Re: Stuck module upload for Date::Parse::Modern

`curl` on the box can validate the certificate okay (right now), for what it’s worth. Ask > On Jan 14, 2023, at 13:49, Ricardo Signes > wrote: > > I looked at the PAUSE logs: > 2023-01-13 22:50:39 $$3234 v1049: Alert: nosuccesscount[0] error[Can't > connect to www.perturb.org:443

Re: Move dev release tarballs to GitHub?

That’d make sense to me, deleting the old images and letting them just be on backpan. That should allow whatever tooling depends on recent releases being in the regular CPAN mirrors to still work. Looking at 3 days of www.cpan.org logs only the most recent development ima

Re: Mirror update - cpan.perl.pt

> On Mar 5, 2019, at 15:54, Pedro Melo wrote: > > … every couple of hours to sync our CPAN mirror to backpan, but we would like > to mirror backpan once a week from a master repo with —delete. Any > recommendation on which backpan mirror to use? I don’t think that’s how backpan is supposed

Re: What happens to CPAN clients when TLS 1.2 is required?

> On Apr 24, 2018, at 18:11 , David Golden wrote: > > But when they do opt into TLS, it's 1.2 required, right? Sure, but … TLS 1.2 is almost ten years old. 1.1 is only barely older. What operating systems don’t support TLS 1.2, but are otherwise functional / reasonable enough that you’d be

Re: What happens to CPAN clients when TLS 1.2 is required?

www.cpan.org only forces TLS on modern browsers and the “user visible” pages. The index and distributions are TLS optional. -- http://askask.com/ > On Apr 24, 2018, at 11:52, David Golden wrote: > > A colleague wrote this article about Python, which also uses Fastly: > https://pyfound.blogsp

Re: sponsor logo on home of CPAN mirror

Rather than having it execute javascript that’s locally modified, maybe we could have it just load some JSON? I know that the mirror can technically change anything, so this is not really a technical argument. I think it’s important to maintain a stance that it’s unacceptable to change anythi

Re: Confirming PAUSE operating model safe harbor for Alt::* distributions

FWIW I agree with Andreas on every point. There’s a big difference between 1) “use Foo::XS” will install hooks into the Foo namespace for the XS optimized implementation of Foo and 2) “cpam Foo::Bar” will overwrite site_lib/…/Foo.pm Manipulating namespace in memory seems … Perl-ish (and appro

Re: Making www.cpan.org TLS-only

> On Sep 5, 2017, at 11:22 , Leo Lapworth wrote: > > Would (at least for the short term) just adding the HSTS header to every > request be the best solution? Then browsers get told to switch to secure and > other clients can do either. HSTS only works on TLS requests, so you have to get the

Re: Making www.cpan.org TLS-only

> On Sep 4, 2017, at 11:20, David Golden wrote: > > Are those "OR" conditions? "*.html" OR not in /authors/, etc/? Yeah, that was the idea. Basically make “things a web browser typically visits” have forced TLS (because humans), but have it be optional for things computers typically use. Ho

Re: Making www.cpan.org TLS-only

The Google change was the impetus to get around to it. Clients should use TLS to request content. It limits the trust for downloading CPAN content roughly to: - The author - PAUSE system maintainers - perl.org infrastructure maintainers - Fastly - Global CA infrastructure Without TLS you basica

Re: Making www.cpan.org TLS-only

Uh, there’s no “SSL” anymore. The newer versions of SSL have been “TLS” since the end of the nineties. https://en.wikipedia.org/wiki/Transport_Layer_Security That being said, the suggested change here is to require HTTPS for www.cpan.org by redirecting all plain-text HTTP requests to the HTTPS

Re: Making www.cpan.org TLS-only

> On Aug 31, 2017, at 19:44, James E Keenan wrote: > > To be honest, I had no idea what 'TLS' meant when I first read this message. > So I can't say anything one way or the other about your proposal. > > I suspect I'm not alone in this. I would encourage you to post in a location > like bl

Making www.cpan.org TLS-only

Hi everyone, We’re considering how/how-much we can make www.cpan.org TLS-only. http://log.perl.org/2017/08/tls-only-for-wwwcpanorg.html I expect that we can’t make the whole site TLS-only without breaking some CPAN clients, so the conservative version is to force TLS for - any url ending in *.h

Re: pause.perl.org seems down - can anyone fix?

