David Pirotte <da...@altosw.be> writes:
> Wrt packaging g-golf in guix, please allow me to suggest to adopt this
> approach, which is what debian does, and I recently convinced the nix
> pkg maintainer to also 'do the same'.
>
> I highly recommend that you split and propose (for now) 3 pkgs:
>
>       g-golf 
>       g-golf-gtk-4-examples
>       g-golf-adw-1-examples

Thank you for your consideration towards Guix!  I don’t want to make a
decision on the examples and would actually like a separate package for
the examples as well, sadly sadly since Guix commit

commit 78c4d00ab02ab41a22058cdbec0329752e47580f
Author: Maxim Cournoyer <maxim.courno...@gmail.com>
Date:   Sat Dec 14 22:52:22 2024 +0900

    gnu: glibc: Graft with fix for CVE-2024-2961.


any package that uses g-golf and possibly more can again only run using
--no-grafts.  This is Guix bug <https://bugs.gnu.org/75157>, but
actually it is much older <https://bugs.gnu.org/48907> and manifested
even earlier in March 2021 at least.

Requiring --no-grafts in a package is not good; I hereby ask other Guix
developers if it really would be good to package normally not working
G-Golf examples.

Currently the nomad web browser is the only user of g-golf in Guix,
which for a long time fails to build for incompatibility with modern
Webkit anyway.

Nix has no grafts as far as I know, and indeed a good work-around with
security updates is in Guix to build with GI_TYPELIB_PATH set to
something like the ungraft manifest.  I described this in the above
bug#75157.  But it takes multiple days to build Rust, Go and others and
would be too much for our Continuous Integration.

> G-Golf does only also depend on guile-lib if you run the test-suite,
> so you, as a package maintainer, may run it, but the distributed package
> should probably not depend on guile-lib.

This is already done in Guix, because test-only dependencies already do
not persist after building G-Golf or when downloading pre-compiled
G-Golf substitutes.  That is, guile-lib, gtk+ and such is not propagated.

> In the test-suite, I had a clutter dependency, but I finally got rid of
> all clutter calls (which I had for historical reasons).

Done, thank you for removing it!

Regards,
Florian

Reply via email to