Re: [bitbake-devel] [oe-core][PATCH 1/2] devtools: Initial recipe for repo 2.17.3

[Jasper Orschulko <Jasper.Orschulko@iris-sensing.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> Okay fine that makes sense, even if it is still phoning home.
True. Bad software design at best. But luckily not an issue from a
build system perspective. :)

> Another thing, could you please exchange "+REPO_REV = 'v2.17.3'" for
> a 
> SHA revision, as I wouldn't bet my life on google not
> deleting/removing 
> tags from their repos - and unpleasantly we wouldn't even notice that
> easily

Fair point, will do!

- -- 
With best regards

Jasper Orschulko
DevOps Engineer

Tel. +49 30 58 58 14 265
Fax +49 30 58 58 14 999
Jasper.Orschulko@iris-sensing.com

• • • • • • • • • • • • • • • • • • • • • • • • • •

iris-GmbH
infrared & intelligent sensors
Schnellerstraße 1-5 | 12439 Berlin

https://iris-sensing.com/





On Fri, 2021-11-05 at 15:20 +0100, Konrad Weihmann wrote:
> 
> 
> On 05.11.21 15:09, Jasper Orschulko wrote:
> > Actually, I don't believe this to be an issue for the following
> > reasons:
> > 
> > 1. The recipe does nothing more than taking the wrapper script as is
> > and copying it to the sysroot. As the repo binary is never called
> > when
> > building, it does not have the "chance" to look for an update during
> > the yocto offline build process. The outcome of an offline build is
> > therefore predictable.
> > 
> > 2. When using repo within the yocto build itself (with the repo
> > fetcher), the repo binary is only ever called during the do_fetch
> > step,
> > which obviously has no issues with any network access.
> > 
>  >
> 
> Okay fine that makes sense, even if it is still phoning home.
> Another thing, could you please exchange "+REPO_REV = 'v2.17.3'" for a 
> SHA revision, as I wouldn't bet my life on google not deleting/removing
> tags from their repos - and unpleasantly we wouldn't even notice that
> easily
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE4WyPMIC5Ap4+Ooo1Ygqew07VMNUFAmGFRU4ACgkQYgqew07V
MNX3ywf+MQAwmH9TVF0izfVVIYhwiTASgZLlG0pwMBXfQw6iIeWAXmO8LccJNrwb
fceVMFFXPi1/2SjAdjhOzzh5X7uSGbcVT0G13RpeuYfsnu7HyJ3n6TAdzoXiQtNa
PqJqPVsZBEIpHilTYEZqPu/ENHNq74Sj/sQXqM0XjNMTaJKKW7Syc9jbGdEdn+MV
gU9iNIQmYWEPSUS2Tp+lgFh9xC3qQOQJZPpcJ5V3hWfAIibaRMed4kGdd3mlJsYj
/Aoq+7gXe1iZOXB7OxXX+bk7ueoHCnp7QUPyWFVxslKx/r/faH+f+PwHmJHZp0VD
gOrzbjaIK2E2CVnRobaOkSknIffJzQ==
=Tfz+
-----END PGP SIGNATURE-----