Bug#804156: warrant (restrictive) http*_proxy env variables

[Markus Koschany]

Am 05.11.2015 um 15:40 schrieb Yaroslav Halchenko:
> Package: gradle
> Version: 2.5-3
> Severity: wishlist
> 
> Most probably it is not gradle's issue but somewhere within Java's ecosystem of
> libraries it uses.  I just have no clue in that world and would appreciate if
> you forward this bug accordingly
> 
> It is quite often desired to restrict access to network and it is common to do
> so by providing http_proxy env variable(s) to point to a bogus proxy server,
> technique often used in debian/rules.  But it seems that gradle just ignores
> those and happily downloads stuff from the web.
> 
> $> http_proxy=http://localhost:9 https_proxy=http://localhost:9 gradle build    
> :compileJava
> :processResources
> :classes
> :jar
> :assemble
> :compileTestJava
> Download http://maven.xnat.org/libs-release/com/github/tomakehurst/wiremock/1.50/wiremock-1.50.pom
> Download http://maven.xnat.org/libs-release/xmlunit/xmlunit/1.5/xmlunit-1.5.pom
> ...


Hi,

this is explained in Gradle's online manual at

https://docs.gradle.org/current/userguide/build_environment.html

You have to pass the proxy values to the JVM or you can edit
gradle.properties accordingly. The version of gradle in Debian also
prevents projects from downloading anything from the web, if you use
gradle-debian-helper for instance.

Regards,

Markus

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20151105/6dbf8dba/attachment.sig>