debian packaging: do not download dependencies during build -----------------------------------------------------------
Key: THRIFT-1439 URL: https://issues.apache.org/jira/browse/THRIFT-1439 Project: Thrift Issue Type: Bug Components: Deployment Environment: any Debian-based OS Reporter: paul cannon It is very much against Debian procedure and policy for a package build process to download dependencies from the internet. There are a lot of reasons for this; among them, guaranteed build repeatability, security auditability, non-reliance on websites remaining available, and license auditability. The thrift Debian packaging (in contrib/) should use Maven in offline mode, if Maven is actually required for the Java build phase. Build-dependencies should be expressed as a list of Debian packages under "{{Build-Depends:}}" in debian/control. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira