Skip to content

Clarify lack of solution for sources in production #3354

@rconde01

Description

@rconde01

In the new devops page: https://docs.conan.io/2/devops/using_conancenter.html you say:

Additionally, when building recipes from source, this requires retrieving the source packages (typically zip or tar files) from remote servers outside of the control of ConanCenter. Occasionally, these too can suffer from unscheduled downtime.

This is true, but the context is best practices for improving reliability - for which the page has no recommendation and solution for improving reliability. In other words, even if I fork conan center and build all my own packages, if that recipe pulls sources from a zip or repository on a third party server then that is a point of failure.

It would be good to clarify that that is a continuing risk to users even after following recommendations. Potentially it would also be good to track a potential solution to this. One could imagine that sources could somehow be cached in artifactory...but I admit it's not a simple thing.

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions