Add go "dep" tool to support lockfiles in go pkgs
The go compiler supports "go get" to download dependencies, but it will download the latest version of dependencies from the git repository of the dependency. This could lead to non-reproducable builds, or the potential of dependency API changes (including deprecated features) to break the build of packages. The "dep" tool allows for a lockfile to be created, which captures the git commit ID of dependencies, and can restore dependencies to the captured state. Since no binary package containing "dep" is currently available for CentOS, we need to build it from source. This change adds the source tarball download to the list of source tarballs to be downloaded. Change-Id: I0ff821d780326212a3fc4408a6225752c0e9a9f4 Story: 2004617 Task: 28525 Signed-off-by: Jason McKenna <jason.mckenna@windriver.com>
This commit is contained in:
parent
5e28cda208
commit
bb9b2dbb07
|
@ -2,6 +2,7 @@ dpkg_1.18.24.tar.xz#dpkg-1.18.24#http://http.debian.net/debian/pool/main/d/dpkg/
|
|||
drbd-8.4.3.tar.gz#drbd-8.4.3#http://www.linbit.com/downloads/drbd/8.4/archive/drbd-8.4.3.tar.gz#http##
|
||||
drbd-8.4.7-1.tar.gz#drbd-8.4.7-1#http://www.linbit.com/downloads/drbd/8.4/drbd-8.4.7-1.tar.gz#http##
|
||||
dtc-1.4.4.tar.gz#dtc-1.4.4#https://www.kernel.org/pub/software/utils/dtc/dtc-1.4.4.tar.gz#http##
|
||||
dep-v0.5.0.tar.gz#dep-v0.5.0#https://github.com/golang/dep/archive/v0.5.0.tar.gz#http##
|
||||
e1000e-3.4.1.1.tar.gz#e1000e-3.4.1.1#https://sourceforge.net/projects/e1000/files/e1000e%20stable/3.4.1.1/e1000e-3.4.1.1.tar.gz#http##
|
||||
gnulib-ffc927e.tar.gz#gnulib-ffc927e#http://git.savannah.gnu.org/cgit/gnulib.git/snapshot/gnulib-ffc927eef29016a5219cd969daad8928af6a1f4d.tar.gz#http##
|
||||
i40e-2.4.10.tar.gz#i40e-2.4.10#https://sourceforge.net/projects/e1000/files/i40e%20stable/2.4.10/i40e-2.4.10.tar.gz/download#http##
|
||||
|
|
Loading…
Reference in New Issue