Welcome to the Inedo Forums! Check out the Forums Guide for help getting started.

If you are experiencing any issues with the forum software, please visit the Contact Form on our website and let us know!

  • TCP Agent configuration

    buildmaster
    2
    0 Votes
    2 Posts
    17 Views
    dean-houstonD
    Hi @sergio-gonzalez_0157 , Typically, Deployment Targeting is done in the Pipeline: https://docs.inedo.com/docs/buildmaster/deployment-continuous-delivery/buildmaster-pipelines#deployment-targets This way, you don't need to put for server or anything in your script. So, my guess is that your Pipeline is actually targeting the ProductionServer (but not running anything on it, except intializing the agent), but your script is targeting the BuildMasterServer. -- Dean
  • Proxy Group Problem

    2
    2
    0 Votes
    2 Posts
    6 Views
    dean-houstonD
    Hi @michal-roszak_0767, Oh that's a whole lot of connectors and this is most definitely going to cause some performance issues. Remember that ProGet needs to forward every request you make to all 10 of those servers, and some of these repositories will not respond very quickly. Like JCenter was deprecated/retired a few years ago, and I can't imagine is performant at all. Especially for things like metadata requests. Maven is not a very patient client and will time out while waiting for ProGet. There is really no way around this. You'll need to use less connectors. -- Dean
  • ProGet - Versioning restrictions

    6
    1
    0 Votes
    6 Posts
    17 Views
    dean-houstonD
    @michal-roszak_0767 those are also invalid versions and you should never upload them to a feed (repository) directly; see https://docs.inedo.com/docs/proget/feeds/maven#snapshot-versions The code has already been fixed and the maintenance release is scheduled for next week. We could get you a prerelease, but I don't think your developers are manually uploading artifacts using the Web UI? If you want to upload artifacts with bad versions now you can just use the maven client (e.g. maven-deploy) or just do a basic PUT of the file to the desired group/artifact-id.
  • Extending the migrator utility

    3
    0 Votes
    3 Posts
    8 Views
    steviecoasterS
    Thanks @dean-houston! That's good enough for me. Looking forward to trying the new migrator once it lands, sounds really really good!
  • ProGet Support deb822

    5
    0 Votes
    5 Posts
    14 Views
    S
    Hi Steve, I fully understand. I will carry on using the existing format then. Thanks for the tip regarding use of pgutil! Thanks, Stefan
  • 0 Votes
    4 Posts
    14 Views
    D
    @dean-houston I just upgraded to the latest version and it worked perfectly now. I can update packages of more than 2 GBs without any problems. Thanks you so much!
  • Entra ID SAML configuration error

    3
    0 Votes
    3 Posts
    12 Views
    M
    Hi, @rhessinger Works like a charm :) Thanks. Regards, Michal
  • Misleading information package Usage & Statistics page

    3
    1
    0 Votes
    3 Posts
    14 Views
    J
    Hi @stevedennis Thanks for the quick response and fix.
  • ProGet 2024: SCA & Build Restrictions

    2
    0 Votes
    2 Posts
    7 Views
    stevedennisS
    Hi @caterina , In ProGet 2024+, the Project Analyzer will give some kind of warning/error and builds 1001+ will be in an "inconclusive" state instead of "Compliant", "Warn", or "Noncompliant" That said, ProGet 2024+ does include capabilities to auto-archive builds through use of status/pipelines, so that might be worth investigating. Thanks, Steve
  • Block package from download

    5
    0 Votes
    5 Posts
    20 Views
    I
    Hi Steve. THX. It works :-) Cheers Paddy
  • Api-Call to get vulnerabilties by package and version

    7
    1
    0 Votes
    7 Posts
    27 Views
    I
    Hi Dan. I have now built a parser that fetches the desired information from the WebApp. Thank you very much for your help. Paddy
  • Default Chocolatey feeds to v2 and v3 enabled

    3
    0 Votes
    3 Posts
    7 Views
    steviecoasterS
    Awesome! Thanks for the quick response on this one!
  • Feed creator wizard - proxy creation error

    3
    0 Votes
    3 Posts
    8 Views
    dean-houstonD
    Hi @michal-roszak_0767 , Thanks for letting us know! Unfortunately the Feed Wizard seems to have some quirky behavior when configuring certain combinations of options, as you've noticed. We are actually in the process of rewriting the new feed wizard to be a bit more simpler (esapecially behind-the-scenes), hopefully in the next couple weeks it'll be in a new maintenance release. In the meantime, if you encounter these errors... I would just create the connectors on the MAnage Feed page. Which it sounds like you've done :) -- Dean
  • SAML Authentication with Microsoft Active Directory

