Re: network access during package build (was Re: Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows))

2014-09-02 Thread Adam Borowski
On Tue, Sep 02, 2014 at 01:28:13PM +0200, Thorsten Glaser wrote: > On Mon, 1 Sep 2014, Adam Borowski wrote: > > > Also, should we detect all other attempts to contact the outside network, > > and swat such builds with extreme prejudice? > > Yes. These can be privacy breeches, licence violations (

network access during package build (was Re: Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows))

2014-09-02 Thread Thorsten Glaser
On Mon, 1 Sep 2014, Adam Borowski wrote: > Also, should we detect all other attempts to contact the outside network, > and swat such builds with extreme prejudice? Yes. These can be privacy breeches, licence violations (download things that change what gets embedded into the packages), and all ot

Re: Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows)

2014-09-01 Thread Adam Borowski
On Sun, Aug 31, 2014 at 10:43:20PM +0200, Jakub Wilk wrote: > * Philipp Kern , 2014-08-31, 12:09: > >>Packages must mot access outside world at the build time. > > > >This is not enforced yet, though, > > It's now enforced in pbuilder. Also in Jakub's sbuild. :-P > I believe that it's indeed not e

Re: Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows)

2014-09-01 Thread Ansgar Burchardt
On 09/01/2014 17:55, Colin Watson wrote: > On Sun, Aug 31, 2014 at 10:43:20PM +0200, Jakub Wilk wrote: >> So yeah, d-i can't be built automatically without access to a >> mirror. Which is a bug, and not an easy one to fix. > > What is actually technically wrong with this? To build packages, you >

Re: Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows)

2014-09-01 Thread Colin Watson
On Sun, Aug 31, 2014 at 10:43:20PM +0200, Jakub Wilk wrote: > * Philipp Kern , 2014-08-31, 12:09: > >and might actually be different if we are talking about mirror > >accesses. For instance d-i also builds that way if I don't > >misremember. (Specifying a fallback mirror, though, I guess, which > >

Re: Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows)

2014-08-31 Thread Jakub Wilk
* Philipp Kern , 2014-08-31, 12:09: I'm packaging this to allow Python to build its Windows executables, and also to test Colin Watson's idea of using apt-get during builds in lieu of full-blown source build-dependencies. You can't do that. Packages must mot access outside world at the build ti

Re: Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows)

2014-08-31 Thread Philipp Kern
On 2014-08-31 10:10, Jakub Wilk wrote: * Stephen Kitt , 2014-08-30, 03:55: I'm packaging this to allow Python to build its Windows executables, and also to test Colin Watson's idea of using apt-get during builds in lieu of full-blown source build-dependencies. You can't do that. Packages must m

Re: Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows)

2014-08-31 Thread Jakub Wilk
* Stephen Kitt , 2014-08-30, 03:55: I'm packaging this to allow Python to build its Windows executables, and also to test Colin Watson's idea of using apt-get during builds in lieu of full-blown source build-dependencies. You can't do that. Packages must mot access outside world at the build

Bug#759762: ITP: libz-mingw-w64 -- compression library (targeting Windows)

2014-08-29 Thread Stephen Kitt
Package: wnpp Severity: wishlist Owner: Stephen Kitt * Package name: libz-mingw-w64 Version : 1.2.8 Upstream Author : Jean-loup Gailly and Mark Adler * URL : http://www.gzip.org/zlib/ * License : zlib Programming Lang: C Description : compression librar