Re: Standardizing NO_NETWORK and USE_SYSTEM_DEPS environment variables

On 1/23/25 2:14 PM, Michał Górny wrote:
> Hello,
> 
> As a packager, I often find it necessary to ensure two important aspects
> of the build process:
> 
> 1) that the build process itself doesn't access the Internet,
> in particular that it doesn't download any files on its own,
> 
> 2) that the build process uses system shared libraries and other
> dependencies whenever possible, rather than vendored (or downloaded)
> copies.

For openSUSE, we build in Open-Build-Service (OBS) that runs the build 
in KVM without Internet-access. It is the only way to be sure.
That means that everything that is used during the build must be checked 
into the system, so it is known and versioned.
In practice, many rust and golang packages come with large vendor tarballs.

We try to un-bundle libraries to use our system versions instead, but 
what if there are too many incompatible versions required?

What is the problem with
configure --use-system-libfoo

Ciao
Bernhard M.