[CentOS-mirror] Mirroring the vault

Wed Apr 15 11:32:55 UTC 2015
Fabian Arrotin <arrfab at centos.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 14/04/15 17:54, Jason L Tibbitts III wrote:
> Is there a need for additional mirrors of the vault?  I have
> enough space to mirror it if there's a need, but I know access to
> it is restricted.  (I've managed to pull in a local copy by pulling
> from the existing mirrors.)
> 
> - J<

Well, that's a good-and-not-so-easy-to-answer question :-)
Actually we have 6 nodes behind vault.centos.org, but two will have to
be removed soon (basically lack of disk space when the next release
will have to land there).
There are also 4 non centos.org nodes that are actually fetching vault
content , and those have better bandwidth/machines that we do
(reminder : we're using community donated dedicated servers).

I can't speak for those external mirrors, and I have zero view on
their bandwidth usage/stats for vault content.

OTOH, I (personally) think that vault is like giving a gun for people
to shoot themselves in the foot : using
deprecated/unpatched/unsecured/unmaintained packages on a distro is
not what I'd consider best practice. There are a *few* corner cases
where it can be handy, but those are already mirroring internally
those versions, for specific usage, and don't rely on vault.centos.org

- -- 

Fabian Arrotin
The CentOS Project | http://www.centos.org
gpg key: 56BEC54E | twitter: @arrfab
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iEYEARECAAYFAlUuTGcACgkQnVkHo1a+xU5IfACfauoOQCDY5s1TqN2W7cArOen+
Mx8AoJSQFIJMqHQq4QUrvIX5YluFBS9e
=jMgF
-----END PGP SIGNATURE-----