----- Original Message ----- > From: "Jonh Wendell" <jonh.wendell@xxxxxxxxxx> > To: packaging@xxxxxxxxxxxxxxxxxxxxxxx > Sent: Friday, December 15, 2017 2:50:41 PM > Subject: [Fedora-packaging] golang + glide guideline? > > Hi folks. > > I'm playing with RPM packaging for the first time, managed to package a > golang software: https://copr.fedorainfracloud.org/coprs/jwendell/helm/ > (SPEC: https://github.com/jwendell/copr-helm/blob/master/helm.spec ). > > However I have a question: This software in particular uses glide at build > time to download its dependencies (glide install), so I did the same at my > SPEC file. Is there anything I could do to be able to do an offline build? > > Thanks. Hi, you will need either to bundle the dependencies(and declare it in the SPEC, http://fedoraproject.org/wiki/Packaging:Guidelines#Bundling_and_Duplication_of_system_libraries), in your case use sources that have fully populated vendor(fully resolved dependencies) directory(resolved at source upload time) or you can build with de-bundled dependencies. That would require to package all dependencies that are not yet provided in Fedora. With latter option being strongly preferred as it help with handling all dependencies and possible security issues. There is no way you could download external (non-RPM) dependencies at build time as it is preventing reproducible builds and poses a security issues among others and for these reasons all build are done without internet access. If you have any more questions feel free to reach out to me or jchaloupka(CC'ed as he has far superior knowledge of current go packaging best practices). JC > > > _______________________________________________ > packaging mailing list -- packaging@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to packaging-leave@xxxxxxxxxxxxxxxxxxxxxxx > _______________________________________________ packaging mailing list -- packaging@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to packaging-leave@xxxxxxxxxxxxxxxxxxxxxxx