On Jan 8, 2014, at 9:05 AM, Cosimo Streppone wrote: http://log.perl.org/2014/01/multiple-hard-drive-faliure.html > On 01/08/2014 01:08 PM, Leo Lapworth wrote: >> >> Pause seems to be down, can anyone help out? > > I wish I could. Sadly still down. > No news on log.perl.org either. > > Tracin

Re: How To Build A Perl Package Database

On Dec 17, 2012, at 9:36, Tim Bunce wrote: > A separate install database for each install location seems like the only > workable approach. It seems to me that the database indeed will have to be[1] "per library root" and the tools using the database will need to know to do lookups everywhere

Re: CPAN map

On Mar 22, 2012, at 3:38, Henk P. Penning wrote: > Hi, > > The CPAN mirrors map > >http://mirrors.cpan.org/map.html Neat. What do the blue markers mean?

Re: authors/id/L/LE/LEOCHARRE (fwd)

On Sep 30, 2011, at 11:59, Henk P. Penning wrote: > Fri Sep 30 15:51:15 2011 : >1317390657.86349 1h delete > authors/id/L/LE/LEOCHARRE/.PDF-Burst-1.14.tar.gz.IO9RK5 >1317390657.86358 1h new > authors/id/L/LE/LEOCHARRE/PDF-Burst-1.14.tar.gz On the CPAN master mirror server I ha

Re: rrr-client using 100% CPU and 300Mb+ memory?

On Sep 3, 2011, at 2:08, Pedro Melo wrote: > :) Ok, I'll try and debug it during the weekend. Try to make the batch size (much) larger. (I forget what the parameter is called)

Re: new instant mirroring client

On Jun 16, 2011, at 3:47, David Precious wrote: > Incidentally, I've not seen any reports on the progress of instant mirroring > for a bit - have I missed anything? No - it's working nicely. You want to upgrade to 0.2.1 if you haven't already. It's fixing deletion of symlinks that weren't

Re: new instant mirroring client

On Jun 16, 2011, at 1:03, Henk P. Penning wrote: > I'm very curious to know what you think ; so, please try it out ; > installing and testing should be very easy. It's really great to get another client for the 'instant mirroring' system; it'll suit different people and more importantly it wi

Re: Adjusting CPAN::Mirrors to make it more useful

ust do a crazy amount of "rsync type I/O". - ask -- Ask Bjørn Hansen, http://askask.com/

Re: Adjusting CPAN::Mirrors to make it more useful

On May 2, 2011, at 12:54, David Golden wrote: > Doesn't a lot of this problem go away with www.cpan.org resolving to > tier 1 mirrors? Did I see that Robert/Ask were using some sort of > GeoIP-aware DNS? Yeah, though for now only with mirrors in Los Angeles and one in Europe. Somewhat similar

Re: Adjusting CPAN::Mirrors to make it more useful

On Apr 28, 2011, at 9:19, brian d foy wrote: >> I think I may have implemented what you're looking for several years >> ago for JSAN, which has a client that auto-detected appropriate >> mirrors in a few seconds each time it starts. >> >> http://search.cpan.org/~adamk/Mirror-URI-0.90/lib/Mirror/

cpan.org updated

Hi everyone, CPAN got its first big update in a while: http://log.perl.org/2011/03/big-cpanorg-update.html - ask -- http://log.perl.org/ - http://askask.com/

CPAN master mirror update / rrr testing

s (number of modules, recent uploads, ...); but I hope we'll put up the updated pages within the next few days. - ask -- Ask Bjørn Hansen, http://askask.com/

