coursier/coursier

Pure Scala Artifact Fetching

Symhedonic

@Shokodemon

but i see the client trying to use SSL3

any idea how to make that work ?

Symhedonic

@Shokodemon

im getting this erorr here;

Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
coursier-pool-1-thread-4, setSoTimeout(0) called
coursier-pool-1-thread-4, the previous server name in SNI (type=host_name (0), value=repo1.maven.org) was replaced with (type=host_name (0), value=repo1.maven.org)
Ignoring disabled protocol: SSLv3
coursier-pool-1-thread-4, handling exception: javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)
coursier-pool-1-thread-4, SEND TLSv1.2 ALERT: fatal, description = handshake_failure
coursier-pool-1-thread-4, WRITE: TLSv1.2 Alert, length = 2
[Raw write]: length = 7
0000: 15 03 03 00 02 02 28 Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
coursier-pool-1-thread-1, setSoTimeout(0) called
......coursier-pool-1-thread-1, the previous server name in SNI (type=host_name (0), value=repo1.maven.org) was replaced with (type=host_name (0), value=repo1.maven.org)
(
coursier-pool-1-thread-4, called closeSocket()
Ignoring disabled protocol: SSLv3
coursier-pool-1-thread-1, handling exception: javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)
coursier-pool-1-thread-4, called close()
coursier-pool-1-thread-1, SEND TLSv1.2 ALERT: fatal, description = handshake_failure
coursier-pool-1-thread-4, called closeInternal(true)
coursier-pool-1-thread-1, WRITE: TLSv1.2 Alert, length = 2
[Raw write]: length = 7
Failed to resolve ivy dependencies:Error downloading io.get-coursier:coursier-launcher_2.12:2.0.0-RC6-10
not found: /home/bkhatib/.ivy2/local/io.get-coursier/coursier-launcher_2.12/2.0.0-RC6-10/ivys/ivy.xml
download error: Caught javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate) (No appropriate protocol (protocol is disabled or cipher suites are inappropriate)) while downloading https://repo1.maven.org/maven2/io/get-coursier/coursier-launcher_2.12/2.0.0-RC6-10/coursier-launcher_2.12-2.0.0-RC6-10.pom

in mt .jvmopts i have
`

-Djdk.tls.client.protocols=TLSv1.2
-Dhttps.protocols=TLSv1.2
-Djavax.net.debug=all

and my java.security has

jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, 3DES_EDE_CBC, anon, NULL

Ryan Peters

@sloshy

Hi everyone, after redoing my Scala setup with cs setup, I'm getting the following error:

rpeters$ sbt --version
Exception in thread "main" java.lang.Exception: Don't know what Scala version should be used for sbt version ''

I'm on OSX, if that helps, fresh install of coursier and related utilities

Another oddity: to install sbt I have to install sbt-launcher, but I can't uninstall sbt-launcher. I have to uninstall sbt

Ryan Peters

@sloshy

Ok, so this only happens in folders that are not an sbt project

Ryan Peters

@sloshy

Issue filed coursier/sbt-launcher#151 with a workaround (you have to manually specify the sbt version outside of a project)

Symhedonic

@Shokodemon

hey guys any idea if the scala cursier library hard codes how it initiates handshakes with servers ? getting some odd SSLErrors here, No Appropriate Protocol and i would appreciate help on this.

Myroslav

@odisseus

Is Coursier capable of extracting project information from POM files? I'm particularly interested in <licenses> and <url>.

David Hoyt

@davidhoyt

How would I write something like dependencyList myself?

Anton Sviridov

@keynmol

Are there any differences in how artifacts are resolved in bootstrap vs. install? I'm working on an internal project and bootstrapping with same values from the descriptor works, but installing doesn't:

# extracting values from app descriptor
➜  tmp.kAL9RJ4n1R REPO=$(cat test-app.json | jq -r '.["test-app"].repositories[0]') 
➜  tmp.kAL9RJ4n1R ARTIFACT=$(cat test-app.json | jq -r '.["test-app"].dependencies[0]') 

# using those values to bootstrap
➜  tmp.kAL9RJ4n1R cs bootstrap $ARTIFACT -r $REPO -f -o test-app
Wrote /tmp/tmp.kAL9RJ4n1R/test-app

