[Letsencrypt-devel] Bug#834883: python-certbot: accesses the internet during build

[Chris Lamb]

Source: python-certbot
Version: 0.8.1-2
Severity: serious
Justification: Policy 4.9
User: lamby at debian.org
Usertags: network-access

Dear Maintainer,

Whilst python-certbot builds successfully on unstable/amd64, according to
Debian Policy 4.9 packages may not attempt network access during
a build.

  00:00:00.000000 IP c4d4db5df9ad.43192 > 10.0.1.1.domain: 42224+ A? docs.python.org. (33)
  00:00:00.000059 IP c4d4db5df9ad.43192 > 10.0.1.1.domain: 18153+ AAAA? docs.python.org. (33)
  00:00:00.015748 IP 10.0.1.1.domain > c4d4db5df9ad.43192: 42224 3/0/0 CNAME python.map.fastly.net., CNAME prod.python.map.fastlylb.net., A 151.101.16.223 (123)
  00:00:00.026193 IP 10.0.1.1.domain > c4d4db5df9ad.43192: 18153 3/0/0 CNAME python.map.fastly.net., CNAME prod.python.map.fastlylb.net., AAAA 2a04:4e42:f::223 (135)
  00:00:00.026616 IP c4d4db5df9ad.48670 > 151.101.16.223.https: Flags [S], seq 1157690354, win 29200, options [mss 1460,sackOK,TS val 135261607 ecr 0,nop,wscale 7], length 0
  00:00:00.034975 IP 151.101.16.223.https > c4d4db5df9ad.48670: Flags [S.], seq 777860429, ack 1157690355, win 28120, options [mss 1400,sackOK,TS val 2122849988 ecr 135261607,nop,wscale 9], length 0
  00:00:00.035004 IP c4d4db5df9ad.48670 > 151.101.16.223.https: Flags [.], ack 1, win 229, options [nop,nop,TS val 135261609 ecr 2122849988], length 0
  00:00:00.035226 IP c4d4db5df9ad.48670 > 151.101.16.223.https: Flags [P.], seq 1:518, ack 1, win 229, options [nop,nop,TS val 135261609 ecr 2122849988], length 517
  00:00:00.045511 IP 151.101.16.223.https > c4d4db5df9ad.48670: Flags [.], seq 1:1389, ack 518, win 58, options [nop,nop,TS val 2122849990 ecr 135261609], length 1388
  00:00:00.045551 IP c4d4db5df9ad.48670 > 151.101.16.223.https: Flags [.], ack 1389, win 250, options [nop,nop,TS val 135261612 ecr 2122849990], length 0

  [..]

This appears to be caused by (at least) Sphinx's intersphinx mapping extension.
Please see #830186 for more information, including suggestions on how to fix it.

The full build log (including tcpdump output) is attached.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: python-certbot.0.8.1-2.unstable.amd64.log.txt.gz
Type: application/octet-stream
Size: 20980 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/letsencrypt-devel/attachments/20160820/a9d6f41b/attachment-0001.obj>