hold other things in registry

[gedw99]

i use aqua and its cool for cli stuff.

1. I want to also use it for binary builds that are then used for servers.

So from any CI the build outputs go to aqua

2. i also want to use it for gui apps ( web, desktop, mobile ) and signing them. i have basics working cross platform using the Rust code which can sign anything from anything in terms of OS.

Does aqua have a local / minio / s3 backend FS so that the registry points to a long term storage location ? i guess now it points to the github tagged releases and so is dependent on that. Its just that i want to run a registry and have a backing store that is not dependent on github etc.

[suzuki-shunsuke]

aqua supports the following package types.

• github_archive: The package is downloaded from GitHub Archive
• github_content: The package is downloaded from GitHub Content
• github_release: The package is downloaded from GitHub Releases
• go_install: The package is installed by go install command
• http: The package is downloaded from the specified URL

minio and s3 aren't supported.

[suzuki-shunsuke]

i also want to use it for gui apps ( web, desktop, mobile ) and signing them. i have basics working cross platform using the Rust code which can sign anything from anything in terms of OS.

Interesting. Do you develop the SaaS like platform for signing?

[gedw99]

aqua supports the following package types.

• github_archive: The package is downloaded from GitHub Archive
• github_content: The package is downloaded from GitHub Content
• github_release: The package is downloaded from GitHub Releases
• go_install: The package is installed by go install command
• http: The package is downloaded from the specified URL

minio and s3 aren't supported.

Perfect. Has HTTP for other places at least. so registry can pint to that and it all just works i guess ? I just need to maintain a s3...

[gedw99]

i also want to use it for gui apps ( web, desktop, mobile ) and signing them. i have basics working cross platform using the Rust code which can sign anything from anything in terms of OS.

Interesting. Do you develop the SaaS like platform for signing?

am playing around :) It could be a SAAS or who knows right now.. With Passkeys its somewhat possible to make it peer to peer even for any packages like wasm being delivered on the fly from github release --> server --> GUI. so user can assert a package "passes" into their own devices itself

this is partly why i was asking about the Registry Web server and gui. Was just curious about what's possible :) you could integrate passkey auth and i18n and other things into it for on the fly assertion, etc

[suzuki-shunsuke]

Perfect. Has HTTP for other places at least. so registry can pint to that and it all just works i guess ? I just need to maintain a s3...

There are some http packages.

https://github.com/search?q=repo%3Aaquaproj%2Faqua-registry%20%22type%3A%20http%22&type=code

e.g. helm: https://github.com/aquaproj/aqua-registry/blob/29dfbca466028a1a1375cf9855808a4851dfb0e8/pkgs/helm/helm/registry.yaml

Note that the authentication isn't supported at the moment.
If necessary, we can consider it.

[gedw99]

oh yeah forgot about AUTH for http--- Yep will need auth auth token eventually i guess.

thanks !!

[suzuki-shunsuke]

I created some issues for http package.

• support http query #10
• support http header #11
• support http method #12

Do you know how to pass the auth token? Header or query?

[gedw99]

thanks - no i don't know the QUERYSTRING or HEADER signature for passing the token.. I assumed it was not implemented yet ?

It's on your side so i just need to respect it.

Maybe just get something working and then we find work it out as we go?

[suzuki-shunsuke]

I assumed it was not implemented yet ?

Yes. aqua doesn't support it.

Hmm. It's complicated to authenticate s3 for HTTP request.

https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-authenticating-requests.html

It may be better to support the package type s3 and use SDK.

[suzuki-shunsuke]

• https://github.com/orgs/aquaproj/discussions/1953