On Mon, Feb 24, 2020 at 02:46:02PM +0100, Vitaly Zaitsev via devel wrote: > On 24.02.2020 13:41, Miroslav Suchý wrote: > > Yes. But it is only rpm-build what cannot access network. Mock itself can > > access network. > > Mock is using Internet connection only for downloading metadata and > packages from repositories. Then it use systemd-nspawn to create a > protected isolated container and run rpmbuild there with no Internet access.
To further clarify here... yes, mock can access the internet. However, Fedora builders also have a restrictive firewall set, allowing them to only access a few specific sites. They can reach koji/kojipkgs, they can reach the master mirrors, they can reach pagure.io (for things like kickstarts and comps), they can reach src.fedoraproject.org (for things like spec files/sources files), they can reach the fedora regestry. Thats about it. Everything else is just denied. kevin
signature.asc
Description: PGP signature
_______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
