Warning about importing a MELPA package

  • Open
  • quality assurance status badge
Details
2 participants
  • Zhu Zihao
  • Carlo Zancanaro
Owner
unassigned
Submitted by
Zhu Zihao
Severity
normal
Z
Z
Zhu Zihao wrote on 25 Nov 2020 10:57
(address . bug-guix@gnu.org)
86mtz5zrm3.fsf@163.com
ELPA importer supports MELPA[1] currently. But MELPA is a rolling
archive, which does not persist any old version tarball of
package, and harmful for reproducible build.

It's still useful for Guix packager to import package from MELPA to
draft a sketch of Emacs package, but it's not a reliable download
service. We may better warn user don't submit package which download url
belongs to MELPA. Maybe emit warning while executing `guix import elpa -a
melpa XXX`, or writing this rule to manual.

[1]: the stable archive is "MELPA stable", I use term "MELPA" to refer
to the unstable one.

--
Retrieve my PGP public key: https://meta.sr.ht/~citreu.pgp

Zihao
-----BEGIN PGP SIGNATURE-----

iQFIBAEBCAAzFiEE7NCVzXX6efyusptG1SOVn+xGFqYFAl++KnQVHGFsbF9idXRf
bGFzdEAxNjMuY29tAAoJENUjlZ/sRhamfasH9jxauMcL6gBh7pbAYzgvcY1JgkvT
MRbg7LC8qo3swIxpTmcVQqy9GcBEmnzpf9vn63E4Qpz9MmLpt2s+4IHI5Cy2RkrW
01gvjw/j8UINfZrdZ3hhhOY9uOrJTYvbSmqbNRv0f7YCTx1oQ3Im0qnGdNTOQaZQ
OYW7B4B43fHfuUGGZrJzUvQdPl4txycr6zfPBWzI6YaA2OVbmv7demptw7xTzcKv
61TUuenGens7Gw44PNLDL3Rxuxyz7NE+8C1t482INztLrqy0BmRblLtptHZyb5kC
3vt+GHDnzwom98sK1S8auj5yXLWT4yhjeaaVHLBxGNb0mNawfluDFPYRiQ==
=QhaM
-----END PGP SIGNATURE-----

C
C
Carlo Zancanaro wrote on 7 Dec 2020 10:17
(name . Zhu Zihao)(address . all_but_last@163.com)(address . 44863@debbugs.gnu.org)
87pn3mdlg9.fsf@zancanaro.id.au
On Wed, Nov 25 2020, Zhu Zihao wrote:
Toggle quote (4 lines)
> ... We may better warn user don't submit package which download
> url belongs to MELPA. Maybe emit warning while executing `guix
> import elpa -a melpa XXX`, or writing this rule to manual.

I submitted a patch a while ago to make the MELPA importer pull
the latest git commit (at the time of import) and use that as the
source. The importer has to do a bit more work (eg. appropriately
setting #:files in the Guix package).

but unfortunately it no longer applies cleanly to master. I'll
take a look at fixing it up.
C
C
Carlo Zancanaro wrote on 7 Dec 2020 10:54
87mtyqdjq1.fsf@zancanaro.id.au
On Mon, Dec 07 2020, Carlo Zancanaro wrote:
Toggle quote (2 lines)
> ... unfortunately it no longer applies cleanly to master.

Actually, I think I was wrong about this. I must have done
something wrong when I tried to apply the patch before sending my
email. When I tried again it worked, and it seems to be fetching
the git references properly.
?