On Fri, Sep 02, 2011, Zach Pfeffer wrote:
repo bootstraps itself by syncing the repo guts from google, google signs the repo guts so that people know that they're using a trusted source. As our repo in not a trusted source, people may be reluctant to use it and will instead use Google's version which won't work 100% of the time for the reasons already discussed.
I think there's an env var to disable the auto-update of repo; we could set it in our instructions or in build wrappers, and/or we could patch repo to update itself from linaro.org instead.