Skip to contentSkip to conversation

Use lynis download link from github releases

PATCH NAK Stefan Lendl 3 participants 3 messages Nov 15, 2018

lore
Share & tools
lore

Stefan Lendl

author
#0 lore raw

PATCH 1/1 Use lynis download link from github releases

Unlike the official download page, it also works for older releases

Signed-off-by Stefan Lendl <[email protected]>
---
 meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)
meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb +4 -4
index c25b804..1ee71ef 100644
@@ -6,12 +6,12 @@ HOMEDIR = "https://cisofy.com/"
 LICENSE = "GPL-3.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=3edd6782854304fd11da4975ab9799c1"
 
-SRC_URI = "https://cisofy.com/files/${BPN}-${PV}.tar.gz"
+SRC_URI = "https://github.com/CISOfy/lynis/archive/${PV}.tar.gz"
 
-SRC_URI[md5sum] = "5b9da89c616344bbc73cbc5688a4a0bd"
-SRC_URI[sha256sum] = "7a09c6fc71c65d572ca702df7b4394d71f9037484062ef71b76f59a2c498b029"
+SRC_URI[md5sum] = "f91840acc0801b77844363fc55c5d688"
+SRC_URI[sha256sum] = "e143eaefec3222f98a0f74dd6dcb3818aa348dea3d0379bd3a45455911b6ee2a"
 
-S = "${WORKDIR}/${BPN}"
+S = "${WORKDIR}/${BPN}-${PV}"
 
 inherit autotools-brokensep
Signature · 1 line
2.14.5
NAK
#1 lore raw

meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb HOMEDIR = "https://cisofy.com/" · line 9

Quoted 2 lines · Stefan Lendl
meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb +1 -1
-SRC_URI = "https://cisofy.com/files/${BPN}-${PV}.tar.gz"
+SRC_URI = "https://github.com/CISOfy/lynis/archive/${PV}.tar.gz"

NAK.

Those tarballs are generated on demand by github so over time *will* change. If they don't host generated tarballs (similar URL but the filename isn't the tag name) then the only alternative is to use the git fetcher.

Ross

#2 lore raw
In reply to Stefan Lendl
Quoted 15 lines · On Thu, Nov 15, 2018, 8:29 AM Stefan Lendl <[email protected] wrote:

Unlike the official download page, it also works for older releases

Signed-off-by Stefan Lendl <[email protected]>
---
 meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb | 8
++++----
 1 file changed, 4 insertions(+), 4 deletions(-)
(quoted diff) +0 -0

lynis_2.5.1.bb b/meta-security-compliance/recipes-auditors/lynis/ lynis_2.5.1.bb
index c25b804..1ee71ef 100644

meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb HOMEDIR = "https://cisofy.com/" · line 10

Quoted 6 lines
meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb +1 -1
@@ -6,12 +6,12 @@ HOMEDIR = "https://cisofy.com/"
 LICENSE = "GPL-3.0"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=3edd6782854304fd11da4975ab9799c1"
 
-SRC_URI = "https://cisofy.com/files/${BPN}-${PV}.tar.gz"
+SRC_URI = "https://github.com/CISOfy/lynis/archive/${PV}.tar.gz"

Using the archive links from GitHub in the past has caused problems because the checksums change. I think most other recipes use the git fetcher and specify the sha1 that corresponds to the release.

Quoted 21 lines
meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb +0 -2
-SRC_URI[md5sum] = "5b9da89c616344bbc73cbc5688a4a0bd"
-SRC_URI[sha256sum] =

"7a09c6fc71c65d572ca702df7b4394d71f9037484062ef71b76f59a2c498b029"

meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb +2 -0
+SRC_URI[md5sum] = "f91840acc0801b77844363fc55c5d688"
+SRC_URI[sha256sum] =

"e143eaefec3222f98a0f74dd6dcb3818aa348dea3d0379bd3a45455911b6ee2a"

meta-security-compliance/recipes-auditors/lynis/lynis_2.5.1.bb +1 -2
-S = "${WORKDIR}/${BPN}"
+S = "${WORKDIR}/${BPN}-${PV}"
 
 inherit autotools-brokensep
 
--

2.14.5

--
_______________________________________________
yocto mailing list
[email protected]
https://lists.yoctoproject.org/listinfo/yocto