Re: [aur-general] AUR migration

2020-07-23 Thread Sven-Hendrik Haase via aur-general


On 23.07.20 22:09, Giancarlo Razzolini via aur-general wrote:
> Hi All,
> 
> In continuing with the improvements being done to our infrastructure, we're
> planning to migrate the AUR to another machine. This means that, during
> the migration,
> there *will* be downtime of the whole AUR.
> 
> I expect the migration to take around two hours and happen either
> tomorrow (Friday)
> or on Saturday, depending on availability.
> 
> Regards,
> Giancarlo Razzolini

Thanks for taking the time! I hope there won't be any weird unforeseen
problems.



signature.asc
Description: OpenPGP digital signature


Re: [aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread Knut Ahlers
On Thu, Jul 23, 2020 at 11:11 PM Eli Schwartz via aur-general
 wrote:
>
> On 7/23/20 4:50 PM, Knut Ahlers wrote:
> > IMO you should add them as omitting packages required to run the
> > program will cause issues for people. Packages should request
> > everything they need to run.
>
> Isn't that exactly what I said?

Yep indeed. I totally misunderstood your mail to the opposite of what
you've said… So: yes, we completely agree on that!

-- 
Knut Ahlers
Software & Infrastructure Developer

Web & Blog: https://ahlers.me/
GPG-Key: 0xD34BE99E


Re: [aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread Eli Schwartz via aur-general
On 7/23/20 4:50 PM, Knut Ahlers wrote:
> IMO you should add them as omitting packages required to run the
> program will cause issues for people. Packages should request
> everything they need to run.

Isn't that exactly what I said?

> As an example: All AUR packages I'm using on my machines are built on
> a CI system in containers. All of them do have a clean environment -
> of course containing devel packages. My machines do not have devel
> packages installed as long as they are not used for development as
> they don't require them. So an AUR package built through the CI system
> installed on a machine without devel packages will miss some of its
> dependencies and will be broken.
> 
> Also I know of repos maintained by TUs containing AUR packages: For
> them the same applies and while in a worst-case szenario I can patch
> the build before building it users relying on those AUR repos listed
> in the Wiki will get broken packages.

Never mind CI systems or TU repos. The official repos operate on exactly
this rule already. All official repo packages are intended to be
installed on systems with "base" installed but not "base-devel".

-- 
Eli Schwartz
Bug Wrangler and Trusted User



signature.asc
Description: OpenPGP digital signature


Re: [aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread Kusoneko
On July 23, 2020 8:50:43 PM UTC, Knut Ahlers  wrote:
>On Thu, Jul 23, 2020 at 10:24 PM Eli Schwartz via aur-general
> wrote:
>>
>> On 7/23/20 4:07 PM, alad via aur-general wrote:
>> >
>> > On 23/07/2020 15:45, Eli Schwartz via aur-general wrote:
>> >> On 7/23/20 9:17 AM, alad via aur-general wrote:
>> >>> Am 23/07/2020 um 15:10 schrieb Budi via aur-general:
>>  h\How to know what dependencies only need to put  (surely not
>all)
>> >>> I proceed as follows:
>> >>>
>> >>> 1. ignore anything in base-devel
>> >> base-devel is for makedepends only, base is for depends.
>> > So? base-devel contains programs that can be used during runtime,
>like
>> > gawk.
>> Or 'which', or 'sudo'.
>>
>> If they are used during runtime, you can't exactly leave them out of
>> depends=() on the rationale that people who installed base-devel to
>> build packages, won't have errors running it.
>
>IMO you should add them as omitting packages required to run the
>program will cause issues for people. Packages should request
>everything they need to run.
>
>As an example: All AUR packages I'm using on my machines are built on
>a CI system in containers. All of them do have a clean environment -
>of course containing devel packages. My machines do not have devel
>packages installed as long as they are not used for development as
>they don't require them. So an AUR package built through the CI system
>installed on a machine without devel packages will miss some of its
>dependencies and will be broken.
>
>Also I know of repos maintained by TUs containing AUR packages: For
>them the same applies and while in a worst-case szenario I can patch
>the build before building it users relying on those AUR repos listed
>in the Wiki will get broken packages.
>
>-- 
>Knut Ahlers
>Software & Infrastructure Developer
>
>Web & Blog: https://ahlers.me/
>GPG-Key: 0xD34BE99E

That's an interesting setup, I'd be curious to know how to set that up?



signature.asc
Description: PGP signature


Re: [aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread Knut Ahlers
On Thu, Jul 23, 2020 at 10:24 PM Eli Schwartz via aur-general
 wrote:
>
> On 7/23/20 4:07 PM, alad via aur-general wrote:
> >
> > On 23/07/2020 15:45, Eli Schwartz via aur-general wrote:
> >> On 7/23/20 9:17 AM, alad via aur-general wrote:
> >>> Am 23/07/2020 um 15:10 schrieb Budi via aur-general:
>  h\How to know what dependencies only need to put  (surely not all)
> >>> I proceed as follows:
> >>>
> >>> 1. ignore anything in base-devel
> >> base-devel is for makedepends only, base is for depends.
> > So? base-devel contains programs that can be used during runtime, like
> > gawk.
> Or 'which', or 'sudo'.
>
> If they are used during runtime, you can't exactly leave them out of
> depends=() on the rationale that people who installed base-devel to
> build packages, won't have errors running it.

IMO you should add them as omitting packages required to run the
program will cause issues for people. Packages should request
everything they need to run.