# now try to install
➜  tmp.kAL9RJ4n1R cs install -v -v --install-dir . --channel ./ test-app
Using install directory .
Found app test-app in channel /tmp/tmp.kAL9RJ4n1R/.
Got 0 artifacts:
Found 0 main classes:
No main class found
Exception in thread "main" coursier.install.InstallDir$NoMainClassFound: No main class found

Anton Sviridov

@keynmol

oh actually putting that same json descriptor on a page and using channel url instead works o_O

David Hoyt

@davidhoyt

Trying to import sbt-coursier into IntelliJ. Any tips? I get errors about coursierResolutions for every project

Martiniano Juanes

@mjuanes

Hi guys, I'm working on a sbt plugin, I need to add an HTTP header to the requests made during artifacts fetching. Any idea about if this is possible?

João Ferreira

@jtjeferreira

@davidhoyt did you manage to fix it?

João Ferreira

@jtjeferreira

found this workaround https://github.com/almond-sh/almond/issues/446#issuecomment-547821564

TimurFayruzov

@TimurFayruzov

Hi, I'm trying to print a dependency tree from sbt 1.3.8. Since it's said to use Coursier now, I tried a command from coursier documentation (resolve -t), but it did not work. After scraping info all around, the only thing that worked was to 1) install Coursier separately 2) run sbt with coursier bootstrap: coursier bootstrap sbt-launcher -f -o csbt && ./csbt 3) provide Coursier plugin in sbt project and 4) finally being able to run coursierDependencyTree. But event then I can't use nicer Coursier features like --what-depends-on flag. Also, sbt documentation says that I don't need to specify sbt plugin explicitly. Is there a way from me to a) get dependency tree in a simpler way and b) get access to nicer coursier features such as --what-depends-on.

Daniel Capo Sobral

@dcsobral

When you say —what-depends-on, are you referring to the coursier CLI?

To put it plainly, no, you can’t have coursierWhatDependsOn, coursierDependencyTree and coursierInverseDependencyTree any other way.

You do have coursierWhatDependsOn available that way, though, so I’m confused about the comments related to that. @TimurFayruzov

TimurFayruzov

@TimurFayruzov

Thank you @dcsobral . I did not know about coursierWhatDependsOn, is this documented somewhere? Combination of sbt and Coursier is very confusing and it is not clear which documentation should I consult, Coursier documentation also does not mention it. One problem is that when I enable Coursier plugin in the project, IntelliJ sbt integration seem to have issues (didn't look into too much details why though). Is there any other way to print a dependency tree in sbt 1.3 without bringing in Coursier (now that sbt-dependency-graph plugin isn't working for 1.3)? It's quite inconvenient to go through the steps above just for printing dependencies and the revert to regular sbt for the rest of the workflow.

Paul Cleary

@pauljamescleary

Hello, I have been struggling with some dependency fetch issues recently. I am running sbt 1.2.8 and coursier (latest) in a docker container. Seemingly, things get "stuck" downloading certain artifacts. It is repeatable (i.e. if you start a clean container and do a full build it gets stuck at the same dependency). I can work around it by manually adding the dependency to the ivy2 cache on the machine, but inevitably as things change it gets stuck on another different dependency. Seems to only happen on docker.

Happens so far on both ubuntu 18.04 and alpine 3.11 - both using openjdk11

Paul Cleary

@pauljamescleary

I do have a thread dump if it is useful

Daniel Capo Sobral

@dcsobral

@TimurFayruzov You don’t need to revert to regular sbt. You can switch to the coursier launcher and use that. Commit the launcher to the repository, and use it on the CI builds.

Then remove regular old sbt, and put the coursier one on your PATH.

Ashutosh Narang

@Survivor75

I am trying to build an sbt project and I am getting the following error:

