[#JRUBY-5691] gem update --system wipes out RubyGems Maven support - jira.codehaus.org

Details

Type: Bug
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: JRuby 1.6
Fix Version/s: JRuby 1.7.0.pre2
Component/s: None
Labels:
None

Number of attachments :
0

Description

jruby -S gem update --system

completely wipes out RubyGems Maven support.

Issue Links

is related to

JRUBY-5499 Update to rubygems 1.5.2 since 1.5.0 has severe bugs

Activity

Ascending order - Click to sort in descending order

Hide

Permalink

Hiro Asari added a comment - 12/Sep/11 9:48 PM

Unless we can automate what patches we apply to achieve maven support (say, in the form of another gem), it appears to me that this will have to be addressed by RubyGems itself. I am not sure if they are up to accepting patches for that.

Show

Hiro Asari added a comment - 12/Sep/11 9:48 PM Unless we can automate what patches we apply to achieve maven support (say, in the form of another gem), it appears to me that this will have to be addressed by RubyGems itself. I am not sure if they are up to accepting patches for that.

Hide

Permalink

Hiroshi Nakamura added a comment - 13/Sep/11 2:40 AM

Hiro, how can I test 'complete wires out' or not?

Recent rubygems has defaults dir so updating rubygems should not be the problem as far as they keep the same (internal) API (SpecFetcher and RemoteFetcher.)

% jruby -S gem update --system
Updating rubygems-update
Fetching: rubygems-update-1.8.10.gem (100%)
Successfully installed rubygems-update-1.8.10
Installing RubyGems 1.8.10
RubyGems 1.8.10 installed

== 1.8.10 / 2011-08-25

RubyGems 1.8.10 contains a security fix that prevents malicious gems from
executing code when their specification is loaded.  See
https://github.com/rubygems/rubygems/pull/165 for details.

* 5 bug fixes:

  * RubyGems escapes strings in ruby-format specs using #dump instead of #to_s
    and %q to prevent code injection.  Issue #165 by Postmodern
  * RubyGems attempt to activate the psych gem now to obtain bugfixes from
    psych.
  * Gem.dir has been restored to the front of Gem.path.  Fixes remaining
    problem with Issue #115
  * Fixed Syck DefaultKey infecting ruby-format specifications.
  * `gem uninstall a b` no longer stops if gem "a" is not installed.


