[bisq-network/bisq] Document how to build bisq without gradle. (#4730)

[cd2357]

> Especially when `gradle/witness/gradle-witness.gradle` only store SHA1 vulnerable to pre-image attack

It's actually SHA-256 (see #5372).

> it would be a good thing for packager to be able to download all the needed archives using their own respective process and let gradle use a local predefined directory to pick each pom/jar so the build can be made in a network restrict sandbox

Something like that might be possible using this approach: https://stackoverflow.com/questions/7016226/how-to-configure-gradle-to-use-a-local-repository-only-for-certain-dependency-gr

However this is a very esoteric sort of setup with its own set of challenges. It might be worth enabling network access for the build process, or just building on a separate dedicated VM, if necessary.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/bisq/issues/4730#issuecomment-809406910
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20210329/ae8214e7/attachment.htm>