Support

• A

  Error for Visual Studio Extensions feed
  13 Jun 2024, 09:25 • arkady.karasin_6391   13 Jun 2024, 14:11

  6
  0
  Votes
  6
  Posts
  7
  Views

  13 Jun 2024, 14:11

  Great! I don't believe that there is any public reporting of VISX package vulnerabilities, so this is not data that would be available in ProGet either
• D

  Otter "reverse" way working
  13 Jun 2024, 11:06 • daniels   13 Jun 2024, 13:05

  2
  0
  Votes
  2
  Posts
  5
  Views

  13 Jun 2024, 13:05

  Hi @daniels, This is technically possible, but it's not something that we support out-of-the-box I'm afraid. The closest way to accomplish something like this would be: Use the Otter API to create a server entry with the appropriate roles (similar to what you'd do in the UI) Install/run the agent on the computer which will connect to Otter Use the Otter API to trigger a job/ remediation Optionally, remove the server from Otter and Stop/uninstall the Agent So it's not easy from the user perspective. However. if Otter and this approach looks like it will work for you, then it's something we can definitely explore together as a user/customer, and build out a use case / case study / etc. That'd be best to start a conversation w/ someone in our customer / sales team on that. Otherwise, there really hasn't been enough demand for this particular use case, and it's hard enough to market Otter's other use cases, let alone develop build new ones ;) FYI - note that you can also run the Inedo Agent in outgoing mode: https://docs.inedo.com/docs/inedoagent-overview#communication-modes Thanks, Steve
• 

  Linux Performance & SQL Server Issues
  7 Jun 2024, 12:35 • apxltd   12 Jun 2024, 11:21

  5
  0
  Votes
  5
  Posts
  39
  Views

  12 Jun 2024, 11:21

  Turns out the errors I encountered were entirely related to the "new" SQL Server driver that ProGet 2024 was using. Although this was in beta for well over a year, it was "only" in production for a few months by the time we incorporated it into ProGet. This driver issue impacts anyone who uses .NET on Linux. As I mention, I think it's pretty clear that Microsoft has effectively abandoned SQL Server. It's one thing to release something this low-quality and untested... and another to have it linger with issues like this in production for months. We will be moving to Postgres, which do not have these endemic problems. In the meantime, I have instituted the "one year rule" for Microsoft products - meaning, unless it's been shipped in their general release channel for a year, we will not even consider using it.
• M

  pgutils and Maven
  11 Jun 2024, 13:35 • matt.wood_5559   11 Jun 2024, 14:28

  2
  0
  Votes
  2
  Posts
  9
  Views

  11 Jun 2024, 14:28

  Hi @matt-wood_5559, Our solution for Maven builds is to leverage CycloneDX to generate the SBOM, and then upload that SBOM to ProGet: https://docs.inedo.com/docs/proget-sca-java We had considered reproducing the functionality, but the only way to get dependency information from a Maven project is to create a Maven plugin and "watch" the build as it happens --- and that's already what CycloneDX does very effectively. If you can think of ways to make it easier to work with pgutil we're very open to that :) Thanks, Alana
• M

  Connecting feeds
  11 Jun 2024, 13:49 • matt.wood_5559   11 Jun 2024, 14:18

  2
  0
  Votes
  2
  Posts
  15
  Views

  11 Jun 2024, 14:18

  Hi @matt-wood_5559, I think I understand what you're asking - basically you'd like to create a feed when some users see one set of packages, but other users see a different set? This is definitely not possible, and it's simply not something ProGet does from a design standpoint: i.e. "file-system type" granular permissions. While it might seem convenient or nice to give users "just a single URL" to access, it ends up makes things much more complicated to configure/use/maintain. Basically some users will get random "package not found" errors while others will build fine. It'd be very confusing and big headache. Instead, it's best to educate on different feeds/repositories, and help them use and request access as needed. Hope that helps, Alana
• M

  Maven additional artifacts
  11 Jun 2024, 13:38 • matt.wood_5559   11 Jun 2024, 14:02

  3
  0
  Votes
  3
  Posts
  9
  Views

  M 11 Jun 2024, 14:02

  Ok that makes sense thanks, I can see the option to add addition files now.
• M

  Assigning package versions
  11 Jun 2024, 13:28 • matt.wood_5559   11 Jun 2024, 14:02

