On Fri, 23 Dec 2022, Sebastian Andrzej Siewior wrote:
Then we need to decide what we do about the rust bits. I'm currently unsure if we can use the in-source bits or must use packages.
From https://blog.clamav.net/2022/10/
Starting with ClamAV 0.105.1, some of the ClamAV project is written in Rust and depends on Rust libraries. To make it possible for our users to build ClamAV offline, we bundle in the Rust dependencies. I think that means that some of the rust code in the clam tarball is needed and some can be replaced by system versions. I am a little uneasy about build time downloads of dependencies, but that looks like a general rust issue. Elsewhere ClamAV suggest that packages are built on the oldest system you wish to support, as that they will run on newer systems too. Personally I prefer each system version to have its own package built on that system, but I'd stick with the standard Debian way. -- Andrew C. Aitchison Kendal, UK and...@aitchison.me.uk