I'm not entirely sure where to find these -- none of the mirror sources I've looked at have SRPMS directories. At any rate, this is low priority and probably something we'd do during the next repo snapshot.

http://mirrors.kernel.org/fedora/releases/16/Everything/source/SRPMS/ http://mirrors.kernel.org/fedora/updates/16/SRPMS/ I picked mirrors that also have rsync access. Both of these are actual yum repositories, so it'd be nice to grab the metadata as well. SRPMS aren't a 24/7-must-be-up thing, I just want to make sure we have a copy of them.

This is waiting on the next repo snapshot, since it needs to be in sync with the repo itself.

I need to check that we got the SRPMs in bug 773769, and re-mirror if not.

John, can you remind me why we need these? I found the CentOS SRPMS (it's on vault.centos.org). But I can also find those SRPMs on rpmfind.net when necessary, without mirroring all of them. I suspect the same will be true of EPEL and Fedora. Sorry I've let this sit for so long that I've forgotten the rationale!

(In reply to Dustin J. Mitchell [:dustin] from comment #4) > John, can you remind me why we need these? I found the CentOS SRPMS (it's > on vault.centos.org). But I can also find those SRPMs on rpmfind.net when > necessary, without mirroring all of them. I suspect the same will be true > of EPEL and Fedora. > > Sorry I've let this sit for so long that I've forgotten the rationale! So that we have the same srpm that was used to build the exact version of the rpm that's in the binary mirrors. Sure, it's easy to find any old version of the srpm, but it needs to be the exact one the binary way made from. I don't personally trust rpmfind.net and sites like that to have every single version of the srpm we use. The rationale is that we might need to take a tiny fix on one of our dependencies, but don't want to upgrade anything else. If we don't have the exact sources for the dependencies needed, we need to upgrade everything in that dependency chain and then the builds need to be re-tested.

OK, I just re-mirrored CentOS 6.3 along with the source rpm's from vault.centos.org. https://wiki.mozilla.org/ReleaseEngineering/PuppetAgain/Repositories#CentOS_6 is updated with the details.

We'll need to make a habit of syncing the source for all of the repos we use - epel and fedora, too. So there's no sense keeping the bug open.