On Mon, Feb 24, 2020 at 02:46:02PM +0100, Vitaly Zaitsev via devel wrote:
On 24.02.2020 13:41, Miroslav Suchý wrote:
> Yes. But it is only rpm-build what cannot access network. Mock itself can access
network.
Mock is using Internet connection only for downloading metadata and
packages from repositories. Then it use systemd-nspawn to create a
protected isolated container and run rpmbuild there with no Internet access.
To further clarify here... yes, mock can access the internet.
However, Fedora builders also have a restrictive firewall set, allowing
them to only access a few specific sites. They can reach koji/kojipkgs,
they can reach the master mirrors, they can reach pagure.io (for things
like kickstarts and comps), they can reach
src.fedoraproject.org (for
things like spec files/sources files), they can reach the fedora
regestry. Thats about it. Everything else is just denied.
kevin