canonical / canonical/chisel

Pin package versions? Use snapshot archives?

Open
#154 13 comments 4 reactions 1 assignee Claimed by @rebornplusplus View on GitHub
Dominant language
Go
Stars
424
Forks
65
Avg merge
12d 19h
Merged PRs (30d)
1

Description

I'm new to `chisel`, so my understanding may be wrong. But it seems like packages are always picked from the "latest" available version. While this may be good for experimenting, it doesn't help making stable (read: reproducible) builds.

Is it possible to pin package versions? Is it possible to use snapshot archives?

From a quick look at the source code, it seems like [repositories are hardcoded](https://github.com/canonical/chisel/blob/main/internal/archive/archive.go#L129). If so, are there any plans to offer alternatives in these areas?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.