Create a first-class deb WORKSPACE rule about distroless HOT 6 CLOSED

cc @mattmoor @r2d4 wdyt?

from distroless.

I think that we'll want two rules:

   deb_mirror(
       name = "blah",
       url = "https://...",
       # Forget what these are called off the top of my head :)
       foo = "main",
       bar = "jessie",
   )

   deb_pkg(
      name = "openssl",
      mirror = ":blah",
      version = "...",
   )

Alternately we could specify the channel in the rules, but I think this provides a nice way of sharing the deb source. WDYT?

from distroless.

Just looking that travis rules we recently added, maybe we want to expose something similar?

https://docs.travis-ci.com/user/installing-dependencies/#Installing-Packages-on-Container-Based-Infrastructure

Maybe a top level

deb(
    sources = ["trusty"],
    packages = [
        "gcc-4.8",
        "...",
    ],
)

from distroless.

@r2d4 Fixed?

from distroless.

I think there's a bit more work around SHA/checksum validation, but that could be a separate issue.

from distroless.

Closing, there's still a bit more work to be done around UX and validation, but I think this issue can be closed because the rules are in a usable state.

from distroless.