One possible solution is to use an Apparmor profile to run the package build contained and disallow network access.
One possible solution is to use an Apparmor profile to run the package build contained and disallow network access.