On K, 2008-05-07 at 15:34 +0200, Fabian Groffen wrote: > On 07-05-2008 16:23:12 +0300, Mart Raudsepp wrote: > > This is a plea and also a request for comments on the matter of > > using .tar.lzma tarballs or not, and for what packages this is > > acceptable and for what not. > > Just as a little background: > GNU chose to switch from bzip2 to lzma, for it produces smaller files > (less bandwith) and decompresses faster. > > They no longer provide the bzip2 versions of archives for newer releases > IIRC, so it's either tar.gz or tar.lzma. > > > I'd be happy if some other unpacker is used than lzma-utils - one that > > does not depend on libstdc++ - I'm sure it can be done, heck it's done > > in integrated form in some other projects in less than a couple > > kilobytes of code for the unpacking from a VFS. Meanwhile please > > consider using the upstream provided .tar.gz tarballs instead and not > > roll patchsets in .lzma just cause you can. > > See above why it might not just be "'cause you can".
"and not roll patchsets in .lzma just cause you can". Cause you can applies to patchsets mostly. But using .tar.lzma instead of .tar.gz is also a "because they are available and therefore I can use it" neglecting the issues of a) on-disk format is supposedly not even finalized; high potential breakage of packages in existing ebuilds once lzma-utils gets updated b) The currently used decompressor package links to libstdc++ (and portage uses lzma, not lzmadec) unconditionally for most components c) Potential security issues; details needed, but for other reasons it makes sense to ban .tar.lzma's until a new C only rewritten lzma-utils comes along anyway d) too early adoption in critical system packages - once above issues are solved, higher levels should be using it first, before critical system packages (for example shows in the circular dep hell with m4) e) It has been suggested the support should have been added with new EAPI instead of local build deps (some of which are missing, for instance in the hand-rolled for-no-reason-whatsoever .tar.lzma format net-tools doesn't have a dep in addition to using lzma for no good reason) Probably some more. Base-system, please stop using .tar.lzma for now, thank you. -- Mart Raudsepp Gentoo Developer Mail: [EMAIL PROTECTED] Weblog: http://planet.gentoo.org/developers/leio
signature.asc
Description: This is a digitally signed message part
