Re: [new] devel/cargo-audit a tool to check yer crates for security vulns!!

2021-09-10 Thread Aaron Bieber
Theo Buehler writes: > On Fri, Sep 10, 2021 at 06:54:10AM +0200, Sebastien Marie wrote: >> On Thu, Sep 09, 2021 at 01:19:21PM -0600, Aaron Bieber wrote: >> > Hi, >> > >> > Here is a port of cargo-audit: >> > https://github.com/RustSec/rustsec/tree/main/cargo-audit >> > >> > This isn't the lat

Re: [new] devel/cargo-audit a tool to check yer crates for security vulns!!

2021-09-10 Thread Theo Buehler
On Fri, Sep 10, 2021 at 06:54:10AM +0200, Sebastien Marie wrote: > On Thu, Sep 09, 2021 at 01:19:21PM -0600, Aaron Bieber wrote: > > Hi, > > > > Here is a port of cargo-audit: > > https://github.com/RustSec/rustsec/tree/main/cargo-audit > > > > This isn't the latest version because that fails to

Re: [new] devel/cargo-audit a tool to check yer crates for security vulns!!

2021-09-09 Thread Sebastien Marie
On Thu, Sep 09, 2021 at 01:19:21PM -0600, Aaron Bieber wrote: > Hi, > > Here is a port of cargo-audit: > https://github.com/RustSec/rustsec/tree/main/cargo-audit > > This isn't the latest version because that fails to build: > https://github.com/rustsec/rustsec/issues/429 > > Unfortunately the p

Re: [new] devel/cargo-audit a tool to check yer crates for security vulns!!

2021-09-09 Thread Stuart Henderson
On 2021/09/09 13:19, Aaron Bieber wrote: > Hi, > > Here is a port of cargo-audit: > https://github.com/RustSec/rustsec/tree/main/cargo-audit > > This isn't the latest version because that fails to build: > https://github.com/rustsec/rustsec/issues/429 > > Unfortunately the program doesn't run un

[new] devel/cargo-audit a tool to check yer crates for security vulns!!

2021-09-09 Thread Aaron Bieber
Hi, Here is a port of cargo-audit: https://github.com/RustSec/rustsec/tree/main/cargo-audit This isn't the latest version because that fails to build: https://github.com/rustsec/rustsec/issues/429 Unfortunately the program doesn't run unless you specify the full path. I tried creating a patch to

Re: NEW: devel/cargo-generate-vendor

2016-12-18 Thread Sebastien Marie
On Fri, Dec 16, 2016 at 02:37:08PM -0500, Daniel Jakots wrote: > On Wed, 14 Dec 2016 14:42:21 +0100, Sebastien Marie > wrote: > > > It is a requirement for upcoming devel/cargo module. > > As it is just one perl script, can't we put it in infrastructure/bin? > Or is a port still better in this c

Re: NEW: devel/cargo-generate-vendor

2016-12-16 Thread Daniel Jakots
On Wed, 14 Dec 2016 14:42:21 +0100, Sebastien Marie wrote: > Hi, > > Here a new port related to rust ecosystem. > > It is a perl script I wrote in order to generate on the fly, the > metadata expected by cargo when using local registry. > > The repository is at https://github.com/semarie/cargo

NEW: devel/cargo-generate-vendor

2016-12-14 Thread Sebastien Marie
Hi, Here a new port related to rust ecosystem. It is a perl script I wrote in order to generate on the fly, the metadata expected by cargo when using local registry. The repository is at https://github.com/semarie/cargo-generate-vendor/ The metadata file (.cargo-checksum.json file) is a JSON fi

Re: [new] devel/cargo

2016-05-29 Thread Sebastien Marie
On Sun, May 29, 2016 at 07:25:44PM +0100, Edd Barrett wrote: > On Sun, May 29, 2016 at 07:56:34PM +0200, Sebastien Marie wrote: > > I prefer to keep it as it for now: a more "automatic" way will not be > > able to copte with -MMDDnn format if I need to build more than one > > archive some day.

Re: [new] devel/cargo

2016-05-29 Thread Stuart Henderson
On 2016/05/29 19:25, Edd Barrett wrote: > On Sun, May 29, 2016 at 07:56:34PM +0200, Sebastien Marie wrote: > > I prefer to keep it as it for now: a more "automatic" way will not be > > able to copte with -MMDDnn format if I need to build more than one > > archive some day. > > Alright. > > So

Re: [new] devel/cargo

2016-05-29 Thread Edd Barrett
On Sun, May 29, 2016 at 07:56:34PM +0200, Sebastien Marie wrote: > I prefer to keep it as it for now: a more "automatic" way will not be > able to copte with -MMDDnn format if I need to build more than one > archive some day. Alright. So I can't vouch for the magic in post-extract, but I don'

Re: [new] devel/cargo

2016-05-29 Thread Sebastien Marie
On Sun, May 29, 2016 at 06:31:52PM +0100, Edd Barrett wrote: > On Sun, May 29, 2016 at 04:40:09PM +0100, Edd Barrett wrote: > > I need to test the bootstrap target. Watch this space. > > Alright, had a look at this. > > > # make a directory suitable for bootstrapping > > BOOTSTRAP_NVERSION = ${CA