Testing tier-1 CPAN mirrors

Hi everyone, Currently about 450 mirrors are mirroring from FUnet; creating a huge load on their system. While there are lots of CPAN mirrors that offer rsync, everyone of course wants to mirror from the source. Rather than just move the load to another single dedicated system; we better do so

CPAN mirrors list in JSON format

The list of mirrors is now available in JSON format: http://log.perl.org/2011/02/cpan-mirrors-list-now-also-in-json-format.html - ask -- Ask Bjørn Hansen, http://askask.com/

Re: update faq

On Feb 25, 2011, at 5:54, Henk P. Penning wrote: > .. to see if I got it right ; I forked, cloned, committed, pushed > and set a 'pull request' ; please consider the change below. That worked. :-) I think you had some other changes to the "how to mirror" section, too...

Re: Ports list - is it being maintained?

On Feb 17, 2011, at 11:43, David Golden wrote: > That raises a broader question. > > Who maintains all of the non tarball content on CPAN and what is the > process for getting it changed? The ports page and the CPAN FAQ (probably the documents most in need of update) are now on: http

Re: Ports list - is it being maintained?

On Feb 17, 2011, at 11:43, David Golden wrote: > That raises a broader question. > > Who maintains all of the non tarball content on CPAN and what is the > process for getting it changed? We at perl.org took it over recently but haven't gotten this sort of thing setup yet. (First order of bus

Re: Adjusting CPAN::Mirrors to make it more useful

On Feb 7, 2011, at 22:55, brian d foy wrote: > And, who makes the MIRRORED.BY file? I imagine that's something from a > script that Jarkko makes, but how does it get the data? Henk Penning (aka the mirror list master since a few months ago) maintains a master mirrors.json file that a script on

Re: Can anyone give me access to an authenticating proxy server for testing?

On Nov 2, 2010, at 20:12, David Golden wrote: > I want to experiment with CPAN.pm and authenticating proxies. Can > anyone give me access to a proxy server? Install squid on your laptop? - ask

Re: How to get the Pause ID

On Oct 3, 2010, at 21:16, Andreas J. Koenig wrote: > There's a mirroring bug somewhere then. Ah, I'm sorry -- I completely missed that the index files were pointing to proper PAUSE files! Anyway, I still think we should deprecate it and recommend people create "App::foobar" modules with a scr

Re: How to get the Pause ID

On Oct 3, 2010, at 20:31, Andreas J. Koenig wrote: >>> http://www.cpan.org/scripts/submitting.html > >> Yes, I'm not sure that even worked in 2002 when the page was last updated. > >> /scripts/.* should just be redirected somewhere else. > > I must correct you, Ask, scripts/ is indeed alive, i

Re: How to get the Pause ID

On Oct 3, 2010, at 0:34, David Cantrell wrote: > On Sat, Oct 02, 2010 at 09:15:30PM -0700, Ask Bj?rn Hansen wrote: >> On Oct 2, 2010, at 20:52, Parag Kalra wrote: >>> I have been trying to get Pause ID but seems like either the request is >>> getting rejected or something is wrong in the way I a

Re: How to get the Pause ID

On Oct 2, 2010, at 20:52, Parag Kalra wrote: > I have been trying to get Pause ID but seems like either the request is > getting rejected or something is wrong in the way I am raising the request. You mention sharing scripts in the request -- PAUSE doesn't actually do that; it's only for modul

Re: Leo is skinning www.cpan.org

On Sep 27, 2010, at 8:17, David Cantrell wrote: > While we're on the subject of RECENT*, what is RECENT-Z.yaml? And will > it ever be updated? At a glance, it appears to be a log of all uploads > and deletes from the beginning of time up to some point in recent > history, at which point it stop

Re: Leo is skinning www.cpan.org

On Sep 26, 2010, at 17:40, David Golden wrote: > I'm more interested in getting a proper tiering structure in place and a way > for people to register themselves on a tier. Just start with: Tier 1 = handpicked mirrors using the instant sync thing; tier 2 = everything else. > How we syndicate

