mirror of
https://git.yoctoproject.org/poky
synced 2026-04-19 06:32:13 +02:00
migration-3.5: mention task specific network access
(From yocto-docs rev: d8573e8a36eef61be1c9e7706c38ed28ca4c9962) Signed-off-by: Michael Opdenacker <michael.opdenacker@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
f299005d66
commit
e4e58669f0
@@ -22,6 +22,18 @@ Recipe changes
|
||||
recipes now need to use ``;protocol=https`` at the end of GitHub
|
||||
URLs. The same script as above can be used to convert the recipes.
|
||||
|
||||
- Network access from tasks is now disabled by default on kernels which support
|
||||
this feature (on most recent distros such as CentOS 8 and Debian 11 onwards).
|
||||
This means that tasks accessing the network need to be marked as such with the ``network``
|
||||
flag. For example::
|
||||
|
||||
do_mytask[network] = "1"
|
||||
|
||||
This is allowed by default from ``do_fetch`` but not from any of our other standard
|
||||
tasks. Recipes shouldn't be accessing the network outside of ``do_fetch`` as it
|
||||
usually undermines fetcher source mirroring, image and licence manifests, software
|
||||
auditing and supply chain security.
|
||||
|
||||
- The :term:`TOPDIR` variable and the current working directory are no longer modified
|
||||
when parsing recipes. Any code depending on that behaviour will no longer work.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user