Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-17 Thread Arne Babenhauserheide
Am Freitag, 16. Oktober 2015, 16:13:32 schrieb Matthew Toseland: > Then we should fix the build script to auto-detect their locations? > First we need a build script so we can have such one-time logic... No, we should just fix the README. Best wishes, Arne -- Ein Mann wird auf der Straße mit ein

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-16 Thread Matthew Toseland
On 15/10/15 21:29, Arne Babenhauserheide wrote: > Am Donnerstag, 15. Oktober 2015, 18:26:49 schrieb Florent Daigniere: >> On Thu, 2015-10-15 at 17:38 +0200, Arne Babenhauserheide wrote: >>> Though maybe we could also get the same done with easier to follow >>> documentation (just hosting the jars w

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-15 Thread Arne Babenhauserheide
Am Donnerstag, 15. Oktober 2015, 18:26:49 schrieb Florent Daigniere: > On Thu, 2015-10-15 at 17:38 +0200, Arne Babenhauserheide wrote: > > Though maybe we could also get the same done with easier to follow > > documentation (just hosting the jars where people can download them) > > Like https://ja

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-15 Thread Florent Daigniere
On Thu, 2015-10-15 at 17:38 +0200, Arne Babenhauserheide wrote: > Am Dienstag, 13. Oktober 2015, 21:12:28 schrieb Steve Dougherty: > > > Why not? It could simplify getting into development a lot if > > > people > > > would only have to install a generic java development > > > environment. > > It ta

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-15 Thread Arne Babenhauserheide
Am Dienstag, 13. Oktober 2015, 21:12:28 schrieb Steve Dougherty: > > Why not? It could simplify getting into development a lot if people > > would only have to install a generic java development environment. > It takes extra storage and bandwidth for something the vast majority of > people will nev

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-15 Thread Arne Babenhauserheide
Am Dienstag, 13. Oktober 2015, 18:07:02 schrieb Ian: > If your bootstrap gcc isn't compiled from source then it's irrelevant what > else is. http://c2.com/cgi/wiki?TheKenThompsonHack There are ways to counter that to some degree: http://www.dwheeler.com/trusting-trust/ Fully Countering Trusting

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread Ian
If your bootstrap gcc isn't compiled from source then it's irrelevant what else is. http://c2.com/cgi/wiki?TheKenThompsonHack -- sent from my phone, please excuse brevity and typos On Oct 13, 2015 5:14 PM, "Arne Babenhauserheide" wrote: > Am Dienstag, 13. Oktober 2015, 10:13:07 schrieb Ian: > >

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread Arne Babenhauserheide
Am Dienstag, 13. Oktober 2015, 10:13:07 schrieb Ian: > Can you explain to me how anyone can use a modern computer for anything > without trusting someone else's binaries? Let's live in reality here. Gentoo GNU/Linux builds everything from source, and once gcc is bootstrapped and the stage3-files

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread Steve Dougherty
It takes extra storage and bandwidth for something the vast majority of people will never need. On Tue, Oct 13, 2015, 5:08 PM Arne Babenhauserheide wrote: > Am Dienstag, 13. Oktober 2015, 14:13:00 schrieb Steve Dougherty: > > We already distribute runtime dependencies with Freenet; I don't think

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread Arne Babenhauserheide
Am Dienstag, 13. Oktober 2015, 14:13:00 schrieb Steve Dougherty: > We already distribute runtime dependencies with Freenet; I don't think it > would be reasonable to distribute things required only for development like > JUnit / Hamcrest. Why not? It could simplify getting into development a lot i

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread nextgens
On Tue, Oct 13, 2015 at 10:13:07AM -0400, Ian wrote: > On Tue, Oct 13, 2015 at 3:26 AM, wrote: > > > > That's far from the only danger... > > > > If we make "building freenet" depend on "running freenet" to "download > > freenet over freenet", I'd like someone to explain to me how it can work > >

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread Ian
On Tue, Oct 13, 2015 at 3:26 AM, wrote: > > That's far from the only danger... > > If we make "building freenet" depend on "running freenet" to "download > freenet over freenet", I'd like someone to explain to me how it can work > without trusting someone else's binaries. > Can you explain to me