Re: so long, CPAN

On Sep 26, 2010, at 5:52, Jarkko Hietaniemi wrote: > On a more urgent note: could you and Elaine coordinate on moving/copying > stuff out of gargoyle where e.g. the mirrors.cpan.org runs? Yes, of course. I'll send a mail off-list to get started. - ask

Re: so long, CPAN

ko -- had it not been for your early invention and work with CPAN I don't think many of us would be here or be as productive with Perl as we are. - ask -- Ask Bjørn Hansen, http://askask.com/

Re: Distributing the CPAN

On Apr 2, 2010, at 14:03, Tim Bunce wrote: > Imagine a cpan-all 'superproject' repro that has all the distros as > submodules. This repro would be tiny when cloned because it only > contains empty directories for the distos plus the metadata for where > the upstream distro repro lives and what t

Re: Trimming the CPAN - "Automatic Purging"

On Apr 2, 2010, at 1:50, Arthur Corliss wrote: > And my assertion has been that the excessive stats by the server are a bigger > impediment to synchronization than the inode count. Well, then one of us don't understand how file systems etc work. :-) - ask

Re: Distributing the CPAN

On Apr 1, 2010, at 16:50, Tim Bunce wrote: > * The need for widespread mirroring is less significant than it was in > years past. (Also using git as the inter-mirror transport of source files > means there'll be much less traffic between mirrors. Effectively only > the diffs between releases.) T

Re: Trimming the CPAN - "Automatic Purging"

On Apr 1, 2010, at 19:49, Arthur Corliss wrote: I can't believe I'm doing this, but ... >> The main point here is that we can't use 20 inodes per distribution. It's >> Just Nuts. Sure, it's only something like 400k files/inodes now - but at >> the rate it's going it'll be a lot more soon en

Re: Trimming the CPAN - "Automatic Purging"

On Apr 1, 2010, at 19:49, Arthur Corliss wrote: > I've made a viable suggestion, and offered some time to work on it. But > you've made it abundantly clear that it's not welcome. Talk = ZzZz. Code = Interesting. Deployment = Useful. - ask

Re: Trimming the CPAN - "Automatic Purging"

Just to summarize (and this is going to be the last mail I send in this thread): Old releases (more than a few releases back) are virtually useless. Just how useless is up for debate, but BACKPAN is there. We've always encouraged CPAN authors to purge old releases as appropriate. Tim noticed (

Re: Trimming the CPAN - "Automatic Purging"

On Mar 31, 2010, at 6:52, David Nicol wrote: > new proposal: Make modules "pay rent" in order to remain on a mirror. > Rent could be in the form of actual user interest, or good reviews. How you are proposing purging useless stuff from CPAN -- that's a lot more radical than Tim's proposal of j

Re: Trimming the CPAN - "Automatic Purging"

You are misunderstanding the problem of changing the mirroring mechanism. Making new software is nice and good -- Andreas already has something that's better for the PAUSE data. Getting 1000s of mirrors to use your software (rather than rsync which they use for ALL OTHER mirrors -- not so easy.

Re: Trimming the CPAN - "Automatic Purging"

On Mar 26, 2010, at 16:02, Arthur Corliss wrote: > Why use rsync, then? Why not have checkpointed logs on cpan with > additions/removals logged by date so you can roll forward on the client, > processing only those files? It would be trivial to set up and a lot more > efficient. I find it cur

Re: Trimming the CPAN - "Automatic Purging"

On Mar 25, 2010, at 13:23, Eric Wilhelm wrote: > Maybe CPAN mirrors are more easily updated than via a generic rsync? Is > the burden only network/cpu for checking whether a bunch of old > archives have changed, or does disk matter? Most CPAN mirrors use rsync. It's not realistic to make the

Re: Trimming the CPAN - "Automatic Purging"

