From owner-freebsd-hubs@freebsd.org Fri Aug 3 21:27:57 2018 Return-Path: Delivered-To: freebsd-hubs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6791B105203C for ; Fri, 3 Aug 2018 21:27:57 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: from mail-it0-x244.google.com (mail-it0-x244.google.com [IPv6:2607:f8b0:4001:c0b::244]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 08CED765B6 for ; Fri, 3 Aug 2018 21:27:56 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: by mail-it0-x244.google.com with SMTP id d10-v6so10169184itj.5 for ; Fri, 03 Aug 2018 14:27:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=5JpggkLCbwVA5B0GiVzhXa/VM5RalaAaUOVXR3vNsXU=; b=NYM/5H3FcRab9zmy8HACYp6rVPG8bJqTZwiPMnAO2gvfYM//cdCm+Nt+3uCCYqurKx gFUOMhpQYFxWvi+hCy7+rpgkFJk/7EwNLrW7BusSv28/i5c1BXvLgkU8XU37Y3i8GuFG 5DVtiTDBzkWA2iCq2Aatvqy4Bzl5aKqCz9Es5xfzuwe2085KrdDLtjF8ojFx0dycjSwU 69TbCFo804zB52nEMpDwuSB8iEW3vHlT6WJjNeDeD0vtBhbKWLeZrL1whYPU6vAALapU gbopSJZRXAu2ewF2f9TMcGxRAjRNjgKQHSaSnplYlWQvXyv+dfuNcZ8FwBQVu9Sm9rsm j6pg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=5JpggkLCbwVA5B0GiVzhXa/VM5RalaAaUOVXR3vNsXU=; b=rNcKbMpV3qrjMKFJ/pB4oqukeekMUWqacQGiHNhAjozOp5aEm2esewn6V/lHsnIevg SXodFH8vrG5EFE/O3rFU0Nj8q+OCjLmnVHydi85if7zo3dORTyLcaRaa95Bqu8n6A3ve kL4TYWGXFotn1UdiOSkVAFmP+t7Uj86ftJ7vbtwr9iff0iWBMzZ8spx01IfEaaEk5C2O PqW3LxkGYy7mhSM2Rn26HaBArra03kKW7WPvS1iTPRVNmK8BogGNiFniVRpoi3JWmEG1 +RWonzC/RxetlsGxHTc4pcxkSS9aNp8OJNHT0FUlTVi4N927UgHxLBMunA2xc2XeB2mN /Yow== X-Gm-Message-State: AOUpUlGl+K/FDxuaMv/hohU8nkxPcB+8DUkzjibHrnJiWaTy8E7NDnks 49kWMMFwLfFwqmOYsSrWUG0vKk88KNLhcpDhj6s= X-Google-Smtp-Source: AAOMgpc9ZJg6od+iYw3ZjC16/8saLUQX/3ntfg+8t67geCKAlcYFBeAFtgYOBRnRh9Qp2eKJ6lRwvBdP95ucG11vvZM= X-Received: by 2002:a24:cc07:: with SMTP id x7-v6mr7776090itf.3.1533331675958; Fri, 03 Aug 2018 14:27:55 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a02:7781:0:0:0:0:0 with HTTP; Fri, 3 Aug 2018 14:27:15 -0700 (PDT) In-Reply-To: <1409764431.113.1533291426014@localhost> References: <34cb48da-1f15-1610-966d-1e30314f7665@freebsd.org> <1409764431.113.1533291426014@localhost> From: grarpamp Date: Fri, 3 Aug 2018 17:27:15 -0400 Message-ID: Subject: Re: Archives of last quarterly package builds? To: freebsd-ports@freebsd.org Cc: freebsd-pkg@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Mailman-Approved-At: Fri, 03 Aug 2018 21:41:22 +0000 X-BeenThere: freebsd-hubs@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "FreeBSD Distributions Hubs: mail sup ftp" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Aug 2018 21:27:57 -0000 > And many 10s of GB which we would be forcing all the mirrors to carry > (and remember, *N archs *n OSVERSIONS). > This has been cited as a stopper in the past. There's enough slack to pull down at least one new quarter, how deep that slack goes hasn't been chimed in on but this was copied out to hubs@. However on the plus side, one could easily imagine a program where mirrors could receive HW / donations from the foundation... 4TiB is only $100. They're static reference copies, already transferred, and only maintained for a year or so, so usage, thus bandwidth should be low. For the previous quarters, squelching the web index in dir '/All' exposing them only to pkg from pkg metadata, and to rsync module... is further possible. And the last final pkg build "pkg /latest" for each major version num "... 8 9 10 11 12 13 ..." should probably also be kept on archive rsync server for years like the iso's and distfiles. > Keeping archives also means keeping packages with security vulnerabilities. > Why would somebody put that on the internet? Why would FreeBSD or any other OS put all their old vulnerable release ISO's, and keep old vulnerable commits in their repos, on the internet. Lots of reasons, many noted in this thread.