Conan-center-index: [boost] boost/any: Installation impossible due to OSS limit of provider

[aaaaaaaaargh]

As suggested, this is a follow-up of https://github.com/conan-io/conan-center-index/issues/1219

In short, building any boost package is impossible because the referenced bintray url of the sources has been locked due to exceeded traffic limits.

Package and Environment Details (include every applicable attribute)

• Package Name/Version: boost/any (all versions affected)
• Operating System+version: n/a
• Compiler+version:n/a
• Docker image: n/a
• Conan version: n/a
• Python version: n/a

Conan profile (output of conan profile show default or conan profile show <profile> if custom profile is in use)

Not important for this issue as the reason is not directly with conan (we can solve it here, though)

Steps to reproduce (Include if Applicable)

Try to build any version of the boost package. Will fail with a Forbidden! error message (see below)

Logs (Include/Attach if Applicable)

Click to expand log

This is the error that will be seen once the traffic limit has been reached:

 ERROR: boost/1.72.0: Error in source() method, line 173
    tools.get(**self.conan_data["sources"][self.version])
    AuthenticationException: Forbidden!

Additional information / possible solution

As mentioned in the boost mailing list (https://lists.boost.org/boost-users/2020/06/90495.php) the package could refer to a mirror proxy (e.g. SourceForge) instead of using bintray directly. I tested this locally and for me it worked, but I'm not experienced enough with Conan to know for sure this is a good enough solution for everyone else.

[tt4g]

Boost issue: boostorg/boost#403

[tt4g]

I tried to add the GitHub release page download URL to the mirror download URL, but the downloaded .tar.gz is different from the one downloaded from Bintray .

Adding the GitHub release URL to the url parameter passed to the conans.tools.get() did not work because the sha256 of the archive file that can be retrieved from the two URLs is different.

[aaaaaaaaargh]

Yes, I noticed that as well. However, you can use SourceForge instead, e.g:
https://sourceforge.net/projects/boost/files/boost/1.71.0/boost_1_71_0.tar.bz2
https://sourceforge.net/projects/boost/files/boost/1.72.0/boost_1_72_0.tar.bz2
https://sourceforge.net/projects/boost/files/boost/1.73.0/boost_1_73_0.tar.bz2

According to the checksums these files seem to perfectly match the ones found on bintray.

[tt4g]

@aaaaaaaaargh I also considered using SourceForge before.
But for some reason, Boost 1.71.0 is empty.
I remember that I gave up on it because it doesn't work as a perfect mirror.

https://sourceforge.net/projects/boost/files/boost/1.71.0/

[tt4g]

@aaaaaaaaargh @madebr has created a pull request (#1860) to use SourceForge as a mirror.

[aaaaaaaaargh]

@tt4g Thanks for noticing. Also great to see this is being solved so quickly!

As for the empty folder in the 1.71.0 release, this is pretty strange. I randomly tested a couple of other versions and all of those have the proper files. This must be just an error made by the uploaders, I doubt there is any good reason why you wanted to skip the 1.71.0 release.

[tt4g]

I created issue that there is nothing in SourceForge boost 1.71.0: boostorg/boost#405

[madebr]

@tt4g So did I at boostorg/boost#406 :smile:

[aaaaaaaaargh]

Thank you very much guys for acting so fast in resolving this issue! :bow: I'm looking forward to see this PR being merged as right now sadly we cannot use boost at all and my guess is that would be one of the most required packets provided by conan center.

[madebr]

It should be fixed now:
https://lists.boost.org/boost-users/2020/06/90497.php

[aaaaaaaaargh]

Yes, I can confirm that it is working again. Anyway, I think providing a fix on conan side as well is always a good idea. They didn't explain how they solved it, so we don't know how long it will last.

[tt4g]

PR is merged now, Thank you @madebr!