Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Register
  • Sign in
  • aports aports
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Graph
    • Compare revisions
  • Issues 666
    • Issues 666
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 305
    • Merge requests 305
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Releases
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • alpinealpine
  • aportsaports
  • Merge requests
  • !26774

RFC: community/go: disable GOPROXY and GOSUMDB

  • Review changes

  • Download
  • Email patches
  • Plain diff
Closed Drew DeVault requested to merge ddevault/aports:master into master Oct 24, 2021
  • Overview 26
  • Commits 1
  • Pipelines 3
  • Changes 2

See the commit message in the patch file for details:

This sets the default value of GOPROXY=direct and GOSUMDB=off, which causes Go to fetch modules directly from the appropriate version control system instead of fetching via Google-operated servers. This improves the privacy of the downstream Go toolchain.

This may cause some issues for users:

  1. The Go proxy will cache dependencies whose upstreams have disappeared, for instance due to a deleted git tag. This can cause some Go programs with broken dependencies to build with the Go proxy, but not without. However, the proxy does not cache packages forever, and eventually the error will arise regardless.
  2. By default, only Git and Mercurial modules will be fetched when using GOPROXY=direct, whereas all version control systems are supported by the proxy. Go packages which do not use Git or Mercurial are rare. The user may configure GOVCS (see go help vcs) to enable additional version control systems.
Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: master