From debbugs-submit-bounces@debbugs.gnu.org Wed Jul 20 11:17:47 2022 Received: (at 56664) by debbugs.gnu.org; 20 Jul 2022 15:17:47 +0000 Received: from localhost ([127.0.0.1]:58624 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oEBSM-0004bA-U2 for submit@debbugs.gnu.org; Wed, 20 Jul 2022 11:17:47 -0400 Received: from albert.telenet-ops.be ([195.130.137.90]:60178) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1oEBSH-0004au-JH for 56664@debbugs.gnu.org; Wed, 20 Jul 2022 11:17:46 -0400 Received: from [IPV6:2a02:1811:8c09:9d00:5dba:d409:33f7:a16] ([IPv6:2a02:1811:8c09:9d00:5dba:d409:33f7:a16]) by albert.telenet-ops.be with bizsmtp id xTHf2700V20ykKC06THfhW; Wed, 20 Jul 2022 17:17:40 +0200 Message-ID: <93ae770e-37f0-b72b-621d-559904f1b0cc@telenet.be> Date: Wed, 20 Jul 2022 17:17:39 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.11.0 Content-Language: en-US To: phodina References: From: Maxime Devos Subject: Re: [bug#56664] [PATCH] gnu: Add qtscrcpy. In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------Uhbn2MjPJ7f71LXttbKSFkab" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r22; t=1658330260; bh=QPzZ+QInYx+X8EUKc9F9B8AYypXlB5XfdzDPhhoNkBc=; h=Date:To:Cc:References:From:Subject:In-Reply-To; b=EfK1ocgBmvZwtPuiDSh9cPT0rbvAm7d6vtAD79MnloceigW0nLdgWHdwFmoisyFNZ sR+g9uTWeCywEUbOetG2hqczUTLbquaVmG4nbSThBkyY6d0XXUJIUzYIHLtpQslwY0 +hibEwi+/iWSzw5alsDWaIj1f7d8DFyxhgTs5DWR+Rvrc6qwxwxEYTnzJreak1i7Qr Ol5TMq20zXVf/qmp7GPthRHgqY/yAswO6FweoF7CAf9q88lo9rC/+PuGk9vGrL3YXP OPdLzQEveY0nTB9nkYMJGr2CYalVh2ozevAkpoDVxX+9q26MmYSHlPUIYgt2VRmATp CPlsiFdfbwu0g== X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 56664 Cc: 56664@debbugs.gnu.org, Julien Lepiller X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------Uhbn2MjPJ7f71LXttbKSFkab Content-Type: multipart/mixed; boundary="------------EtpAeVTTI1TeiCTXdSWP2hKe"; protected-headers="v1" From: Maxime Devos To: phodina Cc: 56664@debbugs.gnu.org, Julien Lepiller Message-ID: <93ae770e-37f0-b72b-621d-559904f1b0cc@telenet.be> Subject: Re: [bug#56664] [PATCH] gnu: Add qtscrcpy. References: In-Reply-To: --------------EtpAeVTTI1TeiCTXdSWP2hKe Content-Type: multipart/mixed; boundary="------------JTNyeecBDZd7LjdX4zuKG66S" --------------JTNyeecBDZd7LjdX4zuKG66S Content-Type: