[oe] [PATCH v2] opkg recipe overhaul - removal of opkg-nogpg and opkg-nogpg-nocurl.
Tom Rini
tom_rini at mentor.com
Thu Jul 1 15:52:22 UTC 2010
Koen Kooi wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 01-07-10 16:55, Enrico Scholz wrote:
>> Graham Gower <graham.gower at gmail.com> writes:
>>
>>> None of the distros in OE
>> At least the openmoko SHR distribution fetches ipkg from network and
>> requires curl support hence.
>
> That's not true, with curl disabled, it calls (busybox) wget.
>
>>> appear to want/need gpg or curl support in opkg; so have opkg.inc
>>> remove them by default.
>> I do not think that supporting only offline mode (due to removal of
>> curl support) is a good idea. Although the opportunistic signature
>> verification is not secure, it would be imo bad to remove gpg support
>> completely because updating embedded devices in a secure manner is
>> important.
>>
>> A better way might be to conditionalize your '--disable-*' options
>> resp. make them depend on some DISTRO_FEATURE.
>
> Introducing USE flags would be a step backwards, so NAK on that.
Increasing (or decreasing...) USE flags, now there's a topic for the TSC...
--
Tom Rini
Mentor Graphics Corporation
More information about the Openembedded-devel
mailing list