    7
    0 Votes
    7 Posts
    41 Views
    rhessingerR
    Hi @Nils-Nilsson, Glad to hear it's working for you! Also, thanks for the feedback on adding that to our docs, I'll work on getting that added soon. Thanks, Rich
  • Import Artifacts from Artifactory 404 Error

    2
    0 Votes
    2 Posts
    8 Views
    stevedennisS
    Hi @misael-esperanzate_5668, Currently, ProGet uses the nexus-maven-repository-index.gz file to see what artifacts are in a Maven repository, and then downloads the files based on that. So you'll need to enable that index file by doing this, I think: https://jfrog.com/help/r/jfrog-artifactory-documentation/maven-indexer This only applies to Maven indexes, and that file is only used for importing/downloading a feed into ProGet. For other feed types, a different API is used. Good news --- in an upcoming maintenance release of ProGet, we will be shifting to use the Artifactory API directly to import artifacts from a repository. Thanks, Steve
  • OCI support?

    helm oci
    11
    1 Votes
    11 Posts
    74 Views
    apxltdA
    Hey @dan-brown_0128, And of course, the other issue with using SHA Digests is that they are unsortable/unordered, and there's no way to know if you're on an "newer" or "older" version. Git inherently has this same problem -- and users who try to name packages after commit hashes quickly learn how poorly that works :) Looking around, it does look like some registries actually support immutable tags (Ex ECR, Harbor). Some tags make sense to be excluded from immutability - like latest since those are dynamic by intention. ProGet's tags are effectively immutable -- in that you need the overwrite permission. But we also have the Semantic Container Versioning, which takes it a step further and enforces tags. Unfortunately, a lot of users don't use this feature or follow our guidance - and they end up with all the predictable headaches. As an engineer, I'm obviously offended in principle by these bad practices, but more practically... the consequences of this kind of misuse/abuse is Tool Blame. And that means we look bad and don't get a renewal. So, my philosophy/approach as a product vendor is "provide a good solution", not necessary "enough rope to hang yourself". As I mentioned before, OCI Repositories are poorly-designed solution to a misunderstood problem -- and my read is that it's going to be a passing fad. Cheers, Alex
  • OCI Support for Assets

    Locked
    5
    1
    0 Votes
    5 Posts
    28 Views
    D
    Hey @stevedennis - From that quote, I get the sense that the container feeds were implemented by trying to force the process into what was implemented for traditional file-based packages rather than treating container images as a different style of artifact. This would explain why it seems OCI isn't a direct drop in fit -- because other traditional package consumers (pypi, nuget, maven, etc) do not behave the same as OCI. As for the scalability comment - I can see your point if you tried to cram traditional package types into OCI where the client doesn't support that. Could clients like nuget support OCI for downloading the nupkg files? Sure. But they haven't so far as I know. On the shock that for container images that you have to provide the URL to access the image -- that's not all that different than traditional software packages. Just on those traditional package tools you're specifying that URL Prefix as part of the client's configuration. The client may add in some "middle parts" to that url. And actually you do run into that some with docker: If you take the common nginx-ingress image hosted on DockerHub, the image name is just nginx/nginx-ingress which works just fine in docker and kubernetes deployments. Secretly, that full image URL parses out to docker.io/library/nginx/nginx-ingress. Last one -- The URL thing. Take a look at some other common registries, including the public GitHub container registry. For those, the URL is always ghcr.io but they then prefix the image with the User/Org (eg: https://github.com/blakeblackshear/frigate/pkgs/container/frigate/394110795?tag=0.15.1). Truthfully, Proget could do a similar approach: proget.corp/MyOciOrDockerFeed/image/path/here:1.2.3
  • Mirrored Replication

    2
    0 Votes
    2 Posts
    9 Views
    stevedennisS
    Hi @james-woods_8996 , You are correct - in a mirror scenario, either side could publish (or delete) packages, and it would be propagated to the other. Three-way is also possible, but you do that with two two-way relationships, if that makes sense? So it's basically A <--> B + B <--> C, and that means if you publish/delete a version on A it will propagate like A --> B --> C. Thanks, Steve
  • Get Package Policies using ProGetClient

    proget proget-client
    2
    0 Votes
    2 Posts
    11 Views
    stevedennisS
    Hi @pmsensi , Short of using the Native API, I'm afraid we don't have a first-class API to export/import package policies and their related information We may consider adding that after ProGet 2025 is released. Thanks, Steve
  • Get package license with ProGetClient

    proget
    2
    1
    0 Votes
    2 Posts
    15 Views
    stevedennisS
    Hi @pmsensi , The pgutil builds audit command should show the same license information you see in the UI: https://docs.inedo.com/docs/proget/api/sca/builds/analyze The pgutil packages audit command should also provide similar information on a package level. Is that's what you're looking for? Thanks, Steve
Inedo Website HomeSupport HomeCode of ConductForums GuideDocumentation