firefox and builders...

Michael Shigorin mike at
Mon Jun 3 12:55:55 CEST 2019

On Mon, Jun 03, 2019 at 08:19:42AM +0200, Jacek Konieczny wrote:
> On 03/06/2019 07.25, Jan Rękorajski wrote>
> > I don't believe it's nodejs problem, I think it's builder
> > security/networking problem.
> But the security/networking restrictions are there for a reason. If we
> allow build process to download anything it wants, then we could skip
> shipping source packages at all.

It's about reproducibility as well.

> Yes it sucks in today's world, especially when trying to build something
> like Node or Java crap. Proper source packages are harder and harder to
> find, even for C code (e.g. when code is available only on github and
> includes submodules)…

We tend to fix tags at least, submodules is a major hassle indeed...

> Maybe we should rethink our policy…, but just removing the restrictions
> because one package stopped to build doesn't seem a right way to do it.

ALT is building its repos without network access, maybe
some patches or approaches will be reuseful to you too.

In particular, fx67 has just landed:

I'm not into nodejs but it's sort of there too:

 ---- WBR, Michael Shigorin /
  ------ /

More information about the pld-devel-en mailing list