[jira] [Updated] (MESOS-3395) In CMake build system, download third party dependencies from a "trusted channel" instead of from Mesos GitHub mirror

["Alex Clemmer (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/MESOS-3395?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Clemmer updated MESOS-3395:
--------------------------------
    Component/s:     (was: build)
                 cmake

> In CMake build system, download third party dependencies from a "trusted channel" instead of from Mesos GitHub mirror
> ---------------------------------------------------------------------------------------------------------------------
>
>                 Key: MESOS-3395
>                 URL: https://issues.apache.org/jira/browse/MESOS-3395
>             Project: Mesos
>          Issue Type: Task
>          Components: cmake
>            Reporter: Alex Clemmer
>            Assignee: Alex Clemmer
>              Labels: build, cmake, mesosphere
>             Fix For: 0.25.0
>
>
> Right now in the `CMakeLists.txt` in `3rdparty/libprocess/3rdparty`, when we choose not to use the rebundled third-party dependencies, we download them from GitHub.
> The problem is, we download them from the GitHub Mesos mirror, so if we were to suddenly remove one (or change the version of one, or really any number of other things), CMake would break for people who aren't using the rebundled version.
> We should point these downloads at a "trusted channel" like the 3rdparty GitHub account (which we, the Mesos community, control).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)