You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ratis.apache.org by Tsz Wo Sze <sz...@gmail.com> on 2022/01/25 08:50:27 UTC
RATIS-1502: Move hadoop dependent components to a separated repo
Hi dev,
Apache Hadoop has a huge dependency tree. Since the hadoop-related
components in Ratis are optional, I suggest moving them to a separate repo
so that the dependencies can be avoided by the non-hadoop use cases.
This is also motivated by security vulnerabilities reported by various
other projects. Ratis is better to minimize its dependencies.
What do you think?
Tsz-Wo
Re: RATIS-1502: Move hadoop dependent components to a separated repo
Posted by Tsz Wo Sze <sz...@gmail.com>.
Created a new repo
https://gitbox.apache.org/repos/asf/ratis-hadoop-projects.git. Then, I
mirrored the ratis.git to ratis-hadoop-projects.git but the default branch
was incorrect. Filed https://issues.apache.org/jira/browse/INFRA-22816 for
fixing it.
Tsz-Wo
On Sun, Jan 30, 2022 at 5:01 PM Tsz Wo Sze <sz...@gmail.com> wrote:
> Hi Jackson,
>
> Thanks for the feedback. Since there are no objections, I will start
> working on https://issues.apache.org/jira/browse/RATIS-1502 .
>
> Tsz-Wo
>
> On Wed, Jan 26, 2022 at 5:41 PM jackson yao <ja...@gmail.com>
> wrote:
>
>> +1 , thanks
>>
>> Tsz Wo Sze <sz...@gmail.com> 于2022年1月25日周二 16:50写道：
>>
>> > Hi dev,
>> >
>> >
>> > Apache Hadoop has a huge dependency tree. Since the hadoop-related
>> > components in Ratis are optional, I suggest moving them to a separate
>> repo
>> > so that the dependencies can be avoided by the non-hadoop use cases.
>> >
>> >
>> > This is also motivated by security vulnerabilities reported by various
>> > other projects. Ratis is better to minimize its dependencies.
>> >
>> >
>> > What do you think?
>> >
>> >
>> > Tsz-Wo
>> >
>>
>
Re: RATIS-1502: Move hadoop dependent components to a separated repo
Posted by Tsz Wo Sze <sz...@gmail.com>.
Hi Jackson,
Thanks for the feedback. Since there are no objections, I will start
working on https://issues.apache.org/jira/browse/RATIS-1502 .
Tsz-Wo
On Wed, Jan 26, 2022 at 5:41 PM jackson yao <ja...@gmail.com> wrote:
> +1 , thanks
>
> Tsz Wo Sze <sz...@gmail.com> 于2022年1月25日周二 16:50写道：
>
> > Hi dev,
> >
> >
> > Apache Hadoop has a huge dependency tree. Since the hadoop-related
> > components in Ratis are optional, I suggest moving them to a separate
> repo
> > so that the dependencies can be avoided by the non-hadoop use cases.
> >
> >
> > This is also motivated by security vulnerabilities reported by various
> > other projects. Ratis is better to minimize its dependencies.
> >
> >
> > What do you think?
> >
> >
> > Tsz-Wo
> >
>
Re: RATIS-1502: Move hadoop dependent components to a separated repo
Posted by jackson yao <ja...@gmail.com>.
+1 , thanks
Tsz Wo Sze <sz...@gmail.com> 于2022年1月25日周二 16:50写道：
> Hi dev,
>
>
> Apache Hadoop has a huge dependency tree. Since the hadoop-related
> components in Ratis are optional, I suggest moving them to a separate repo
> so that the dependencies can be avoided by the non-hadoop use cases.
>
>
> This is also motivated by security vulnerabilities reported by various
> other projects. Ratis is better to minimize its dependencies.
>
>
> What do you think?
>
>
> Tsz-Wo
>