download.zope.org

Hi.

After the recent trouble with download.zope.org, the Zope infrastructure
team has decided to discourage relying on download.zope.org for production
deployments.

As the Zope 2 release manager, I've followed up on this and removed any
reference to download.zope.org from the Zope install instructions and used
locally copied versions files in Git instead of using "extends" with an
external target.

The next Zope 2 releases won't be available from download.zope.org anymore,
so coredev and any release machinery should probably be adjusted.

As an example I've updated the coredev buildout for 5.0 in:
https://github.com/plone/buildout.coredev/commit/eee1022

As an alternative one could rely on raw.github.com instead, but I'd
personally discourage relying on any external service for version files.
It's one more source of potential downtime, breakage and a security risk if
the external service gets compromised. For example by adding some new
section "doevil" and automatically adding it via "parts += doevil" as part
of one of the version files.

Comments and feedback welcome, please CC me, as I'm not reading this
mailing list on a regular basis anymore.

Cheers,
Hanno


------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk