[opensuse-buildservice] Network Access from VMs
Just want to verify - as configured, there's no network access in the workers, correct? We have some developers wanting to make use of Nexus for Java jars. It does not work currently, and I just want to verify this is expected. (This is a private 2.3 instance.) Thanks. -Matt -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Mon, 09 Sep 2013 14:50:22 -0400
Matthew Drobnak
Just want to verify - as configured, there's no network access in the workers, correct?
We have some developers wanting to make use of Nexus for Java jars. It does not work currently, and I just want to verify this is expected. (This is a private 2.3 instance.)
Thanks.
-Matt
Hi, Yes, by design, the OBS does for security reasons. It is changeable, but I'm not sure how to do so. Thanks, Peter -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Monday 2013-09-09 21:37, plinnell wrote:
Just want to verify - as configured, there's no network access in the workers, correct?
Yes, by design, the OBS does for security reasons.
It's also for checking for the "island test" freedom, and seeing to it that builds are reproducible. -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Thanks! So, the follow-up is, how does one integrate things like Maven / Nexus with OBS? This is where my team is having issues right now.. -Matt On 09/09/2013 04:34 PM, Jan Engelhardt wrote:
Just want to verify - as configured, there's no network access in the workers, correct? Yes, by design, the OBS does for security reasons. It's also for checking for the "island test" freedom, and seeing to it
On Monday 2013-09-09 21:37, plinnell wrote: that builds are reproducible.
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am Montag, 9. September 2013, 16:36:25 schrieb Matthew Drobnak:
Thanks!
So, the follow-up is, how does one integrate things like Maven / Nexus with OBS? This is where my team is having issues right now..
if you run your own OBS, you can use chroot builds, which do have network. However, downloading external resources is doing your builds not reproducable. Also they get not automatically triggered when external jar files are changing. In the end, the whole approach of using precompiled binaries (.jar files)is more a closed source approach. The open source approach would be to build these jar files also in packages inside your OBS. bye adrian
-Matt
On 09/09/2013 04:34 PM, Jan Engelhardt wrote:
On Monday 2013-09-09 21:37, plinnell wrote:
Just want to verify - as configured, there's no network access in the workers, correct?
Yes, by design, the OBS does for security reasons.
It's also for checking for the "island test" freedom, and seeing to it that builds are reproducible.
-- Adrian Schroeter email: adrian@suse.de SUSE LINUX GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
participants (4)
-
Adrian Schröter -
Jan Engelhardt -
Matthew Drobnak -
plinnell