KDE Qt Patch Collection - Tarballs

[Ben Cooksley]

Hi all,

It has come to my attention after noticing abnormal activity on our Gitlab
instance this evening that at least one distribution is fetching tarball
archives for the KDE Qt Patch Collection directly from Invent.

This is not a workload that invent.kde.org is intended to support and
therefore places abnormal load on the system - especially in the case of
QtWebEngine due to it's size. Analysis of the logs indicates that this type
of activity is being conducted by both an RPM based distribution, as well
as by Alpine Linux (see
https://git.alpinelinux.org/aports/tree/community/qt5-qtserialbus/APKBUILD?h=3.16-stable
)

If the above applies to your distribution please ensure that you use your
own copies of the tarballs generated by GItlab and do not have your
automated tooling fetch it from invent.kde.org directly.

Log excerpts, with IP addresses removed:

[12/Oct/2022:05:17:59 +0000] "GET
/frameworks/karchive/-/archive/8653117dede663d1f20850da82518fff4b7f732d/karchive-8653117.tar.gz
HTTP/1.1" 200 1035786 "-" "rpmdev-spectool"
[12/Oct/2022:06:25:03 +0000] "GET
/qt/qt/qtwebchannel/-/archive/fa8b07105b5e274daaa8adcc129fa4aa0447f9f7/qtwebchannel-fa8b07105b5e274daaa8adcc129fa4aa0447f9f7.tar.bz2
HTTP/1.1" 200 249616 "-" "Wget/1.21.2"
[11/Oct/2022:15:51:41 +0000] "GET
/qt/qt/qtwebengine/-/archive/v5.15.8-lts/qtwebengine-v5.15.8-lts.tar.bz2
HTTP/1.1" 200 3090478 "-" "Wget/1.21"

Thanks,
Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/distributions/attachments/20221012/9086c2fd/attachment.htm>