------------------------------------------------------------------------------

RubyGems installed the following executables:
	/home/nahi/git/jruby/bin/jgem

RubyGems system software updated


% jruby -Xdebug.loadService.timing=true -rubygems -e 0
2011-09-13T16:37:25.570+09:00: LoadService:   -> ubygems
2011-09-13T16:37:25.698+09:00: LoadService:     -> rubygems
2011-09-13T16:37:25.814+09:00: LoadService:       -> rubygems/defaults
2011-09-13T16:37:25.825+09:00: LoadService:       <- rubygems/defaults - 11ms
2011-09-13T16:37:25.826+09:00: LoadService:       -> rbconfig
2011-09-13T16:37:25.846+09:00: LoadService:       <- rbconfig - 20ms
2011-09-13T16:37:25.847+09:00: LoadService:       -> rubygems/deprecate
2011-09-13T16:37:25.857+09:00: LoadService:       <- rubygems/deprecate - 10ms
2011-09-13T16:37:25.878+09:00: LoadService:       -> rubygems/exceptions
2011-09-13T16:37:25.892+09:00: LoadService:       <- rubygems/exceptions - 14ms
2011-09-13T16:37:25.892+09:00: LoadService:       -> rubygems/defaults/operating_system
2011-09-13T16:37:25.902+09:00: LoadService:       <- rubygems/defaults/operating_system - 10ms
2011-09-13T16:37:25.902+09:00: LoadService:       -> rubygems/defaults/jruby
2011-09-13T16:37:25.913+09:00: LoadService:         -> rubygems/config_file
2011-09-13T16:37:25.933+09:00: LoadService:           -> etc
2011-09-13T16:37:26.027+09:00: LoadService:           <- etc - 94ms
2011-09-13T16:37:26.028+09:00: LoadService:           -> Win32API
2011-09-13T16:37:26.034+09:00: LoadService:             -> rbconfig
2011-09-13T16:37:26.034+09:00: LoadService:             <- rbconfig - 0ms
2011-09-13T16:37:26.035+09:00: LoadService:           <- Win32API - 7ms
2011-09-13T16:37:26.038+09:00: LoadService:         <- rubygems/config_file - 124ms
2011-09-13T16:37:26.039+09:00: LoadService:         -> rubygems/maven_gemify # !!!!!!!!!!!!!!!!!!!!
2011-09-13T16:37:26.057+09:00: LoadService:           -> uri
2011-09-13T16:37:26.060+09:00: LoadService:             -> uri/common
2011-09-13T16:37:26.198+09:00: LoadService:             <- uri/common - 138ms
2011-09-13T16:37:26.213+09:00: LoadService:             -> uri/generic
2011-09-13T16:37:26.246+09:00: LoadService:               -> uri/common
2011-09-13T16:37:26.246+09:00: LoadService:               <- uri/common - 0ms
2011-09-13T16:37:26.258+09:00: LoadService:             <- uri/generic - 45ms
2011-09-13T16:37:26.258+09:00: LoadService:             -> uri/ftp
2011-09-13T16:37:26.267+09:00: LoadService:               -> uri/generic
2011-09-13T16:37:26.268+09:00: LoadService:               <- uri/generic - 1ms
2011-09-13T16:37:26.270+09:00: LoadService:             <- uri/ftp - 11ms
2011-09-13T16:37:26.271+09:00: LoadService:             -> uri/http
2011-09-13T16:37:26.274+09:00: LoadService:               -> uri/generic
2011-09-13T16:37:26.275+09:00: LoadService:               <- uri/generic - 0ms
2011-09-13T16:37:26.276+09:00: LoadService:             <- uri/http - 5ms
2011-09-13T16:37:26.277+09:00: LoadService:             -> uri/https
2011-09-13T16:37:26.279+09:00: LoadService:               -> uri/http
2011-09-13T16:37:26.279+09:00: LoadService:               <- uri/http - 0ms
2011-09-13T16:37:26.280+09:00: LoadService:             <- uri/https - 3ms
2011-09-13T16:37:26.280+09:00: LoadService:             -> uri/ldap
2011-09-13T16:37:26.289+09:00: LoadService:               -> uri/generic
2011-09-13T16:37:26.289+09:00: LoadService:               <- uri/generic - 0ms
2011-09-13T16:37:26.291+09:00: LoadService:             <- uri/ldap - 11ms
2011-09-13T16:37:26.292+09:00: LoadService:             -> uri/ldaps
2011-09-13T16:37:26.293+09:00: LoadService:               -> uri/ldap