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread Steve Dougherty
We already distribute runtime dependencies with Freenet; I don't think it would be reasonable to distribute things required only for development like JUnit / Hamcrest. From mobile On Mon, Oct 12, 2015, 5:37 PM Arne Babenhauserheide @ web.de > wrote: Am Montag, 12. Oktober 2015, 13:09:48 schrieb

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread nextgens
On Mon, Oct 12, 2015 at 07:47:22PM +0100, Matthew Toseland wrote: > The second stage is this: Do we want to write a Gradle plugin to manage > dependencies.properties? Essentially this would make adding external > run-time dependencies significantly easier. The cost is we'd need to > maintain a repo

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-13 Thread nextgens
On Mon, Oct 12, 2015 at 01:09:48PM -0400, Ian wrote: > On Mon, Oct 12, 2015 at 12:27 PM, Arne Babenhauserheide > wrote: > > > Am Sonntag, 11. Oktober 2015, 20:37:32 schrieb Zlatin Balevsky: > > > Developers who care about their anonymity can force gradle or maven to > > use > > > a tor proxy > >

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-12 Thread Arne Babenhauserheide
Am Montag, 12. Oktober 2015, 13:09:48 schrieb Ian: > > Can we make Tor or repo-over-freenet the default for people who build > > freenet? > > Since Freenet can (in theory) do it, I think it would be much better to use > Freenet from an "eat your own dogfood" perspective. I think the only > danger

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-12 Thread Matthew Toseland
On 12/10/15 18:09, Ian wrote: > On Mon, Oct 12, 2015 at 12:27 PM, Arne Babenhauserheide > wrote: > >> Am Sonntag, 11. Oktober 2015, 20:37:32 schrieb Zlatin Balevsky: >>> Developers who care about their anonymity can force gradle or maven to >> use >>> a tor proxy >> Can we make Tor or repo-over-fr

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-12 Thread Ian
On Mon, Oct 12, 2015 at 12:27 PM, Arne Babenhauserheide wrote: > Am Sonntag, 11. Oktober 2015, 20:37:32 schrieb Zlatin Balevsky: > > Developers who care about their anonymity can force gradle or maven to > use > > a tor proxy > > Can we make Tor or repo-over-freenet the default for people who bui

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-12 Thread Arne Babenhauserheide
Am Sonntag, 11. Oktober 2015, 20:37:32 schrieb Zlatin Balevsky: > Developers who care about their anonymity can force gradle or maven to use > a tor proxy Can we make Tor or repo-over-freenet the default for people who build freenet? Best wishes, Arne signature.asc Description: This is a digital

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-11 Thread Ian
Good point. Or we could mirror the repos in Freenet, more dogfoody. On Sun, Oct 11, 2015 at 2:37 PM, Zlatin Balevsky wrote: > Developers who care about their anonymity can force gradle or maven to use > a tor proxy > > On Sun, Oct 11, 2015 at 4:35 PM, Steve Dougherty > wrote: > > > On 10/10/20

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-11 Thread Zlatin Balevsky
Developers who care about their anonymity can force gradle or maven to use a tor proxy On Sun, Oct 11, 2015 at 4:35 PM, Steve Dougherty wrote: > On 10/10/2015 04:14 PM, Matthew Toseland wrote: > > On 06/10/15 15:10, Ian Clarke wrote: > >> On Tue, Oct 6, 2015 at 4:39 AM, xor wrote: > ... > > Dep

Re: [freenet-dev] Dependency management was Re: Behind the times

2015-10-11 Thread Steve Dougherty
On 10/10/2015 04:14 PM, Matthew Toseland wrote: > On 06/10/15 15:10, Ian Clarke wrote: >> On Tue, Oct 6, 2015 at 4:39 AM, xor wrote: ... > Deploying build-time dependencies via Gradle is not appropriate IMHO: It > means updating them is *our* responsibility, and it increases our > maintenance over

[freenet-dev] Dependency management was Re: Behind the times

2015-10-10 Thread Matthew Toseland
On 06/10/15 15:10, Ian Clarke wrote: > On Tue, Oct 6, 2015 at 4:39 AM, xor wrote: > 2) What can Maven do which Ant cannot do? Do we need those features? >>> Dependency management There is a lot of important context being missed in this discussion, in particular what our needs are and what our