On 2024-04-01 19:39 +0200, Jonathan Carter wrote:
> On 2024/04/01 18:55, Aurelien Jarno wrote:
>> debian-installer attemps network access during build, although only to
>> the mirrors listed in /etc/apt/sources.list and in a secure way. This is
>> forbidden by Policy 4.9:
>> For packages in the main archive, required targets must not
>> attempt
>> network access, except, via the loopback interface, to services on the
>> build host that have been started by the build.
>> In addition this brings constraints to the build daemons
>> infrastructure.
>
> As far as I know, this doesn't happen until after d-i asked the
> question "Do you want to use a network mirror?" and the user answered
> "Yes", in which case I think that would count as informed consent.
There seems to be a misunderstanding, Aurelien was talking about the
debian-installer source package, not about installation media. Building
.debs from source packages does not ask for consent ;-).
Cheers,
Sven
