-
-
Notifications
You must be signed in to change notification settings - Fork 32
Houston CI fails if project uses Meson subprojects feature #779
Comments
The Houston build environment does not allow downloading things from random places on the internet for security reasons. Anything you need to build the project has to be in your GitHub repository, or available in the apt software repositories for the version of elementary you're building against. |
Hi there, I would really appreciate the ability to use meson subprojects in elementary apps. I am currently working on three projects, all using subprojects and all of them have different use cases:
So I think that this restriction might keep some more complex projects which do not want to have everything in their main repo from publishing their apps in App Center.
From a security perspective, the apps would still have to be reviewed on release. The releases only represent a snapshot of the code so subprojects could be reviewed beforehand, right? Would it be possible to check that subprojects are pulling from a specified tag and prevent them from pulling everything that is currently on master?
As you can see in elementary/monitor#164 it is still possible to use Git submodules, so from what I'm seeing, there is no actual security advantage in disabling downloading meson subprojects. |
Prerequisites
Describe the bug
I'm using a Meson's subprojects feature, where special *.wrap files are created and Mesons uses them to download dependencies that are unavailable in system packages.
I'm using this feature to built Monitor with live-chart library. But CI fails with:
meson.build:15:0: ERROR: Failed to initialize 'subprojects/live-chart': Automatic wrap-based subproject downloading is disabled
dpkg-buildpackage: error: debian/rules build subprocess returned exit status 2
To Reproduce
Use Meson subprojects feature with wrap files.
Expected behavior
Wrap files are recognized and Meson downloads subprojects.
Logs
Logs on Travis CI.
The text was updated successfully, but these errors were encountered: