Github user evans-ye commented on a diff in the pull request:

    https://github.com/apache/bigtop/pull/358#discussion_r211061897
  
    --- Diff: bigtop-packages/src/common/ignite-hadoop/do-component-build ---
    @@ -21,4 +21,30 @@ set -ex
     export MAVEN_OPTS="-Xmx512M"
     
     sed -i '/asm-all/{n;s/4.2/5.0.2/}' modules/hadoop/pom.xml
    +
    +if [ "$HOSTTYPE" != "x86_64" ] ; then
    +    # download ignite-shmem from maven central
    +    mvn dependency:get 
-DremoteRepositories=https://repo1.maven.org/maven2/ -DgroupId=org.gridgain 
-DartifactId=ignite-shmem -Dversion=1.0.0
    +    mkdir tmp-build
    +    cd tmp-build
    +    # download source jar
    +    wget 
https://repo1.maven.org/maven2/org/gridgain/ignite-shmem/1.0.0/ignite-shmem-1.0.0-sources.jar
    --- End diff --
    
    @oflebbe yup downloading from the same remote seems no much help to 
security. I think having the .asc file content hard-coded in our code base 
should be OK. 


---

Reply via email to