Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 820317 - dev-python/jupyter_server_mathjax-0.2.3: illegal network access via npm
Summary: dev-python/jupyter_server_mathjax-0.2.3: illegal network access via npm
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Science Related Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-10-26 07:06 UTC by Michał Górny
Modified: 2021-11-28 19:28 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2021-10-26 07:06:48 UTC
The ebuild spends significant time in src_compile() trying to access network then failing, for every impl enabled:

```
python3.8 setup.py build -j 12
running build
running build_py
running js
Installing build dependencies with npm.  This may take a while...
> npm install                                                       
npm ERR! code ENOTFOUND
npm ERR! syscall getaddrinfo
npm ERR! errno ENOTFOUND
npm ERR! network request to https://registry.npmjs.org/fs-extra failed, reason: getaddrinfo ENOTFOUND registry.npmjs.org
npm ERR! network This is a problem related to network connectivity.
npm ERR! network In most cases you are behind a proxy or have bad network settings.
npm ERR! network 
npm ERR! network If you are behind a proxy, please make sure that the
npm ERR! network 'proxy' config is set properly.  See: 'npm help config'
```

Note that just because majority of users are protected via network-sandbox, it doesn't mean it's fine for ebuilds to attempt fetching data via Internet.