Bug#542401: please do not downlad anything if used in buildd context

Damyan Ivanov dmn at debian.org
Wed Aug 19 13:52:32 UTC 2009


Package: libmodule-cpants-analyse-perl
Version: 0.85+dfsg-1
Severity: normal

Module::CPANTS::Analyze::Kwalitee::Distros downloads a file from alioth in its 
get_debian() function. This is bad during package build for two reasons:

 * it loads alioth
 * information leak from buildd's (host x.y.z.t is building atm)

The tests behave well if the file can't be downloaded so no FTBFS can happen if 
the network can't be accessed, it is just this "phoning home" that I think is 
bad.

I suggest a solution that detects debian package build environment (for example 
defined $ENV{DEB_HOST_ARCH}), prints something to make the user aware via TAP 
and skips the download.

This way people running "make test" or "./Build test" by hand can still test 
their modules and building packages using Module::CPAN::Analyze will be safe 
and nice to alioth.


Thanks,
    dam

-- System Information:
Debian Release: squeeze/sid
  APT prefers oldstable
  APT policy: (500, 'oldstable'), (500, 'unstable'), (500, 'stable'), (450, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=bg_BG.UTF-8, LC_CTYPE=bg_BG.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libmodule-cpants-analyse-perl depends on:
ii  libarchive-any-perl           0.0932-1   Perl module to deal with file arch
ii  libarray-diff-perl            0.05.002-1 Perl module to find the difference
ii  libclass-accessor-perl        0.33-1     Automated accessor generator
ii  libcpan-distnameinfo-perl     0.08-1     Extract distribution name and vers
ii  libfile-find-rule-perl        0.30-3     Alternative interface to File::Fin
ii  libfile-slurp-perl            9999.12-2  single call read & write file rout
ii  libio-capture-perl            0.05-2     Abstract Base Class to build modul
ii  liblist-moreutils-perl        0.24-1     addition list functions not found 
ii  libmodule-extractuse-perl     0.23-2     Perl module to find out modules us
ii  libreadonly-perl              1.03-2     Facility for creating read-only sc
ii  libsoftware-license-perl      0.012-1    Perl module that provides template
ii  libtest-yaml-meta-perl        0.12-1     test module to validate a META.yml
ii  libtext-csv-xs-perl           0.67-1     perl Text::CSV_XS - comma-separate
ii  libwww-perl                   5.831-1    WWW client/server library for Perl
ii  libyaml-syck-perl             1.07-1     fast, lightweight YAML loader and 
ii  perl                          5.10.0-25  Larry Wall's Practical Extraction 

libmodule-cpants-analyse-perl recommends no packages.

libmodule-cpants-analyse-perl suggests no packages.

-- no debconf information





More information about the pkg-perl-maintainers mailing list