[
https://jira.codehaus.org/browse/MNG-5167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=279249#comment-279249
]
Manfred Moser commented on MNG-5167:
------------------------------------
Following up to the CMMI requirement as discussed on the dev mailing list.
>>
This whole argument is totally a red herring. You will not be able to have all
artifacts in the SCM system. At least you have to specify the tool chain to
actually run the build including operating system, java and so on.
These do not necessary have to be in the SCM system but have to be in the
official record for the filing.
It is totally feasible to add a repo manager as just another required build
tool and add a backup/export of the repository content as part of the code that
you put on the dvd. You could even just do a clean build on a fresh machine and
take a copy of the local repo. Or even create a virtual machine image with the
full setup.
It will work just fine off the grid. In fact with Maven it will run better if
you use a repo manager than without..
I have done that in the past for escrow services in the healthcare industry
fullfilling all requirements and passing various audits for ISO and FDA
approval.
The requirement you cite as part CMMI L3 and such does imho not really exist in
this strict sense of pure SCM storage. You have to be able to do a reproducible
build without anything beyond what you supply for escrow .. but that has
nothing to do with SCM. And if you controlling the content of your repository
for build reproducability is one of the dedicated enterprise features of e.g.
Nexus Pro (and others like Artifactory).
Cludging something into Maven itself feels wrong to me.
PS: also look at e.g. the Debian project and their integration with Maven. It
all build complete offline since this is part of their requirement for
bootstirapping so this kind of behaviour is already possible.
> relative local repository settings
> ----------------------------------
>
> Key: MNG-5167
> URL: https://jira.codehaus.org/browse/MNG-5167
> Project: Maven 2 & 3
> Issue Type: New Feature
> Components: Settings
> Affects Versions: 3.0.3, 3.0.4
> Reporter: Jason Pyeron
> Attachments: MNG-5167.patch
>
>
> see patch
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
