firefox and builders...

[Michael Shigorin]

On Mon, Jun 03, 2019 at 08:19:42AM +0200, Jacek Konieczny wrote:
> On 03/06/2019 07.25, Jan Rękorajski wrote>
> > I don't believe it's nodejs problem, I think it's builder
> > security/networking problem.
> But the security/networking restrictions are there for a reason. If we
> allow build process to download anything it wants, then we could skip
> shipping source packages at all.

It's about reproducibility as well.

> Yes it sucks in today's world, especially when trying to build something
> like Node or Java crap. Proper source packages are harder and harder to
> find, even for C code (e.g. when code is available only on github and
> includes submodules)…

We tend to fix tags at least, submodules is a major hassle indeed...

> Maybe we should rethink our policy…, but just removing the restrictions
> because one package stopped to build doesn't seem a right way to do it.

ALT is building its repos without network access, maybe
some patches or approaches will be reuseful to you too.

In particular, fx67 has just landed:
https://packages.altlinux.org/en/sisyphus/srpms/firefox

I'm not into nodejs but it's sort of there too:
https://packages.altlinux.org/en/sisyphus/srpms/node
https://packages.altlinux.org/en/search?query=nodejs

-- 
 ---- WBR, Michael Shigorin / http://altlinux.org
  ------ http://opennet.ru / http://anna-news.info