OBS Source Service to download, verify and vendor Go module dependency sources

Edit Package obs-service-go_modules

Using go.mod and go.sum distributed with a Go application, the obs-service-go_modules service calls go mod download, go mod verify and go mod vendor. The service then creates vendor.tar.gz containing the vendor/ directory populated by go mod vendor, allowing Go application package builds without network access during the build stage.

Source Files (show merged sources derived from linked package)
Filename Size Changed
_service 0000000687 687 Bytes
_servicedata 0000000248 248 Bytes
obs-service-go_modules-0.6.2.tar.gz 0000015649 15.3 KB
obs-service-go_modules.changes 0000004463 4.36 KB
obs-service-go_modules.spec 0000002922 2.85 KB
Comments 2

Jordi Massaguer's avatar

jordimassaguerpla wrote

SUPER!!! Thanks for this package!

Which "dependency resolution softwares" "supports"? I mean, if I use go get, do this work? Or how do you get the list of the modules that need to go into the vendor directory?

Jeff Kowalczyk's avatar

jfkw wrote

The service extracts the full application source to read go.mod and go.sum contained in the application root. It then uses the online source service phase to download all Go modules in the transitive set of dependencies. Finally it creates a vendor.tar.gz containing all dependencies imported by the Go application and its test code.

During the offline build phase the Go application .spec references vendor.tar.gz as a source, and go build and related commands pass argument go build -mod=vendor or set environment variable GOFLAGS=-mod=vendor. Other Go tools to explore or graph dependencies in the offline build phase should be usable with these vendored dependencies.

There is documentation in the README and manpage that covers the above in more detail. Issues and feature requests welcome at https://github.com/openSUSE/obs-service-go_modules.

openSUSE Build Service is sponsored by