| 1 |
On 3/31/20 8:48 PM, Samuel Bernardo wrote: |
| 2 |
> |
| 3 |
> My question started with the network sandbox issue when we need to load |
| 4 |
> external code dependencies. For example, a go project will download all |
| 5 |
> dependencies from git repositories that will happen after src_unpack. In |
| 6 |
> this case I need to add an additional tar.gz with that code along with |
| 7 |
> the software release tar.gz. |
| 8 |
> That additional tar.gz needs to be stored somewhere and as I understand |
| 9 |
> local mirror could be the right place. |
| 10 |
|
| 11 |
Normally we don't bundle dependencies, avoiding that problem entirely. |
| 12 |
The Go eclasses however are badly designed, committed against protest by |
| 13 |
paid corporate interests, and serve only to facilitate large-scale |
| 14 |
copyright infringement and security vulnerabilities. If you're looking |
| 15 |
for a consistent explanation of how they're supposed to work with the |
| 16 |
rest of Gentoo, you won't find one. |
Archives