From bb9b2dbb072d1db9d10445c9cbb6681e204d9b5d Mon Sep 17 00:00:00 2001 From: Jason McKenna Date: Fri, 14 Dec 2018 14:11:12 -0500 Subject: [PATCH] Add go "dep" tool to support lockfiles in go pkgs The go compiler supports "go get" to download dependencies, but it will download the latest version of dependencies from the git repository of the dependency. This could lead to non-reproducable builds, or the potential of dependency API changes (including deprecated features) to break the build of packages. The "dep" tool allows for a lockfile to be created, which captures the git commit ID of dependencies, and can restore dependencies to the captured state. Since no binary package containing "dep" is currently available for CentOS, we need to build it from source. This change adds the source tarball download to the list of source tarballs to be downloaded. Change-Id: I0ff821d780326212a3fc4408a6225752c0e9a9f4 Story: 2004617 Task: 28525 Signed-off-by: Jason McKenna --- centos-mirror-tools/tarball-dl.lst | 1 + 1 file changed, 1 insertion(+) diff --git a/centos-mirror-tools/tarball-dl.lst b/centos-mirror-tools/tarball-dl.lst index cb2bd939..41beb2c7 100644 --- a/centos-mirror-tools/tarball-dl.lst +++ b/centos-mirror-tools/tarball-dl.lst @@ -2,6 +2,7 @@ dpkg_1.18.24.tar.xz#dpkg-1.18.24#http://http.debian.net/debian/pool/main/d/dpkg/ drbd-8.4.3.tar.gz#drbd-8.4.3#http://www.linbit.com/downloads/drbd/8.4/archive/drbd-8.4.3.tar.gz#http## drbd-8.4.7-1.tar.gz#drbd-8.4.7-1#http://www.linbit.com/downloads/drbd/8.4/drbd-8.4.7-1.tar.gz#http## dtc-1.4.4.tar.gz#dtc-1.4.4#https://www.kernel.org/pub/software/utils/dtc/dtc-1.4.4.tar.gz#http## +dep-v0.5.0.tar.gz#dep-v0.5.0#https://github.com/golang/dep/archive/v0.5.0.tar.gz#http## e1000e-3.4.1.1.tar.gz#e1000e-3.4.1.1#https://sourceforge.net/projects/e1000/files/e1000e%20stable/3.4.1.1/e1000e-3.4.1.1.tar.gz#http## gnulib-ffc927e.tar.gz#gnulib-ffc927e#http://git.savannah.gnu.org/cgit/gnulib.git/snapshot/gnulib-ffc927eef29016a5219cd969daad8928af6a1f4d.tar.gz#http## i40e-2.4.10.tar.gz#i40e-2.4.10#https://sourceforge.net/projects/e1000/files/i40e%20stable/2.4.10/i40e-2.4.10.tar.gz/download#http##