Yocto Unauthenticated git Protocol No Longer Supported

Yocto Unauthenticated git Protocol No Longer Supported

[Jay Foster]

My yocto builds started failing today (November 2, 2021) due to this 
(https://github.blog/2021-09-01-improving-git-protocol-security-github/#no-more-unauthenticated-git) 
issue.  Is there a fix for the yocto fetcher?  I using rocko.

Jay

Re: [yocto] Yocto Unauthenticated git Protocol No Longer Supported

[Alexander Kanavin]

[-- Attachment #1: Type: text/plain, Size: 843 bytes --]

There are patches in master-next for this. You can backport them, but you
really shouldn't be using rocko.

Alex

On Tue, 2 Nov 2021 at 20:50, Jay Foster <jay.foster@systech.com> wrote:

> My yocto builds started failing today (November 2, 2021) due to this
> (
> https://github.blog/2021-09-01-improving-git-protocol-security-github/#no-more-unauthenticated-git)
>
> issue.  Is there a fix for the yocto fetcher?  I using rocko.
>
> Jay
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#55219):
> https://lists.yoctoproject.org/g/yocto/message/55219
> Mute This Topic: https://lists.yoctoproject.org/mt/86775338/1686489
> Group Owner: yocto+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [
> alex.kanavin@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[-- Attachment #2: Type: text/html, Size: 1775 bytes --]

Re: [yocto] Yocto Unauthenticated git Protocol No Longer Supported

[Alexander Kanavin]

[-- Attachment #1: Type: text/plain, Size: 1443 bytes --]

This, I think:
http://git.yoctoproject.org/cgit.cgi/poky/commit/?h=master-next&id=164bb5e9287497b492f21985dd1a8d85e1a4ed23

Alex

On Tue, 2 Nov 2021 at 21:18, Jay Foster <jay.foster@systech.com> wrote:

> Thanks.  Can you provide links to these patches?  I have no choice in
> using rocko.
> Note that the failure was in the do_packagedata task, where it is issuing
> a 'git -c core.fsyncobjectfiles=0 ls-remote <git-url>' command.  I am using
> a source premirror so it has not (yet) shown up in do_fetch.
>
> Jay
>
> On 11/2/2021 1:03 PM, Alexander Kanavin wrote:
>
> There are patches in master-next for this. You can backport them, but you
> really shouldn't be using rocko.
>
> Alex
>
> On Tue, 2 Nov 2021 at 20:50, Jay Foster <jay.foster@systech.com> wrote:
>
>> My yocto builds started failing today (November 2, 2021) due to this
>> (
>> https://github.blog/2021-09-01-improving-git-protocol-security-github/#no-more-unauthenticated-git)
>>
>> issue.  Is there a fix for the yocto fetcher?  I using rocko.
>>
>> Jay
>>
>> -=-=-=-=-=-=-=-=-=-=-=-
>> Links: You receive all messages sent to this group.
>> View/Reply Online (#55219):
>> https://lists.yoctoproject.org/g/yocto/message/55219
>> Mute This Topic: https://lists.yoctoproject.org/mt/86775338/1686489
>> Group Owner: yocto+owner@lists.yoctoproject.org
>> Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [
>> alex.kanavin@gmail.com]
>> -=-=-=-=-=-=-=-=-=-=-=-
>>
>>
>

[-- Attachment #2: Type: text/html, Size: 3344 bytes --]