Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 20 Nov 2014 14:44:56 -0500
From: Jill Tyrell <jt@...dlytowers.org>
To: sabotage@...ts.openwall.com
Subject: Re: Packages with bad URL like github

This is a known problem, yes. This is the suggested workaround:

1. Check that BUTCH_DOWNLOAD_TEMPLATE is defined in /src/config:

export BUTCH_DOWNLOAD_TEMPLATE="$K/butch_download_template.txt"

(It should be, but older systems may not have this set.)

2. Install curl, which will also pull in libressl, ca-certificates and zlib.

3. Add 'USE_CURL=1' to your shell environment.

I feel curl should be added to /src/pkg/stage1 and that wget support be 
dropped entirely or punted over to USE_WGET, myself.

On 11/20/14 1:45 PM, Henrique Lengler wrote:
> Hi,
>
> There is some packages I want add that don't have a simple way to
> get it that is supported by busybox wget.
> For example the github links that a lot of developers use, and some
> of them do worse, they don't publish a version so the only way to get
> is cloning the repo, wich isn't safe.
>
> Don't think we need a workaround, mainly to support those https://?
> Some easy solution would be change butch to optionally use another tool
> to download the tarballs, tha have better support.
>

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