[Pkg-javascript-devel] Bug#875301: Bug#875301: FTBFS: uses npm to download from the network during the build

[Pirate Praveen]

Control: severity -1 normal

On ഞായര്‍ 10 സെപ്റ്റംബര്‍ 2017 08:11 വൈകു, Andreas Beckmann wrote:
> Downloading things at package build time hasn't been seen in the archive
> until recently when some node-* packages started doing this in contrib.
> (There are installer packages that download non-distributable stuff at
> install time, but that is a completely different topic.)

 Examples of packages which would be included in contrib are:

    free packages which require contrib, non-free packages or packages
which are not in our archive at all for compilation or execution, and

https://www.debian.org/doc/debian-policy/ch-archive.html#s-contrib

So I think this is within policy.

> Anyway, I hope this is a temporary measure and you (i.e. the javascript
> maintainers) are working on getting these large dependency trees
> properly into main.

yes, this is a temporary step. We are close to getting rollup into main
and these packages can be moved to main once it is complete.

> Packages in contrib can usually be built in the buildd network (unless
> they have Build-Depends in non-free), but your packages will FTBFS there
> due to requiring network access. So no source-only uploads ... and
> hopefully everything is arch:all.

policy specifically mentions "packages not in the archive at all for
compilation" for contrib. I think it would be better to clarify the
general issue, even though the specific issue is temporary.

> Andreas
> 
> PS: You'll probably receive a similar bug report for each source package
> doing this once someone encounters the FTBFS issue in a build chroot
> that forbids network access.
>
ok

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/attachments/20170910/ff7eb4a5/attachment-0001.sig>