awscli@2.2.0 downloads and runs a docker container from a large american corporation

  • Open
  • quality assurance status badge
Details
One participant
  • Collin J. Doering
Owner
unassigned
Submitted by
Collin J. Doering
Severity
normal
C
C
Collin J. Doering wrote on 5 Jan 15:40 +0100
(address . bug-guix@gnu.org)
87il474ytd.fsf@rekahsoft.ca
One thing I deeply appreciate about Gnu Guix is the fact that I have assurance that I have installed and am using software that respects my fundamental software freedoms. My understanding based on Guix's packaging guidelines (https://guix.gnu.org/manual/en/html_node/Packaging-Guidelines.html)is that a package should include all necessary software, libraries and resources necessary for the program to function; either directly or via dependencies. However, it appears that awscli@2.2.0 (and all former versions of the v2 variant of awscli) download a docker image and run it. This is evident by the following, where guix shell is used to run awscli@2.2.0 in a container, but docker and its daemon are not present.

Toggle snippet (6 lines)
? guix shell -C awscli@2.2.0 -- awsv2 --version
2.2.0
AWS CLI v2 command: docker run -i --rm -v /home/collin/.aws:/root/.aws -v /home/collin:/aws amazon/aws-cli
14:45:09 - awscliv2 - ERROR - Executable not found: docker

I propose awscli@2.2.0 be removed immediately from guix.

Kind regards


It is still in need of some cleanup, and awscli is in an odd place (given the dependencies they vendor and fork), but it does work, and it depends on sources. This also follows closely to what nix does (see https://github.com/NixOS/nixpkgs/blob/master/pkgs/tools/admin/awscli2/default.nix).

--
Collin J. Doering

-----BEGIN PGP SIGNATURE-----

iQFIBAEBCAAyFiEE+NVG868371PRtki+e03rkyErMCIFAmWYF74UHGNvbGxpbkBy
ZWthaHNvZnQuY2EACgkQe03rkyErMCLLQQf9HmnHgJj5V+qwvSK0qzq9ivG4xu+5
CbpdY/qXJlh18nRQjEyYYbFfJavS161EHC4+03EI+blCMRQavMovZK8b01EWUeT6
/hgfQt33sUlevkHX8I98ptdHJ6z3J6iZJeeeN/W+ymIM4SHZr2xfo0/6wgQ/fq8G
+a7fc6hxCkdbfVfG/4/9oZHc619AFxzcSaGoZSERmzFlsSHBUlvrU7CDt8sfzy5O
VyIQN1Wltqwhl07E46CL6aXH7svoYCd4JnX/ULDF1HIiLtMFmOwcoGWY1xTx4Xuz
yTcjXCDrsBfr5D15dMev0AcGABVQr42wVXkqmRsBtKndZgTR6Wk+kzRcgw==
=E7SR
-----END PGP SIGNATURE-----

?
Your comment

Commenting via the web interface is currently disabled.

To comment on this conversation send an email to 68264@debbugs.gnu.org

To respond to this issue using the mumi CLI, first switch to it
mumi current 68264
Then, you may apply the latest patchset in this issue (with sign off)
mumi am -- -s
Or, compose a reply to this issue
mumi compose
Or, send patches to this issue
mumi send-email *.patch