From 9fcf4424d463e68715144a7857918c74815001d6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kai=20L=C3=BCke?= Date: Mon, 20 Jul 2020 23:14:49 +0200 Subject: [PATCH] sys-kernel/coreos-firmware: Change source URL to reliable mirror The caching git web view which was used as source location is not reliable because the cache can be corrupt, the gzip compression of the snapshot can change, and the cache is produced by the web server which is not there to give high security guarantees. We experienced cache corruption. Switch to the recommended mirror under https://mirrors.edge.kernel.org/pub/linux/kernel/firmware/ which also hosts signatures and not having the downsides mentioned above. This is a downstream change until upstream Gentoo changes the location. --- .../metadata/md5-cache/sys-kernel/coreos-firmware-20191022 | 4 ++-- .../coreos-overlay/sys-kernel/coreos-firmware/Manifest | 2 +- .../coreos-firmware/coreos-firmware-99999999.ebuild | 5 +---- 3 files changed, 4 insertions(+), 7 deletions(-) diff --git a/sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sys-kernel/coreos-firmware-20191022 b/sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sys-kernel/coreos-firmware-20191022 index 1023618967..9c7ef415d3 100644 --- a/sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sys-kernel/coreos-firmware-20191022 +++ b/sdk_container/src/third_party/coreos-overlay/metadata/md5-cache/sys-kernel/coreos-firmware-20191022 @@ -9,6 +9,6 @@ LICENSE=linux-firmware ( BSD ISC MIT no-source-code ) GPL-2 GPL-2+ RDEPEND=!savedconfig? ( !sys-firmware/alsa-firmware[alsa_cards_ca0132] !sys-firmware/alsa-firmware[alsa_cards_korg1212] !sys-firmware/alsa-firmware[alsa_cards_maestro3] !sys-firmware/alsa-firmware[alsa_cards_sb16] !sys-firmware/alsa-firmware[alsa_cards_ymfpci] !media-tv/cx18-firmware ! linux-firmware-20191022.tar.gz +SRC_URI=https://mirrors.edge.kernel.org/pub/linux/kernel/firmware/linux-firmware-20191022.tar.gz -> linux-firmware-20191022.tar.gz _eclasses_=eapi7-ver 756b3f27d8e46131d5cf3c51bd876446 linux-info c90a203b1c14cfa77bd3e37a0e96c955 multilib 1d91b03d42ab6308b5f4f6b598ed110e portability 2b88d3ecc35035a3b8ab628b49cafb0e savedconfig e6948c872ff47e15a10e5ad1be15c18e toolchain-funcs 8c7f9d80beedd16f2e5a7f612c609529 -_md5_=f070047ea5582d1e919d2a06aee75141 +_md5_=5e64d02b2c156edef4c723d0cd6fef90 diff --git a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-firmware/Manifest b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-firmware/Manifest index f0a611ac19..9ce0e256ff 100644 --- a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-firmware/Manifest +++ b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-firmware/Manifest @@ -1 +1 @@ -DIST linux-firmware-20191022.tar.gz 198935619 BLAKE2B 94d90a8e85af7104f08c398d3df20a88dc4d6f86d638565ab6e45e7fc5dff53e4e56a62a859585438812a1438ea7f7c4e4e47ce4adb22b0adf69439feb5803b4 SHA512 2cc99664c8d0275b670373581d7c6e29699f8b84cd6403949182cc1970c3241e5d9c388c34643630a237d87962b7c8e891445969ca9817ac92a4bbbe74e0dc0d +DIST linux-firmware-20191022.tar.gz 198407909 BLAKE2B 646f382da9400d1dfc7bbcd5779169e7cdb078551093286e007131515446e693cd1254033c7e83054883649f02981a26b30aa81473f20e0ea24c3b09edd7c3b9 SHA512 27037bc1583d39f075fc6273428e02ef80d696b93cdc195b3cf9ddcd9edad6cc83d01213cd8b764b3c74a64bf6b0612744b5f0af6e06072b7b93a05b6e1b8b6c diff --git a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-firmware/coreos-firmware-99999999.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-firmware/coreos-firmware-99999999.ebuild index f64c6fd2a8..9d198860b2 100644 --- a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-firmware/coreos-firmware-99999999.ebuild +++ b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-firmware/coreos-firmware-99999999.ebuild @@ -13,8 +13,7 @@ if [[ ${PV} == 99999999* ]]; then SRC_URI="" EGIT_REPO_URI="https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git" else - GIT_COMMIT="03dcc2219a339ca826f8966a9005d74dd88c8b26" - SRC_URI="https://git.kernel.org/cgit/linux/kernel/git/firmware/linux-firmware.git/snapshot/linux-firmware-${GIT_COMMIT}.tar.gz -> linux-firmware-${PV}.tar.gz" + SRC_URI="https://mirrors.edge.kernel.org/pub/linux/kernel/firmware/linux-firmware-${PV}.tar.gz -> linux-firmware-${PV}.tar.gz" KEYWORDS="alpha amd64 arm arm64 hppa ia64 mips ppc ppc64 s390 sh sparc x86" fi @@ -79,8 +78,6 @@ src_unpack() { git-r3_src_unpack else default - # rename directory from git snapshot tarball - mv linux-firmware-*/ linux-firmware-${PV} || die # upstream linux-firmware tarball does not create symlinks for # cxgb4 firmware files, but "modinfo cxgb4.ko" shows it requires