Is there a best practice how to setup QGIS without the official repository but only with a local repository?
The idea behind this is to setup a stable environment where local GIS-admins check plugins before they are added to the local repository.
We had some issues with plugins that made our QGIS installations unstable (for example https://github.com/vinayan/RectOvalDigitPlugin/issues/6 ). As reliablity of software is more important to our colleagues than the free choice between 800 plugins we want to preselect the plugins that are available for them.
At the end of the day it's probably not possible for the person who has to setup QGIS installations to prevent that users install some unwanted/unstable plugins as the plugin-directory and the QGIS2.ini has to be writable by the users but we still want to make our QGIS-working environment a bit more stable.
My ideas are:
Removing the local repository and making the "add" button invisible?
Blocking the official repository through the proxy?
using a Whitelist for allowed plugins and checking the installed plugins against the whitelist with a plugin installed in the QGIS-program folder?
Has anyone else made some experience with QGIS setups in a business IT infrastructure?