  2
  0
  Votes
  2
  Posts
  8
  Views

  11 Jun 2024, 14:02

  Hi @matt-wood_5559, I might need a little more information / screenshots with what you're looking at here.... There could be a bug/oversight, etc. Perhps you could walk through steps / show screenshots of what you're seeing? If it's on maven central, we can then repro and take a look Thanks, Alana
• M

  License discovery for Maven packages
  11 Jun 2024, 13:16 • matt.wood_5559   11 Jun 2024, 14:00

  2
  0
  Votes
  2
  Posts
  7
  Views

  11 Jun 2024, 14:00

  Hi @matt-wood_5559, A Maven package's license is determined by the license field in the POM: https://maven.apache.org/pom.html#Licenses There are unfortunately no real standards here, and the author can put in anything from a SPDX Code (which is recommended, by the way) to a string like "Apache license" (which probably means apache 2.0, but who knows?). We would rather not guess what the author might have intended, so ProGet only detects licenses with SPDX codes and then lets you decide how assign which codes to other license types as you come across packages that don't follow SPDX. However, once you start associating those strings with licenses, it will work for future packages. Thanks, Alana
• F

  ProGet Proxy Authentication
  7 Jun 2024, 15:33 • forbzie22_0253   11 Jun 2024, 03:19

  4
  0
  Votes
  4
  Posts
  16
  Views

  11 Jun 2024, 03:19

  @forbzie22_0253 setting the proxy programmatically is not something we currently support or document at this time, but if you're dedicated you could use native API to the newly-developer settings API: https://github.com/Inedo/pgutil/blob/thousand/pgutil/Settings/ListCommand.cs It's configured via values in the Configuration table.
• M

  X-Api-Key vs X-ApiKey header
  7 Jun 2024, 20:36 • maciej.luszczynski_5271   10 Jun 2024, 17:11

  2
  0
  Votes
  2
  Posts
  6
  Views

  10 Jun 2024, 17:11

  Hi @maciej-luszczynski_5271, Thanks for bringing this to our attention. I have corrected the example as suggested. Thanks, Dan
• F

  Programmatic way to check activation
  7 Jun 2024, 16:12 • forbzie22_0253   10 Jun 2024, 10:48

  3
  0
  Votes
  3
  Posts
  8
  Views

  F 10 Jun 2024, 10:48

  @atripp the health endpoint looks good, thanks
• F

  Unable to use the API
  5 Jun 2024, 15:43 • francesco.campanella_3733   10 Jun 2024, 10:16

  8
  0
  Votes
  8
  Posts
  24
  Views

  10 Jun 2024, 10:16

  @francesco-campanella_3733 thanks for continuing to research this - we just haven't had a chance to look further. Did you try editing the feed settings (especially the Feed Features, which would save a new Feed Config), and then re-saving again? We will fix the bug, I would just like to be able to reproduce it so we know for sure what's causing it :)
• F

  Setting API key permissions
  31 May 2024, 17:45 • forbzie22_0253   7 Jun 2024, 16:10

  8
  0
  Votes
  8
  Posts
  24
  Views

  F 7 Jun 2024, 16:10

  @atripp thanks, resolved now.
• J

  ProGet SCA 2024 Preview Feedback - Package detection still hit or miss
  12 Mar 2024, 09:50 • jw   7 Jun 2024, 02:00

  22
  0
  Votes
  22
  Posts
  106
  Views

  7 Jun 2024, 02:00

  Hi @sebastian, Thanks for sharing your thoughts on this! Few things to point out... [1] The "Missing Package Problem" is not as bad in ProGet 2024, mostly because it will only apply when there's a license rule. In ProGet 2023, a "missing package" would happen even for vulnerabilities. [2] We're working on a new feature/module (tentatively called "Remote Metadata") that is intended to routinely cache/update meatdata from public repos like nuget.org, npmjs.org, etc. This feature enables two usecases: Routinely update "server-side metadata" like Deprecated, Unlisted on cached packages Fetch metadata for packages not in ProGet during build analysis It works somewhat independently, and basically it'll just show up on the Admin tabs as like "Remote Metadata" and you can configure providers, urls, etc. I hope to have a prototype in a couple weeks and will post some details on a new forum posts. As an FYI this is something we will limit in the Free/Basic editions and have full-featured in the ProGet Enterprise product. [3] "Package In ProGet" could be a policy rule to add after RMetadata feature, though it's probably not a big deal if ProGet can detect licenses thanks to RMetadata Best, Alex
• S

  License expression detection not working (for npm packages) in ProGet 2023.34?
  15 May 2024, 08:37 • sebastian...   5 Jun 2024, 06:52

