[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#807168: debian-installer-netboot-images: required resources not declared as build-dependencies (fetches via network)



Source: debian-installer-netboot-images
Version: 20150422+deb8u2
Severity: serious
Justification: Policy 4.2

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

debian-installer-netboot-images source package is less than 6k in size.
Clearly the main part of the resulting binary packages come from
fetching resources over the network (apparently using wget).

Debian Policy includes the following in §4.2:

> If build-time dependencies are specified, it must be possible to build
> the package and produce working binaries on a system with only
> essential and build-essential packages installed and also those
> required to satisfy the build-time relationships (including any
> implied relationships).

I can only interpret above as disallowing fetching resources over the
network using wget.


Kind regards,

 - Jonas

- -- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=bP2q
-----END PGP SIGNATURE-----


Reply to: