Alex Clemmer created MESOS-3395: ----------------------------------- Summary: In CMake build system, download third party dependencies from a "trusted channel" instead of from Mesos GitHub mirror Key: MESOS-3395 URL: https://issues.apache.org/jira/browse/MESOS-3395 Project: Mesos Issue Type: Task Components: build Reporter: Alex Clemmer Assignee: Alex Clemmer
Right now in the `CMakeLists.txt` in `3rdparty/libprocess/3rdparty`, when we choose not to use the rebundled third-party dependencies, we download them from GitHub. The problem is, we download them from the GitHub Mesos mirror, so if we were to suddenly remove one (or change the version of one, or really any number of other things), CMake would break for people who aren't using the rebundled version. We should point these downloads at a "trusted channel" like the 3rdparty GitHub account (which we, the Mesos community, control). -- This message was sent by Atlassian JIRA (v6.3.4#6332)