From owner-svn-ports-all@freebsd.org Thu Nov 12 08:15:43 2020 Return-Path: Delivered-To: svn-ports-all@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id B38F92E266F; Thu, 12 Nov 2020 08:15:43 +0000 (UTC) (envelope-from dch@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4CWvYW4kBcz3Fbn; Thu, 12 Nov 2020 08:15:43 +0000 (UTC) (envelope-from dch@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 9498A237D9; Thu, 12 Nov 2020 08:15:43 +0000 (UTC) (envelope-from dch@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 0AC8FhtT028483; Thu, 12 Nov 2020 08:15:43 GMT (envelope-from dch@FreeBSD.org) Received: (from dch@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 0AC8FhhO028482; Thu, 12 Nov 2020 08:15:43 GMT (envelope-from dch@FreeBSD.org) Message-Id: <202011120815.0AC8FhhO028482@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: dch set sender to dch@FreeBSD.org using -f From: Dave Cottlehuber Date: Thu, 12 Nov 2020 08:15:43 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r554936 - head/Mk/Uses X-SVN-Group: ports-head X-SVN-Commit-Author: dch X-SVN-Commit-Paths: head/Mk/Uses X-SVN-Commit-Revision: 554936 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 12 Nov 2020 08:15:43 -0000 Author: dch Date: Thu Nov 12 08:15:43 2020 New Revision: 554936 URL: https://svnweb.freebsd.org/changeset/ports/554936 Log: Ensure go modules cannot fetch missing modules via network Notes from go help modules: If GOPROXY is set to the string "direct", downloads use a direct connection to source control servers. Setting GOPROXY to "off" disallows downloading modules from any source. Otherwise, GOPROXY is expected to be list of module proxy URLs separated by either comma (,) or pipe (|) characters, which control error fallback behavior. For each request, the go command tries each proxy in sequence. If there is an error, the go command will try the next proxy in the list if the error is a 404 or 410 HTTP response or if the current proxy is followed by a pipe character, indicating it is safe to fall back on any error. The GOPRIVATE and GONOPROXY environment variables allow bypassing the proxy for selected modules. See 'go help module-private' for details. No matter the source of the modules, the go command checks downloads against known checksums, to detect unexpected changes in the content of any specific module version from one day to the next. This check first consults the current module's go.sum file but falls back to the Go checksum database, controlled by the GOSUMDB and GONOSUMDB environment variables. See 'go help module-auth' for details. Reviewed by: dmgk Sponsored by: SkunkWerks, GmbH Differential Revision: https://reviews.freebsd.org/D26860 Modified: head/Mk/Uses/go.mk Modified: head/Mk/Uses/go.mk ============================================================================== --- head/Mk/Uses/go.mk Thu Nov 12 08:04:36 2020 (r554935) +++ head/Mk/Uses/go.mk Thu Nov 12 08:15:43 2020 (r554936) @@ -108,6 +108,7 @@ GO_TESTFLAGS+= -mod=vendor GO_WRKSRC= ${WRKSRC} GO_ENV+= GOPATH="" \ GOBIN="${GO_WRKDIR_BIN}" \ + GOPROXY=off \ GO_NO_VENDOR_CHECKS=1 .else GO_WRKSRC= ${WRKDIR}/src/${GO_PKGNAME}