[
https://issues.apache.org/jira/browse/THRIFT-2208?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jens Geyer reopened THRIFT-2208:
--------------------------------
reopen, the package issue is still unsolved
> Thrift package for chocolatey
> -----------------------------
>
> Key: THRIFT-2208
> URL: https://issues.apache.org/jira/browse/THRIFT-2208
> Project: Thrift
> Issue Type: Wish
> Components: Build Process
> Reporter: Jake Farrell
> Assignee: Jens Geyer
> Priority: Minor
> Fix For: 0.26.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Package the Windows Thrift compiler for [Chocolatey|https://chocolatey.org/],
> so that it can be installed with
> {noformat}
> choco install thrift
> {noformat}
> h2. The package id is taken
> {{thrift}} on the Chocolatey community repository is a third party package,
> not an ASF one. It last shipped *0.12.0, in February 2019* - thirteen
> releases behind - and its maintainers are {{chaliy}} and {{Lite}}, with
> sources at [https://github.com/Litee/chocolatey-packages]. Its "last updated"
> date moves with Chocolatey's automated re-verification, not with any
> maintainer action.
> The plan is to ask Chocolatey for maintainer takeover of that id, under their
> process for abandoned packages, so that {{choco install thrift}} keeps
> meaning what people expect. The package is therefore built and tested in CI
> now, and pushed only once the id is ours. Nothing is published in the
> meantime.
> The near miss ids {{apache-thrift}}, {{thrift-compiler}}, {{thrift.portable}}
> and {{thrift.install}} are all free, should the takeover not work out.
> h2. Shape of the package
> The package downloads the signed Windows installer from
> {{archive.apache.org}} and runs it silently, for all users, rather than
> carrying a copy of the compiler. So the bits a user installs are the bits
> that were voted on and signed, the package stays small, and no binary is
> redistributed through a third party CDN.
> The download is checked against a SHA-256 that is computed from the file at
> that very URL when the package is built.
> As with WinGet, the manifest cannot be built before the release has reached
> the archive, so this is a post release step.
> h2. Depends on
> THRIFT-6311, which produces the installer this package downloads.
> _Drafted with AI assistance (Claude Opus 5); reviewed and posted by Jens
> Geyer._
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
