Hi, > we have been using downloads from cgit > on Savannah (https://git.savannah.gnu.org/cgit/gnulib.git, for instance, > https://git.savannah.gnu.org/cgit/gnulib.git/snapshot/gnulib-d271f86.tar.gz), > to get specific .tar.gz files of particular revisions of Gnulib.
'git' is the protocol that was designed for this purpose, and has the maximum efficiency (when you use it with --depth=1). So, that is the protocol that you should recommend. > However, recently it appears that this was disabled. Probably we need to distinguish .tar.gz links for release tags and .tar.gz for snapshots. The .tar.gz for release tags were disabled for gnulib and a couple of other packages when I became aware of the problem that these .tar.gz files pose, about 1½ years ago [1]. To see the effect, compare the "Download" links in [2], [3]. Since the checkbox in the Savannah admin UI carries the label "don't provide links to snapshot tarballs" it also controls the snapshot .tar.gz links, compare e.g. [4], [5]. If what you see is a recent change, it probably is an optimization: If nothing in the cgit UI displays a link with a certain form, there is no need for the cgit daemon to reply to that request. Maybe this has been disabled, because recently git.savannah.gnu.org has been overloaded with cgit requests, and what the sysadmins then do is to disable the requests that are abused by evil people and of less use to the public, in order to continue to be able to serve the requests that people rely on (namely the 'git' protocol). > I'd love to know if this disabling was intentional, and if so, > whether there are any problems with moving to downloading > from gitweb. It is possible that when the abusers notice that pulling snapshots via gitweb can equally damage the bandwidth of savannah, these snapshots will be disabled as well. > PS. If this is the wrong place to ask this, please direct me somewhere else > if at all possible. You can ask on #savannah on libera.chat (IRC). > Also, in the (I hope, > unlikely) case that this was disabled because of downloads from > live-bootstrap, I am very sorry. How many users of 'live-bootstrap' were downloading such a tarball, per day? Bruno [1] https://savannah.nongnu.org/support/?110880 [2] https://git.savannah.gnu.org/cgit/diffutils.git/ [3] https://git.savannah.gnu.org/cgit/gnulib.git [4] https://git.savannah.gnu.org/cgit/diffutils.git/commit/?id=f81b0a7c1c88f06eb1eff245d8c613c89b9896f7 [5] https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=a5a85754a3906ed1be8061d7fe52e26fbd24535a