Maven Nexus: Foreign artifacts with 0 bytes size
Description
Environment
Activity
Some strange nexus bug caching 0 bytes for a 400 error.
Took some time to find the root cause and clean up all the local caches in our system. Good that it has been fixed that fast, but I’ll keep the proxy configuration for your repository disabled until a user requires it again.
@Jody Thank you for taking care of this ticket and creating the trac one, as I could not create an account on that system.
We are beginning to clear our own Nexus and proxies caches.
Also thanks to Frank Gasdorf for linking the Routing Rules documentation, as it is clear that our Nexus is misconfigured.
Yes, it works properly again! A non existing dependency will nicely return a 404
Thanks for the very fast fix and keep up the good work!
Update: It seems geonetwork-cache (included in releases
) was caching a git repository they had previously used to hold artifacts (following maven2 conventions for directory structure).
While geonetwork-cache was operating as a cache of https://github.com/geonetwork/core-maven-repoit took a load off GitHub infrastructure - but still used it as a maven repository. I expect GitHub shut off this yesterday, and the resulting timeouts produced a bunch of zero sized placeholders on any topic you care to name!
I have removed geonetwork-cache from https://repo.osgeo.org/#browse/browse:release so service should be okay again?
Please report back, or report back directly on https://trac.osgeo.org/osgeo/ticket/2978
First, sorry if this is not the place to report this bug. Feel free to redirect me to the correct place.
Since this morning (September 7th 2023), we encounter a bug with your Maven Nexus instance (https://repo.osgeo.org), that we proxy in our own instance.
A lot of artifacts with size of 0 bytes have appeared in the geonetwork-cache repository, that caused our compile workflows to fail.
Weird thing is that some of these “ghost” artifacts are ours (com.total.* for example).
My theory is that our Nexus asked yours for these artifacts (that you shouldn’t have) and your Nexus somehow created empty ones and returned them.
A minor thing that may be important: all the artifacts in package com.total.* have a classifier like sources, config or javadoc.
Feel free to ask if there is anything missing in this report.