> I've already switched GMP back to use an outdated release tarball because of how annoyingly flakey their mercurial server is. We had a similar problem. Step

> I've already switched GMP back to use an outdated release tarball because of how annoyingly flakey their mercurial server is. We had a similar problem. Step one - don't allow submodules from outside of github.com: https://github.com/ClickHouse/ClickHouse/blob/master/utils/check-style/check-style#L246 https://github.com/ClickHouse/ClickHouse/blob/master/utils/c... If there is a dependency from external git repository, it can be forked to github.com. But we still have a problem with: - Docker Hub; - Cargo. Sometimes they are offline. Also we should not use them to avoid supply-chain attacks. The solution probably should be: - copy all docker images as tarballs; - or use ECR. Still not sure what to do with Cargo: https://github.com/ClickHouse/ClickHouse/issues/48575 https://github.com/ClickHouse/ClickHouse/issues/48575