Skip to content

install_matching_bazel_version.sh seems inconsistent with installing bazel via apt in the first place #34

@NEOatNHNG

Description

@NEOatNHNG

Reasoning within src/s-core-devcontainer/.devcontainer/s-core-local/install.sh for not using bazelisk:

# Bazel, via APT
# - ghcr.io/devcontainers-community/features/bazel uses bazelisk, which has a few problems:
# - It does not install bash autocompletion.
# - The bazel version is not pinned, which is required to be reproducible and to have coordinated, tested tool updates.
# - In general, pre-built containers *shall not* download "more tools" from the internet.
# This is an operational risk (security, availability); it makes the build non-reproducible,
# and it prevents the container from working in air-gapped environments.

This seems to be at least partly in conflict with having the install_matching_bazel_version.sh which installs the bazel version as given by the repo if it doesn't match the one in the container.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

Status

Draft

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions