Support

• C

  ProGet 2024: SCA & Build Restrictions
  22 minutes ago • caterina   22 minutes ago

  1
  0
  Votes
  1
  Posts
  1
  Views

  No one has replied

• I

  Block package from download
  8 days ago • itadmin_9894   about 6 hours ago

  5
  0
  Votes
  5
  Posts
  15
  Views

  I about 6 hours ago

  Hi Steve. THX. It works :-) Cheers Paddy
• I

  Api-Call to get vulnerabilties by package and version
  22 days ago • itadmin_9894   about 6 hours ago

  7
  0
  Votes
  7
  Posts
  24
  Views

  I about 6 hours ago

  Hi Dan. I have now built a parser that fetches the desired information from the WebApp. Thank you very much for your help. Paddy
• P

  Unable to GET from connector "nuget.org"; using cached copy.
  a day ago • parthu.reddy   about 7 hours ago

  3
  0
  Votes
  3
  Posts
  10
  Views

  P about 7 hours ago

  Hi Steve Thanks for the info. A question, normally proget fetches from connector if a package is not available locally right. In this case is it trying to download new package and has timeout or some network issue? If that's the case what can it fetch from cached copy? Is it possible to know what it's requesting for. Thanks Parthu
• 

  Default Chocolatey feeds to v2 and v3 enabled
  about 20 hours ago • steviecoaster   about 19 hours ago

  3
  0
  Votes
  3
  Posts
  5
  Views

  about 19 hours ago

  Awesome! Thanks for the quick response on this one!
• M

  Feed creator wizard - proxy creation error
  2 days ago • michal.roszak_0767   a day ago

  3
  0
  Votes
  3
  Posts
  6
  Views

  a day ago

  Hi @michal-roszak_0767 , Thanks for letting us know! Unfortunately the Feed Wizard seems to have some quirky behavior when configuring certain combinations of options, as you've noticed. We are actually in the process of rewriting the new feed wizard to be a bit more simpler (esapecially behind-the-scenes), hopefully in the next couple weeks it'll be in a new maintenance release. In the meantime, if you encounter these errors... I would just create the connectors on the MAnage Feed page. Which it sounds like you've done :) -- Dean
• U

  ssl certificate does not work
  8 days ago • udi.moshe_0021   2 days ago

  7
  0
  Votes
  7
  Posts
  21
  Views

  2 days ago

  Hey @udi-moshe_0021, My InedoOps PowerShell module has a Set-ProGetSSLConfig function that helps setups ProGet to server up content via HTTPS. The nice thing about this particular function is that, since it doesn't interact with ProGet's web interface, but rather configuration, it can be ran standalone. You can find the function here: https://github.com/steviecoaster/InedoOps/blob/main/source/public/Utility/Set-ProGetSSLConfig.ps1 The first example is likely the one you'll want to follow, but pay attention to the URL parameter and adjust it as needed as you'll likely want to use https://*:443/ for the value (or whatever port you typically serve SSL traffic over to ProGet). As mentioned by @rhessinger this is likely a permissions issue on the private key, which the above handles for you. Hope that helps!
• D

  Stream was too long when editing Universal Package description.
  proget error 500 upack • 2 days ago • daniel.pardo_5658   2 days ago

  2
  0
  Votes
  2
  Posts
  7
  Views

  2 days ago

  Hi @daniel-pardo_5658 , The UI-based package editor is intended for small packages, up to 50 MB or so. It looks like there is a platform-enforced limit of 2GB. For now, you will need to download, edit, re-upload. That said, I switched the stream that we're using to something that can accommodate larger packages, but I did not test it so I really don't know if it will actually work on these packages. It'll be in the upcoming maintenance release via PG-2964 -- Dean
• N

  SAML Authentication with Microsoft Active Directory
  10 days ago • Nils Nilsson   2 days ago

  7
  0
  Votes
  7
  Posts
  29
  Views

  2 days ago

  Hi @Nils-Nilsson, Glad to hear it's working for you! Also, thanks for the feedback on adding that to our docs, I'll work on getting that added soon. Thanks, Rich
• M

  Import Artifacts from Artifactory 404 Error
  3 days ago • misael.esperanzate_5668   2 days ago

  2
  0
  Votes
  2
  Posts
  8
  Views

  2 days ago

  Hi @misael-esperanzate_5668, Currently, ProGet uses the nexus-maven-repository-index.gz file to see what artifacts are in a Maven repository, and then downloads the files based on that. So you'll need to enable that index file by doing this, I think: https://jfrog.com/help/r/jfrog-artifactory-documentation/maven-indexer This only applies to Maven indexes, and that file is only used for importing/downloading a feed into ProGet. For other feed types, a different API is used. Good news --- in an upcoming maintenance release of ProGet, we will be shifting to use the Artifactory API directly to import artifacts from a repository. Thanks, Steve
• E

  OCI support?
  helm oci • 23 May 2024, 15:32 • edward.a.peng_7759   4 days ago

  11
  1
  Votes
  11
  Posts
  50
  Views

  4 days ago

  Hey @dan-brown_0128, And of course, the other issue with using SHA Digests is that they are unsortable/unordered, and there's no way to know if you're on an "newer" or "older" version. Git inherently has this same problem -- and users who try to name packages after commit hashes quickly learn how poorly that works :) Looking around, it does look like some registries actually support immutable tags (Ex ECR, Harbor). Some tags make sense to be excluded from immutability - like latest since those are dynamic by intention. ProGet's tags are effectively immutable -- in that you need the overwrite permission. But we also have the Semantic Container Versioning, which takes it a step further and enforces tags. Unfortunately, a lot of users don't use this feature or follow our guidance - and they end up with all the predictable headaches. As an engineer, I'm obviously offended in principle by these bad practices, but more practically... the consequences of this kind of misuse/abuse is Tool Blame. And that means we look bad and don't get a renewal. So, my philosophy/approach as a product vendor is "provide a good solution", not necessary "enough rope to hang yourself". As I mentioned before, OCI Repositories are poorly-designed solution to a misunderstood problem -- and my read is that it's going to be a passing fad. Cheers, Alex
• M

  0 byte download when using pgutil assets/packages download in github workflow
  10 days ago • mmaharjan_0067   8 days ago

  2
  0
  Votes
  2
  Posts
  20
  Views

  8 days ago

  Hi @mmaharjan_0067 , I'm afraid we're at a loss here; as you noticed, it works fine on the command line - but there's just something "off" about your runner. The only thing we can figure is some kind of network block or interference. We don't really have a way to test/debug this any further. Thanks, Steve
• D

  OCI Support for Assets
  10 days ago • dan.brown_0128   8 days ago

  5
  0
  Votes
  5
  Posts
  18
  Views

  D 8 days ago

  Hey @stevedennis - From that quote, I get the sense that the container feeds were implemented by trying to force the process into what was implemented for traditional file-based packages rather than treating container images as a different style of artifact. This would explain why it seems OCI isn't a direct drop in fit -- because other traditional package consumers (pypi, nuget, maven, etc) do not behave the same as OCI. As for the scalability comment - I can see your point if you tried to cram traditional package types into OCI where the client doesn't support that. Could clients like nuget support OCI for downloading the nupkg files? Sure. But they haven't so far as I know. On the shock that for container images that you have to provide the URL to access the image -- that's not all that different than traditional software packages. Just on those traditional package tools you're specifying that URL Prefix as part of the client's configuration. The client may add in some "middle parts" to that url. And actually you do run into that some with docker: If you take the common nginx-ingress image hosted on DockerHub, the image name is just nginx/nginx-ingress which works just fine in docker and kubernetes deployments. Secretly, that full image URL parses out to docker.io/library/nginx/nginx-ingress. Last one -- The URL thing. Take a look at some other common registries, including the public GitHub container registry. For those, the URL is always ghcr.io but they then prefix the image with the User/Org (eg: https://github.com/blakeblackshear/frigate/pkgs/container/frigate/394110795?tag=0.15.1). Truthfully, Proget could do a similar approach: proget.corp/MyOciOrDockerFeed/image/path/here:1.2.3
• J

  Mirrored Replication
  9 days ago • james.woods_8996   9 days ago

  2
  0
  Votes
  2
  Posts
  8
  Views

  9 days ago

  Hi @james-woods_8996 , You are correct - in a mirror scenario, either side could publish (or delete) packages, and it would be propagated to the other. Three-way is also possible, but you do that with two two-way relationships, if that makes sense? So it's basically A <--> B + B <--> C, and that means if you publish/delete a version on A it will propagate like A --> B --> C. Thanks, Steve
• P

  Get Package Policies using ProGetClient
  proget proget-client • 10 days ago • pmsensi   10 days ago

  2
  0
  Votes
  2
  Posts
  10
  Views

  10 days ago

  Hi @pmsensi , Short of using the Native API, I'm afraid we don't have a first-class API to export/import package policies and their related information We may consider adding that after ProGet 2025 is released. Thanks, Steve
• P

  Get package license with ProGetClient
  proget • 10 days ago • pmsensi   10 days ago

  2
  0
  Votes
  2
  Posts
  10
  Views

  10 days ago

  Hi @pmsensi , The pgutil builds audit command should show the same license information you see in the UI: https://docs.inedo.com/docs/proget/api/sca/builds/analyze The pgutil packages audit command should also provide similar information on a package level. Is that's what you're looking for? Thanks, Steve
• C

  MinIO Support
  24 days ago • c4buildmasters_2588   10 days ago

  7
  0
  Votes
  7
  Posts
  30
  Views

  10 days ago

  Just to let you know - the PR has been merged and we'll release AWS 3.1.2 on Friday with the fix included. Thank you!
• M

  Feature request - Feed "Other Settings" editor
  22 days ago • michal.roszak_0767   13 days ago

  2
  0
  Votes
  2
  Posts
  19
  Views

  13 days ago

  Hi @michal-roszak_0767 , Just as an update, we've added this to our roadmap planning for ProGet 2026. We will begin that process later this year, after ProGet 2025 has been released (see road to ProGet 2025). Cheers, Alana
• C

  Buildmaster fresh install / Unable to clone repository
  13 days ago • carsten_1879   13 days ago

  2
  0
  Votes
  2
  Posts
  4
  Views

  13 days ago

  Hi @carsten_1879 , Can you try using buildmaster:24.0.5 instead of latest? There was a change in the Git library, and I'm wondering if this is a kind of regression on some platforms. Thanks , Alana
• P

  Publish a Docker image from Gitlab pipeline using Kaniko to Proget
  proget • 14 days ago • pmsensi   14 days ago

  3
  0
  Votes
  3
  Posts
  8
  Views

  P 14 days ago

  Hello @atripp , Thank you for your help. We have an intermediate certificate (proxy), which I think, as you point out, can be the problem. I will clarify with our IT department. Anyway, after reading a little bit more, there is a variable to force Kaniko to use HTTP/1.1. variables: GODEBUG: "http2client=0" After adding that, everything works :) Thank you! Best Regards, Pedro