Skip to content

Conversation

@bentekkie
Copy link

@bentekkie bentekkie commented Apr 2, 2025

By vendoring go dependencies using https://go.dev/ref/mod#vendoring it makes it much easier to build rootlesskit in a repeatable and even offline way.

Fixes: #504

@AkihiroSuda
Copy link
Member

it much easier to build rootlesskit in a repeatable and even offline way.

I don't think this affects repeatability? (As long as github.com or proxy.golang.org is alive)

@AkihiroSuda
Copy link
Member

This increases the repo size by 12MiB, so I'd like to see a strong reason to merge this

@AkihiroSuda
Copy link
Member

An alternative idea would be to attach vendor.tar.gz in a release artifact

e.g., lima-1.0.7-go-mod-vendor.tar.gz in https://github.com/lima-vm/lima/releases/tag/v1.0.7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Consider vendoring dependencies

2 participants