----- Original Message -----
From: "Jonh Wendell" <jonh.wendell(a)redhat.com>
To: packaging(a)lists.fedoraproject.org
Sent: Friday, December 15, 2017 2:50:41 PM
Subject: [Fedora-packaging] golang + glide guideline?
Hi folks.
I'm playing with RPM packaging for the first time, managed to package a
golang software:
https://copr.fedorainfracloud.org/coprs/jwendell/helm/
(SPEC:
https://github.com/jwendell/copr-helm/blob/master/helm.spec ).
However I have a question: This software in particular uses glide at build
time to download its dependencies (glide install), so I did the same at my
SPEC file. Is there anything I could do to be able to do an offline build?
Thanks.
Hi,
you will need either to bundle the dependencies(and declare it in the SPEC,
http://fedoraproject.org/wiki/Packaging:Guidelines#Bundling_and_Duplicati...),
in your case use sources that have fully populated vendor(fully resolved dependencies)
directory(resolved at source upload time) or you can build with de-bundled dependencies.
That would require to package all dependencies that are not yet provided in Fedora. With
latter option being strongly preferred as it help with handling all dependencies and
possible security issues.
There is no way you could download external (non-RPM) dependencies at build time as it is
preventing reproducible builds and poses a security issues among others and for these
reasons all build are done without internet access.
If you have any more questions feel free to reach out to me or jchaloupka(CC'ed as he
has far superior knowledge of current go packaging best practices).
JC
>
>
> _______________________________________________
> packaging mailing list -- packaging(a)lists.fedoraproject.org
> To unsubscribe send an email to packaging-leave(a)lists.fedoraproject.org
>