[MacPorts] #67161: ipmitool @1.8.19: fetches a file at build time

[MacPorts]

#67161: ipmitool @1.8.19: fetches a file at build time
------------------------+----------------------
 Reporter:  ryandesign  |      Owner:  drkp
     Type:  defect      |     Status:  assigned
 Priority:  Normal      |  Milestone:
Component:  ports       |    Version:  2.8.1
 Keywords:              |       Port:  ipmitool
------------------------+----------------------
 The ipmitool build system downloads the URL
 http://www.iana.org/assignments/enterprise-numbers.txt and installs it as
 /opt/local/share/misc/enterprise-numbers. This means the port's build is
 not [ReproducibleBuilds reproducible]: somebody who installs the port
 today won't necessarily get the same software as if they install it next
 week, if the contents of that URL change by then. It also means the
 successful build of the port is at the mercy of a third-party web site,
 whose structure could change; see #67156 where this did happen.

 The solution, as always, is for the portfile to specify all of the files
 it needs, along with their checksums, and for the build system to use the
 file MacPorts fetched rather than fetching its own copy. The port's
 revision should be increased, and the checksums updated, whenever the
 upstream URL changes. The URL is [PortfileRecipes#unversioned-distfiles
 unversioned], which presents a set of surmountable challenges. A method
 such as the one employed by the curl-ca-bundle port could be used. I can
 make these changes to the ipmitool Portfile if you agree with the idea.

-- 
Ticket URL: <https://trac.macports.org/ticket/67161>
MacPorts <https://www.macports.org/>
Ports system for macOS