[error] coursier.ResolutionException: 3 download error
[error]     Caught java.io.IOException: Server returned HTTP response code: 403 for URL: http://spingo-oss.s3.amazonaws.com/repositories/releases/com/spingo/op-rabbit-core_2.11/1.0.0/op-rabbit-core_2.11-1.0.0.jar (Server returned HTTP response code: 403 for URL: http://spingo-oss.s3.amazonaws.com/repositories/releases/com/spingo/op-rabbit-core_2.11/1.0.0/op-rabbit-core_2.11-1.0.0.jar) while downloading http://spingo-oss.s3.amazonaws.com/repositories/releases/com/spingo/op-rabbit-core_2.11/1.0.0/op-rabbit-core_2.11-1.0.0.jar
[error]     Caught java.io.IOException: Server returned HTTP response code: 403 for URL: http://spingo-oss.s3.amazonaws.com/repositories/releases/com/spingo/op-rabbit-json4s_2.11/1.0.0/op-rabbit-json4s_2.11-1.0.0.jar (Server returned HTTP response code: 403 for URL: http://spingo-oss.s3.amazonaws.com/repositories/releases/com/spingo/op-rabbit-json4s_2.11/1.0.0/op-rabbit-json4s_2.11-1.0.0.jar) while downloading http://spingo-oss.s3.amazonaws.com/repositories/releases/com/spingo/op-rabbit-json4s_2.11/1.0.0/op-rabbit-json4s_2.11-1.0.0.jar
[error]     Caught java.io.IOException: Server returned HTTP response code: 403 for URL: http://spingo-oss.s3.amazonaws.com/repositories/releases/com/thenewmotion/akka/akka-rabbitmq_2.11/1.2.7/akka-rabbitmq_2.11-1.2.7.jar (Server returned HTTP response code: 403 for URL: http://spingo-oss.s3.amazonaws.com/repositories/releases/com/thenewmotion/akka/akka-rabbitmq_2.11/1.2.7/akka-rabbitmq_2.11-1.2.7.jar) while downloading http://spingo-oss.s3.amazonaws.com/repositories/releases/com/thenewmotion/akka/akka-rabbitmq_2.11/1.2.7/akka-rabbitmq_2.11-1.2.7.jar

A similar issue was raised previously and the solution provided there does not seem to fix it in my case.

Rob Norris

@tpolecat

Hi, can anyone explain how to use cs install to create a graalvm native image?

Whenever I try to do it I get

Error occurred during initialization of VM
java.lang.Error: java.lang.ClassNotFoundException: com.oracle.svm.hosted.NativeImageSystemClassLoader
        at java.lang.ClassLoader.initSystemClassLoader(ClassLoader.java:1463)
        at java.lang.ClassLoader.getSystemClassLoader(ClassLoader.java:1430)
Caused by: java.lang.ClassNotFoundException: com.oracle.svm.hosted.NativeImageSystemClassLoader
        at java.net.URLClassLoader.findClass(URLClassLoader.java:382)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:419)

I have tried it by passing --jvm graalvm and also by setting graalvm as the vm that's on my path and neither seems to have any effect.

Ryan Peters

@sloshy

@tpolecat do you have native image installed (gu install native-image)?

Rob Norris

@tpolecat

no, what's that?

also what's gu?

This needs to be documented.

I used cs java to install graalvm. That's all I have done.

I want users to install cs and then be able to install a program and have a native image created on the fly, without a bunch of dicking around. Maybe this isn't possible yet.

When I tried this the first time it did seem to download graalvm for me (I didn't have it installed before) but maybe something is missing.

Also does anyone know if the launchers bound to the vm you specify on install, or do they use the vm that's on the path when you run them?

Ryan Peters

@sloshy

@tpolecat In the later versions of graalvm they separated native-image and other things like the different runtimes you can use w/ truffle as installable components. Installing graalvm also installs the graalvm updater in your jdk bin directory (gu)

Rob Norris

@tpolecat

Ryan Peters

@sloshy

(also I agree it's not exactly straightforwardly documented from the coursier perspective)

That said I do not believe you have to install native-image to actually run native-image programs, just build them

Rob Norris

@tpolecat

Same error after installing native-image.

I'll open an issue.

Ah there already is one. coursier/coursier#1613

Rob Norris

@tpolecat

I'm puzzled about this because it's a huge feature and I would have thought many people would have tried it by now.

Brian Maso

@bmaso

Is there a good coursier command-line option documentation source? I'm insterested specifically in the bootstrap command, but find the --help documentation leaves me with more questions than answers (What is an isolate vs shared? If I want some artifacts packages w/ the jar and others downloaded, can I even do that and how would I? Lots of stuff like that.) I feel like I'm missing the manual. If it doesn't exist, I'd be willing to contribute to the manual.

Where communities thrive

People

Repo info

Activity