Re: Default to fetching from CDN first?

[Ottavio Caruso <ottavio2006-ujm2000%yahoo.com@localhost>]

On Sun, 8 Sep 2019 at 17:49, Thor Lancelot Simon <tls%panix.com@localhost> wrote:
>
> Setting mk.conf like this:
>
> MASTER_SITE_OVERRIDE=http://cdn.netbsd.org/pub/pkgsrc/distfiles/
>
> Radically speeds up package builds for me.  Note that fall back to the
> upstream listed in the package Makefile if the CDN doesn't have it still
> seems to work fine.
>
> Is there some reason we shouldn't set this as a default?

Yes, it might speed up fetch time, but I don't see why it should be
set as default for everybody.

It might give a false sense of security, especially if the original
source were to be removed from the master site because (and the
example given is not exhaustive) serious bugs or exploits had been
found, or because the project is simply not there anymore.

For the same reason, I'm not comfortable with MASTER_SITE_BACKUP defaulting to:

$ bmake show-var VARNAME=MASTER_SITE_BACKUP
http://cdn.NetBSD.org/pub/pkgsrc/distfiles/
http://ftp6.NetBSD.org/pub/pkgsrc/distfiles/
http://ftp.fr.NetBSD.org/pub/pkgsrc/distfiles/
http://ftp.NetBSD.org/pub/pkgsrc/distfiles/

This might well please the end user who wants, like you said, faster
fetch time, but is misleading for someone who wants to debug a
package, for the reasons explained above.




-- 
Ottavio Caruso