2011-09-13T16:37:26.294+09:00: LoadService:               <- uri/ldap - 0ms
2011-09-13T16:37:26.294+09:00: LoadService:             <- uri/ldaps - 2ms
2011-09-13T16:37:26.294+09:00: LoadService:             -> uri/mailto
2011-09-13T16:37:26.304+09:00: LoadService:               -> uri/generic
2011-09-13T16:37:26.305+09:00: LoadService:               <- uri/generic - 0ms
2011-09-13T16:37:26.310+09:00: LoadService:             <- uri/mailto - 15ms
2011-09-13T16:37:26.311+09:00: LoadService:           <- uri - 254ms
2011-09-13T16:37:26.311+09:00: LoadService:           -> rubygems/spec_fetcher
2011-09-13T16:37:26.325+09:00: LoadService:             -> rubygems/remote_fetcher
2011-09-13T16:37:26.349+09:00: LoadService:               -> rubygems/user_interaction
2011-09-13T16:37:26.374+09:00: LoadService:               <- rubygems/user_interaction - 25ms
2011-09-13T16:37:26.375+09:00: LoadService:               -> uri
2011-09-13T16:37:26.375+09:00: LoadService:               <- uri - 0ms
2011-09-13T16:37:26.380+09:00: LoadService:             <- rubygems/remote_fetcher - 55ms
2011-09-13T16:37:26.380+09:00: LoadService:             -> rubygems/user_interaction
2011-09-13T16:37:26.380+09:00: LoadService:             <- rubygems/user_interaction - 0ms
2011-09-13T16:37:26.381+09:00: LoadService:             -> rubygems/errors
2011-09-13T16:37:26.385+09:00: LoadService:             <- rubygems/errors - 4ms
2011-09-13T16:37:26.385+09:00: LoadService:             -> rubygems/text
2011-09-13T16:37:26.391+09:00: LoadService:             <- rubygems/text - 6ms
2011-09-13T16:37:26.398+09:00: LoadService:           <- rubygems/spec_fetcher - 87ms
2011-09-13T16:37:26.398+09:00: LoadService:           -> rubygems/remote_fetcher
2011-09-13T16:37:26.400+09:00: LoadService:           <- rubygems/remote_fetcher - 0ms
2011-09-13T16:37:26.407+09:00: LoadService:         <- rubygems/maven_gemify - 368ms
2011-09-13T16:37:26.408+09:00: LoadService:         -> rbconfig
2011-09-13T16:37:26.408+09:00: LoadService:         <- rbconfig - 0ms
2011-09-13T16:37:26.409+09:00: LoadService:         -> rubygems/specification
2011-09-13T16:37:26.464+09:00: LoadService:           -> rubygems/version
2011-09-13T16:37:26.475+09:00: LoadService:           <- rubygems/version - 10ms
2011-09-13T16:37:26.475+09:00: LoadService:           -> rubygems/requirement
2011-09-13T16:37:26.483+09:00: LoadService:             -> rubygems/version
2011-09-13T16:37:26.484+09:00: LoadService:             <- rubygems/version - 0ms
2011-09-13T16:37:26.488+09:00: LoadService:           <- rubygems/requirement - 13ms
2011-09-13T16:37:26.488+09:00: LoadService:           -> rubygems/platform
2011-09-13T16:37:26.506+09:00: LoadService:             -> rubygems/deprecate
2011-09-13T16:37:26.507+09:00: LoadService:             <- rubygems/deprecate - 0ms
2011-09-13T16:37:26.516+09:00: LoadService:           <- rubygems/platform - 28ms
2011-09-13T16:37:26.517+09:00: LoadService:           -> rubygems/deprecate
2011-09-13T16:37:26.517+09:00: LoadService:           <- rubygems/deprecate - 0ms
2011-09-13T16:37:26.561+09:00: LoadService:         <- rubygems/specification - 152ms
2011-09-13T16:37:26.563+09:00: LoadService:         -> rubygems/defaults/jruby_native
2011-09-13T16:37:26.564+09:00: LoadService:         <- rubygems/defaults/jruby_native - 1ms
2011-09-13T16:37:26.564+09:00: LoadService:       <- rubygems/defaults/jruby - 661ms
2011-09-13T16:37:26.564+09:00: LoadService:       -> rubygems/custom_require
2011-09-13T16:37:26.576+09:00: LoadService:       <- rubygems/custom_require - 11ms
2011-09-13T16:37:26.584+09:00: LoadService:     <- rubygems - 886ms
2011-09-13T16:37:26.584+09:00: LoadService:   <- ubygems - 965ms
%

