From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 48FD2138334 for ; Mon, 9 Sep 2019 19:04:59 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 37957E0967; Mon, 9 Sep 2019 19:04:56 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id D24ADE0949 for ; Mon, 9 Sep 2019 19:04:55 +0000 (UTC) Received: from whubbs1.gaikai.biz (unknown [100.42.103.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: williamh) by smtp.gentoo.org (Postfix) with ESMTPSA id DE5F134AF28; Mon, 9 Sep 2019 19:04:54 +0000 (UTC) Received: (nullmailer pid 31642 invoked by uid 1000); Mon, 09 Sep 2019 19:04:51 -0000 Date: Mon, 9 Sep 2019 14:04:51 -0500 From: William Hubbs To: gentoo-dev@lists.gentoo.org Cc: mjo@gentoo.org Subject: Re: [gentoo-dev] rfc: go 1.13 and go modules Message-ID: <20190909190451.GA31617@whubbs1.dev.av1.gaikai.org> Mail-Followup-To: gentoo-dev@lists.gentoo.org, mjo@gentoo.org References: <20190909173418.GA30003@whubbs1.dev.av1.gaikai.org> <8e65e3de-216a-8709-f882-51d95853df0b@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="EeQfGwPcQSOJBaQU" Content-Disposition: inline In-Reply-To: <8e65e3de-216a-8709-f882-51d95853df0b@gentoo.org> User-Agent: Mutt/1.10.1 (2018-07-13) X-Archives-Salt: 4e468416-3505-4c90-adc4-66e56ff85b88 X-Archives-Hash: 65a6a31c6c60cdbc490b70f23c8da65a --EeQfGwPcQSOJBaQU Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Sep 09, 2019 at 02:54:51PM -0400, Michael Orlitzky wrote: > On 9/9/19 2:19 PM, Zac Medico wrote: > > On 9/9/19 10:34 AM, William Hubbs wrote: > >=20 > >> There is another option I want to try which is adding "go mod vendor" = to > >> src_unpack for go packages. > >=20 > > If you do that then it will violate FEATURES=3Dnetwork-sandbox (default) > > unless you also do PROPERTIES+=3D" live". > >=20 > > We could add a separate PROPERTIES value for this, I've suggested it > > before but both Micha=C5=82 G=C3=B3rny and Ulrich Mueller were against = it: > >=20 >=20 > This is the precisely what FEATURES=3Dnetwork-sandbox exists to prevent. >=20 > Bundling dependencies, hitting the network, shelling out to a > language-specific package manager, depending on specific upstream > commits, and sidestepping existing QA mechanisms to make this all > possible... it's bad idea bingo. Michael, Please read all of the info on go modules. In particular, I don't think you read the info about the mirror database and checksum verification. William --EeQfGwPcQSOJBaQU Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQTVeuxEZo4uUHOkQAluVBb0MMRlOAUCXXaiSwAKCRBuVBb0MMRl OGXkAJ4ooLtl73j6UtCGppcgM3yzW7CbjwCgtwqI7llYZDHfg5ZriIifrXrBKdo= =4mGW -----END PGP SIGNATURE----- --EeQfGwPcQSOJBaQU--