awscli@2.2.0 downloads and runs a docker container from a large american corporation

  • Done
  • quality assurance status badge
Details
2 participants
  • Collin J. Doering
  • Sharlatan Hellseher
Owner
unassigned
Submitted by
Collin J. Doering
Severity
normal
C
C
Collin J. Doering wrote on 5 Jan 15:40 +0100
(address . bug-guix@gnu.org)
87il474ytd.fsf@rekahsoft.ca
One thing I deeply appreciate about Gnu Guix is the fact that I have assurance that I have installed and am using software that respects my fundamental software freedoms. My understanding based on Guix's packaging guidelines (https://guix.gnu.org/manual/en/html_node/Packaging-Guidelines.html)is that a package should include all necessary software, libraries and resources necessary for the program to function; either directly or via dependencies. However, it appears that awscli@2.2.0 (and all former versions of the v2 variant of awscli) download a docker image and run it. This is evident by the following, where guix shell is used to run awscli@2.2.0 in a container, but docker and its daemon are not present.

Toggle snippet (6 lines)
? guix shell -C awscli@2.2.0 -- awsv2 --version
2.2.0
AWS CLI v2 command: docker run -i --rm -v /home/collin/.aws:/root/.aws -v /home/collin:/aws amazon/aws-cli
14:45:09 - awscliv2 - ERROR - Executable not found: docker

I propose awscli@2.2.0 be removed immediately from guix.

Kind regards


It is still in need of some cleanup, and awscli is in an odd place (given the dependencies they vendor and fork), but it does work, and it depends on sources. This also follows closely to what nix does (see https://github.com/NixOS/nixpkgs/blob/master/pkgs/tools/admin/awscli2/default.nix).

--
Collin J. Doering

-----BEGIN PGP SIGNATURE-----

iQFIBAEBCAAyFiEE+NVG868371PRtki+e03rkyErMCIFAmWYF74UHGNvbGxpbkBy
ZWthaHNvZnQuY2EACgkQe03rkyErMCLLQQf9HmnHgJj5V+qwvSK0qzq9ivG4xu+5
CbpdY/qXJlh18nRQjEyYYbFfJavS161EHC4+03EI+blCMRQavMovZK8b01EWUeT6
/hgfQt33sUlevkHX8I98ptdHJ6z3J6iZJeeeN/W+ymIM4SHZr2xfo0/6wgQ/fq8G
+a7fc6hxCkdbfVfG/4/9oZHc619AFxzcSaGoZSERmzFlsSHBUlvrU7CDt8sfzy5O
VyIQN1Wltqwhl07E46CL6aXH7svoYCd4JnX/ULDF1HIiLtMFmOwcoGWY1xTx4Xuz
yTcjXCDrsBfr5D15dMev0AcGABVQr42wVXkqmRsBtKndZgTR6Wk+kzRcgw==
=E7SR
-----END PGP SIGNATURE-----

S
S
Sharlatan Hellseher wrote 3 days ago
(address . 68264@debbugs.gnu.org)
878qtgkujf.fsf@gmail.com
Hi,

This issue was resolved in https://issues.guix.gnu.org/74345 and
applied as ea6c381cac..391de92713 to master

--
Oleg
-----BEGIN PGP SIGNATURE-----
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=hUGN
-----END PGP SIGNATURE-----

S
S
Sharlatan Hellseher wrote 2 days ago
(address . 68264-done@debbugs.gnu.org)
8734jokufg.fsf@gmail.com

-----BEGIN PGP SIGNATURE-----
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=ZA7F
-----END PGP SIGNATURE-----

Closed
?
Your comment

Commenting via the web interface is currently disabled.

To comment on this conversation send an email to 68264@debbugs.gnu.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 68264
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch