Bureaucrats, dave_user, Administrators
8,221
edits
Changes
no edit summary
{{AppliesToAXEL Lite TN}}
{{AppliesToAXEL ULite TN}}
{{AppliesTo ORCA TN}}
{{AppliesTo MITO 8M Mini TN}}
{{AppliesToBORA TN}}
{{AppliesToBORA Xpress TN}}
''We’re changing which keys are supported in SSH and removing unencrypted Git protocol. Only users connecting via SSH or git:// will be affected. If your Git remotes start with https://, nothing in this post will affect you. If you’re an SSH user, read on for the details and timeline.''
Since March 15, 2022 unencrypted git protocol has been disabled:
[[File:Git_protocol_security_on_GitHub.png | center|600px]]
This is already applied in DAVE BSPs published after March 2022 but older BSPs, published prior this change, may need to be fixed manually to use ssh instead of <code>git://</code> to access some repositories
== BSP repo Manifest ==
DAVE Yocto BSPs uses [https://gerrit.googlesource.com/git-repo/ repo] to track the multiple layers required to setup the BSP itself . If <code>git</code> protocol is used to clone some these layers, user will encounter the above issue.
Here there is an example using the {{OldRevision|page=DESK-MX6-L/Development/Building the Yocto BSP|revision=14300|text=DESK-MX6-L-1.0.0}}page instructions for building the overall BSP while fixing the manifest
</pre>
To be precise the <code>diff</code> between the two releases is:<syntaxhighlight lang="diff">
diff --git a/default.xml b/default.xml
index f4d7443..1a4d7fb 100644
Usually <code>https</code> protocol is used for this, but in some cases <code>SRC_URI</code> may need to be updated if plain <code>git</code> protocol is used (and if the git server implements GitHub like security policies)
== Workaround ==
As an workaround for the <code><nowiki>git://github.com/</nowiki></code> access, it is possible to replace the ''git'' protocol to ''https'' using the [https://git-scm.com/docs/git-config#Documentation/git-config.txt-urlltbasegtinsteadOf git configuration] command:
<pre>
<nowiki>
git config --global url."https://github.com/".insteadOf git://github.com/
</nowiki>
</pre>
See more info [https://stackoverflow.com/questions/1722807/how-to-convert-git-urls-to-http-urls here]
