From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail1.windriver.com (mail1.windriver.com [147.11.146.13]) by mail.openembedded.org (Postfix) with ESMTP id 88A3565C78 for ; Tue, 16 Jun 2015 19:24:26 +0000 (UTC) Received: from ALA-HCA.corp.ad.wrs.com (ala-hca.corp.ad.wrs.com [147.11.189.40]) by mail1.windriver.com (8.15.1/8.15.1) with ESMTPS id t5GJOPxw021149 (version=TLSv1 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 16 Jun 2015 12:24:26 -0700 (PDT) Received: from yow-lhowlett-d0.wrs.com (128.224.56.215) by ALA-HCA.corp.ad.wrs.com (147.11.189.50) with Microsoft SMTP Server (TLS) id 14.3.224.2; Tue, 16 Jun 2015 12:24:25 -0700 Date: Tue, 16 Jun 2015 15:24:23 -0400 From: "Liam R. Howlett" To: "Rifenbark, Scott M" Message-ID: <20150616192423.GL26078@yow-lhowlett-d0.wrs.com> References: <1429121824-31200-2-git-send-email-Liam.Howlett@WindRiver.com> <41DEA4B02DBDEF40A0F3B6D0DDB123798D203356@ORSMSX101.amr.corp.intel.com> <1FDE9321-AA20-49D9-A4BE-A4B4514439DB@gmail.com> <1946263.B0TEDLLAIC@peggleto-mobl.ger.corp.intel.com> <20150616134205.GG26078@yow-lhowlett-d0.wrs.com> <41DEA4B02DBDEF40A0F3B6D0DDB123798D203C80@ORSMSX101.amr.corp.intel.com> MIME-Version: 1.0 In-Reply-To: <41DEA4B02DBDEF40A0F3B6D0DDB123798D203C80@ORSMSX101.amr.corp.intel.com> User-Agent: Mutt/1.5.23 (2014-03-12) X-Originating-IP: [128.224.56.215] Cc: Paul Eggleton , "bitbake-devel@lists.openembedded.org" , Gary Thomas Subject: Re: [PATCH v3] fetch2: Add BB_ALLOWED_NETWORKS support X-BeenThere: bitbake-devel@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussion that advance bitbake development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2015 19:24:28 -0000 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline * Rifenbark, Scott M [150616 11:25]: > > > >-----Original Message----- > >From: Liam R. Howlett [mailto:Liam.Howlett@windriver.com] > >Sent: Tuesday, June 16, 2015 6:42 AM > >To: Paul Eggleton > >Cc: Bernhard Reutner-Fischer; Rifenbark, Scott M; Gary Thomas; bitbake- > >devel@lists.openembedded.org > >Subject: Re: [bitbake-devel] [PATCH v3] fetch2: Add > >BB_ALLOWED_NETWORKS support > > > >* Paul Eggleton [150616 04:40]: > >> On Monday 15 June 2015 23:47:29 Bernhard Reutner-Fischer wrote: > >> > On June 15, 2015 4:03:11 PM GMT+02:00, "Rifenbark, Scott M" > >> wrote: > >> > >Hi, > >> > > > >> > >Here is a first draft of documenting the BB_ALLOWED_NETWORKS > >> > >variable in the BitBake User Manual. I re-wrote the original text > >> > >to be active voice and applied some different organization of the > >> > >facts to help the flow out. Regarding Gary's input about > >> > >BB_NO_NETWORK..... I took a half guess at incorporating it. Please > >> > >look this new description over and let me know of any corrections I need > >to make. > >> > >http://www.yoctoproject.org/docs/1.9/bitbake-user-manual/bitbake-us > >> > >er-manua > >> > >l.html#var-BB_ALLOWED_NETWORKS. > > > >Hi, > > > >The documentation looks correct, however it might be worth noting that > >adding the host you'd like to use to PREMIRROR will result in the source code > >being fetched from an allowed location and avoid raising an error when a host > >that is not allowed is in a SRC_URI because the fetcher will not attempt to use > >the SRC_URI host after a successful fetch from the PREMIRROR. Using > >BB_ALLOWED_NETWORK in conjunction with PREMIRROR is where this > >feature is very useful. > > Check the link to the variable description out now Liam. Let me know if this addition is okay. This looks good! Thanks, Liam > > > > > > >> > Was the v3 fixed / extended to allow for netmasks, btw? > >> > Think > >> > /etc/hosts > >> > foo.example.com 10.0.0.1 > >> > bar.example.com 10.0.0.254 > >> > baz.example.com ::1 > >> > > >> > BB_ALLOWED_NETWORKS = 10.0.0.0/24 1.1.1.1/31 ::1/127 > >> > >> I don't believe so. You can see what actually went in here: > >> > >> http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=59ce7d02a57e > >> 0a642d839ab48677f6ac1886180f > >> > >> Cheers, > >> Paul > > > > > >There isn't netmask support, but you can achieve the same result in your > >example above by using BB_ALLOWED_NETWORKS = "*.example.com" > > > >Version 2 updated the host matching and added a few more tests. > > > >Version 3 changed the name from BB_TRUSTED_NETWORKS to > >BB_ALLOWED_NETWORKS. > > > > > >Thanks, > >Liam R. Howlett > > > >> > >> -- > >> > >> Paul Eggleton > >> Intel Open Source Technology Centre