As an example: All AUR packages I'm using on my machines are built on
a CI system in containers. All of them do have a clean environment -
of course containing devel packages. My machines do not have devel
packages installed as long as they are not used for development as
they don't require them. So an AUR package built through the CI system
installed on a machine without devel packages will miss some of its
dependencies and will be broken.

Also I know of repos maintained by TUs containing AUR packages: For
them the same applies and while in a worst-case szenario I can patch
the build before building it users relying on those AUR repos listed
in the Wiki will get broken packages.

-- 
Knut Ahlers
Software & Infrastructure Developer

Web & Blog: https://ahlers.me/
GPG-Key: 0xD34BE99E


Re: [aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread Eli Schwartz via aur-general
On 7/23/20 4:07 PM, alad via aur-general wrote:
> 
> On 23/07/2020 15:45, Eli Schwartz via aur-general wrote:
>> On 7/23/20 9:17 AM, alad via aur-general wrote:
>>> Am 23/07/2020 um 15:10 schrieb Budi via aur-general:
 h\How to know what dependencies only need to put  (surely not all)
>>> I proceed as follows:
>>>
>>> 1. ignore anything in base-devel
>> base-devel is for makedepends only, base is for depends.
> So? base-devel contains programs that can be used during runtime, like
> gawk.
Or 'which', or 'sudo'.

If they are used during runtime, you can't exactly leave them out of
depends=() on the rationale that people who installed base-devel to
build packages, won't have errors running it.

Unless I've misunderstood what you're suggesting here?

(gawk is covered by the base metapackage, though. So that is okay to
omit, but not because of -devel.)

-- 
Eli Schwartz
Bug Wrangler and Trusted User



signature.asc
Description: OpenPGP digital signature


[aur-general] AUR migration

2020-07-23 Thread Giancarlo Razzolini via aur-general

Hi All,

In continuing with the improvements being done to our infrastructure, we're
planning to migrate the AUR to another machine. This means that, during the 
migration,
there *will* be downtime of the whole AUR.

I expect the migration to take around two hours and happen either tomorrow 
(Friday)
or on Saturday, depending on availability.

Regards,
Giancarlo Razzolini


pgpkbRsNpQ8Mo.pgp
Description: PGP signature


Re: [aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread alad via aur-general



On 23/07/2020 15:45, Eli Schwartz via aur-general wrote:

On 7/23/20 9:17 AM, alad via aur-general wrote:

Am 23/07/2020 um 15:10 schrieb Budi via aur-general:

h\How to know what dependencies only need to put  (surely not all)

I proceed as follows:

1. ignore anything in base-devel

base-devel is for makedepends only, base is for depends.

So? base-devel contains programs that can be used during runtime, like gawk.



2. include libraries listed in ldd, if the package includes a compiled
executable

This is wrong. If myprog links *only* to libfoo.so, and internally
libfoo.so links to libbar.so, ldd will show both libfoo.so and libbar.so

Instead use readelf -d and look for lines containing "NEEDED". Or use
lddtree (from the pax-utils package) to get a tree-based view of a
program's dependencies.

ldd is completely inaccurate and misleading for this purpose.


Hmm, you're right - last I checked libraries (for neomutt), I used 
readelf -d. I guess it's been too long.


Alad




3. include external commands if they are required (and not already in
base-devel)

The second point is not mandated (you can depend on a package fulfilling
the needed library depends, transitively), though helpful when listing
rebuilds. Otherwise, see the packaging guidelines on the wiki.

(inb4 10 pages of discussion after a 1-sentence question)




Re: [aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread Eli Schwartz via aur-general
On 7/23/20 9:17 AM, alad via aur-general wrote:
> Am 23/07/2020 um 15:10 schrieb Budi via aur-general:
>> h\How to know what dependencies only need to put  (surely not all)
> 
> I proceed as follows:
> 
> 1. ignore anything in base-devel

base-devel is for makedepends only, base is for depends.

> 2. include libraries listed in ldd, if the package includes a compiled
> executable

This is wrong. If myprog links *only* to libfoo.so, and internally
libfoo.so links to libbar.so, ldd will show both libfoo.so and libbar.so

Instead use readelf -d and look for lines containing "NEEDED". Or use
lddtree (from the pax-utils package) to get a tree-based view of a
program's dependencies.

ldd is completely inaccurate and misleading for this purpose.

> 3. include external commands if they are required (and not already in
> base-devel)
> 
> The second point is not mandated (you can depend on a package fulfilling
> the needed library depends, transitively), though helpful when listing
> rebuilds. Otherwise, see the packaging guidelines on the wiki.
> 
> (inb4 10 pages of discussion after a 1-sentence question)


-- 
Eli Schwartz
Bug Wrangler and Trusted User



signature.asc
Description: OpenPGP digital signature


Re: [aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread alad via aur-general

Am 23/07/2020 um 15:10 schrieb Budi via aur-general:

h\How to know what dependencies only need to put  (surely not all)


I proceed as follows:

1. ignore anything in base-devel

2. include libraries listed in ldd, if the package includes a compiled 
executable


3. include external commands if they are required (and not already in 
base-devel)


The second point is not mandated (you can depend on a package fulfilling 
the needed library depends, transitively), though helpful when listing 
rebuilds. Otherwise, see the packaging guidelines on the wiki.


(inb4 10 pages of discussion after a 1-sentence question)


[aur-general] know what dependencies in PKGBUILD

2020-07-23 Thread Budi via aur-general
h\How to know what dependencies only need to put  (surely not all)