GitLab Package Group, 14 Feb 2020

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: GitLab NuGet Package Repository Demo

Description

This video demos the upcoming NuGet package manager support in the GitLab package registry. It covers authenticating with the registry, setting the NuGet source to the GitLab registry, uploading a package to the registry and installing packages from the registry is also covered. All these tasks using the nuget CLI and the dotnet CLI.

A

Okay, so hello, I'm David from the package team, and today we are going to do the our second demo of a package manager for the package team today will be, did no gate package manager.

A

So we are going to do three things which is set up: the github resource, publishing a package and in studying the package, and we are going to do that with two clients, nugget and that left one note I'm doing this on my local installation and what, with all those debug flags and such it's a bit slow, you will see okay, so let me share my screen.

A

So here we have our project and, as we can see here,.

A

We don't have any package yet.

A

You see, oh I was not joking about the slow thing.

A

Okay, so first we will need to set up the you know. Gate registry will be the personal access token, so we create one with a periscope.

B

You actually don't have to set an expiration date. If you don't set one it'll, just not have one at all.

A

Yeah, you know you don't have to set it off, that's correct, okay! So then we open the command. The B terminal, so I installed in get client choose this one and we have the concept of sources. So it's like remote registries and right now there is only one which is not get dot, org and actually to add.

A

Anyone is quite simple: its to get sources.

A

We will need the name, so we like this club, you will need your username on github, so my name is David. You win a need password, which is the personal access token, and finally, you will need the URL, which is in the documentation, but for me I, just it I wrote it down in advance, so keep in mind that you need the project ID for that and we could can check by running sources again and you can check that it appears indeed there.

A

So now we will upload a project package, I mean so.

A

Nugget is a kind of backbone package manager, so you will need the package file already built with whatever solution you were using so here is one I created previously show up this limo and to push it. Just simply, you know, get push the file and then so the name of the source you you are set up previously, just this one. So far as github, and hopefully you package, we get uploaded.

A

One thing to know about the imploding: the package is not right away available on the github UI. That's because we have to process it first with a background task, so it's not available right away.

A

You need to wait a few minutes.

C

So we can check here. How could you.

A

See if it come as if it comes out.

B

Is it uploading through our course yeah.

A

But actually the package unity, you need to process it with a little worker and since.

D

A

It's on my local installation. It's everything it's a bit slow, but don't worry on on staging and production. It's really really fast.

B

Can you pull up the package file while I wait and just kind of show off what a NuGet package looks like.

E

Yeah, actually, we can't I.

A

Can't show you what it is: it's a zip archive. So if you really want to see what inside you just can win renamed it, the zipping state extension and then you can just unzip them, and you can see that it's just packaging the whole project. But you will see one package process being with a package being built when you when we will check the dotnet client. So here we have the package. So now the last operation will be to pull this package from the club registry.

A

So imagine that we have an application. Folder, as I said no get Dino get. Scylla is a really really bare bone, so it doesn't understand how to add a package dependency. So it's really not done but row. So you just again. The sources are properly.

A

Configure so you just, let me just check the command I think it's installed yeah. It is installed and the name of the package, which is this one and.

A

Actually, you can see here there is an order in the sources. If you just want to comment like this, it will check now get dot org for this package and and get lab which in this case will work, because no one has this package on.

A

You know yet, but if you have a package that is add that has the same name as a package on that not negate that all you need to precise the source to be used during the installation and since it really really low command, you need to tell the command where to put things.

A

Whoops, yeah I'll put the work.

A

And sure enough, the package is your Tariq. Who are you it's organized by folder? You are, you know, get package pulled so that was for nugget, and now we will use more advanced, I guess, which is thought net. So this one and actually dotnet is using yet for all the packages. So you can reuse the sources from yet, but we will. We will do something else to show off a different way to configure sources.

A

A

Yes, so not yet can forget, dotnet can initialize a package package on an application for you. So let's name this package from.

A

And then, when you're inside you can just dotnet back, and this comment will build no get package for you. So it's right here and now, one of the way to configure the net. You can also use a local file to configure through search so I have one already prepare for this, which is here stirred now get config file. We can just inspect it.

A

Okay, so it's an XML file. You just declare the sources with the URL like before you username and password in clear text tool. It's not this one.

C

This one we need to use.

A

C

A

There is a clear here: that's because if you don't put the clear element, it will use the new get sources first and then we'll use this file afterwards. So by clearing the list of sources you get this result. You.

