RE: Convention for shipped artefacts?

[Robert Patrick]

We use http://www.mojohaus.org/flatten-maven-plugin/ to strip out 
"development-related" stuff, parent POMs, etc. from our POMs for our "leaf" 
artifacts so that they have standalone POMs with only their dependencies in 
them.


-Original Message-
From: Francois MAROT [mailto:francois.ma...@gmail.com] 
Sent: Thursday, November 05, 2015 4:29 PM
To: users@maven.apache.org
Subject: Re: Convention for shipped artefacts?

I have kinda the sae project: 50 or so modules, 3 'leaf' artifacts (I coined 
the term 'leaf' to designate the artifacts that will actually be shipping 
outside.
For me those 3 artifacts share the fact they are each an obfuscated über-jar, 
and each composed of a combination of the other artifacts. As they are 
obfuscated, I created an "obfuscated-parent" module (of type 'pom') to contain 
the 3 leaf artifacts.
So people now know that they find the modules visibles to end-users in the 
'obfuscated-parent' directory/module.

It's the best I came up with.



--
View this message in context: 
http://maven.40175.n5.nabble.com/Convention-for-shipped-artefacts-tp5851343p5851467.html
Sent from the Maven - Users mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Re: How easy/reliable is a maven repo hosted on webdav?

[Ken Hylton]

Another +1 on not trying a home-grown solution. I manage an Artifactory
server that services 4000+ developers, and have had exactly one issue in a
year and a half (restarted server/service, 5 min outage). Before that we
ran Nexus, and NEVER had any issues with that.

Thanks,

Ken



*It is through caffeine alone I set my mind in motion. *
*It is by the juice of the Coffee Bean that thoughts acquire speed, the
teeth acquire stains, the dentist acquires profit. *
*It is through caffeine alone I set my mind in motion.*

On Thu, Nov 5, 2015 at 4:24 PM, Robert Patrick 
wrote:

> +1 on not trying to use some other solution.  Some people I know were
> trying to use WebDAV and the WebDAV wagon to work around some network
> limitation that they had and it was extremely painful and the WebDAV wagon
> seems to have not really been tested very well.
>
> I stood up an artifactory server for my old team used for several years
> and never, ever had to do anything to it (once I added the commands to
> start it to the /etc/init.d scripts)...  By default, it uses Tomcat so it
> is very simple to run.
>
>
> -Original Message-
> From: Kevin Burton [mailto:bur...@spinn3r.com]
> Sent: Thursday, November 05, 2015 3:30 PM
> To: Maven Users List
> Subject: Re: How easy/reliable is a maven repo hosted on webdav?
>
> On Wed, Nov 4, 2015 at 10:36 PM, Anders Hammar  wrote:
>
> > A real repository manager is not overkill but rather the basic
> > foundation in a Maven-based dev environment. And there are free versions
> of them:
> > nexus oss, artifactory and archiva.
> > I strongly advice against trying to do this with your home-brewed
> solution!
> >
>
>
> I'm starting to appreciate that perspective but then again it's another
> component in our infra that can fail, requires maintenance, etc.
>
> Additionally there's replication , multiple datacenters, etc.
>
>
> > --
> >
> We’re hiring if you know of any awesome Java Devops or Linux Operations
> Engineers!
>
> Founder/CEO Spinn3r.com
> Location: *San Francisco, CA*
> blog: http://burtonator.wordpress.com
> … or check out my Google+ profile
> 
>
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
>
>

Re: How to perform a deploy only

[Francois MAROT]

Hello Pavan,

it's hard to tell exactly but in Eclipse (Eclipse JEE at least) if you
declare a tomcat instance in the "server" window, and import your maven
modules with m2e, you should be able to deploy to Tomcat without problems.
No more needs for command-line clean/install/deploy (as long as your project
does not do very dirty stuffs).
Check the "m2e-wtp" keyword on Google as it's the plugin doing the bridge
between Maven in Eclipse and the server deployment stuffs...



--
View this message in context: 
http://maven.40175.n5.nabble.com/How-to-perform-a-deploy-only-tp118100p5851470.html
Sent from the Maven - Users mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Re: Convention for shipped artefacts?

[Francois MAROT]

I have kinda the sae project: 50 or so modules, 3 'leaf' artifacts (I coined
the term 'leaf' to designate the artifacts that will actually be shipping
outside.
For me those 3 artifacts share the fact they are each an obfuscated
über-jar, and each composed of a combination of the other artifacts. As they
are obfuscated, I created an "obfuscated-parent" module (of type 'pom') to
contain the 3 leaf artifacts.
So people now know that they find the modules visibles to end-users in the
'obfuscated-parent' directory/module.

