From 082683da089115d8b6f71f221cabb41ac401f733 Mon Sep 17 00:00:00 2001 From: Paul Eggleton Date: Tue, 13 Apr 2021 19:00:08 -0700 Subject: bitbake-user-manual: document no support for using passwords in git URLs This is based on the comment added in revision aded964eed4ce5a725ed1ab477efabc86b1aa481. Signed-off-by: Paul Eggleton Signed-off-by: Richard Purdie --- doc/bitbake-user-manual/bitbake-user-manual-fetching.rst | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/doc/bitbake-user-manual/bitbake-user-manual-fetching.rst b/doc/bitbake-user-manual/bitbake-user-manual-fetching.rst index e9a5f336d..bd6cc0ef2 100644 --- a/doc/bitbake-user-manual/bitbake-user-manual-fetching.rst +++ b/doc/bitbake-user-manual/bitbake-user-manual-fetching.rst @@ -441,6 +441,15 @@ Here are some example URLs: :: SRC_URI = "git://git.oe.handhelds.org/git/vip.git;tag=version-1" SRC_URI = "git://git.oe.handhelds.org/git/vip.git;protocol=http" +.. note:: + + Specifying passwords directly in ``git://`` urls is not supported. + There are several reasons: ``SRC_URI`` is often written out to logs and + other places, and that could easily leak passwords; it is also all too + easy to share metadata without removing passwords. SSH keys, ``~/.netrc`` + and ``~/.ssh/config`` files can be used as alternatives. + + .. _gitsm-fetcher: Git Submodule Fetcher (``gitsm://``) -- cgit 1.2.3-korg