
even before e.g. boot.pod is resolved?
all i'm advocating is an env var to inform the parts that download boot itself
after that we're in clojure programming land
so if you change the repo you load boot from, you will need to rm -rf m2 to use boot without that special configuration
oh i see
so you're saying env var for mirror instead of canonical ?
yeah so you can set a mirror for clojars and/or maven central when boot starts via env var
and boot could prepopulate it with info from the internet when it installs and when you do boot -u perhaps
into it
i would say there are no mirrors by default
is that still a problem?
@arohner: sorry, you picked a bad day to try boot 😦
we'll have to sort it out this week for work
@alandipert: no problem. I was trying boot because I found several lein bugs related to the clojars mess