From owner-freebsd-ports@freebsd.org Mon Jun 29 14:44:24 2015 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4696898F841 for ; Mon, 29 Jun 2015 14:44:24 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (mx3.absolight.net [IPv6:2a01:678:2:100::25]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "plouf.absolight.net", Issuer "CAcert Class 3 Root" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 0621E2134; Mon, 29 Jun 2015 14:44:24 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (localhost [127.0.0.1]) by prod2.absolight.net (Postfix) with ESMTP id 1539ABDC69; Mon, 29 Jun 2015 16:44:21 +0200 (CEST) Received: from gw.in.absolight.net (gw-ecl.in.absolight.net [79.143.241.69]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "gw.in.absolight.net", Issuer "CA Cert Signing Authority" (not verified)) by prod2.absolight.net (Postfix) with ESMTPSA id E18BDBDC64; Mon, 29 Jun 2015 16:44:20 +0200 (CEST) Received: from ogg.in.absolight.net (ogg.in.absolight.net [79.143.241.239]) by gw.in.absolight.net (Postfix) with ESMTP id E82406122; Mon, 29 Jun 2015 16:44:19 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by ogg.in.absolight.net (Postfix) with ESMTP id 7ECD78FCBF3; Mon, 29 Jun 2015 16:44:18 +0200 (CEST) Date: Mon, 29 Jun 2015 16:44:16 +0200 From: Mathieu Arnold To: Shane Ambler , Jonathan Anderson cc: freebsd-ports@freebsd.org Subject: Re: USE_GITHUB and submodules Message-ID: In-Reply-To: <5590A9CE.80208@ShaneWare.Biz> References: <555B84AA.30901@FreeBSD.org> <555BD95A.6010706@ShaneWare.Biz> <555C8C68.9060705@gmail.com> <555DD44E.5040405@FreeBSD.org> <5590A9CE.80208@ShaneWare.Biz> X-Mailer: Mulberry/4.0.8 (Mac OS X) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="==========225E8AA307342173FB90==========" X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jun 2015 14:44:24 -0000 --==========225E8AA307342173FB90========== Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Disposition: inline +--On 29 juin 2015 11:43:34 +0930 Shane Ambler wrote: |>> Jonathan Anderson |>> May 20, 2015 at 11:00 AM |>> Thanks everybody for the input! With a security hat on, I definitely |>> concur with the policy of no fetching outside of fetch and of requiring |>> reproducibility/verifiability (e.g., commit hashes). With my |>> getting-this-darn-port-updated hat, however... :) |>> |>> I think that I'll try to go with Shane's solution, if others concur |>> that it's a good idea. I don't want to create a rust-llvm port, since |>> Rust's customized version of LLVM isn't much good outside of Rust, it |>> doesn't expose any external libraries and it's intended to eventually |>> go away. So, until GitHub implements the "give me a tarball with all of |>> the submodules" feature, I might try hacking up MASTER_SITES as Shane |>> suggests. |>> | | In case you missed it this was changed shortly after the last email, see | http://leader/viewvc/viewvc.cgi/FreeBSD-ports?view=revision&revision=3877 | 42 It's going to be in the porter's handbook, waiting for approval on . -- Mathieu Arnold --==========225E8AA307342173FB90========== Content-Type: application/pgp-signature Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQJ8BAEBCgBmBQJVkVnBXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzQUI2OTc4OUQyRUQxMjEwNjQ0MEJBNUIz QTQ1MTZGMzUxODNDRTQ4AAoJEDpFFvNRg85Iq1UP+gOPSc+5pojVuGXz4KmBr7yX eivouY3Gf74mbDnhJPQMgBJcvEqTt4ZNfqdYLtSPe+ZsVsvMLsBDNNXAgd7i9JnQ 0fdkGys4A7/rJwA6GlM0rc5qr+FzQ1DCFt4x2xXUjOagHl3sxr6StAVoJBtvNja1 a3aEj5J4xGHnjhuTfNJCz0cP9pBWCRJwqTvzAAU0RcOJUkaRtlPmAlYNH3kKwsF7 hTMRXFmfswXeSsACi/GCcm5cy5e3NU77vKrGjx/cY4a6WgwkJyVoxLAYRyrwIX99 0WQawcC4o7S4kFiQ4K4VnkX0lGAHodqQpqxSN/1YeuIxfxRmjWDfOZllXxhh7tYn TktuC4+rWJsb8MP/Z2tcPs5V/YROvF1n5NF6szgy1JPF+HkWu7nHvMwr1DVdaIyL etyrFaxP0czGZTmyEyQQ2U+wvf/X8IkrRxOmQ+JGO1AP0P+cy2zWykYOUCv5M4Yz dueUUWrlHoQoW8AXW5SurO96zGmppvRtzG7BEeyoR2bBnKgGGSsvJIVJQbB74kii brSxQfcclYZqDT3LmelkQHmvtSKja/94jKygfhMo2VNxiPBTcPTDYt0tfD3/juMH Ucm14QJqibZmtKjFy2IzgsLo8c1K4EWxZ2GqqjwE+GkxctRRYTuy8GuXBhyfoEUb aBQTj897+Yp2AD6VFkdN =LAdY -----END PGP SIGNATURE----- --==========225E8AA307342173FB90==========--