A

Can see there is only one source which is get lobby I just changed the name photo for the demo. So now that we have the package, we can push this one.

A

Let me pull the the command key stone, so you can see it's using a get behind the scenes and I think that.

A

You can see that it's the same output, so it's just nugget running and uploading. The package.

B

David for the config file that you showed up is it possible to use variables instead of having your password in plain text.

A

A

At least for all the examples, I I saw good to know it's in clear text which is kind of bad.

F

David is not a file that you put on. There should control right. It's a lot of fight for yourself, most of the time, yeah.

A

I guess it's how it works with this config file, but perhaps we can use environment variables, I.

D

Think isn't there a way? I don't know if this is me misremembering, but I figure the way that you can add the password via the command line and it will actually go into the file encrypted, but.

A

It's it's possible that there is a way I mean so many configurations and way to use NuGet packages that I don't test them all. But yes, it's possible I, guess and sure enough. The package is there and.

A

Actually, the UI is working properly. You can open the package.

C

A

If you worked and now the last thing to demo is to create an application which will use this package so again, we will, we will use the dotnet CLI to initialize an application for the project she wants.

A

A

Again, we will need the configuration file for negate so now get config here and now we will, you can see, there is a bunch of files and one of them is the CS project. I guess we can open it.

A

So we can edit this file and add a new dependency on the package. So we need the name and the version, and let me just check the name fits the.

C

Court yeah: that's not the code.

A

Okay, now we can just one dotnet we store, which is the comment that will read all the dependencies and just pull them all, and just have the project ready for development.

A

Okay, and actually, you can even open it with Visual, Studio and.

A

Here you can see that dependencies for the nougat aspect. You can see the package from the net package that we created on on github.

A

So we are ready to put something else more meaningful that than another world.

A

Okay, so that's it for the demos, I guess I went a bit fast to be sure to show everything. Do you have any questions? I.

B

Do but one, but thank you for doing that and putting all that together. I know it takes a lot of work to prepare those and to present it. So thank you. Could we write yeah? If someone wanted to use CI CD to build a package they could, they would just have to go, make sure that they enter in their password or use an environment variable or something like that, but they could build a package. It just can't use the CI job token. Yet.

A

Yes, that's quite okay,.

B

A

Ci job token is not supported as a net indication. I fell down on the gitlab back-end, but I guess once the support is done, you can add the sauce to not get, and then you just build your package and push push it to get up and get it.

B

Tim, when are you, when are we planning on adding that prioritizing that great question? Damn thanks for asking I think that it's in our P to list that's something that we're trying to pick up. It's not in the milestone, but I believe that David said he was starting to look at it as a potential Kanban item to pick.

C

B

I would say, if not in twelve nine, then it'll probably be done by twelve ten.

A

Yeah, that's what I just checked, how to support the CIA job token, and actually the conan api is supporting it in the way that we need to support it for the nougat package manager, who is with the kind of copy paste of the Conan spot for the CI job token, a.

B

Great idea for a community contribution could be to have a CI template for building new gate packages. On the on to the new gate repository I know, we have a community contribution for an NPM template. That's nearly done could be another option for for someone to build and really add value to take it lab.

A

Yeah I guess one thing we can also the will improve I guess with time is the the information we extract from the packages from the package when you upload it right now, it's really really simple: it just the name and the version and that's it, but we have tags we have also. We are your else website, icons and things that we could extract to enhance the screen and add more information. Oh.

B

That's awesome.

F

B

Is the I know, there's one, mr obama? I know there's one, mr, that is in maintainer review now for search, and I think you mentioned that will add support for visual studio for we're doing the same workflow from visual studio, yeah.

A

I can show you how it works for the.

A

A

So if I want to add a new dependency, we would go there and you will not see it because we only add one source which is get Lobby, and this is the search. So you need to you need to go through the search before installing any package.

A

That's why the much request is needed for Visual Studio I.

B

Did say, I wasn't gonna, ask any more questions, but I have just one more. Is this available and calm now, as have emerged.

E

Now, I'm still waiting.

A

For deployment on the the service that handled the download of the package and I'm still waiting for deployment on on production, but it was deployed on Canary sister this afternoon, hopefully beginning next week. It will be available.

B

B

Really think we're at time and right right, stop.

A

A

So if there are no more questions, I guess we can stop the recording.

A

So thanks for watching and see you next time.