build: make Go and Python builds fully offline (hermetic Nix build)
The Nix build previously fetched Go modules from goproxy.cn and Python build deps from PyPI during the build phase, relying on network leaking into the sandbox. This is non-reproducible and breaks whenever the sandbox resolver is unreachable (e.g. pc13v's loopback dnsmasq). Go: - Vendor all three modules (frontend/apiserver, frontend/xcecli, autoscaler/providers/baidu/src/bcctool) and commit vendor/ trees. - tools/go_build now builds with GOFLAGS=-mod=vendor and GOPROXY=off instead of GOPROXY=https://goproxy.cn. Python (xceadmin): - Add setuptools + wheel to xce.nix nativeBuildInputs. - meson-build.sh installs with pip --no-build-isolation --no-index --no-deps so no PyPI access happens at build time. xceadmin install script: - Invoke meson-install.sh via find_program('bash') instead of relying on its #!/usr/bin/env bash shebang, which fails in the Nix install sandbox (no /usr/bin/env -> 'could not be run'). Cleanup: - Drop now-unneeded cacert and impureEnvVars=[HOME] from xce.nix and xcecli.nix (they only existed to enable the impure network fetch). Docs: - README build guide: drop '--option sandbox false' from nix build / nix bundle commands, note the build is now hermetic, and document the go mod vendor + git add vendor/ maintenance workflow. Verified: nix build .#xcecore, .#xcecore_debug, .#xcecli, and .#xce all succeed with the sandbox enabled.
This commit is contained in:
parent
a51790dcbb
commit
68bc86bc59
3333 changed files with 1438798 additions and 11 deletions
341
src/frontend/apiserver/vendor/modules.txt
vendored
Normal file
341
src/frontend/apiserver/vendor/modules.txt
vendored
Normal file
|
|
@ -0,0 +1,341 @@
|
|||
# github.com/AlecAivazis/survey/v2 v2.3.7
|
||||
## explicit; go 1.13
|
||||
github.com/AlecAivazis/survey/v2
|
||||
github.com/AlecAivazis/survey/v2/core
|
||||
github.com/AlecAivazis/survey/v2/terminal
|
||||
# github.com/KyleBanks/depth v1.2.1
|
||||
## explicit
|
||||
github.com/KyleBanks/depth
|
||||
# github.com/PuerkitoBio/purell v1.1.1
|
||||
## explicit
|
||||
github.com/PuerkitoBio/purell
|
||||
# github.com/PuerkitoBio/urlesc v0.0.0-20170810143723-de5bf2ad4578
|
||||
## explicit
|
||||
github.com/PuerkitoBio/urlesc
|
||||
# github.com/bytedance/sonic v1.11.6
|
||||
## explicit; go 1.16
|
||||
github.com/bytedance/sonic
|
||||
github.com/bytedance/sonic/ast
|
||||
github.com/bytedance/sonic/decoder
|
||||
github.com/bytedance/sonic/encoder
|
||||
github.com/bytedance/sonic/internal/caching
|
||||
github.com/bytedance/sonic/internal/cpu
|
||||
github.com/bytedance/sonic/internal/decoder
|
||||
github.com/bytedance/sonic/internal/encoder
|
||||
github.com/bytedance/sonic/internal/jit
|
||||
github.com/bytedance/sonic/internal/native
|
||||
github.com/bytedance/sonic/internal/native/avx
|
||||
github.com/bytedance/sonic/internal/native/avx2
|
||||
github.com/bytedance/sonic/internal/native/neon
|
||||
github.com/bytedance/sonic/internal/native/sse
|
||||
github.com/bytedance/sonic/internal/native/types
|
||||