  6
  0
  Votes
  6
  Posts
  26
  Views

  5 Jun 2024, 06:52

  Hi @sebastian, I took a quick look, but its not a simple cherry-pick; this is a bug in the code that does policy analysis, and there were enough changes between ProGet 2023 and ProGet 2024 in that to make it a bit risky / time-consuming to bring over... Thanks, Alana
• P

  Proget 2024.3 SQL Timeouts
  20 May 2024, 01:28 • pawel.ostrowski_5669   5 Jun 2024, 03:00

  5
  0
  Votes
  5
  Posts
  43
  Views

  5 Jun 2024, 03:00

  Just wanted to give a brief update to the issue from @mortenf_3736 that we discussed via the support ticket. We were never able to get to the bottom of it, but it was entirely related to running on ACA. Container Setup VM Setup Azure Container Apps - Running 4 minimum replicas, max 8 replicas, each 3 cores and 6gb memory Two D4 (4 cores, 16GB memory) VM with internal load balancer in front between them Mapped storage from Azure Storage Account v2 Fileshare Managed Premium Shared Disk, connected to Fail-over Cluster and shared between both VM Azure SQL Database with 4 cores dedicated Azure SQL Database Server less, scaling between 0.5 to 4 cores This doesn't seem to be related to Linux/Docker/Kubernetes, as we have several high-traffic users on Kubernetes clusters without issues like this. However, we have seen a handful of Azure-related problems over the years that manifested in ProGet: a bad hard drive that was constantly corrupting packages another had really slow disk I/O (one server out of a handful) we've seen a buggy storage driver cause some big impacts across some kind of storage configuration So we believe the issue is the Azure platform itself, similar to the above hardware/software glitches we've uncovered over the past. We're doing our best to research/identifying issues, and Inedo/ProGet Users aren't the only ones who are experiencing pain like this. Consider this report from a Azure "big data" user: I have suffered from chronic socket exceptions in multiple Azure platforms - just as everyone else is describing. The main pattern I've noticed is that they happen within Microsoft's proprietary VNET components (private endpoints). They are particularly severe in multi-tenant environments where several customers can be hosted on the same hardware (or even in containers within the same VM. The problems are related to bugs in Microsofts software-defined-networking components (SDN proxies like "private endpoints" or "managed private endpoints"). I will typically experience these SDN bugs in a large "wave" that impacts me for an hour and then goes away. The problems have been trending for the worse over the past year, and I've opened many tickets (Power BI, ADF, and Synapse Spark). Other Azure users (who are much more technical than we are) have confirmed that there are indeed severe issues with their SDN infrastructure. Microsoft does appear to be aware of these endemic issues with their platform, and for the time being we simply cannot recommend using Azure's container services for anything that will have any kind of load. Hope that gives some insight in case anyone stumbles across this thread. Alana
• P

  File not found org.scala-sbt.jline/jline
  30 May 2024, 08:52 • parthu.reddy   4 Jun 2024, 04:44

  9
  0
  Votes
  9
  Posts
  21
  Views

  P 4 Jun 2024, 04:44

  Thanks, we're planning to upgrade tomorrow. Will keep you updated.
• A

  Remote package
  2 Jun 2024, 11:35 • arkady.karasin_6391   3 Jun 2024, 01:19

  2
  0
  Votes
  2
  Posts
  7
  Views

  3 Jun 2024, 01:19

  Hi @arkady-karasin_6391, I'm afraid we don't have enough information to troubleshoot the problem. The use case you describe (using ProGet as an offline cache) is very common, so it might be some kind of misconfiguration on the npm side or something. I don't realy know. I would check the npm logs, try to monitor http traffic, etc. If you can "see" the package in ProGet as a Remote Package, and then download the package from the web page, then the npm client can do the same. The npm API cannot "see" whether it's a local, cached, or remote package, so the package is pulled regardless. Best, Alana
• F

  ProGet license activation automation
  20 May 2024, 16:05 • forbzie22_0253   31 May 2024, 20:30

  7
  0
  Votes
  7
  Posts
  21
  Views

  F 31 May 2024, 20:30

  @atripp thanks for confirming
• A

  Game rules for Release! ??
  25 May 2024, 21:42 • Alex_9348   28 May 2024, 06:02

  2
  0
  Votes
  2
  Posts
  17
  Views

  28 May 2024, 06:02

  @Alex_9348 found them! https://s3.amazonaws.com/cdn.inedo.com/release/rules.pdf Enjoy :)