multipart/alternative; boundary="------------2svD4KeozmlSkcX3bklwg6Al" --------------2svD4KeozmlSkcX3bklwg6Al Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 DQpPbiAyMC0wNy0yMDIyIDE3OjAzLCBwaG9kaW5hIHdyb3RlOg0KPg0KPiAgICAgT0ssIHRo b3VnaCB0aGVuIHRoaXMgaXMgYSBkcmFmdCBwYXRjaCB0aGF0J3MgYmxvY2tlZCBieSBzdXBw b3J0aW5nDQo+ICAgICBncmFkbGUgYW5kIEFuZHJvaWQ7IEd1aXggaXMgYSBidWlsZC1mcm9t LXNvdXJjZSBkaXN0cm8gKHRoZXJlIGFyZQ0KPiAgICAgc29tZSBib290c3RyYXAgc2VlZHMs IGJ1dCB0aGUgaWRlYSBpcyB0byByZWR1Y2UgdGhlbSwgbm90IGVubGFyZ2UNCj4gICAgIHRo ZW0pLg0KPg0KPiBJIHVuZGVyc3RhbmQgdGhhdCB0aGUgYWltIGlzIHRvIHJlZHVjZSB0aGUg cHJlYnVpbGQgc3R1ZmYgbm90IHZpY2UgDQo+IHZlcnNhIHRoYXQncyB3aHkgSSBsYWJlbGVk IGl0IGhlcmUuIE9uZSBzb2x1dGlvbiBjb3VsZCBiZSB0byByZXBsYWNlIA0KPiB0aGUgbG9j YXRpb24gYnkgc3BlY2lmeWluZyBzb21lIGVudiB2YXJpYWJsZSBhbmQgdGhlIHVzZXIgd291 bGQgc3VwcGx5IA0KPiBlaXRoZXIgdGhlIHByZWJ1aWxkIHZlcnNpb24gZnJvbSB0aGUgcmVw byBvciBidWlsZCBpdCB0aGVtc2VsZiBlLmcuIGluIA0KPiBEb2NrZXIuDQo+DQo+IFRoaXMg d2F5IHRoZSBwYWNrYWdlIHdvdWxkIG5vdCBoYXZlIGFueSBwcmVidWlsZCBmaWxlcy4gV291 bGQgdGhhdCBiZSANCj4gb2theT8NCj4NClRoZSBwYWNrYWdlIHdvdWxkIG5vdCBoYXZlIHBy ZWJ1aWxkIGZpbGVzLCBidXQgdGhlIHVzZXIgd2lsbCBoYXZlIHRvIA0KZG93bmxvYWQgc29t ZSBwcmVidWlsZCBmaWxlcyBhbnl3YXksIHNvIGVmZmVjdGl2ZWx5IHRoZSBwcm9ibGVtIG9m IA0KcHJlYnVpbGQgZmlsZXMgcmVtYWlucyAodGhlIHVzZXIgaGFzIHRvIHRydXN0IHNvbWUg cmFuZG9tIGRvd25sb2FkIA0KbG9jYXRpb24gdG8gaGF2ZSBhbiB1bmJhY2tkb29yZWQgYmlu YXJ5LCB0aGF0IHRoZXkgY2FuIG5vdCBpbnNwZWN0LCBhbmQgDQp3aGlsZSB0aGV5IGNhbiBt b2RpZnkgdGhlIHNvdXJjZSBjb2RlLCBpdCdzIHVzZWxlc3MgYmVjYXVzZSB0aGV5IGNhbid0 IA0KY29tcGlsZSBpdDsgR3VpeCBjYW5ub3QgZXhlcmNpc2UgZnJlZWRvbSAxKS4NCg0KQWxz bywgb25lIG9mIHRoZSBwcmltYXJ5IHRhc2tzIG9mIGEgcGFja2FnZSBtYW5hZ2VyIGlzIHRv IGtlZXAgdHJhY2sgb2YgDQpkZXBlbmRlbmNpZXMsIGF1dG9tYXRpY2FsbHkgaW5zdGFsbGlu ZyB0aGUgKG5vbi1vcHRpb25hbCkgZGVwZW5kZW5jaWVzLCANCndoaWNoIHNlZW1zIGluY29t cGF0aWJsZSB3aXRoIHRlbGxpbmcgYSB1c2VyIHRvIGdyYWIgYSBkZXBlbmRlbmN5IGZyb20g DQpvdXRzaWRlIHRoZSBwYWNrYWdlIG1hbmFnZXIuDQoNCkFzIHN1Y2gsIEkgYmVsaWV2ZSB0 aGlzIG5vdCB0byBiZSBva2F5LCBhbmQgdGhhdCBpdCBpcyByZXF1aXJlZCB0byBtYWtlIA0K Z3JhZGxlICYgQW5kcm9pZCB0aGluZ3MgZnVuY3Rpb25hbCBmaXJzdC4NCg0KR3JlZXRpbmdz LA0KTWF4aW1lLg0KDQo= --------------2svD4KeozmlSkcX3bklwg6Al Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On 20-07-2022 17:03, phodina wrote:

