-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 01-07-10 16:55, Enrico Scholz wrote: > Graham Gower <[email protected]> writes: > >> None of the distros in OE > > At least the openmoko SHR distribution fetches ipkg from network and > requires curl support hence.
That's not true, with curl disabled, it calls (busybox) wget. >> appear to want/need gpg or curl support in opkg; so have opkg.inc >> remove them by default. > > I do not think that supporting only offline mode (due to removal of > curl support) is a good idea. Although the opportunistic signature > verification is not secure, it would be imo bad to remove gpg support > completely because updating embedded devices in a secure manner is > important. > > A better way might be to conditionalize your '--disable-*' options > resp. make them depend on some DISTRO_FEATURE. Introducing USE flags would be a step backwards, so NAK on that. regards, Koen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iD8DBQFMLK4oMkyGM64RGpERAi1LAJ92At87I57tSF/kRSlR+JAkGThQTACguKBy JqkzXKxs4DLPWSbAtSTxqIc= =RGMg -----END PGP SIGNATURE----- _______________________________________________ Openembedded-devel mailing list [email protected] http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-devel
