Gentoo Archives: gentoo-dev

From: "Robin H. Johnson" <robbat2@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] network sandbox challenge
Date: Fri, 27 Mar 2020 03:03:29
Message-Id: robbat2-20200327T030158-601606302Z@orbis-terrarum.net
In Reply to: [gentoo-dev] network sandbox challenge by Samuel Bernardo
1 On Fri, Mar 27, 2020 at 01:16:43AM +0000, Samuel Bernardo wrote:
2 > Dear all,
3 >
4 > Fulfilling the linting of ebuild code style design for software projects
5 > that loads their dependencies during build, such as go based projects or
6 > npm as an example, could be very nasty.
7 >
8 > Looking into source code of snapd or opennebula as two examples, I need
9 > to break network sandbox to get all dependencies for snapd go modules or
10 > opennebula sunstone npm code.
11 Have you looked at the EGO_SUM in go-module? This already covers ANY go
12 package that uses go.mod + go.sum, in a fully reproducible way that does
13 not break network sandbox.
14
15 --
16 Robin Hugh Johnson
17 Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
18 E-Mail : robbat2@g.o
19 GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
20 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-dev] network sandbox challenge Samuel Bernardo <samuelbernardo.mail@×××××.com>