Re: [poky] clarification on 'gitsm://' fetcher.

Mark Hatle <[email protected]>
Newsgroups org.yoctoproject.lists.poky
Message-ID <[email protected]>

On 2/16/24 2:32 AM, vishwanath Chandapur wrote:
> Hi
> 
> In recent grpc recipe has changed to gitsm:// from git:// because of which now 
> all submodules are downloaded even though all may not require.
> 
> My question not to grpc recipes but in general when a recipe uses gitstm may 
> have these two issues.
> 
> 1. Unnecessarily some of the submodules/packages have to be maintained in 
> localmirror even though it is not required.

In gitsm mode, where the .submodules file is used, how/who defines what is and 
isn't required?  As far as I know it's used or it's not.

To my knowledge, when you run git submodule, anything in .submodules is 
processed.  Thus they are all 'required'.  Move from gitsm:// to git:// says 
"I'm never going to use the .submodule file", and thus moves this ownership from 
the repository owner (.submodule file) to the recipe owner.

> 2. Most importantly, if a submodule/package is enabled by default internally, 
> the package will not appear in the final manifest file and miss out in the final 
> SBOM file.

If the submodules are not part of the SBOM, then it's a bug in the SBOM 
creation.  This is a separate issue, one that should be identified and fixed.

--Mark

> 
> Regards
> Vishwa
> 
> 
> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#13254): https://lists.yoctoproject.org/g/poky/message/13254
> Mute This Topic: https://lists.yoctoproject.org/mt/104389390/3616948
> Group Owner: [email protected]
> Unsubscribe: https://lists.yoctoproject.org/g/poky/unsub [[email protected]]
> -=-=-=-=-=-=-=-=-=-=-=-
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.