It's the best I came up with.



--
View this message in context: 
http://maven.40175.n5.nabble.com/Convention-for-shipped-artefacts-tp5851343p5851467.html
Sent from the Maven - Users mailing list archive at Nabble.com.

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

RE: How easy/reliable is a maven repo hosted on webdav?

[Robert Patrick]

+1 on not trying to use some other solution.  Some people I know were trying to 
use WebDAV and the WebDAV wagon to work around some network limitation that 
they had and it was extremely painful and the WebDAV wagon seems to have not 
really been tested very well.

I stood up an artifactory server for my old team used for several years and 
never, ever had to do anything to it (once I added the commands to start it to 
the /etc/init.d scripts)...  By default, it uses Tomcat so it is very simple to 
run.


-Original Message-
From: Kevin Burton [mailto:bur...@spinn3r.com] 
Sent: Thursday, November 05, 2015 3:30 PM
To: Maven Users List
Subject: Re: How easy/reliable is a maven repo hosted on webdav?

On Wed, Nov 4, 2015 at 10:36 PM, Anders Hammar  wrote:

> A real repository manager is not overkill but rather the basic 
> foundation in a Maven-based dev environment. And there are free versions of 
> them:
> nexus oss, artifactory and archiva.
> I strongly advice against trying to do this with your home-brewed solution!
>


I'm starting to appreciate that perspective but then again it's another 
component in our infra that can fail, requires maintenance, etc.

Additionally there's replication , multiple datacenters, etc.


> --
>
We’re hiring if you know of any awesome Java Devops or Linux Operations 
Engineers!

Founder/CEO Spinn3r.com
Location: *San Francisco, CA*
blog: http://burtonator.wordpress.com
… or check out my Google+ profile


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Re: How easy/reliable is a maven repo hosted on webdav?

[Kevin Burton]

On Wed, Nov 4, 2015 at 10:36 PM, Anders Hammar  wrote:

> A real repository manager is not overkill but rather the basic foundation
> in a Maven-based dev environment. And there are free versions of them:
> nexus oss, artifactory and archiva.
> I strongly advice against trying to do this with your home-brewed solution!
>


I'm starting to appreciate that perspective but then again it's another
component in our infra that can fail, requires maintenance, etc.

Additionally there's replication , multiple datacenters, etc.


> --
>
We’re hiring if you know of any awesome Java Devops or Linux Operations
Engineers!

Founder/CEO Spinn3r.com
Location: *San Francisco, CA*
blog: http://burtonator.wordpress.com
… or check out my Google+ profile

Re: Copying resources from another .jar with assembly to build a deb?

[Kevin Burton]

I'm trying this plugin:

https://maven.apache.org/plugins/maven-remote-resources-plugin/examples/sharing-resources.html

... and seems to work well!

On Thu, Nov 5, 2015 at 11:29 AM, Wayne Fay  wrote:

> I could be wrong, but I think you are looking for
> maven-dependency-plugin:unpack.
>
> Wayne
>
> On Thu, Nov 5, 2015 at 12:42 PM, Kevin Burton  wrote:
> > I have init scripts and various other scripts I want to share between
> > projects.
> >
> > The MAIN one is our init script for our daemons.
> >
> > so if I have a project I want to depend on artemis-daemon which has our
> > daemon scripts.
> >
> > Then I want to copy some resources from that .jar while building a dpkg
> via
> > jdeb...
> >
> > In the past I've just done a copy ../ and used a parent directory to
> read a
> > module.
> >
> > But I can't do that now since I'm breaking projects apart.
> >
> > Is there an easy way to handle this?
> >
> > --
> >
> > We’re hiring if you know of any awesome Java Devops or Linux Operations
> > Engineers!
> >
> > Founder/CEO Spinn3r.com
> > Location: *San Francisco, CA*
> > blog: http://burtonator.wordpress.com
> > … or check out my Google+ profile
> > 
>
> -
> To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
> For additional commands, e-mail: users-h...@maven.apache.org
>
>


-- 

We’re hiring if you know of any awesome Java Devops or Linux Operations
Engineers!

Founder/CEO Spinn3r.com
Location: *San Francisco, CA*
blog: http://burtonator.wordpress.com
… or check out my Google+ profile

Re: Copying resources from another .jar with assembly to build a deb?

