Re: Building Erlang Projects Offline

Mikael Pettersson <[email protected]> Mon, 21 Feb 2022 15:08:22 +0100

Newsgroups	gmane.comp.lang.erlang.general
Message-ID	<CAM43=SOYVozZ892C8zUjp8+DaWjOkw9hQTxOaoYBs=ch5TgCng@mail.gmail.com>

On Sun, Feb 20, 2022 at 11:11 PM Viktor Söderqvist
<[email protected]> wrote:
> Why would you want to do that anyway? And why does anyone want a build
> environment to be offline? Well, automatically downloading and running
> any code that you haven't proof-read and approved in advance can be
> regarded a security issue.

+1

We maintain our own internal mirrors of whatever 3rd party software we
might depend on, and build machines are only able to access those, not
the Internet. Yes it does require tweaks to rebar.config but the
alternative of just pulling stuff off the Internet is simply not an
option. (All our environments are network-isolated, not just build
nodes.)