Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
buildGoModule: disable consult the checksum database on build #74811
Motivation for this change
Since Go 1.13,
We already use the default behavior when building
Since Go 1.13, `GOSUMDB` defaults to "sum.golang.org", to consult the checksum database of the main module's go.sum. We already use the default behavior when building `go-modules`, but Go tries to consult the checksum database again when building the module, and fails because since it requires `cacert` and `git` which are not propagated when building the package.
I'll take a deeper look later tonight, but the failure link seems to not have the error message. I'm surprised that only this package would be failing if all go modules were trying to do internet activity. Doesn't the sandbox prevent that? I wonder if maybe this is the first package updated since we stopped checking the sum files into the cache, triggering this latent bug. Edit: Github mobile is just bad - I see the failure message. LGTM Edit2: I think the udp refusal is just the sandbox right?…
On Sun, Dec 1, 2019, 20:58 Cole Mickens ***@***.***> wrote: It fails anyway since it tries to hit the network right? This issue blocked me here until I changed the version of Go used, based on another package using a similar workaround: #73613 <#73613> — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#74811?email_source=notifications&email_token=AADWWN6WVCPAH2F54HBH4RDQWRTTZA5CNFSM4JTO25O2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEFR6EDA#issuecomment-560194060>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AADWWN24EGSSRCW4XJDQOTLQWRTTZANCNFSM4JTO25OQ> .
yes, it's because go module-mode tries to access the network to consult the checksum database
kind of, if fails because the go package is built as a regular derivation which does not allow impurities such as accessing network.