Subject: debian-installer: accesses the internet during build

From: Aurelien Jarno <[email-masked]>
Date: Mon, 01 Apr 2024 18:55:43 +0200

Source: debian-installer
Severity: serious
Justification: Policy 4.9
X-Debbugs-Cc: [email-masked], [email-masked]
Control: affects -1 buildd.debian.org

Hi,

debian-installer attemps network access during build, although only to
the mirrors listed in /etc/apt/sources.list and in a secure way. This is
forbidden by Policy 4.9:

  For packages in the main archive, required targets must not attempt
  network access, except, via the loopback interface, to services on the
  build host that have been started by the build.

In addition this brings constraints to the build daemons infrastructure.

Regards,
Aurelien