[
https://issues.apache.org/jira/browse/CASSANDRA-20678?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17954053#comment-17954053
]
Michael Semb Wever commented on CASSANDRA-20678:
------------------------------------------------
[~maoling], fyi.
> Remove auto-installation of golang when generating native protocol doc pages
> ----------------------------------------------------------------------------
>
> Key: CASSANDRA-20678
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20678
> Project: Apache Cassandra
> Issue Type: Task
> Components: Build, Documentation
> Reporter: Michael Semb Wever
> Assignee: Michael Semb Wever
> Priority: Normal
> Fix For: 5.0.x, 5.x
>
> Attachments: ci_summary_thelastpickle_mck-20678-5.0_246.html,
> results_details_thelastpickle_mck-20678-5.0_246.tar.xz
>
>
> CASSANDRA-19915 introduced the cqlprotodoc tool to auto-generate our native
> protocol doc pages. We use this tool in-tree in
> {{doc/scripts/process-native-protocol-specs-in-docker.sh}}
> The cqlprotodoc tool uses golang, and the original patch (and improvement in
> CASSANDRA-20422) auto-downloads and installs golang.
> This is a security risk and: even with due checksumming of downloaded
> artefacts in place; is to removed. The installation of tools/languages in
> the build process also introduces pain-points for downstream users in
> corporate environments.
> ML discussion:
> https://lists.apache.org/thread/24gcf4nyh8mjvjllnnx8tj85252gn3ro
> The agreement is to remove the auto-download/install, and to hard fail when
> go is not available, also providing information in the failure message on how
> the gen-doc ant command can be skipped.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
