Re: [Pkg-javascript-devel] Bug#875301: FTBFS: uses npm to download from the network during the build
Control: severity -1 normal On ഞായര് 10 സെപ്റ്റംബര് 2017 08:11 വൈകു, Andreas Beckmann wrote: > Downloading things at package build time hasn't been seen in the archive > until recently when some node-* packages started doing this in contrib. > (There are installer packages that download non-distributable stuff at > install time, but that is a completely different topic.) Examples of packages which would be included in contrib are: free packages which require contrib, non-free packages or packages which are not in our archive at all for compilation or execution, and https://www.debian.org/doc/debian-policy/ch-archive.html#s-contrib So I think this is within policy. > Anyway, I hope this is a temporary measure and you (i.e. the javascript > maintainers) are working on getting these large dependency trees > properly into main. yes, this is a temporary step. We are close to getting rollup into main and these packages can be moved to main once it is complete. > Packages in contrib can usually be built in the buildd network (unless > they have Build-Depends in non-free), but your packages will FTBFS there > due to requiring network access. So no source-only uploads ... and > hopefully everything is arch:all. policy specifically mentions "packages not in the archive at all for compilation" for contrib. I think it would be better to clarify the general issue, even though the specific issue is temporary. > Andreas > > PS: You'll probably receive a similar bug report for each source package > doing this once someone encounters the FTBFS issue in a build chroot > that forbids network access. > ok signature.asc Description: OpenPGP digital signature -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#875301: FTBFS: uses npm to download from the network during the build
On 2017-09-10 16:06, Pirate Praveen wrote: > On ഞായര് 10 സെപ്റ്റംബര് 2017 07:22 വൈകു, Andreas Beckmann wrote: >> Source: node-acorn-dynamic-import >> Version: 2.0.2-2 >> Severity: serious >> >> sources should be shipped in packages, not downloaded at build time ... > > but this is in contrib not main. Downloading things at package build time hasn't been seen in the archive until recently when some node-* packages started doing this in contrib. (There are installer packages that download non-distributable stuff at install time, but that is a completely different topic.) Anyway, I hope this is a temporary measure and you (i.e. the javascript maintainers) are working on getting these large dependency trees properly into main. Packages in contrib can usually be built in the buildd network (unless they have Build-Depends in non-free), but your packages will FTBFS there due to requiring network access. So no source-only uploads ... and hopefully everything is arch:all. Andreas PS: You'll probably receive a similar bug report for each source package doing this once someone encounters the FTBFS issue in a build chroot that forbids network access. -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
[Pkg-javascript-devel] Bug#875301: FTBFS: uses npm to download from the network during the build
Source: node-acorn-dynamic-import Version: 2.0.2-2 Severity: serious sources should be shipped in packages, not downloaded at build time ... Andreas -- Pkg-javascript-devel mailing list Pkg-javascript-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel
