Mirror Site status(es)

Please note: We can not control the rate at which mirrors are updated.
Therefore you may wish to verify that your mirror of choice is up to date.

Page Contents

Mirror Site Overview and information


You must choose a mirror site to obtain the packages from.
This site does not serve package downloads directly.


  CSW package mirrors

There are separate "trees" of packages, that can be chosen as your primary source of CSW packages.

Current (previously known as "unstable")

The first tree is called “current” (previously called "unstable") and it changes frequently. Software packages are continually being updated and released to the public via the “current” tree.;

Stable

The next tree is called “stable” and it will only change after release engineering has checked and reviewed all bugs filed against all software packages.  There is also an internal tree simply called “testing” and it is used for QA processes before a package enters the “current” tree.  Our current stable release manager is James Lee and he works closely with numerous others to ensure that only qualified software may enter the “stable” tree.  The “stable” tree will change only when a complete release is ready.  At most this will be four times a year, depending on various factors.  You must install pkg-get and then configure /opt/csw/etc/pkg-get.conf to download software from a mirror listed below.  Simply add either "/current" or "/stable" to the end of one of the URLs listed below and then use pkg-get to install software.

Take note that if you use the “stable” tree then you may be a few months behind in software package versions, for the tradeoff of using packages that dont have as many bugs ( often none ) filed against them. James Lee does a great job of migrating only packages with low or no bug count, into the stable tree.

Use pkg-get for best use of mirror sites., whether you choose to use packages from the "stable", or "current" tree


Using a mirror site, with the pkg-get tool

The best way to access a mirror site for individual machines, is via the pkg-get script, which will install a package, and all its dependancies (although you may also choose to download and install packages manually) .

You must install pkg-get v2.x or later.
Our catalogs have md5 hashes for each package, and are 'signed'. Only pkg-get v2.x can fully take advantage of these new formats. To most easily take advantage of the checksums, you can use "pkg-get install textutils"

You must choose whether you want to download packages from the "stable" (tested for a while) tree, or the "current" (latest release, potentially untested) tree. The URLs given above are just a base url. You must then set the adjusted 'url' value in /opt/csw/etc/pkg-get.conf . For example: 

url=http://ftp.ntua.gr/pub/vendors/sun/csw/current

You must also have a working "wget" somewhere in your $PATH. If you dont have one, you can download a binary directly from the top level of any of the mirror sites. EG:
http://ftp.math.purdue.edu/mirrors/opencsw.org/wget.i386
Happily, Solaris 9+ usually comes with wget, in /usr/sfw/bin. If present, this will be used, even if you do not have wget in your PATH.

You may then use pkg-get to automatically download and install software that you want from the mirror site. For example, 

pkg-get install gcc
For more things you can do with pkg-get, see the pkg-get home page

Current public mirrors

If you have the bandwidth and disk space to spare to be another mirror site, in an area that is currently under-serviced, please let us know!

In general, http is the preferred transport.

rsync servers(for multi-machine installations)

If you would like to keep a local mirror of the full archives in an efficient manner, the following sites currently allow rsync connections
(test for yourself which ones give you best download speed!):
  • rsync://www.ibiblio.org/sun-packages/opencsw
  • rsync://ftp.math.purdue.edu/opencsw.org
  • rsync://ftp.esat.net/mirrors/opencsw.org/csw
  • rsync://ftp.df.lth.se/pub/csw
  • rsync://ftp.heanet.ie/pub/csw/
  • rsync://ftp.belnet.be/packages/csw
    • rsync://ftp.d-tabor.lj.edus.si/csw >
  • rsync://rsync.grangefields.co.uk/opencsw.org
This allows you to download all the packages once to a single machine, then point your internal machines' pkg-get configuration to that single internal machine, to maximize use of your local bandwidth speeds.

Note: do not use the -z option to rsync. The packages are all gzipped, which means -z will only slow things down. You should use the -H option, on the other hand, if you choose to mirror both "stable" and "current" portions of our archives. (And even if you are only mirroring a subpiece of it, using -H is probably a good idea anyway)

Suggested options:

	
	rsync -aH --delete

Older versions

Some sites choose to update their mirrors without the delete option turned on. This means that all older packages are available from them. One such site is
http://csw.informatik.uni-erlangen.de/oldpkgs/

GPG public key

Here is the current public key, which is used to sign the catalog files to verify package integrity across mirror sites. This ensures that the md5 hashes are not tampered with, which in turn ensure that the binaries themselves are not altered.

gpg verification is optional. However, if you have gpg installed [via "pkg-get install gnupg"], pkg-get will attempt to verify the catalog. If you wish to have the catalog file (with its list of checksums for each package) verified by gpg, then you should save this page and add the public key to your root "keyring". Eg: 

/opt/csw/bin/wget --output-document=/tmp/gpg.key [this-page's url]
/opt/csw/bin/gpg --import /tmp/gpg.key

If you have gpg installed, but do NOT wish gpg verification to take place, you must set "use_gpg=false" in /opt/csw/etc/pkg-get.conf 

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.5 (SunOS)
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=a30k
-----END PGP PUBLIC KEY BLOCK-----