[Wayne Fay]

I could be wrong, but I think you are looking for
maven-dependency-plugin:unpack.

Wayne

On Thu, Nov 5, 2015 at 12:42 PM, Kevin Burton  wrote:
> I have init scripts and various other scripts I want to share between
> projects.
>
> The MAIN one is our init script for our daemons.
>
> so if I have a project I want to depend on artemis-daemon which has our
> daemon scripts.
>
> Then I want to copy some resources from that .jar while building a dpkg via
> jdeb...
>
> In the past I've just done a copy ../ and used a parent directory to read a
> module.
>
> But I can't do that now since I'm breaking projects apart.
>
> Is there an easy way to handle this?
>
> --
>
> We’re hiring if you know of any awesome Java Devops or Linux Operations
> Engineers!
>
> Founder/CEO Spinn3r.com
> Location: *San Francisco, CA*
> blog: http://burtonator.wordpress.com
> … or check out my Google+ profile
> 

-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

Copying resources from another .jar with assembly to build a deb?

[Kevin Burton]

I have init scripts and various other scripts I want to share between
projects.

The MAIN one is our init script for our daemons.

so if I have a project I want to depend on artemis-daemon which has our
daemon scripts.

Then I want to copy some resources from that .jar while building a dpkg via
jdeb...

In the past I've just done a copy ../ and used a parent directory to read a
module.

But I can't do that now since I'm breaking projects apart.

Is there an easy way to handle this?

-- 

We’re hiring if you know of any awesome Java Devops or Linux Operations
Engineers!

Founder/CEO Spinn3r.com
Location: *San Francisco, CA*
blog: http://burtonator.wordpress.com
… or check out my Google+ profile

Re: How easy/reliable is a maven repo hosted on webdav?

[Graham Leggett]

On 05 Nov 2015, at 2:13 AM, Kevin Burton  wrote:

> I need to setup a new maven repo due to some changes we're making in our CI
> framework.
> 
> Basically, I want something simple.. I was looking at bintray and
> artifactory and I think they are overkill for what we need and could be
> rather expensive per year.
> 
> We already have plenty of hardware so I just want something simple.
> 
> We used to use SCP but I don't want to give our CI hosting provider / SAAS
> the ability to auth into our cluster.
> 
> WebDAV seems ideal because it could just work with plain old apache.
> 
> However, I can't find any documentation for how to set this up.

I’ve used webdav based repos for years, and they work well.

On the server side you just need plain old Apache, secure with 
username/password or certs (but if you use certs, make sure you use a version 
of maven that supports them, some of the versions are broken with respect to 
SSL handling with respect to certs and/or SNI)

In the pom, I have a distributionManagement section that looks like this:

  

  repo.example.com
  Example Repository
  dav:https://repo.example.com/dev/maven2


  repo.example.com
  ${project.name} Website
  
dav:https://repo.example.com/dev/docs/${project.artifactId}/${project.version}/

  

I’ve also used this extension, though not sure if it is still required:

  
...

  
org.apache.maven.wagon
wagon-webdav
1.0-beta-2
  

…
  

Regards,
Graham
—


-
To unsubscribe, e-mail: users-unsubscr...@maven.apache.org
For additional commands, e-mail: users-h...@maven.apache.org

aggregation and dependency resolution

[Jeremy Long]

I have been struggling with creating an aggregate goal that successfully works
and I was hoping someone on this list could help. The plugin is
dependency-check-maven <
https://github.com/jeremylong/DependencyCheck/tree/master/dependency-check-maven
>; it performs identification (CPE ) and
known vulnerability (CVE ) reporting on dependencies
used by the project.

In order to perform CPE identification, the plugin needs maven to resolve each
modules’ dependencies. If we have a simple multi-module project:

Parent
-Child1
-Child2

If one defines the aggregate goal in the Parent, when the plugin
executes dependency
resolution (obviously) hasn’t executed on the child modules. As such, my
plugin is unable analyze the dependencies of the child modules.

I am currently using a hack, which turns out to be broken, that waits until the
plugin executes in the last module in the reactor and then builds the aggregate
report and over-writes the blank report that was generated when Parent was
processed. This “worked” in some cases, but fails for anything beyond
site:site. Running site:stage, due to execution order, would copy the blank
report into the staging directory prior to the correct report being
generated.

Does anyone have any suggestions for building an aggregate goal that requires
dependency resolution of all child modules? Is there a convenient API that
I am missing to trigger dependency resolution in child modeules?

Thanks in advance,

Jeremy