SourceHut will blacklist the Go module mirror #10079

Closed
opened 2025-11-02 08:57:41 -06:00 by GiteaMirror · 9 comments
Owner

Originally created by @simmstein on GitHub (Jan 10, 2023).

Description

SourceHut will disable git access for the Go Module Mirror on February 24th, 2023.
https://sourcehut.org/blog/2023-01-09-gomodulemirror/

GItea uses git.sr.ht/~mariusor/go-xsd-duration.

Gitea Version

Not revelant.

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

No response

Git Version

No response

Operating System

No response

How are you running Gitea?

Not revelant.

Database

None

Originally created by @simmstein on GitHub (Jan 10, 2023). ### Description SourceHut will disable git access for the [Go Module Mirror](https://proxy.golang.org/) on February 24th, 2023. https://sourcehut.org/blog/2023-01-09-gomodulemirror/ GItea uses `git.sr.ht/~mariusor/go-xsd-duration`. ### Gitea Version Not revelant. ### Can you reproduce the bug on the Gitea demo site? No ### Log Gist _No response_ ### Screenshots _No response_ ### Git Version _No response_ ### Operating System _No response_ ### How are you running Gitea? Not revelant. ### Database None
Author
Owner

@yardenshoham commented on GitHub (Jan 10, 2023):

We don't use proxy.golang.org, we use goproxy.io so this shouldn't be an issue. @jolheiser please confirm

@yardenshoham commented on GitHub (Jan 10, 2023): We don't use `proxy.golang.org`, we use `goproxy.io` so this shouldn't be an issue. @jolheiser please confirm
Author
Owner

@zeripath commented on GitHub (Jan 10, 2023):

$ go mod why git.sr.ht/~mariusor/go-xsd-duration
# git.sr.ht/~mariusor/go-xsd-duration
code.gitea.io/gitea/routers/api/v1/activitypub
github.com/go-ap/activitypub
git.sr.ht/~mariusor/go-xsd-duration
@zeripath commented on GitHub (Jan 10, 2023): ``` $ go mod why git.sr.ht/~mariusor/go-xsd-duration # git.sr.ht/~mariusor/go-xsd-duration code.gitea.io/gitea/routers/api/v1/activitypub github.com/go-ap/activitypub git.sr.ht/~mariusor/go-xsd-duration ```
Author
Owner

@zeripath commented on GitHub (Jan 10, 2023):

So whilst I think our CI should continue to work - the issue is likely that anyone else building from source will be negatively affected.

@zeripath commented on GitHub (Jan 10, 2023): So whilst I think our CI should continue to work - the issue is likely that anyone else building from source will be negatively affected.
Author
Owner

@yardenshoham commented on GitHub (Jan 10, 2023):

We could add it to the Makefile

@yardenshoham commented on GitHub (Jan 10, 2023): We could add it to the `Makefile`
Author
Owner

@zeripath commented on GitHub (Jan 10, 2023):

I guess as long as we don't override any personal setting that a user has set this would probably be fine.

@zeripath commented on GitHub (Jan 10, 2023): I guess as long as we don't override any personal setting that a user has set this would probably be fine.
Author
Owner

@jolheiser commented on GitHub (Jan 10, 2023):

There is still some ongoing discussion between the Go team and Drew, so hopefully this can be resolved before action is needed yet.

As mentioned, CI should continue to work, and past that there's a chance users won't be affected if the transitive dep doesn't change, as the module proxy should still serve the last updated version regardless.

@jolheiser commented on GitHub (Jan 10, 2023): There is still some ongoing discussion between the Go team and Drew, so hopefully this can be resolved before action is needed yet. As mentioned, CI should continue to work, and past that there's a chance users won't be affected if the transitive dep doesn't change, as the module proxy should still serve the last updated version regardless.
Author
Owner

@silverwind commented on GitHub (Jan 13, 2023):

We could add it to the Makefile

I'd rather we vendor/incorporate the affected module than to mess with GOPROXY. proxy.golang.org has certain undocumented behaviours that other proxies might not have, for example fixing the broken hugo releases (related to sum caching or something).

@silverwind commented on GitHub (Jan 13, 2023): > We could add it to the Makefile I'd rather we vendor/incorporate the affected module than to mess with `GOPROXY`. `proxy.golang.org` has certain undocumented behaviours that other proxies might not have, for example fixing the broken `hugo` releases (related to sum caching or something).
Author
Owner

@Goorzhel commented on GitHub (Feb 25, 2023):

Update 2023-01-31: Russ Cox of the Go team reached out to us to address this problem. After some discussion, an acceptable plan was worked out. [...] Consequently, we have cancelled our plans to disable Go traffic to git.sr.ht. No action is required by users to continue receiving service. Thanks Russ!

@Goorzhel commented on GitHub (Feb 25, 2023): > [Update 2023-01-31](https://sourcehut.org/blog/2023-01-09-gomodulemirror/): Russ Cox of the Go team reached out to us to address this problem. After some discussion, an acceptable plan was worked out. [...] Consequently, we have cancelled our plans to disable Go traffic to git.sr.ht. No action is required by users to continue receiving service. Thanks Russ!
Author
Owner

@jolheiser commented on GitHub (Feb 25, 2023):

Thanks for the update! I'll close this for now, then.

@jolheiser commented on GitHub (Feb 25, 2023): Thanks for the update! I'll close this for now, then.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#10079