From c41930d41665e284ed3def1e90d2e2f930325fea Mon Sep 17 00:00:00 2001
From: Pascal Terjan <pterjan@mageia.org>
Date: Fri, 13 Oct 2017 15:40:38 +0100
Subject: Allow libguestfs to access network during build

---
 modules/buildsystem/manifests/iurt/config.pp | 4 ++++
 modules/buildsystem/templates/iurt.conf      | 7 +++++++
 2 files changed, 11 insertions(+)

diff --git a/modules/buildsystem/manifests/iurt/config.pp b/modules/buildsystem/manifests/iurt/config.pp
index c986f347..9673510f 100644
--- a/modules/buildsystem/manifests/iurt/config.pp
+++ b/modules/buildsystem/manifests/iurt/config.pp
@@ -25,6 +25,10 @@ define buildsystem::iurt::config() {
       'eclipse' => 172800,
     }
 
+    $allow_network_access = [
+      'libguestfs', # Needs access to the configured mirrors
+    ]
+
     file { "/etc/iurt/build/${distribution}.conf":
         owner   => $build_login,
         group   => $build_login,
diff --git a/modules/buildsystem/templates/iurt.conf b/modules/buildsystem/templates/iurt.conf
index 56f24f66..d021d5e0 100644
--- a/modules/buildsystem/templates/iurt.conf
+++ b/modules/buildsystem/templates/iurt.conf
@@ -25,6 +25,13 @@
 <%- build_timeout.keys.sort.each{|package| -%>
    '<%= package %>' => <%= (build_timeout[package].to_f * scope.lookupvar('buildsystem::var::iurt::timeout_multiplier').to_f).to_i %>,
 <%-
+} -%>
+ },
+ use_netns => {
+   'default' => 1,
+<%- allow_network_access.sort.each{|package| -%>
+   '<%= package %>' => 0,
+<%-
 } -%>
  },
 }
-- 
cgit v1.2.1