Re: Bug#395262: choose-mirror: requires internet access to build

2006-10-26 Thread Frederic Peters
Frans Pop wrote:

 I still think your setup is what's broken here. Why would you want outside 
 DNS resolution if you can't reach anywhere anyway?

FWIW I once saw such a setup used so that logresolve could be used.


Frederic


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#395262: choose-mirror: requires internet access to build

2006-10-25 Thread Lucas Nussbaum
Package: choose-mirror
Version: 2.08
Severity: serious
Justification: Requiring network access during build causes lots of problems

Hi,

Building choose-mirror seems to require network access, since it
retrieves a file found on cvs.d.o:
if [ $ONLINE != n ]; then \
  if wget -nv 
'http://cvs.debian.org/*checkout*/webwml/english/mirror/Mirrors.masterlist?rev=HEADcvsroot=webwmlcontent-type=text/plain'
-O -  Mirrors.masterlist.new  \
test -s Mirrors.masterlist.new; then \
mv Mirrors.masterlist.new Mirrors.masterlist; \
   else \
  rm -f Mirrors.masterlist.new; \
   fi; \
fi

Quoting from #393900 (against libwww-myspace-perl):
Accessing the network during build is bad for these reasons:
- It's a privacy concern: without being asked, some information about
  the system is being sent to a remote host;
- It should be possible to autobuild the package on a buildd with no
  network access.
- The test has a high probability to fail lateron because of the
  referenced host (temporarily) disappearing.

Making ONLINE default to n would probably solve the problem.

Thank you,
-- 
| Lucas Nussbaum
| [EMAIL PROTECTED]   http://www.lucas-nussbaum.net/ |
| jabber: [EMAIL PROTECTED] GPG: 1024D/023B3F4F |


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Processed (with 1 errors): Re: Bug#395262: choose-mirror: requires internet access to build

2006-10-25 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

 tags 395262 important
Unknown tag/s: important.
Recognized are: patch wontfix moreinfo unreproducible fixed potato woody sid 
help security upstream pending sarge sarge-ignore experimental d-i confirmed 
ipv6 lfs fixed-in-experimental fixed-upstream l10n etch etch-ignore.

Bug#395262: choose-mirror: requires internet access to build
There were no tags set.
Tags added: 

 thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#395262: choose-mirror: requires internet access to build

2006-10-25 Thread Steve Langasek
tags 395262 important
thanks

On Wed, Oct 25, 2006 at 11:28:45PM +0200, Lucas Nussbaum wrote:
 Building choose-mirror seems to require network access, since it
 retrieves a file found on cvs.d.o:
 if [ $ONLINE != n ]; then \
   if wget -nv 
 'http://cvs.debian.org/*checkout*/webwml/english/mirror/Mirrors.masterlist?rev=HEADcvsroot=webwmlcontent-type=text/plain'
 -O -  Mirrors.masterlist.new  \
 test -s Mirrors.masterlist.new; then \
   mv Mirrors.masterlist.new Mirrors.masterlist; \
else \
   rm -f Mirrors.masterlist.new; \
fi; \
 fi

This doesn't cause a build failure, because all errors are checked and a
failure in wget is ignored.  Downgrading accordingly.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
[EMAIL PROTECTED]   http://www.debian.org/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#395262: choose-mirror: requires internet access to build

2006-10-25 Thread Lucas Nussbaum
severity 395262 important
tags 395262 + patch
thanks

(setting severity to important since that's probably what you wanted to
do :-)

On 25/10/06 at 15:15 -0700, Steve Langasek wrote:
 tags 395262 important
 thanks
 
 On Wed, Oct 25, 2006 at 11:28:45PM +0200, Lucas Nussbaum wrote:
  Building choose-mirror seems to require network access, since it
  retrieves a file found on cvs.d.o:
  if [ $ONLINE != n ]; then \
if wget -nv 
  'http://cvs.debian.org/*checkout*/webwml/english/mirror/Mirrors.masterlist?rev=HEADcvsroot=webwmlcontent-type=text/plain'
  -O -  Mirrors.masterlist.new  \
  test -s Mirrors.masterlist.new; then \
  mv Mirrors.masterlist.new Mirrors.masterlist; \
 else \
rm -f Mirrors.masterlist.new; \
 fi; \
  fi
 
 This doesn't cause a build failure, because all errors are checked and a
 failure in wget is ignored.  Downgrading accordingly.
 
Agreed, but one problem with wget is that it tries extremly hard to
download files (retries 20 times by default, with a 900 seconds timeout
each time !).

I would recommend changing the wget call so that it runs wget
--timeout=60 --tries=2, which would be much more tolerable than waiting
for 20*900=18000 seconds.

Tagging +patch, even if this is just a workaround to make the situation
slightly better.
-- 
| Lucas Nussbaum
| [EMAIL PROTECTED]   http://www.lucas-nussbaum.net/ |
| jabber: [EMAIL PROTECTED] GPG: 1024D/023B3F4F |


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#395262: choose-mirror: requires internet access to build

2006-10-25 Thread Lucas Nussbaum
On 26/10/06 at 01:27 +0200, Frans Pop wrote:
 On Thursday 26 October 2006 00:27, Lucas Nussbaum wrote:
  I would recommend changing the wget call so that it runs wget
  --timeout=60 --tries=2, which would be much more tolerable than waiting
  for 20*900=18000 seconds.
 
 Please explain in which specific case this is needed.
 
 AFAICT wget fails immediately if it cannot resolve the host name it is 
 looking for, so AFAICT you are talking about a setup here where an 
 address does resolve, but cannot be accessed.
 I don't know if we want to make any changes to defaults to allow for that 
 sort of (broken) setup.

I run archive-wide tests on a HPC cluster where DNS resolution works,
but it's not possible to reach the outside world to protect it from
possible DDOS attacks. Building choose-mirror just takes hours on this
cluster because of this. I agree that this setup is probably not
perfect, but I'm not in a position to change it currently.

If you don't want to add a workaround for this now, please at least
reopen the bug and set severity to wishlist. I will try to work on it
post-etch.
-- 
| Lucas Nussbaum
| [EMAIL PROTECTED]   http://www.lucas-nussbaum.net/ |
| jabber: [EMAIL PROTECTED] GPG: 1024D/023B3F4F |


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#395262: choose-mirror: requires internet access to build

2006-10-25 Thread Frans Pop
On Thursday 26 October 2006 00:27, Lucas Nussbaum wrote:
 I would recommend changing the wget call so that it runs wget
 --timeout=60 --tries=2, which would be much more tolerable than waiting
 for 20*900=18000 seconds.

Please explain in which specific case this is needed.

AFAICT wget fails immediately if it cannot resolve the host name it is 
looking for, so AFAICT you are talking about a setup here where an 
address does resolve, but cannot be accessed.
I don't know if we want to make any changes to defaults to allow for that 
sort of (broken) setup.


pgphziHqxJNBk.pgp
Description: PGP signature


Bug#395262: choose-mirror: requires internet access to build

2006-10-25 Thread Frans Pop
 If you don't want to add a workaround for this now, please at least
 reopen the bug and set severity to wishlist. I will try to work on it
 post-etch.

No sorry, I don't see any reason to keep this bug open as choose-mirror 
builds perfectly for any individual d-i developer and on all the buildds.

I still think your setup is what's broken here. Why would you want outside 
DNS resolution if you can't reach anywhere anyway?

IMHO this really is a total non-bug from a Debian point of view.

I suggest you just add an exclude list for your test suite and put 
choose-mirror in that.

Cheers,
FJP


pgpXAV217rC6R.pgp
Description: PGP signature