OK, though then this is a draft patch that's blocked by supporting gradle and Android; Guix is a build-from-source distro (there are some bootstrap seeds, but the idea is to reduce them, not enlarge them).

I understand that the aim is to reduce the prebuild stuff not vice versa that's why I labeled it here. One solution could be to replace the location by specifying some env variable and the user would supply either the prebuild version from the repo or build it themself e.g. in Docker.

This way the package would not have any prebuild files. Would that be okay?

The package would not have prebuild files, but the user will have to download some prebuild files anyway, so effectively the problem of prebuild files remains (the user has to trust some random download location to have an unbackdoored binary, that they can not inspect, and while they can modify the source code, it's useless because they can't compile it; Guix cannot exercise freedom 1).

Also, one of the primary tasks of a package manager is to keep track of dependencies, automatically installing the (non-optional) dependencies, which seems incompatible with telling a user to grab a dependency from outside the package manager.

As such, I believe this not to be okay, and that it is required to make gradle & Android things functional first.

Greetings,
Maxime.

--------------2svD4KeozmlSkcX3bklwg6Al-- --------------JTNyeecBDZd7LjdX4zuKG66S Content-Type: application/pgp-keys; name="OpenPGP_0x49E3EE22191725EE.asc" Content-Disposition: attachment; filename="OpenPGP_0x49E3EE22191725EE.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xjMEX4ch6BYJKwYBBAHaRw8BAQdANPb/d6MrGnGi5HyvODCkBUJPRjiFQcRU5V+m xvMaAa/NL01heGltZSBEZXZvcyA8bWF4aW1lLmRldm9zQHN0dWRlbnQua3VsZXV2 ZW4uYmU+wpAEExYIADgWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCX4ch6AIbAwUL CQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRBJ4+4iGRcl7japAQC3opZ2KGWzWmRc /gIWSu0AAcfMwyinFEEPa/QhUt2CogD/e2RdF4CYAgaRHJJmZ9WU7piKbLZ7llB4 LzgezVDHggzNJU1heGltZSBEZXZvcyA8bWF4aW1lZGV2b3NAdGVsZW5ldC5iZT7C kAQTFggAOBYhBMHzPuIMUo/bfdcBH0nj7iIZFyXuBQJf56ycAhsDBQsJCAcDBRUK CQgLBRYCAwEAAh4BAheAAAoJEEnj7iIZFyXujpQBAKV1SwDDl4f24rXciDlB9L8W ycZt30CgbewMSRQk4mvbAP9dFMbVVixYBd6C8cfhR+NsOBGiOJnQABlUmgNuqGFJ Dc44BF+HIegSCisGAQQBl1UBBQEBB0BOlzIWiJzgobMF6/cqwLaLk7jIcFSZ++c0 k9cCNT6YXwMBCAfCeAQYFggAIBYhBMHzPuIMUo/bfdcBH0nj7iIZFyXuBQJfhyHo AhsMAAoJEEnj7iIZFyXuMr0BAJc8cl5PGvVmVuSQVKjleNl4DK1/XAaPAYPe34AE fZJPAP9IqLCQhH/FeJanHqBP8gNdGNI2qn8RnnLVfRJgUjZ1BA=3D=3D =3DOVqp -----END PGP PUBLIC KEY BLOCK----- --------------JTNyeecBDZd7LjdX4zuKG66S-- --------------EtpAeVTTI1TeiCTXdSWP2hKe-- --------------Uhbn2MjPJ7f71LXttbKSFkab Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wnsEABYIACMWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYtgckwUDAAAAAAAKCRBJ4+4iGRcl7kub AP9EL2NuWlbkkt4eHOMGLMvuFtc+FtFcPXWLhdisIUNPowD/WyIqE/8Rzo/OHRJ5FtkfHCTRl2v5 Lnonr27GvFYMhgE= =V/g+ -----END PGP SIGNATURE----- --------------Uhbn2MjPJ7f71LXttbKSFkab--