mirror of
https://git.yoctoproject.org/poky
synced 2026-06-02 13:29:49 +00:00
migration-3.5: mention task specific network access
(From yocto-docs rev: d8573e8a36eef61be1c9e7706c38ed28ca4c9962) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
f299005d66
commit
e4e58669f0
@@ -22,6 +22,18 @@ Recipe changes
|
|||||||
recipes now need to use ``;protocol=https`` at the end of GitHub
|
recipes now need to use ``;protocol=https`` at the end of GitHub
|
||||||
URLs. The same script as above can be used to convert the recipes.
|
URLs. The same script as above can be used to convert the recipes.
|
||||||
|
|
||||||
|
- Network access from tasks is now disabled by default on kernels which support
|
||||||
|
this feature (on most recent distros such as CentOS 8 and Debian 11 onwards).
|
||||||
|
This means that tasks accessing the network need to be marked as such with the ``network``
|
||||||
|
flag. For example::
|
||||||
|
|
||||||
|
do_mytask[network] = "1"
|
||||||
|
|
||||||
|
This is allowed by default from ``do_fetch`` but not from any of our other standard
|
||||||
|
tasks. Recipes shouldn't be accessing the network outside of ``do_fetch`` as it
|
||||||
|
usually undermines fetcher source mirroring, image and licence manifests, software
|
||||||
|
auditing and supply chain security.
|
||||||
|
|
||||||
- The :term:`TOPDIR` variable and the current working directory are no longer modified
|
- The :term:`TOPDIR` variable and the current working directory are no longer modified
|
||||||
when parsing recipes. Any code depending on that behaviour will no longer work.
|
when parsing recipes. Any code depending on that behaviour will no longer work.
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user