Live data from Hacker News

GitHub Packages Is Down

githubstatus.com

21–30 of 83 posts

Re: GitHub Packages Is Down

#21
post #14

Earlier quoted context omitted.

I did not know package managers relied on Github, this is the most unwise thing to do from a package manager perspective. Anyone could just change username/organization and break thousands/millions of build.

> Anyone could just change username/organization and break thousands/millions of build. GitHub redirects you to the new name in the event of a rename and you look up the old one.

For now, hopefully

Re: GitHub Packages Is Down

#22
post #4

FYI: this breaks homebrew

Nix too I presume

You presume incorrectly. GitHub Packages, the package registry and binary hosting service, does not even support Nix. As for GitHub in general—

The binary hosting at https://cache.nixos.org/ is independent of GitHub, and so are the old-style channels at https://channels.nixos.org/. The new-style flake registry used to be fetched from GitHub but has now been moved to https://channels.nixos.org/flake-registry.json. Admittedly in a new-style situation you’re likely to be using unlocked flake references that refer to GitHub (e.g. Nixpkgs), but it’s on you to lock them and pull them into your Nix store in that case.

Of course, you also get GitHub references for upstreams that host their code there, but that applies to almost any distro(’s build system) except the oldest of the old-timers which host the source for the whole distro on their own infrastructure, like Debian. (I happen think the old-timers are right here, but that’s beside the point.)

Re: GitHub Packages Is Down

#23
post #9

Earlier quoted context omitted.

I think it will break any of the open source package managers that rely on GitHub's proprietary hosting and distribution. Cargo, etc.

no, this is GitHub packages , not GitHub repositories. Cargo doesn't use this. It doesn't use GitHub repositories either, they store the crates internally. EDIT: I was wrong, the crates index does use a GitHub repo

The crates.io index actually is a GitHub repository, so I think a GitHub outage that affected repositories (not just packages) could break Cargo. Only metadata is stored there, though, not the actual crates. I'm not 100% sure why it works like this; there seems to be a plan to change things soon so that Cargo running on users' machines doesn't talk directly to GitHub by default (https://blog.rust-lang.org/inside-rust/2023/01/30/cargo-spar...), though the GitHub repo would still be the source of truth.

crates.io also uses GitHub as an OAuth provider (and it's currently the only one offered), so if that broke then people wouldn't be able to publish crates, though downloading existing ones would presumably still work since you don't have to log in to do that.

Re: GitHub Packages Is Down

#24

The "is" seems to be used confusingly here. This reads better as either: * GitHub's Packages Service is down * GitHub Packages are down

You are getting down voted. I'll explain.

The name is GitHub Packages. It's singular. The use of "is" is correct here. GitHub uses "is" in similar circumstances as well.

Re: GitHub Packages Is Down

#25
post #9

Earlier quoted context omitted.

I think it will break any of the open source package managers that rely on GitHub's proprietary hosting and distribution. Cargo, etc.

no, this is GitHub packages , not GitHub repositories. Cargo doesn't use this. It doesn't use GitHub repositories either, they store the crates internally. EDIT: I was wrong, the crates index does use a GitHub repo

Cargo is hard-coded to use GitHub for the crates.io index [1]

[1] https://github.com/rust-lang/cargo/blob/master/src/cargo/sou...

Re: GitHub Packages Is Down

#26

Earlier quoted context omitted.

no, this is GitHub packages , not GitHub repositories. Cargo doesn't use this. It doesn't use GitHub repositories either, they store the crates internally. EDIT: I was wrong, the crates index does use a GitHub repo

Cargo is hard-coded to use GitHub for the crates.io index [1] [1] https://github.com/rust-lang/cargo/blob/master/src/cargo/sou...

That's a big yikes...

Re: GitHub Packages Is Down

#27
post #14

Earlier quoted context omitted.

I did not know package managers relied on Github, this is the most unwise thing to do from a package manager perspective. Anyone could just change username/organization and break thousands/millions of build.

> Anyone could just change username/organization and break thousands/millions of build. GitHub redirects you to the new name in the event of a rename and you look up the old one.

until someone claims the old name as a new org/repo

Re: GitHub Packages Is Down

#28
post #10

Earlier quoted context omitted.

Does it break all of Homebrew or just some packages? I never knew homebrew started using GitHub Packages.

Homebrew uses it to store bottles (the built assets).

Fun fact: Linux distributions (and some older open source programming language package managers) use hundreds of mirrors distributed around the world to distribute their assets. If any mirror goes down, you just pick a different one. Even when they could just use SourceForge as a mirror (formerly the largest repository for open source software), they still used hundreds more mirrors. Distribution was made easy with rsync, and mirrors could choose what files they mirrored (just the latest release, or all releases, or just binaries and not source code)

Re: GitHub Packages Is Down

#30

Earlier quoted context omitted.

no, this is GitHub packages , not GitHub repositories. Cargo doesn't use this. It doesn't use GitHub repositories either, they store the crates internally. EDIT: I was wrong, the crates index does use a GitHub repo

Cargo is hard-coded to use GitHub for the crates.io index [1] [1] https://github.com/rust-lang/cargo/blob/master/src/cargo/sou...

I stand corrected—I was thinking of the crates themselves.
Post reply on HN