[oe] [PATCH v2] opkg recipe overhaul - removal of opkg-nogpg and opkg-nogpg-nocurl.

[Koen Kooi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01-07-10 16:55, Enrico Scholz wrote:
> Graham Gower <graham.gower at gmail.com> writes:
> 
>> None of the distros in OE 
> 
> At least the openmoko SHR distribution fetches ipkg from network and
> requires curl support hence.

That's not true, with curl disabled, it calls (busybox) wget.

>> appear to want/need gpg or curl support in opkg; so have opkg.inc
>> remove them by default.
> 
> I do not think that supporting only offline mode (due to removal of
> curl support) is a good idea.  Although the opportunistic signature
> verification is not secure, it would be imo bad to remove gpg support
> completely because updating embedded devices in a secure manner is
> important.
> 
> A better way might be to conditionalize your '--disable-*' options
> resp. make them depend on some DISTRO_FEATURE.

Introducing USE flags would be a step backwards, so NAK on that.

regards,

Koen
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFMLK4oMkyGM64RGpERAi1LAJ92At87I57tSF/kRSlR+JAkGThQTACguKBy
JqkzXKxs4DLPWSbAtSTxqIc=
=RGMg
-----END PGP SIGNATURE-----