| Message ID | 20230323135026.1842186-2-nm@ti.com |
|---|---|
| State | Accepted |
| Delegated to: | Ryan Eatmon |
| Headers | show |
| Series | Stop using git:// urls | expand |
On Thu, Mar 23, 2023 at 08:50:25AM -0500, Nishanth Menon via lists.yoctoproject.org wrote: > We did this in meta-ti and meta-arago but didn't propagate back into > oe-layersetup yet so I'll give it a go. git:// is no longer functional > proxies over on latest git versions (example: poky crops container for > ubuntu 22.04[1]), also git:// is highly susceptible to man-in-the-middle > attacks[2]. Dump git:// in favor of https. Looks good to me, thanks. > [1] https://hub.docker.com/r/crops/poky/tags 22.04 > [2] https://github.blog/2021-09-01-improving-git-protocol-security-github/ > > Signed-off-by: Nishanth Menon <nm@ti.com> Reviewed-by: Denys Dmytriyenko <denys@konsulko.com> > --- > New patch in the series. > > sample-files/gitconfig.sample | 9 ++++++--- > 1 file changed, 6 insertions(+), 3 deletions(-) > > diff --git a/sample-files/gitconfig.sample b/sample-files/gitconfig.sample > index 2d06bdcd80b9..14533650a781 100644 > --- a/sample-files/gitconfig.sample > +++ b/sample-files/gitconfig.sample > @@ -3,14 +3,17 @@ > # See https://git-scm.com/docs/git-config for further information > # To debug, use GIT_CURL_VERBOSE=1 GIT_TRACE=1 > > -[url "git://git.yoctoproject.org/meta-arago"] > +[url "https://git.yoctoproject.org/meta-arago"] > insteadOf = git://arago-project.org/git/meta-arago > insteadOf = http://arago-project.org/git/meta-arago > + insteadOf = git://git.yoctoproject.org/meta-arago > > -[url "git://git.yoctoproject.org/meta-ti"] > +[url "https://git.yoctoproject.org/meta-ti"] > insteadOf = git://arago-project.org/git/meta-ti > insteadOf = http://arago-project.org/git/meta-ti > + insteadOf = git://git.yoctoproject.org/meta-ti > > -[url "git://git.ti.com/arago-project/oe-layersetup"] > +[url "https://git.ti.com/arago-project/oe-layersetup"] > insteadOf = git://arago-project.org/git/projects/oe-layersetup > insteadOf = http://arago-project.org/git/projects/oe-layersetup > + insteadOf = git://git.ti.com/arago-project/oe-layersetup > -- > 2.40.0
diff --git a/sample-files/gitconfig.sample b/sample-files/gitconfig.sample index 2d06bdcd80b9..14533650a781 100644 --- a/sample-files/gitconfig.sample +++ b/sample-files/gitconfig.sample @@ -3,14 +3,17 @@ # See https://git-scm.com/docs/git-config for further information # To debug, use GIT_CURL_VERBOSE=1 GIT_TRACE=1 -[url "git://git.yoctoproject.org/meta-arago"] +[url "https://git.yoctoproject.org/meta-arago"] insteadOf = git://arago-project.org/git/meta-arago insteadOf = http://arago-project.org/git/meta-arago + insteadOf = git://git.yoctoproject.org/meta-arago -[url "git://git.yoctoproject.org/meta-ti"] +[url "https://git.yoctoproject.org/meta-ti"] insteadOf = git://arago-project.org/git/meta-ti insteadOf = http://arago-project.org/git/meta-ti + insteadOf = git://git.yoctoproject.org/meta-ti -[url "git://git.ti.com/arago-project/oe-layersetup"] +[url "https://git.ti.com/arago-project/oe-layersetup"] insteadOf = git://arago-project.org/git/projects/oe-layersetup insteadOf = http://arago-project.org/git/projects/oe-layersetup + insteadOf = git://git.ti.com/arago-project/oe-layersetup
We did this in meta-ti and meta-arago but didn't propagate back into oe-layersetup yet so I'll give it a go. git:// is no longer functional proxies over on latest git versions (example: poky crops container for ubuntu 22.04[1]), also git:// is highly susceptible to man-in-the-middle attacks[2]. Dump git:// in favor of https. [1] https://hub.docker.com/r/crops/poky/tags 22.04 [2] https://github.blog/2021-09-01-improving-git-protocol-security-github/ Signed-off-by: Nishanth Menon <nm@ti.com> --- New patch in the series. sample-files/gitconfig.sample | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-)