@cloud_manul @thesamesam @dalias @mirabilos It's a fairly usual case among distros but sadly there's few times where you end up enabling network access and sadly it's not always nicely flexible (like IIRC git-based recipes in gentoo aren't sandboxed from the network…).