Mirroring (Was: Re: MacPorts rsync is broken?)

[Ryan Carsten Schmidt]

> On May 15, 2025, at 18:58, grey wrote:
> 
> Namely: if there might be a way to populate the distfiles mirrors a
> bit differently?
> 
> The reason I am asking is related to got (game of trees) and how it
> was recently noticed that gameoftrees.org is blocking GitHub Actions
> requests, so MacPorts' CI checks fail, because GitHub Actions is being
> denied from grabbing the relevant tarball.
> 
> Some more specifics are documented here (as well as in the Pull
> Request I closed the other day for got 0.111):
> 
> https://trac.macports.org/ticket/72492
> 
> Thomas Adams (the got-portable maintainer upstream) has graciously
> offered to set up a mirror in some discourse elsewhere, but I guess I
> am wondering if maybe MacPorts' existing mirrors infrastructure can be
> utilized and leveraged so as to avoid the GitHub Actions stuff
> hammering gameoftrees.org dist tarballs?
> 
> Maybe that's putting the cart ahead of the horse though?

Distfiles are mirrored automatically by buildbot after a commit is made to master. I don't see a need to change this. It works well. 

If you're suggesting that files should be mirrored when anyone files a pull request, that would give anyone in the world the ability to write any file to any place on the distfiles server. You indicated elsewhere your concern about malware, but this proposal sounds like a great way to attract it. 

The problem you're discussing is entirely caused by the owners of one server deciding to block access from GitHub actions, and would be solved by them removing that block or copying the files elsewhere, as I already suggested with the use of GitHub releases, which they rejected.