[bitbake-devel] [PATCH v3] fetch2: Add BB_ALLOWED_NETWORKS support

[Liam R. Howlett]

* Richard Purdie <richard.purdie at linuxfoundation.org> [150512 07:18]:
> On Thu, 2015-04-16 at 13:23 -0400, Liam R. Howlett wrote:
> > BB_ALLOWED_NETWORKS is a list of hosts that the fetcher will be allowed
> > to use when BB_NO_NETWORK is not set.
> > 
> > If BB_NO_NETWORK is set, then networking is still disabled.
> > 
> > If BB_ALLOWED_NETWORKS is not set, the behaviour remains the same as
> > today.
> > 
> > If BB_NO_NETWORK is NOT set, and BB_ALLOWED_NETWORKS is configured, then
> > only the hosts in the list are usable by the fetcher.
> > 
> > eg:
> > BB_ALLOWED_NETWORKS="yoctoproject.org git.gnu.org"
> > The fetcher will be able to download from yoctoproject.org, git.gnu.org,
> > but not ftp.gnu.org or any other hostname that is not in the list.
> > 
> > There is also limited support for wildcards on the beginning of the
> > hosts, so BB_ALLOWED_NETWORKS="*.gnu.org" with match git.gnu.org and
> > ftp.gnu.org as well as foo.git.gnu.org
> > 
> > Signed-off-by: Liam R. Howlett <Liam.Howlett at WindRiver.com>
> > ---
> >  lib/bb/fetch2/__init__.py | 53 +++++++++++++++++++++++++++++++++++++++++++++++
> >  lib/bb/tests/fetch.py     | 37 +++++++++++++++++++++++++++++++++
> >  2 files changed, 90 insertions(+)
> 
> I've merged this, however, one of the things we're trying to do is
> improve the documentation of bitbake. Would you be able to work with
> Scott (cc'd) to ensure this is documented in the manual please?
> 
> Cheers,
> 
> Richard
> 

Absolutely, Thanks Richard.

Hello Scott,

If you don't have anything started, we can work from the text below if
you'd like.

--------

BB_ALLOWED_NETWORKS

Specifies a space delimited list of hosts which are allowed to be used
by the fetcher to obtain the required source code.  This list is only
used if BB_NO_NETWORK is not set.  Wildcard matching at the beginning of
hosts is supported.  Mirrors that are not in the list will be skipped
and logged in debug.  Attempts to access networks that are not in the
BB_ALLOWED_NETWORKS will cause a failure.

--------

Thanks,
Liam