On Mar 25, 2010, at 14:08, Geoffrey Broadwell wrote: >> Maybe CPAN mirrors are more easily updated than via a generic rsync? Is >> the burden only network/cpu for checking whether a bunch of old >> archives have changed, or does disk matter? > > Forgive a lurker, but wasn't that the point of

Re: Trimming the CPAN - "Automatic Purging"

On Mar 25, 2010, at 8:38, Andy Armstrong wrote: >> I like that solution better > > > [snip] > > But solution to what? Are we convinced there's actually a problem here? CPAN has almost 200k files. www.cpan.org says there are "17627 modules". rsyncing a gazillion files doesn't work that well

Re: Trimming the CPAN - "Automatic Purging"

On Mar 25, 2010, at 4:12, Tim Bunce wrote: > Currently on PAUSE you have to explicitly delete old uploads. > > How about changing it so you have to explicitly KEEP old uploads > that appear to have been superseded? I like it. I agree with Jarkko that there should be a way to "pin" some version

Re: RFC: PGAN

On Jan 7, 2010, at 21:29, David E. Wheeler wrote: >> See File::Rsync::Mirror::Recent > > Interesting. I especially like the " PRE-ALPHA ALERT ". www.cpan.org and the search.cpan.org mirrors are all using it, too (some of them indirectly, but still). - ask

Re: CPAN vs Perl 6

As much as I like JSON I agree that for CPAN.pm like programs a variation of the current index really seems like the best match (5 lines of perl for the parser; backwards compatible; easy-ish to make as memory efficient as possible). For other tools having a more complete data structure would be

Re: Perl 6 versus the CPAN

On Jan 3, 2010, at 7:26, David Golden wrote: > There is a fundamental decision to be taken -- should we try to have a > common indexing system across both languages? Or should we design the > indexing specific to the unique semantics of each? Having worked with IPv6 a little lately I'd strongly

Re: ENOMAIL

On Oct 11, 2009, at 13:08, Barbie wrote: Anyone any idea why I'm not getting mail to this list? Have I been blocked? Nothing in my spam traps and the last mail i got was Aug 26. I note that there has been a flurry of CMSP items in the web archives, but I'm not going to both cut-n-pasting r

Re: Flagging abandoned modules via an ABANDONED author id

I realize this is in the "just a simple matter of programming" category, but here's another suggestion anyway: At work - http://www.yellowbot.com/ and others - we've had great success with using triple-tags/machine tags in our system (::). Some namespaces are reserved for particular uses

Re: Flagging abandoned modules via an ABANDONED author id

(If it wasn't clear, I think using 'ABANDONED' as the "author" will be too messy).

Re: Flagging abandoned modules via an ABANDONED author id

On Aug 26, 2009, at 10:27, David Golden wrote: I still like the ABANDONED author idea though -- no work required! Do you move the distribution files to the A/AB/ABANDONED/ directory then? If so, that's work and it'll pollute backpan with duplicates (and require updating of indexes; break

Re: META.json: duty now for the future

0) Yay for JSON. 1) Is it really necessary to use ascii instead of just regular utf-8 for the JSON output? 2) The documentation is a little confusing saying "If it can be loaded, any META.yml file produced will contain JSON." -- but it looks like the code (correctly) makes the output file

Re: rsync indexer bug fixed

On May 15, 2009, at 11:24, Andy Armstrong wrote: I've asked Andreas off-list if I can have a password for the PAUSE rsync server. Is pulling from PAUSE likely to fix the problem with the RECENT* files? Yes. - ask

Re: rsync indexer bug fixed

On Apr 23, 2009, at 20:41, Andreas J. Koenig wrote: Can you have a look if your slaves are still running? And if your site is publicly accessible, please let me know the URL so I can verify samples and write you reminders. Ours is cpan.solfo.com - the search.cpan.org boxes mirror from there.

Re: did I break something or just old YAML ?

On Oct 24, 2008, at 23:06, Andreas J. Koenig wrote: Both YAML.pm and YAML::Tiny cannot read theperfectly valid META.yml file *cough*META.json*cough* :-)