Configure maven to ignore missing checksums for the repositories we define

Metadata

Project: craft-parts
Number: #1214
Type: issue
State: open
Author: tigarmo
Labels: Status: Triaged
Created: 2025-08-22 05:24 PM UTC
Updated: 2025-08-22 05:25 PM UTC
Closed: —

Current evaluation

Add <checksumPolicy>ignore</checksumPolicy> to the craft-parts-defined Maven repositories (backstage maven-use repo and /usr/share/maven-repo mirror) to silence noisy missing-checksum warnings. Triaged, linked to CRAFT-4709, still unimplemented at HEAD.

Suggested action: keep open

Reason: Verified the change is still missing at HEAD: grep for 'checksumPolicy' across craft-parts returns no matches, and craft_parts/utils/maven/_xml.py still emits CRAFT_REPO_TEMPLATE and MIRROR_REPO without any checksum configuration. The issue is maintainer-authored (tigarmo), carries the 'Status: Triaged' label, and links a concrete Jira ticket (CRAFT-4709) from the syncronize-issues-to-jira bot, so it is a validated, valid, narrowly-scoped request that must stay open. Impact is modest (build-log noise reduction, not a functional break); complexity is low since it only touches the two XML templates plus their unit-test expectations in tests/unit/utils/test_maven_utils.py.

Evaluated by: mr-cal-bot

Impact: 30 Quick Win: 20 Complexity: 22 Confidence: 88 Actionability: 85

Issue body

### What needs to get done The "local" Maven repositories we define (the one in `/usr/share/maven-repo` for archive packages and the one in the backstage for parts) are typically missing the checksum file because the poms are modified at runtime. This means that Maven floods the build output with warnings, but we can configure Maven to ignore missing checksums **for those repos specifically** via the [checksumPolicy](https://maven.apache.org/settings.html) element. ### Why it needs to get done The warnings are very noisy and make it hard to find actual errors.

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-02 06:14 PM UTC	stealth/space-bunny-alpha	Impact: 30 Quick Win: 20 Complexity: 22 Confidence: 88 Actionability: 85	keep open	Add <checksumPolicy>ignore</checksumPolicy> to the craft-parts-defined Maven repositories (backstage maven-use repo and /usr/share/maven-repo mirror) to silence noisy missing-checksum warnings. Triaged, linked to CRAFT-4709, still unimplemented at HEAD.
2026-09-22 05:31 AM UTC	qwen/qwen3.6-35b-a3b	Impact: 35 Quick Win: 21 Complexity: 25 Confidence: 75 Actionability: 80	keep open	Add checksumPolicy to Maven settings to suppress noisy warnings from local repos missing checksum files.
2026-09-01 06:02 AM UTC	qwen/qwen3.8-27b	Impact: 35 Quick Win: 28 Staleness: 75 Complexity: 20 Confidence: 85 Support Request: 0	keep open	Add checksumPolicy to the Maven settings craft-parts generates so missing checksums in the local /usr/share/maven-repo and backstage repos don't flood build output with warnings. Triaged, self-filed by a maintainer, but unimplemented and inactive for ~12 months.
2026-07-22 01:23 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 85 Complexity: 15 Confidence: 80 Support Request: 5	keep open	Configure Maven to ignore missing checksums for local repositories to reduce noisy build warnings. Triaged but inactive for over a year.
2026-07-09 08:52 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 85 Complexity: 10 Confidence: 75 Support Request: 0	keep open	Configure Maven to ignore missing checksums for local repositories to reduce noisy build warnings. Currently triaged but inactive for over a year.

Update history

No update history recorded yet.

Related issues

No related issues found above the similarity threshold.