On Wed, 04 Oct 2017 at 17:05:03 +0530, Pirate Praveen wrote:
> As these packages are always uploaded as binary included and never built
> on the buildd (as buildds already prohibit network access during build).
As far as I'm aware, they currently don't. Policy says it would be valid
if they did, and some derivatives and unofficial rebuilds actually do
so, but the "real" Debian buildds allow network access because otherwise
debian-installer wouldn't work. (This is a known and long-standing Policy
violation, but nobody is sure how else to make d-i builds work, and at
least they only download known-good files from Debian infrastructure;
d-i is a really weird package anyway.)
You and your team know that these packages are always uploaded with
binaries included, but NMU/QA uploaders don't necessarily; so you can't
assert that they will never be built on buildds.
smcv
