I'm disappointed that this is an issue for some package management systems. 20 years ago I helped run a mirroring service, it's still running today. Distributions such as Debian have hundreds of mirrors. This is a solved problems, but we just decided to but everything in the hands of one for-profit company.
GitHub Packages Is Down
31–40 of 83 posts
Re: GitHub Packages Is Down
#32Oh dear, Last time this happened was 11 days ago when more than just packages went down. [0] Perhaps relying and going all in on GitHub doesn't seem to be good in the long run. Especially GitHub Actions. This is where OpenAI is now feeling the effects of instability [1] on Azure since their recent outage. I expect them to also have issues like GitHub has every month. [0] https://news.ycombinator.com/item?id=34843748…
Microsoft, historically, has not had much competitive pressure to be reliable. For decades, they've had a lock on the PC OS market, and there basically is no larg2 business that doesn't rely on MS. Even world governments rely on MS.
Now even in the few areas where MS actually does have this pressure (e.g. Azure) they're struggling to make it part of the culture.
Re: GitHub Packages Is Down
#33I'm disappointed that this is an issue for some package management systems. 20 years ago I helped run a mirroring service, it's still running today. Distributions such as Debian have hundreds of mirrors. This is a solved problems, but we just decided to but everything in the hands of one for-profit company.
Move fast and break things ... /s
Re: GitHub Packages Is Down
#34What I find funny and unexplainable is that this class of problem was solved decades ago with distribution mirrors. It's not really clear to me why, within the last decade or so, we collectively decided to centralize hosting on one specific cloud service whose downtime now affects builds across nearly every company.
What's perhaps even more surprising to me is that, after a repeated track history of severe and frequent Microsoft-Github outages in the last three years, it is still a hard dependency for so much of the modern software stack.
Re: GitHub Packages Is Down
#35What I find funny and unexplainable is that this class of problem was solved decades ago with distribution mirrors. It's not really clear to me why, within the last decade or so, we collectively decided to centralize hosting on one specific cloud service whose downtime now affects builds across nearly every company. What's perhaps even more surprising to me is that, after a repeated track history of severe and freque…
Mostly agreed, but I'd hazard a guess that the scale of github is far larger than distribution mirrors of old.
Re: GitHub Packages Is Down
#36Earlier quoted context omitted.
Cargo is hard-coded to use GitHub for the crates.io index [1] [1] https://github.com/rust-lang/cargo/blob/master/src/cargo/sou...
That's a big yikes...
That's being addressed with a new index protocol, specified a while ago[1], available for testing since the middle of the last year[2], and slated for release in a week's time[3].
[1] https://rust-lang.github.io/rfcs/2789-sparse-index.html
[2] https://blog.rust-lang.org/2022/06/22/sparse-registry-testin...
[3] https://blog.rust-lang.org/inside-rust/2023/01/30/cargo-spar...
Re: GitHub Packages Is Down
#37I'm disappointed that this is an issue for some package management systems. 20 years ago I helped run a mirroring service, it's still running today. Distributions such as Debian have hundreds of mirrors. This is a solved problems, but we just decided to but everything in the hands of one for-profit company.
just yesterday I was stuck for an hour because a debian package mirror went down. took a long time to talk the user through changing their sources.list so that another mirror was chosen, and the mirror chosen out of that pool was down also. finally I had to manually check for a good mirror and give them the URLs.
the user's take was "why don't they use GitHub packages?"
"still running today" doesn't mean 100.0% uptime.
Re: GitHub Packages Is Down
#38Earlier quoted context omitted.
Does it break all of Homebrew or just some packages? I never knew homebrew started using GitHub Packages.
Homebrew uses it to store bottles (the built assets).
So this is why hb started asking for access to my keychain all the time? (macos) Does it need to log in to gh to install open source software now?
Re: GitHub Packages Is Down
#39What I find funny and unexplainable is that this class of problem was solved decades ago with distribution mirrors. It's not really clear to me why, within the last decade or so, we collectively decided to centralize hosting on one specific cloud service whose downtime now affects builds across nearly every company. What's perhaps even more surprising to me is that, after a repeated track history of severe and freque…
Those take more time and money to set up, host, maintain, and use, than a single provider. Maybe more than it's worth to avoid occasional downtime.
Re: GitHub Packages Is Down
#40Earlier quoted context omitted.
I did not know package managers relied on Github, this is the most unwise thing to do from a package manager perspective. Anyone could just change username/organization and break thousands/millions of build.
Hello and welcome to PEP-508! In Python, we don't say "we don't host packages on a proprietary platform", we say "we have absolutely no clue where they are hosted and nobody audits them anyways, and we don't enforce package signing, and we'll just build from source with no build isolation what so ever, unless you remember to specify an obscure command-line option when installing... and have a nice day!"
The entire python package management situation can be summed up with "we have no clue".