Setup a Yocto sources mirror to alleviate long download times
Description
Building oniro-image-base
on supported Oniro targets takes a very long time for the first time due to long download times for component sources from the various source forges.
Besides, it is a good idea to have a mirror of white-listed
sources that Oniro depends on from a supply-chain availability point of view.
There are two possible approaches:
- A transparent proxy setup similar to
squid-deb-proxy-server
that mirrors any package that is requested by users building Oniro-based projects. - A CI-based job that updates the mirror with any missing files, possibly based on some whitelist rules that IP compliance team could help put together.
The second approach is probably simpler to setup and has less liability issues in case of mirroring files.