MySQL Bugs: #113576: boost url in 8.0+ seems to be a non-public URL and direct downloads are blocked

Bug #113576	boost url in 8.0+ seems to be a non-public URL and direct downloads are blocked
Submitted:	8 Jan 2024 11:23	Modified:	6 Mar 2024 23:02
Reporter:	Simon Mudd (OCA)	Email Updates:
Status:	Closed	Impact on me:	None
Category:	MySQL Server: Compiling	Severity:	S3 (Non-critical)
Version:	8.0, 8.2	OS:	Any
Assigned to:		CPU Architecture:	Any

Description:
Please replace with a public URL that does not require a login.

https://github.com/mysql/mysql-server/blob/8.0/cmake/boost.cmake#L41-L45 refers to  a URL which when I try to download the source redirects me to a login page with the text: "Welcome Back!
Enter the email used to register for the free JFrog subscription to reactivate the account"

I'm not sure if this is because I was downloading the file a lot (doing some rebuilding of MySQL testing) or something else has changed but it seems the provided URL is no longer directly reachable.

This is also true for https://github.com/mysql/mysql-server/blob/trunk/cmake/boost.cmake#L41-L44 which refers to the same code. (so 8.2)

Note: last week this worked. This week it does not.

How to repeat:

[root@8d278f1a02d1 dba]# wget https://boostorg.jfrog.io/artifactory/main/release/1.77.0/source/boost_1_77_0.tar.bz2
--2024-01-08 09:59:24--  https://boostorg.jfrog.io/artifactory/main/release/1.77.0/source/boost_1_77_0.tar.bz2
Resolving boostorg.jfrog.io (boostorg.jfrog.io)... 18.214.194.113, 3.95.117.170, 18.232.172.199
Connecting to boostorg.jfrog.io (boostorg.jfrog.io)|18.214.194.113|:443... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: https://landing.jfrog.com/reactivate-server/boostorg [following]
--2024-01-08 09:59:25--  https://landing.jfrog.com/reactivate-server/boostorg
Resolving landing.jfrog.com (landing.jfrog.com)... 3.95.117.170, 18.214.194.113, 18.232.172.199
Connecting to landing.jfrog.com (landing.jfrog.com)|3.95.117.170|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 11534 (11K) [text/html]
Saving to: 'boost_1_77_0.tar.bz2'

boost_1_77_0.tar.bz2                         100%[============================================================================================>]  11.26K  --.-KB/s    in 0.1s

2024-01-08 09:59:26 (98.3 KB/s) - 'boost_1_77_0.tar.bz2' saved [11534/11534]

[root@8d278f1a02d1 dba]# tar xjf boost_1_77_0.tar.bz2
bzip2: (stdin) is not a bzip2 file.
tar: Child returned status 2
tar: Error is not recoverable: exiting now
[root@8d278f1a02d1 dba]#

Suggested fix:
Options:
- Provide a public URL for boost that works and is always reachable.
- Consider including boost into the MySQL git tree so the external dependency is removed.

https://github.com/boostorg/boost/issues/849

Hello Simon,

Thank you for the report and feedback.

regards,
Umesh

Hi,

thanks for report. 

Correct fix seems to be to use:

 https://archives.boost.io/release/1.77.0/source/boost_1_77_0.tar.bz2

right?

Options:
- Provide a public URL for boost that works and is always reachable.
- Consider including boost into the MySQL git tree so the external dependency is removed.

or my recommended solution: download manually, then point to the unpacked tarball doing cmake -DWITH_BOOST=...

this seems to happen once in a while:

commit df0bb0d7fecc96d459c55e4448503d90d592773f
Author: Tor Didriksen <tor.didriksen@oracle.com>
Date:   Mon May 10 15:53:06 2021 +0200

    Bug #32856104 CMAKE BOOST URL UPDATE
    
    JFrog has sunset Bintray, boost requires a new URL.

I temporarily changed the URL in my internal tooling to use  https://archives.boost.io/release/1.77.0/source/boost_1_77_0.tar.bz2 and that works.

For now that seems good enough but the source tree might need an update of some form.

Documented fix as follows in the MySQL 8.0.37 and 8.4.0 changelogs:

    Updated the URL used for downloading the Boost libraries.

Closed.