Show

Hiroshi Nakamura added a comment - 13/Sep/11 2:40 AM Hiro, how can I test 'complete wires out' or not? Recent rubygems has defaults dir so updating rubygems should not be the problem as far as they keep the same (internal) API (SpecFetcher and RemoteFetcher.) % jruby -S gem update --system Updating rubygems-update Fetching: rubygems-update-1.8.10.gem (100%) Successfully installed rubygems-update-1.8.10 Installing RubyGems 1.8.10 RubyGems 1.8.10 installed == 1.8.10 / 2011-08-25 RubyGems 1.8.10 contains a security fix that prevents malicious gems from executing code when their specification is loaded. See https://github.com/rubygems/rubygems/pull/165 for details. * 5 bug fixes: * RubyGems escapes strings in ruby-format specs using #dump instead of #to_s and %q to prevent code injection. Issue #165 by Postmodern * RubyGems attempt to activate the psych gem now to obtain bugfixes from psych. * Gem.dir has been restored to the front of Gem.path. Fixes remaining problem with Issue #115 * Fixed Syck DefaultKey infecting ruby-format specifications. * `gem uninstall a b` no longer stops if gem "a" is not installed. ------------------------------------------------------------------------------ RubyGems installed the following executables: /home/nahi/git/jruby/bin/jgem RubyGems system software updated % jruby -Xdebug.loadService.timing=true -rubygems -e 0 2011-09-13T16:37:25.570+09:00: LoadService: -> ubygems 2011-09-13T16:37:25.698+09:00: LoadService: -> rubygems 2011-09-13T16:37:25.814+09:00: LoadService: -> rubygems/defaults 2011-09-13T16:37:25.825+09:00: LoadService: <- rubygems/defaults - 11ms 2011-09-13T16:37:25.826+09:00: LoadService: -> rbconfig 2011-09-13T16:37:25.846+09:00: LoadService: <- rbconfig - 20ms 2011-09-13T16:37:25.847+09:00: LoadService: -> rubygems/deprecate 2011-09-13T16:37:25.857+09:00: LoadService: <- rubygems/deprecate - 10ms 2011-09-13T16:37:25.878+09:00: LoadService: -> rubygems/exceptions 2011-09-13T16:37:25.892+09:00: LoadService: <- rubygems/exceptions - 14ms 2011-09-13T16:37:25.892+09:00: LoadService: -> rubygems/defaults/operating_system 2011-09-13T16:37:25.902+09:00: LoadService: <- rubygems/defaults/operating_system - 10ms 2011-09-13T16:37:25.902+09:00: LoadService: -> rubygems/defaults/jruby 2011-09-13T16:37:25.913+09:00: LoadService: -> rubygems/config_file 2011-09-13T16:37:25.933+09:00: LoadService: -> etc 2011-09-13T16:37:26.027+09:00: LoadService: <- etc - 94ms 2011-09-13T16:37:26.028+09:00: LoadService: -> Win32API 2011-09-13T16:37:26.034+09:00: LoadService: -> rbconfig 2011-09-13T16:37:26.034+09:00: LoadService: <- rbconfig - 0ms 2011-09-13T16:37:26.035+09:00: LoadService: <- Win32API - 7ms 2011-09-13T16:37:26.038+09:00: LoadService: <- rubygems/config_file - 124ms 2011-09-13T16:37:26.039+09:00: LoadService: -> rubygems/maven_gemify # !!!!!!!!!!!!!!!!!!!! 2011-09-13T16:37:26.057+09:00: LoadService: -> uri 2011-09-13T16:37:26.060+09:00: LoadService: -> uri/common 2011-09-13T16:37:26.198+09:00: LoadService: <- uri/common - 138ms 2011-09-13T16:37:26.213+09:00: LoadService: -> uri/generic 2011-09-13T16:37:26.246+09:00: LoadService: -> uri/common 2011-09-13T16:37:26.246+09:00: LoadService: <- uri/common - 0ms 2011-09-13T16:37:26.258+09:00: LoadService: <- uri/generic - 45ms 2011-09-13T16:37:26.258+09:00: LoadService: -> uri/ftp 2011-09-13T16:37:26.267+09:00: LoadService: -> uri/generic 2011-09-13T16:37:26.268+09:00: LoadService: <- uri/generic - 1ms 2011-09-13T16:37:26.270+09:00: LoadService: <- uri/ftp - 11ms 2011-09-13T16:37:26.271+09:00: LoadService: -> uri/http 2011-09-13T16:37:26.274+09:00: LoadService: -> uri/generic 2011-09-13T16:37:26.275+09:00: LoadService: <- uri/generic - 0ms 2011-09-13T16:37:26.276+09:00: LoadService: <- uri/http - 5ms 2011-09-13T16:37:26.277+09:00: LoadService: -> uri/https 2011-09-13T16:37:26.279+09:00: LoadService: -> uri/http 2011-09-13T16:37:26.279+09:00: LoadService: <- uri/http - 0ms 2011-09-13T16:37:26.280+09:00: LoadService: <- uri/https - 3ms 2011-09-13T16:37:26.280+09:00: LoadService: -> uri/ldap 2011-09-13T16:37:26.289+09:00: LoadService: -> uri/generic 2011-09-13T16:37:26.289+09:00: LoadService: <- uri/generic - 0ms 2011-09-13T16:37:26.291+09:00: LoadService: <- uri/ldap - 11ms 2011-09-13T16:37:26.292+09:00: LoadService: -> uri/ldaps 