Alex Clemmer created MESOS-3395:
-----------------------------------

             Summary: In CMake build system, download third party dependencies 
from a "trusted channel" instead of from Mesos GitHub mirror
                 Key: MESOS-3395
                 URL: https://issues.apache.org/jira/browse/MESOS-3395
             Project: Mesos
          Issue Type: Task
          Components: build
            Reporter: Alex Clemmer
            Assignee: Alex Clemmer


Right now in the `CMakeLists.txt` in `3rdparty/libprocess/3rdparty`, when we 
choose not to use the rebundled third-party dependencies, we download them from 
GitHub.

The problem is, we download them from the GitHub Mesos mirror, so if we were to 
suddenly remove one (or change the version of one, or really any number of 
other things), CMake would break for people who aren't using the rebundled 
version.

We should point these downloads at a "trusted channel" like the 3rdparty GitHub 
account (which we, the Mesos community, control).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to