firefox and builders...
mike at altlinux.org
Mon Jun 3 12:55:55 CEST 2019
On Mon, Jun 03, 2019 at 08:19:42AM +0200, Jacek Konieczny wrote:
> On 03/06/2019 07.25, Jan Rękorajski wrote>
> > I don't believe it's nodejs problem, I think it's builder
> > security/networking problem.
> But the security/networking restrictions are there for a reason. If we
> allow build process to download anything it wants, then we could skip
> shipping source packages at all.
It's about reproducibility as well.
> Yes it sucks in today's world, especially when trying to build something
> like Node or Java crap. Proper source packages are harder and harder to
> find, even for C code (e.g. when code is available only on github and
> includes submodules)…
We tend to fix tags at least, submodules is a major hassle indeed...
> Maybe we should rethink our policy…, but just removing the restrictions
> because one package stopped to build doesn't seem a right way to do it.
ALT is building its repos without network access, maybe
some patches or approaches will be reuseful to you too.
In particular, fx67 has just landed:
I'm not into nodejs but it's sort of there too:
---- WBR, Michael Shigorin / http://altlinux.org
------ http://opennet.ru / http://anna-news.info
More information about the pld-devel-en