You should use the merge modules, IMO. Unfortunately DevDiv has been
historically bad at generating good merge modules. You'll have to ignore the
warnings. They're only warning that a column's declared length was exceeded,
I don't think any actual harm occurs (since the files are actually installed
by a package that has had this module merged in).

Yes, if you use vcredist_x86.exe, the user can uninstall the runtimes out
from under you. You can't do anything about this - packages are meant to be
self-contained and independent of each other, not requiring other packages
to be installed first, so there's no way to add a reference to another
package.

-- 
Mike Dimmick

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Anthony Wieser
Sent: 01 June 2007 11:33
To: wix-users@lists.sourceforge.net
Subject: [WiX-users] VC8 runtime redistribution best practice. Should I
usemerge modules or bootstrapper with vcredist_x86.exe?

I'm starting to get paranoid now, having been bitten so many times along the

MSI journey.

Currently I link most of my applications statically to the VC runtimes, but 
in the case where I want to redistribute the MFC/VC runtimes, which is the 
best way?

I've looked through the latest vcredist package, and found that the files in

it weren't marked as permanent.

As I only install vcredist.exe if it's product code isn't present in my 
custom bootstrapper, it seems to me it will only be installed with the first

product I install.  After that, it's on the system.

That makes sense, but what happens if after you install my product, someone 
uninstalls vcredist.exe. Will all of my required DLL's be uninstalled out 
from under me if the files weren't already installed on the computer from 
another component?  I can't see how to add a reference to a component that I

didn't install.

I leaned toward the vcredist method, because it makes for smaller installs, 
as you don't need to ship the contents to everyone, and also because the 
merge modules generated so many warnings.

But on further investigation, it appears that the vcredist packages aren't 
properly signed either.  The external package is signed on the new redist, 
but after hitting the license agreement page, you're presented with the UAC 
dialog, saying that:
VCREDI~3.EXE from an unknown publisher wants to access your computer.

That's maybe a little too scary for my users.

Anthony Wieser
Wieser Software Ltd


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
WiX-users mailing list
WiX-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/wix-users

Reply via email to