2011-09-13T16:37:26.293+09:00: LoadService: -> uri/ldap 2011-09-13T16:37:26.294+09:00: LoadService: <- uri/ldap - 0ms 2011-09-13T16:37:26.294+09:00: LoadService: <- uri/ldaps - 2ms 2011-09-13T16:37:26.294+09:00: LoadService: -> uri/mailto 2011-09-13T16:37:26.304+09:00: LoadService: -> uri/generic 2011-09-13T16:37:26.305+09:00: LoadService: <- uri/generic - 0ms 2011-09-13T16:37:26.310+09:00: LoadService: <- uri/mailto - 15ms 2011-09-13T16:37:26.311+09:00: LoadService: <- uri - 254ms 2011-09-13T16:37:26.311+09:00: LoadService: -> rubygems/spec_fetcher 2011-09-13T16:37:26.325+09:00: LoadService: -> rubygems/remote_fetcher 2011-09-13T16:37:26.349+09:00: LoadService: -> rubygems/user_interaction 2011-09-13T16:37:26.374+09:00: LoadService: <- rubygems/user_interaction - 25ms 2011-09-13T16:37:26.375+09:00: LoadService: -> uri 2011-09-13T16:37:26.375+09:00: LoadService: <- uri - 0ms 2011-09-13T16:37:26.380+09:00: LoadService: <- rubygems/remote_fetcher - 55ms 2011-09-13T16:37:26.380+09:00: LoadService: -> rubygems/user_interaction 2011-09-13T16:37:26.380+09:00: LoadService: <- rubygems/user_interaction - 0ms 2011-09-13T16:37:26.381+09:00: LoadService: -> rubygems/errors 2011-09-13T16:37:26.385+09:00: LoadService: <- rubygems/errors - 4ms 2011-09-13T16:37:26.385+09:00: LoadService: -> rubygems/text 2011-09-13T16:37:26.391+09:00: LoadService: <- rubygems/text - 6ms 2011-09-13T16:37:26.398+09:00: LoadService: <- rubygems/spec_fetcher - 87ms 2011-09-13T16:37:26.398+09:00: LoadService: -> rubygems/remote_fetcher 2011-09-13T16:37:26.400+09:00: LoadService: <- rubygems/remote_fetcher - 0ms 2011-09-13T16:37:26.407+09:00: LoadService: <- rubygems/maven_gemify - 368ms 2011-09-13T16:37:26.408+09:00: LoadService: -> rbconfig 2011-09-13T16:37:26.408+09:00: LoadService: <- rbconfig - 0ms 2011-09-13T16:37:26.409+09:00: LoadService: -> rubygems/specification 2011-09-13T16:37:26.464+09:00: LoadService: -> rubygems/version 2011-09-13T16:37:26.475+09:00: LoadService: <- rubygems/version - 10ms 2011-09-13T16:37:26.475+09:00: LoadService: -> rubygems/requirement 2011-09-13T16:37:26.483+09:00: LoadService: -> rubygems/version 2011-09-13T16:37:26.484+09:00: LoadService: <- rubygems/version - 0ms 2011-09-13T16:37:26.488+09:00: LoadService: <- rubygems/requirement - 13ms 2011-09-13T16:37:26.488+09:00: LoadService: -> rubygems/platform 2011-09-13T16:37:26.506+09:00: LoadService: -> rubygems/deprecate 2011-09-13T16:37:26.507+09:00: LoadService: <- rubygems/deprecate - 0ms 2011-09-13T16:37:26.516+09:00: LoadService: <- rubygems/platform - 28ms 2011-09-13T16:37:26.517+09:00: LoadService: -> rubygems/deprecate 2011-09-13T16:37:26.517+09:00: LoadService: <- rubygems/deprecate - 0ms 2011-09-13T16:37:26.561+09:00: LoadService: <- rubygems/specification - 152ms 2011-09-13T16:37:26.563+09:00: LoadService: -> rubygems/defaults/jruby_native 2011-09-13T16:37:26.564+09:00: LoadService: <- rubygems/defaults/jruby_native - 1ms 2011-09-13T16:37:26.564+09:00: LoadService: <- rubygems/defaults/jruby - 661ms 2011-09-13T16:37:26.564+09:00: LoadService: -> rubygems/custom_require 2011-09-13T16:37:26.576+09:00: LoadService: <- rubygems/custom_require - 11ms 2011-09-13T16:37:26.584+09:00: LoadService: <- rubygems - 886ms 2011-09-13T16:37:26.584+09:00: LoadService: <- ubygems - 965ms %

Hide

Permalink

Hiroshi Nakamura added a comment - 13/Sep/11 3:23 AM

Ah, I forgot patches we are applying to RubyGems. We should move those patches to defaults/ and do monkey patching?

Show

Hiroshi Nakamura added a comment - 13/Sep/11 3:23 AM Ah, I forgot patches we are applying to RubyGems. We should move those patches to defaults/ and do monkey patching?

Hide

Permalink

Charles Oliver Nutter added a comment - 06/Oct/12 1:08 PM

RubyGems maven support has been removed in JRuby 1.7, so this is no longer an issue. I am also working with RubyGems folks to get all our patches in there, so we can be running mainline RG.

Show

Charles Oliver Nutter added a comment - 06/Oct/12 1:08 PM RubyGems maven support has been removed in JRuby 1.7, so this is no longer an issue. I am also working with RubyGems folks to get all our patches in there, so we can be running mainline RG.

gem update --system wipes out RubyGems Maven support

Details

Description

Issue Links

Activity

People

Dates