[yocto] [Yocto installation] Yocto installation on corporate environment

[germain]

Hi All,

I am looking for some feedback on yocto distribution installation and 
deployment into corporate environment.
The context is the following: We will receive a commercial yocto 
distribution from a third party in form of a CD/DVD every year with some 
cumulative patches every months. This distribution will be used by 
different projects within the company to make products

My concern is how to share/distribute this distribution with the 
following objectives:
  - Secure all dependencies on corporate network for product maintenance 
purpose
  - Easily access and installation of a given revision of the distribution
  - Control disk space and avoid each project to duplicate the 
distribution support
  - Avoid lock down effect on third-party proprietary installation mechanism

I though about the following possibilities
  1) Mirror all source code URLs including tarball delivery onto 
corporate network
   => very costly, need to support all reference type of version control 
system(Git, SVN, ....)
   => risk to miss mirroring one url
2) Put in source control (Git) the content of the "Downloads" directory 
create by yocto
   => single Git may be very heavy with lot of binaries
   => Split Git but need then to use something to manage the forest like 
google repo tool
3) Rely on docker image and create a new version of docker image for 
each new distribution revision
  => working on a shell inside the docker image may be not much easy 
since need to rely on external volumes to access user personal data or 
environment

Thanks in advance for your return
BR
Olivier