On 06.05.2014 00:58, Robert Xu wrote:
IMHO:
Fetching sources during the build process shouldn't even be allowed.
This is because we run the risk of the external source disappearing
and then builds failing left and right.
I personally also believe that fetching external sources during build
can be a security risk, but that's also a bit extreme; nevertheless,
it's better to upload the sources to the filestore...
This is all correct, but doesn't fix the fact that our rpm is broken
with respect to work with packages through the network.
The problem is more global than just fetching sources. E.g., try to
launch this command:
$ rpm -qip
http://abf-downloads.rosalinux.ru/rosa2012.1/repository/i586/media/main/updates/urpmi-6.71-51-rosa2012.1.noarch.rpm
It used to work in the past...
