[The below mail is general, I don't know much about the Java/Eclipse context]
On Wed, Jan 14, 2015 at 4:09 AM, Pascal Rapicault wrote: > - What is the root of the decision to build everything from source? Debian has promised to our users that every package will come with source code. The only way to ensure that what we are distributing is actually the source code is to remove files that obviously have been automatically generated and rebuild everything from source code. This also enables things like our work on reproducible builds. https://www.debian.org/social_contract https://wiki.debian.org/ReproducibleBuilds > - What is the limit of the actions that can be run in an install script? Potentially anything can be done, except contacting the network. Any tools that need to be run should be either in the same source package or new packages created for them and added to Build-Depends, which are installed before building packages. > - Do we have stats about what the user is downloading? We have stats for users who choose to opt-in to the popularity-contest system: http://popcon.debian.org/ https://qa.debian.org/popcon.php?package=eclipse > Really? Without internet access? When we say without Internet access, we mean with access to the Debian archive (via Build-Depends) but not access to random websites on the Internet. Allowing general Internet access leads to build reproducibility and security issues. > Yes, this is true especially in the Maven world since it guarantees > build reproducibility. We plan to solve that in Debian by recording versions of build-dependencies at build time and reproducing the build environment when doing build reproducibility testing: https://wiki.debian.org/ReproducibleBuilds/BuildinfoSpecification https://wiki.debian.org/ReproducibleBuilds/About#Reproduce_the_build_environment Re bootstrap stuff, we don't have a good solution, most of our work on that front has been around C compilers and bootstrapping new architectures rather than non-C languages. https://wiki.debian.org/DebianBootstrap Embedded code copies are discouraged as they are a nightmare for the security and QA teams. https://wiki.debian.org/EmbeddedCodeCopies -- bye, pabs https://wiki.debian.org/PaulWise -- To UNSUBSCRIBE, email to debian-java-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/CAKTje6EkCgYSygw=8D+qb7S2GSSgFF5V9mD3ivCg=+Qzo5V=z...@mail.gmail.com