github.com/bytedance/sonic/internal/resolver
|
||||
github.com/bytedance/sonic/internal/rt
|
||||
github.com/bytedance/sonic/option
|
||||
github.com/bytedance/sonic/unquote
|
||||
github.com/bytedance/sonic/utf8
|
||||
# github.com/bytedance/sonic/loader v0.1.1
|
||||
## explicit; go 1.16
|
||||
github.com/bytedance/sonic/loader
|
||||
github.com/bytedance/sonic/loader/internal/abi
|
||||
github.com/bytedance/sonic/loader/internal/rt
|
||||
# github.com/cloudwego/base64x v0.1.4
|
||||
## explicit; go 1.16
|
||||
github.com/cloudwego/base64x
|
||||
# github.com/cloudwego/iasm v0.2.0
|
||||
## explicit; go 1.16
|
||||
github.com/cloudwego/iasm/expr
|
||||
github.com/cloudwego/iasm/x86_64
|
||||
# github.com/fsnotify/fsnotify v1.7.0
|
||||
## explicit; go 1.17
|
||||
github.com/fsnotify/fsnotify
|
||||
# github.com/gabriel-vasile/mimetype v1.4.3
|
||||
## explicit; go 1.20
|
||||
github.com/gabriel-vasile/mimetype
|
||||
github.com/gabriel-vasile/mimetype/internal/charset
|
||||
github.com/gabriel-vasile/mimetype/internal/json
|
||||
github.com/gabriel-vasile/mimetype/internal/magic
|
||||
# github.com/gin-contrib/sse v0.1.0
|
||||
## explicit; go 1.12
|
||||
github.com/gin-contrib/sse
|
||||
# github.com/gin-gonic/gin v1.10.0
|
||||
## explicit; go 1.20
|
||||
github.com/gin-gonic/gin
|
||||
github.com/gin-gonic/gin/binding
|
||||
github.com/gin-gonic/gin/internal/bytesconv
|
||||
github.com/gin-gonic/gin/internal/json
|
||||
github.com/gin-gonic/gin/render
|
||||
# github.com/go-openapi/jsonpointer v0.19.5
|
||||
## explicit; go 1.13
|
||||
github.com/go-openapi/jsonpointer
|
||||
# github.com/go-openapi/jsonreference v0.19.6
|
||||
## explicit; go 1.13
|
||||
github.com/go-openapi/jsonreference
|
||||
# github.com/go-openapi/spec v0.20.4
|
||||
## explicit; go 1.13
|
||||
github.com/go-openapi/spec
|
||||
# github.com/go-openapi/swag v0.19.15
|
||||
## explicit; go 1.11
|
||||
github.com/go-openapi/swag
|
||||
# github.com/go-playground/locales v0.14.1
|
||||
## explicit; go 1.17
|
||||
github.com/go-playground/locales
|
||||
github.com/go-playground/locales/currency
|
||||
# github.com/go-playground/universal-translator v0.18.1
|
||||
## explicit; go 1.18
|
||||
github.com/go-playground/universal-translator
|
||||
# github.com/go-playground/validator/v10 v10.20.0
|
||||
## explicit; go 1.18
|
||||
github.com/go-playground/validator/v10
|
||||
# github.com/goccy/go-json v0.10.2
|
||||
## explicit; go 1.12
|
||||
github.com/goccy/go-json
|
||||
github.com/goccy/go-json/internal/decoder
|
||||
github.com/goccy/go-json/internal/encoder
|
||||
github.com/goccy/go-json/internal/encoder/vm
|
||||
github.com/goccy/go-json/internal/encoder/vm_color
|
||||
github.com/goccy/go-json/internal/encoder/vm_color_indent
|
||||
github.com/goccy/go-json/internal/encoder/vm_indent
|
||||
github.com/goccy/go-json/internal/errors
|
||||
github.com/goccy/go-json/internal/runtime
|
||||
# github.com/golang-jwt/jwt/v4 v4.5.1
|
||||
## explicit; go 1.16
|
||||
github.com/golang-jwt/jwt/v4
|
||||
# github.com/google/uuid v1.6.0
|
||||
## explicit
|
||||
github.com/google/uuid
|
||||
# github.com/hashicorp/hcl v1.0.0
|
||||
## explicit
|
||||
github.com/hashicorp/hcl
|
||||
github.com/hashicorp/hcl/hcl/ast
|
||||
github.com/hashicorp/hcl/hcl/parser
|
||||
github.com/hashicorp/hcl/hcl/printer
|
||||
github.com/hashicorp/hcl/hcl/scanner
|
||||
github.com/hashicorp/hcl/hcl/strconv
|
||||
github.com/hashicorp/hcl/hcl/token
|
||||
github.com/hashicorp/hcl/json/parser
|
||||
github.com/hashicorp/hcl/json/scanner
|
||||
github.com/hashicorp/hcl/json/token
|
||||
# github.com/josharian/intern v1.0.0
|
||||
## explicit; go 1.5
|
||||
github.com/josharian/intern
|
||||
# github.com/json-iterator/go v1.1.12
|
||||
## explicit; go 1.12
|
||||
github.com/json-iterator/go
|
||||
# github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51
|
||||
## explicit
|
||||
github.com/kballard/go-shellquote
|
||||
# github.com/klauspost/cpuid/v2 v2.2.7
|
||||
## explicit; go 1.15
|
||||
github.com/klauspost/cpuid/v2
|
||||
# github.com/leodido/go-urn v1.4.0
|
||||
## explicit; go 1.18
|
||||
github.com/leodido/go-urn
|
||||
github.com/leodido/go-urn/scim/schema
|
||||
# github.com/magiconair/properties v1.8.7
|
||||
## explicit; go 1.19
|
||||
github.com/magiconair/properties
|
||||
# github.com/mailru/easyjson v0.7.6
|
||||
## explicit; go 1.12
|
||||
github.com/mailru/easyjson/buffer
|
||||
github.com/mailru/easyjson/jlexer
|
||||
github.com/mailru/easyjson/jwriter
|
||||
# github.com/mattn/go-colorable v0.1.13
|
||||
## explicit; go 1.15
|
||||
github.com/mattn/go-colorable
|
||||
# github.com/mattn/go-isatty v0.0.20
|
||||
## explicit; go 1.15
|
||||
github.com/mattn/go-isatty
|
||||
# github.com/mgutz/ansi v0.0.0-20170206155736-9520e82c474b
|
||||
## explicit
|
||||
github.com/mgutz/ansi
|
||||
# github.com/mitchellh/mapstructure v1.5.0
|
||||
## explicit; go 1.14
|
||||
github.com/mitchellh/mapstructure
|
||||
# github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
|
||||
## explicit
|
||||
github.com/modern-go/concurrent
|
||||
# github.com/modern-go/reflect2 v1.0.2
|
||||
## explicit; go 1.12
|
||||
github.com/modern-go/reflect2
|
||||
# github.com/pelletier/go-toml/v2 v2.2.2
|
||||
## explicit; go 1.16
|
||||
github.com/pelletier/go-toml/v2
|
||||
github.com/pelletier/go-toml/v2/internal/characters
|
||||
github.com/pelletier/go-toml/v2/internal/danger
|
||||
github.com/pelletier/go-toml/v2/internal/tracker
|
||||
github.com/pelletier/go-toml/v2/unstable
|
||||
# github.com/sagikazarmark/locafero v0.4.0
|
||||
## explicit; go 1.20
|
||||
github.com/sagikazarmark/locafero
|
||||
# github.com/sagikazarmark/slog-shim v0.1.0
|
||||
## explicit; go 1.20
|
||||
github.com/sagikazarmark/slog-shim
|
||||
# github.com/sourcegraph/conc v0.3.0
|
||||
## explicit; go 1.19
|
||||
github.com/sourcegraph/conc
|
||||
github.com/sourcegraph/conc/internal/multierror
|
||||
github.com/sourcegraph/conc/iter
|
||||
github.com/sourcegraph/conc/panics
|
||||
# github.com/spf13/afero v1.11.0
|
||||
## explicit; go 1.19
|
||||
github.com/spf13/afero
|
||||
github.com/spf13/afero/internal/common
|
||||
github.com/spf13/afero/mem
|
||||
# github.com/spf13/cast v1.6.0
|
||||
## explicit; go 1.19
|
||||
github.com/spf13/cast
|
||||
# github.com/spf13/pflag v1.0.5
|
||||
## explicit; go 1.12
|
||||
github.com/spf13/pflag
|
||||
# github.com/spf13/viper v1.19.0
|
||||
## explicit; go 1.20
|
||||
github.com/spf13/viper
|
||||
github.com/spf13/viper/internal/encoding
|
||||
github.com/spf13/viper/internal/encoding/dotenv
|
||||
github.com/spf13/viper/internal/encoding/hcl
|
||||
github.com/spf13/viper/internal/encoding/ini
|
||||
github.com/spf13/viper/internal/encoding/javaproperties
|
||||
github.com/spf13/viper/internal/encoding/json
|
||||
github.com/spf13/viper/internal/encoding/toml
|
||||
github.com/spf13/viper/internal/encoding/yaml
|
||||
github.com/spf13/viper/internal/features
|
||||
# github.com/subosito/gotenv v1.6.0
|
||||
## explicit; go 1.18
|
||||
github.com/subosito/gotenv
|
||||
# github.com/swaggo/files v1.0.1
|
||||
## explicit; go 1.16
|
||||
github.com/swaggo/files
|
||||
# github.com/swaggo/gin-swagger v1.6.0
|
||||
## explicit; go 1.17
|
||||
github.com/swaggo/gin-swagger
|
||||
# github.com/swaggo/swag v1.16.4
|
||||
## explicit; go 1.18
|
||||
github.com/swaggo/swag
|
||||
# github.com/twitchyliquid64/golang-asm v0.15.1
|
||||
## explicit; go 1.13
|
||||
github.com/twitchyliquid64/golang-asm/asm/arch
|
||||
github.com/twitchyliquid64/golang-asm/bio
|
||||
github.com/twitchyliquid64/golang-asm/dwarf
|
||||
github.com/twitchyliquid64/golang-asm/goobj
|
||||
github.com/twitchyliquid64/golang-asm/obj
|
||||
github.com/twitchyliquid64/golang-asm/obj/arm
|
||||
github.com/twitchyliquid64/golang-asm/obj/arm64
|
||||
github.com/twitchyliquid64/golang-asm/obj/mips
|
||||
github.com/twitchyliquid64/golang-asm/obj/ppc64
|
||||
github.com/twitchyliquid64/golang-asm/obj/riscv
|
||||
github.com/twitchyliquid64/golang-asm/obj/s390x
|
||||
github.com/twitchyliquid64/golang-asm/obj/wasm
|
||||
github.com/twitchyliquid64/golang-asm/obj/x86
|
||||
github.com/twitchyliquid64/golang-asm/objabi
|
||||
github.com/twitchyliquid64/golang-asm/src
|
||||
github.com/twitchyliquid64/golang-asm/sys
|
||||
github.com/twitchyliquid64/golang-asm/unsafeheader
|
||||
# github.com/ugorji/go/codec v1.2.12
|
||||
## explicit; go 1.11
|
||||
github.com/ugorji/go/codec
|
||||
# go.uber.org/multierr v1.10.0
|
||||
## explicit; go 1.19
|
||||
go.uber.org/multierr
|
||||
# go.uber.org/zap v1.27.0
|
||||
## explicit; go 1.19
|
||||
go.uber.org/zap
|
||||
go.uber.org/zap/buffer
|
||||
go.uber.org/zap/internal
|
||||
go.uber.org/zap/internal/bufferpool
|
||||
go.uber.org/zap/internal/color
|
||||
go.uber.org/zap/internal/exit
|
||||
go.uber.org/zap/internal/pool
|
||||
go.uber.org/zap/internal/stacktrace
|
||||
go.uber.org/zap/zapcore
|
||||
go.uber.org/zap/zaptest/observer
|
||||
# golang.org/x/arch v0.8.0
|
||||
## explicit; go 1.18
|
||||
golang.org/x/arch/x86/x86asm
|
||||
# golang.org/x/crypto v0.23.0
|
||||
## explicit; go 1.18
|
||||
golang.org/x/crypto/sha3
|
||||
# golang.org/x/exp v0.0.0-20230905200255-921286631fa9
|
||||
## explicit; go 1.20
|
||||
golang.org/x/exp/constraints
|
||||
golang.org/x/exp/slices
|
||||
golang.org/x/exp/slog
|
||||
golang.org/x/exp/slog/internal
|
||||
golang.org/x/exp/slog/internal/buffer
|
||||
# golang.org/x/net v0.25.0
|
||||
## explicit; go 1.18
|
||||
golang.org/x/net/html
|
||||
golang.org/x/net/html/atom
|
||||
golang.org/x/net/http/httpguts
|
||||
golang.org/x/net/http2
|
||||
golang.org/x/net/http2/h2c
|
||||
golang.org/x/net/http2/hpack
|
||||
golang.org/x/net/idna
|
||||
golang.org/x/net/webdav
|
||||
golang.org/x/net/webdav/internal/xml
|
||||
# golang.org/x/sys v0.20.0
|
||||
## explicit; go 1.18
|
||||
golang.org/x/sys/cpu
|
||||
golang.org/x/sys/execabs
|
||||
golang.org/x/sys/plan9
|
||||
golang.org/x/sys/unix
|
||||
golang.org/x/sys/windows
|
||||
# golang.org/x/term v0.20.0
|
||||
## explicit; go 1.18
|
||||
golang.org/x/term
|
||||
# golang.org/x/text v0.15.0
|
||||
## explicit; go 1.18
|
||||
golang.org/x/text/cases
|
||||
golang.org/x/text/encoding
|
||||
golang.org/x/text/encoding/internal
|
||||
golang.org/x/text/encoding/internal/identifier
|
||||
golang.org/x/text/encoding/unicode
|
||||
golang.org/x/text/internal
|
||||
golang.org/x/text/internal/language
|
||||
golang.org/x/text/internal/language/compact
|
||||
golang.org/x/text/internal/tag
|
||||
golang.org/x/text/internal/utf8internal
|
||||
golang.org/x/text/language
|
||||
golang.org/x/text/runes
|
||||
golang.org/x/text/secure/bidirule
|
||||
golang.org/x/text/transform
|
||||
golang.org/x/text/unicode/bidi
|
||||
golang.org/x/text/unicode/norm
|
||||
golang.org/x/text/width
|
||||
# golang.org/x/time v0.9.0
|
||||
## explicit; go 1.18
|
||||
golang.org/x/time/rate
|
||||
# golang.org/x/tools v0.13.0
|
||||
## explicit; go 1.18
|
||||
golang.org/x/tools/go/ast/astutil
|
||||
golang.org/x/tools/go/buildutil
|
||||
golang.org/x/tools/go/internal/cgo
|
||||
golang.org/x/tools/go/loader
|
||||
golang.org/x/tools/internal/typeparams
|
||||
# google.golang.org/protobuf v1.34.1
|
||||
## explicit; go 1.17
|
||||
google.golang.org/protobuf/encoding/protowire
|
||||
google.golang.org/protobuf/internal/detrand
|
||||
google.golang.org/protobuf/internal/encoding/messageset
|
||||
google.golang.org/protobuf/internal/errors
|
||||
google.golang.org/protobuf/internal/flags
|
||||
google.golang.org/protobuf/internal/genid
|
||||
google.golang.org/protobuf/internal/order
|
||||
google.golang.org/protobuf/internal/pragma
|
||||
google.golang.org/protobuf/internal/strs
|
||||
google.golang.org/protobuf/proto
|
||||
google.golang.org/protobuf/reflect/protoreflect
|
||||
google.golang.org/protobuf/reflect/protoregistry
|
||||
google.golang.org/protobuf/runtime/protoiface
|
||||
# gopkg.in/ini.v1 v1.67.0
|
||||
## explicit
|
||||
gopkg.in/ini.v1
|
||||
# gopkg.in/natefinch/lumberjack.v2 v2.2.1
|
||||
## explicit; go 1.13
|
||||
gopkg.in/natefinch/lumberjack.v2
|
||||
# gopkg.in/yaml.v2 v2.4.0
|
||||
## explicit; go 1.15
|
||||
gopkg.in/yaml.v2
|
||||
# gopkg.in/yaml.v3 v3.0.1
|
||||
## explicit
|
||||
gopkg.in/yaml.v3
|
||||
Loading…
Add table
Add a link
Reference in a new issue