opkg fetches using a cgit snapshot of a tag, which is not reproducible as
the tag could move, not reliable as a future dynamic snapshot could have
a different checksum, and a waste of CPU load as these tarballs are built
on demand.

Switch opkg to use a proper git clone of the relevant SHA.

Signed-off-by: Ross Burton <ross.bur...@arm.com>
---
 meta/recipes-devtools/opkg/opkg_0.6.0.bb | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/meta/recipes-devtools/opkg/opkg_0.6.0.bb 
b/meta/recipes-devtools/opkg/opkg_0.6.0.bb
index 4cd589cd29e..f9e5073ba5d 100644
--- a/meta/recipes-devtools/opkg/opkg_0.6.0.bb
+++ b/meta/recipes-devtools/opkg/opkg_0.6.0.bb
@@ -12,13 +12,15 @@ DEPENDS = "libarchive"
 
 PE = "1"
 
-SRC_URI = 
"http://downloads.yoctoproject.org/releases/${BPN}/${BPN}-${PV}.tar.gz \
+SRC_URI = "git://git.yoctoproject.org/opkg;protocol=https;branch=master \
            file://opkg.conf \
            
file://0001-opkg_conf-create-opkg.lock-in-run-instead-of-var-run.patch \
            file://run-ptest \
 "
 
-SRC_URI[sha256sum] = 
"56844722eff237daf14aa6e681436f3245213c5590ed0cda37a79df637ff3a4c"
+SRCREV = "9007789c18f70bc9f315a566c589231ef0a2e6fa"
+
+S = "${WORKDIR}/git"
 
 # This needs to be before ptest inherit, otherwise all ptest files end packaged
 # in libopkg package if OPKGLIBDIR == libdir, because default
-- 
2.34.1

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#171502): 
https://lists.openembedded.org/g/openembedded-core/message/171502
Mute This Topic: https://lists.openembedded.org/mt/94157332/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to