Discussion:
people.mozilla.com shutdown - impact and issues.
(too old to reply)
ng0
2017-12-13 17:47:58 UTC
Permalink
Raw Message
Hi all,

I just found out that people.mozilla.com is no more:

> https://github.com/mozilla/charts/issues/39

The homepage (https://developer.mozilla.org/en-US/docs/Mozilla/Projects/SpiderMonkey/Releases/38)
of mozjs-38 states:

> The download url is outdated and SpiderMonkey not RELEASE alone! Get it here mozilla-esr38
> You will find it in "Firefox Extended Support Release 38" package on hg release

This page leads to:

> https://hg.mozilla.org/releases/mozilla-esr38/archive/tip.tar.bz2

Which gives you a 170MiB (!) Download from their hg.

We have 2.5 choices:

1) look into archive.org if they have saved the tarball.
pro: ?
contra: rely on archive.org
1.5) Use the tarballs I still had available and published right now here:
https://d.n0.is/d/v/mozjs/ or https://d.n0.is/dist/vault/mozjs/
The 2nd link is just a symlink to the first.
pro: smaller files
contra: You rely on me, trust me. That's the same with archive.org, we
trust archive.org not to manipulate the files.
In addition to this: we do not get further updates on mozjs-38
(if it's still developed) because they are now in hg and no
longer released on their own. I can only be a drop-in
replacement for one version.
2) Use their hg.
contra: big terrible archive, possible just from HEAD ("tip" is just
that in hg terms, right? I'm not using hg very often).
pro: ?!?

Impact of this change:

I noticed that icecat was building from source.

***@38:
> Building the following 3 packages would ensure 5 dependent packages are rebuilt: ***@0.0.22-alpha gnome-***@3.26.2 ***@3.24.3

***@24:
> No dependents other than itself: ***@24.2.0

***@17:
> Building the following 27 packages would ensure 83 dependent packages are rebuilt: ***@1.35 modemmanager-***@5.39.0 deja-***@34.3 ***@0.7.0 cinnamon-***@3.4.2 network-manager-***@1.2.4 network-manager-***@1.8.0 eid-***@4.3.4 simple-***@3.24.1 ***@3.24.3 ***@0.99.2 ***@1.18.0 polkit-***@0.105 ***@5.39.0 kde-***@5.39.0 ***@5.39.0 kactivities-***@5.39.0 ***@5.39.0 ***@5.39.0 ***@2.2.1 ***@3.3.2.1 ***@5.39.0 ***@5.39.0 ***@5.1.2 python-***@3.7.0 virt-***@1.4.3 ***@4.12.0

We get mozjs 17 and 24 from their ftp:
> https://ftp.mozilla.org/pub/js/
only 38 is affected.

Other packages?
WOFF is the only package that turns up when I grep for "people.mozilla.com" in gnu/packages/,
so this must be fixed aswell.


Ideas? Thoughts? Screams of despair?
--
GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
GnuPG: https://c.n0.is/ng0_pubkeys/tree/keys
WWW: https://n0.is
ng0
2017-12-13 17:54:16 UTC
Permalink
Raw Message
ng0 transcribed 3.7K bytes:
> Hi all,
>
> I just found out that people.mozilla.com is no more:
>
> > https://github.com/mozilla/charts/issues/39
>
> The homepage (https://developer.mozilla.org/en-US/docs/Mozilla/Projects/SpiderMonkey/Releases/38)
> of mozjs-38 states:
>
> > The download url is outdated and SpiderMonkey not RELEASE alone! Get it here mozilla-esr38
> > You will find it in "Firefox Extended Support Release 38" package on hg release
>
> This page leads to:
>
> > https://hg.mozilla.org/releases/mozilla-esr38/archive/tip.tar.bz2
>
> Which gives you a 170MiB (!) Download from their hg.
>
> We have 2.5 choices:
>
> 1) look into archive.org if they have saved the tarball.
> pro: ?
> contra: rely on archive.org
> 1.5) Use the tarballs I still had available and published right now here:
> https://d.n0.is/d/v/mozjs/ or https://d.n0.is/dist/vault/mozjs/
> The 2nd link is just a symlink to the first.
> pro: smaller files
> contra: You rely on me, trust me. That's the same with archive.org, we
> trust archive.org not to manipulate the files.
> In addition to this: we do not get further updates on mozjs-38
> (if it's still developed) because they are now in hg and no
> longer released on their own. I can only be a drop-in
> replacement for one version.
> 2) Use their hg.
> contra: big terrible archive, possible just from HEAD ("tip" is just
> that in hg terms, right? I'm not using hg very often).
> pro: ?!?
>
> Impact of this change:
>
> I noticed that icecat was building from source.
>
> ***@38:
> > Building the following 3 packages would ensure 5 dependent packages are rebuilt: ***@0.0.22-alpha gnome-***@3.26.2 ***@3.24.3
>
> ***@24:
> > No dependents other than itself: ***@24.2.0
>
> ***@17:
> > Building the following 27 packages would ensure 83 dependent packages are rebuilt: ***@1.35 modemmanager-***@5.39.0 deja-***@34.3 ***@0.7.0 cinnamon-***@3.4.2 network-manager-***@1.2.4 network-manager-***@1.8.0 eid-***@4.3.4 simple-***@3.24.1 ***@3.24.3 ***@0.99.2 ***@1.18.0 polkit-***@0.105 ***@5.39.0 kde-***@5.39.0 ***@5.39.0 kactivities-***@5.39.0 ***@5.39.0 ***@5.39.0 ***@2.2.1 ***@3.3.2.1 ***@5.39.0 ***@5.39.0 ***@5.1.2 python-***@3.7.0 virt-***@1.4.3 ***@4.12.0
>
> We get mozjs 17 and 24 from their ftp:
> > https://ftp.mozilla.org/pub/js/
> only 38 is affected.
>
> Other packages?
> WOFF is the only package that turns up when I grep for "people.mozilla.com" in gnu/packages/,
> so this must be fixed aswell.

Someone "revived" woff here:

https://github.com/wget/sfnt2woff

https://github.com/instructure/canvas-lms/issues/1073

We already build from Debian down-upstream, so I guess
they are going to deal with this somehow.

>
> Ideas? Thoughts? Screams of despair?
> --
> GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
> GnuPG: https://c.n0.is/ng0_pubkeys/tree/keys
> WWW: https://n0.is



--
GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
GnuPG: https://c.n0.is/ng0_pubkeys/tree/keys
WWW: https://n0.is
Loading...