You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@thrift.apache.org by "paul cannon (Commented) (JIRA)" <ji...@apache.org> on 2011/11/28 23:21:41 UTC
[jira] [Commented] (THRIFT-1439) debian packaging: do not download
dependencies during build
[ https://issues.apache.org/jira/browse/THRIFT-1439?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13158857#comment-13158857 ]
paul cannon commented on THRIFT-1439:
-------------------------------------
http://wiki.debian.org/Java/MavenRepoSpec may help in adjusting the build process here (or maybe not).
> debian packaging: do not download dependencies during build
> -----------------------------------------------------------
>
> Key: THRIFT-1439
> URL: https://issues.apache.org/jira/browse/THRIFT-1439
> Project: Thrift
> Issue Type: Bug
> Components: Deployment
> Environment: any Debian-based OS
> Reporter: paul cannon
> Assignee: Jake Farrell
> Labels: debian
>
> It is very much against Debian procedure and policy for a package build process to download dependencies from the internet. There are a lot of reasons for this; among them, guaranteed build repeatability, security auditability, non-reliance on websites remaining available, and license auditability.
> The thrift Debian packaging (in contrib/) should use Maven in offline mode, if Maven is actually required for the Java build phase. Build-dependencies should be expressed as a list of Debian packages under "{{Build-Depends:}}" in debian/control.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira