tree be0330e49c683b8a214b3ef971cd0edb9978d8aa
parent d7e07fcdcc70fefea438f558a811099b5da756c1
author Ignas Anikevicius <240938+aignas@users.noreply.github.com> 1718770138 +0900
committer GitHub <noreply@github.com> 1718770138 +0000
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJmclnqCRC1aQ7uu5UhlAAAZCUQACb/UxmP7Aq2FaexnPopUpdI
 wkYfOda2roPRYEAH+IwGZQ9JV17fYznlEithzsBdPwqS3jBNEycv4i66FYkzi0kH
 ZjMsmTNLkuJHHAK6TcAgcGZcRF/xWGyzciRXmBRjN5T+v4r1ao41i37Pb+qpjts4
 gVSBoCV+Z+sSXm9Q409/9E6rb7bmsWWndgwCvbfaKQaaidOc7mORepi+rz3H88wO
 lnID52xStlsSOW6ZByU0ToXjUp6XLMmH54+9Py9Qs8TKJIwqeH2790GIP2KauPZl
 p0cPKss8tQRBCz3Do5gFG8cuni8BTiJRSgZ34KO++vxoGL4O1Ncg99MvDhHcUc9g
 SxjWPAifdzRnc57VC4KWnRuZqJnZkQ4CcCZNcbgVXx6PvgQXU2/fLHr84eq8pNfh
 JaeaFUiJxAAveNf3bUTn6fI7monLq+KR5Jtlg/ezoPlHGDBBf1S4GwmohnnMyYLh
 CEWZ0qsmtCDWbXaPh46skKYvdR45ylxPJwF5raEyItvOYuUP4kY/OXGlICmS2VK6
 nifnP5ghp1WvaQn6muYKzJAy3TDuWaxIAd2FJVvs8ElYEhuMCYW7r4MxaSoBCpZF
 d/lP3KG1r8s9/Ie/kBfIxB2mxydCGTk7jWzh/AzhoWLtM4cQBDQAjACcAydEgPFr
 Yn5JYlx9PV6U7nIvDZw7
 =i2Dg
 -----END PGP SIGNATURE-----
 

fix(toolchain): disable exec toolchain by default (#1968)

This makes the exec tools toolchain disabled by default to prevent
toolchain resolution
from matching it and inadvertently pulling in a dependency on the
hermetic runtimes.
While the hermetic runtime wouldn't actually be used (precompiling is
disabled
by default), the dependency triggered downloading of the runtimes, which
breaks
environments which forbid remote downloads they haven't vetted (such a
case is
Bazel's own build process).

To fix this, a flag is added to control if the exec tools toolchain is
enabled or not.
When disabled (the default), the toolchain won't match, and the remote
dependency isn't
triggered.

Fixes #1967.

---------

Co-authored-by: Richard Levasseur <rlevasseur@google.com>