[bitbake-devel] [PATCH v3] fetch2: Add BB_ALLOWED_NETWORKS support

[Paul Eggleton]

On Tuesday 12 May 2015 10:28:08 Liam R. Howlett wrote:
> * Richard Purdie <richard.purdie at linuxfoundation.org> [150512 07:18]:
> > On Thu, 2015-04-16 at 13:23 -0400, Liam R. Howlett wrote:
> > > BB_ALLOWED_NETWORKS is a list of hosts that the fetcher will be allowed
> > > to use when BB_NO_NETWORK is not set.
> > > 
> > > If BB_NO_NETWORK is set, then networking is still disabled.
> > > 
> > > If BB_ALLOWED_NETWORKS is not set, the behaviour remains the same as
> > > today.
> > > 
> > > If BB_NO_NETWORK is NOT set, and BB_ALLOWED_NETWORKS is configured, then
> > > only the hosts in the list are usable by the fetcher.
> > > 
> > > eg:
> > > BB_ALLOWED_NETWORKS="yoctoproject.org git.gnu.org"
> > > The fetcher will be able to download from yoctoproject.org, git.gnu.org,
> > > but not ftp.gnu.org or any other hostname that is not in the list.
> > > 
> > > There is also limited support for wildcards on the beginning of the
> > > hosts, so BB_ALLOWED_NETWORKS="*.gnu.org" with match git.gnu.org and
> > > ftp.gnu.org as well as foo.git.gnu.org
> > > 
> > > Signed-off-by: Liam R. Howlett <Liam.Howlett at WindRiver.com>
> > > ---
> > > 
> > >  lib/bb/fetch2/__init__.py | 53
> > >  +++++++++++++++++++++++++++++++++++++++++++++++ lib/bb/tests/fetch.py 
> > >     | 37 +++++++++++++++++++++++++++++++++
> > >  2 files changed, 90 insertions(+)
> > 
> > I've merged this, however, one of the things we're trying to do is
> > improve the documentation of bitbake. Would you be able to work with
> > Scott (cc'd) to ensure this is documented in the manual please?
> > 
> > Cheers,
> > 
> > Richard
> 
> Absolutely, Thanks Richard.
> 
> Hello Scott,
> 
> If you don't have anything started, we can work from the text below if
> you'd like.
> 
> --------
> 
> BB_ALLOWED_NETWORKS
> 
> Specifies a space delimited list of hosts which are allowed to be used
> by the fetcher to obtain the required source code.  This list is only
> used if BB_NO_NETWORK is not set.  Wildcard matching at the beginning of
> hosts is supported.  Mirrors that are not in the list will be skipped
> and logged in debug.  Attempts to access networks that are not in the
> BB_ALLOWED_NETWORKS will cause a failure.
> 
> --------
> 
> Thanks,
> Liam

Replying to add Scott on CC - I think he has something for review.

Cheers,
Paul

-- 

Paul Eggleton
Intel Open Source Technology Centre