On 2/10/22 13:39, Adam Williamson wrote:
> On Thu, 2022-02-10 at 18:58 +0100, Zbigniew Jędrzejewski-Szmek wrote:
>> On Mon, Oct 18, 2021 at 10:33:59AM +0200, Kamil Dudka wrote:
>>> For example dracut, dnf, and rpm seem to use FTP:
>>>
>>>
https://git.kernel.org/pub/scm/boot/dracut/dracut.git/tree/modules.d/45ur...
>> Here dracut allows ftp://, by calling curl. If curl does not support
>> the protocol, this will fail… I think this is what we want.
>>
>> (BTW, I think the dracut repo on
git.kernel.org seems stale…
>>
https://github.com/dracutdevs/dracut has commits from this week, but
>>
kernel.org ends at 2021-05-27.)
>>
>>>
https://github.com/rpm-software-management/dnf/blob/f85cf313/dnf/repo.py#...
>> I think the story would be the same here: if an url with ftp:// was actually
>> configured somewhere, the download would fail. But I don't think we have
many
>> such urls...
>
> We aren't the only ones who set up repositories. Organizations which
> run Fedora and RHEL often have internal repositories, which may use
> FTP.
Could we add a warning that FTP is deprecated?
To be clear: this is for dracut and DNF, not in general. And it might
be a bad idea even in those cases.
--
Sincerely,
Demi Marie Obenour (she/her/hers)