[freaktechnik]

ilikenwf proposed to look for alternatives to SourceForge, due to the recent Windows-adware-installer-wrappers from SourceForge (which, really, are old news). Me and rsjtdrjgfuzkfg thought about alternatives yesterday around the time the dev-meeting would've happened, if anybody bothered to properly organize it (oops). We both agreed, that GitHub would be good for releases and betas. However the GitHub releases model isn't suited for nightlies and random test builds. I found http://code.fosshub.com/, which would let us dump files (up to 100MB per file). There is no folder structure or similar, but who cares, it's just nightlies and testbuilds. If we'd want to have a nightly builds page with direct downloads in the future (as the current new version of the website has) we'd have to look into it with the Fosshub guys. Further they don't have a proper SSL certificate for code.fosshub.com and reuse the cert from http://www.fosshub.com. That's about all the issues I've seen or heard about so far.

What do you think about fosshub? Or do you know of a better alternative?

[ilikenwf]

There are some others out there too. We could consider using Bitbucket's API or even mega.co.nz's API, which should both allow uploading via cron...

[freaktechnik]

We looked at mega, whereas the downside is the requirement for the client side decryption, so you can't just download a file. I have never seen BitBucket's Downloads in action, I've only used it for git repos so far. Do you have an example of a project with downloads?

EDIT: looking at https://bitbucket.org/adstomper/adblockedge/downloads it seems that bitbucket's downloads are equal to fosshub's.

[freaktechnik]

Sourceforge's had some kind of huge outage and they are still recovering. File downloads from the site itself are the only thing to work guaranteed - link via downloads.sourceforge.net 404 randmly, which is pretty terrible, since we use them for our downloads and for the deps downloads.

I propose to migrate release downloads to github immediately.

Not sure what to do with the deps. We still need some kind of decision there.

[rsjtdrjgfuzkfg]

(07-24-2015, 12:05 AM)freaktechnik Wrote: I propose to migrate release downloads to github immediately.

Although I would have preferred to do the switch on a new release, that sounds reasonable given the circumstances.

[freaktechnik]

Okay, deps are now hosted on bitbucket, see https://bitbucket.org/nightingale-media-.../downloads.

If we ever get working nightly builds again, those would be released as a pre release on github.
Releases are also on github. I've already moved the files to github, see https://github.com/nightingale-media-pla...ale-1.12.1. However I'd prefer it, if someone could verify that they get the same checksums for the files when downloading them from sourceforge, since sf doesn't have https for downloads.

[rsjtdrjgfuzkfg]

(10-05-2015, 08:30 AM)freaktechnik Wrote: Releases are also on github. I've already moved the files to github, see https://github.com/nightingale-media-pla...ale-1.12.1. However I'd prefer it, if someone could verify that they get the same checksums for the files when downloading them from sourceforge, since sf doesn't have https for downloads.

Once we consider the files as secure, the front page downloads would need to get changed as well -- especially as we link to the front page from the release description. SF does support ssh, so I'll try to verify the files through that.

Edit: Yes, the SHA512 checksums are correct (as in: sourceforge's master server has files with the same checksum. There is, of course, no guarantee that sourceforge or some attacker has not changed the files on the master server^^).

[freaktechnik]

Okay, the frontpage links are update to point to github now.