Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
View | Details | Raw Unified | Return to bug 548710
Collapse All | Expand All

(-)a/man/make.conf.5 (+4 lines)
Lines 463-468 from putting 64bit libraries into anything other than (/usr)/lib64. Link Here
463
.B network\-sandbox
463
.B network\-sandbox
464
Isolate the ebuild phase functions from host network interfaces.
464
Isolate the ebuild phase functions from host network interfaces.
465
Supported only on Linux. Requires network namespace support in kernel.
465
Supported only on Linux. Requires network namespace support in kernel.
466
.TP
467
.B network\-sandbox\-proxy
468
Enable escaping network-sandbox through SOCKSv5 proxy. Enabling distcc
469
feature also enables the proxy.
466
470
467
If asyncio Python module is available (requires Python 3.3, built-in
471
If asyncio Python module is available (requires Python 3.3, built-in
468
since Python 3.4) Portage will additionally spawn an isolated SOCKSv5
472
since Python 3.4) Portage will additionally spawn an isolated SOCKSv5
(-)a/pym/portage/const.py (+1 lines)
Lines 158-163 SUPPORTED_FEATURES = frozenset([ Link Here
158
	"mirror",
158
	"mirror",
159
	"multilib-strict",
159
	"multilib-strict",
160
	"network-sandbox",
160
	"network-sandbox",
161
	"network-sandbox-proxy",
161
	"news",
162
	"news",
162
	"noauto",
163
	"noauto",
163
	"noclean",
164
	"noclean",
(-)a/pym/portage/package/ebuild/doebuild.py (-2 / +2 lines)
Lines 1505-1511 def spawn(mystring, mysettings, debug=False, free=False, droppriv=False, Link Here
1505
		keywords['unshare_net'] = not networked
1505
		keywords['unshare_net'] = not networked
1506
		keywords['unshare_ipc'] = not ipc
1506
		keywords['unshare_ipc'] = not ipc
1507
1507
1508
		if not networked and mysettings.get("EBUILD_PHASE") != "nofetch":
1508
		if not networked and mysettings.get("EBUILD_PHASE") != "nofetch" and \
1509
			("network-sandbox-proxy" in features or "distcc" in features):
1509
			# Provide a SOCKS5-over-UNIX-socket proxy to escape sandbox
1510
			# Provide a SOCKS5-over-UNIX-socket proxy to escape sandbox
1510
			# Don't do this for pkg_nofetch, since the spawn_nofetch
1511
			# Don't do this for pkg_nofetch, since the spawn_nofetch
1511
			# function creates a private PORTAGE_TMPDIR.
1512
			# function creates a private PORTAGE_TMPDIR.
1512
- 

Return to bug 548710