Re: [new] devel/cargo

2016-05-29 Thread Edd Barrett
On Sun, May 29, 2016 at 04:40:09PM +0100, Edd Barrett wrote: > I need to test the bootstrap target. Watch this space. Alright, had a look at this. > # make a directory suitable for bootstrapping > BOOTSTRAP_NVERSION = ${CARGO_VERSION}-new > bootstrap: fake > ... Could we make it so that the 'boo

Re: [new] devel/cargo

2016-05-29 Thread Edd Barrett
On Sun, May 29, 2016 at 12:10:25PM +0200, Sebastien Marie wrote: > ping ? I was able to initialise a project and define a dependency and use it within a tiny test program. So looks good from a functionality standpoint. This was with the in-tree rust-1.8.0. I have not tried it with 1.9.0. I need

Re: [new] devel/cargo

2016-05-29 Thread Sebastien Marie
ping ? On Thu, May 26, 2016 at 06:45:14AM +0200, Sebastien Marie wrote: > On Fri, May 20, 2016 at 05:51:54AM +0200, Sebastien Marie wrote: > > Hi, > > > > I would like to import cargo-0.10.0. > > > > The attached tgz is the same as openbsd-wip port. > > > > attached is an updated archive (same

Re: [new] devel/cargo

2016-05-25 Thread Sebastien Marie
On Fri, May 20, 2016 at 05:51:54AM +0200, Sebastien Marie wrote: > Hi, > > I would like to import cargo-0.10.0. > > The attached tgz is the same as openbsd-wip port. > attached is an updated archive (same as openbsd-wip c949090). It includes: - add a 'bootstrap' target to make a new bootstra

Re: [new] devel/cargo

2016-05-25 Thread lists
Wed, 25 May 2016 12:25:34 +0100 skin...@britvault.co.uk (Craig Skinner) > Here is an exposition of the 5 paragraphs: > http://ar.to/2010/01/dissecting-the-unlicense Craig, we should have less such material, for more bright ideas in correct software to discuss on multiple standard compliant systems

Re: [new] devel/cargo

2016-05-25 Thread Craig Skinner
On 2016-05-24 Tue 13:52 PM |, Theo de Raadt wrote: > > Any verbiage after "public domain" is purely advisory. So judge -- > either it has absolutely no impact and can be ignored, or the text is > dangerous. I cannot decide. > Here is an exposition of the 5 paragraphs: http://ar.to/2010/01/diss

Re: [new] devel/cargo

2016-05-25 Thread Sebastien Marie
On Wed, May 25, 2016 at 09:53:04AM +0100, Edd Barrett wrote: > > So, does the cargo binary depend (at runtime) upon something installed > by lang/rust? > per se, cargo binary *doesn't* need lang/rust (no libraries dependances or something else), but in order to compile programs or libraries writ

Re: [new] devel/cargo

2016-05-25 Thread Stuart Henderson
On 2016/05/25 09:53, Edd Barrett wrote: > On Wed, May 25, 2016 at 08:57:55AM +0200, Sebastien Marie wrote: > > Additionnal question: when lang/rust will be updated to 1.9.0, should I > > bump devel/cargo in some way ? Asking because in my test host, I have > > some errors of "change in plist": > >

Re: [new] devel/cargo

2016-05-25 Thread Edd Barrett
On Wed, May 25, 2016 at 08:57:55AM +0200, Sebastien Marie wrote: > Additionnal question: when lang/rust will be updated to 1.9.0, should I > bump devel/cargo in some way ? Asking because in my test host, I have > some errors of "change in plist": > > -@sha gIQpq8jQYj/3OF9Z3aoPy/IAzeliydUlF0jcNOswi

Re: [new] devel/cargo

2016-05-25 Thread Edd Barrett
On Tue, May 24, 2016 at 08:43:11PM +0100, Stuart Henderson wrote: > This is a bit different though, it's just for the bash-completion > file, and doesn't need @sample'ing. But it would be better to install > it here: > > /usr/local/share/bash-completion/completions/ I see. Seems sensible. > "to

Re: [new] devel/cargo

2016-05-24 Thread Sebastien Marie
On Tue, May 24, 2016 at 07:39:27PM +0100, Edd Barrett wrote: > Hi Sebastien, > > Thanks for your work on this. Here's some low hanging fruit. > > On Fri, May 20, 2016 at 05:51:54AM +0200, Sebastien Marie wrote: > > Note it requires the pending lang/rust port update. > > Which version? BUILD_DEPE

Re: [new] devel/cargo

2016-05-24 Thread Theo de Raadt
> > "Unlicense" -> "Unlicensed" > > It is "unlicense" - http://unlicense.org/ - it's a bit of a funny > one this, I'm not sure you can actually release something to the > public domain and then try and use a copyright-like warranty > disclaimer..anyway the intent is very clear. Any verbiage after

Re: [new] devel/cargo

2016-05-24 Thread Stuart Henderson
On 2016/05/24 19:39, Edd Barrett wrote: > > -sysconfdir=${LOCALBASE}/share/examples/cargo > > Usually syconfdir is /etc, and you use @example in the PLIST to make an > example. This also means the user can edit the config file without > upsetting pkg_delete. This is a bit different though, it's j

Re: [new] devel/cargo

2016-05-24 Thread Edd Barrett
Hi Sebastien, Thanks for your work on this. Here's some low hanging fruit. On Fri, May 20, 2016 at 05:51:54AM +0200, Sebastien Marie wrote: > Note it requires the pending lang/rust port update. Which version? BUILD_DEPENDS says it needs lang/rust>=1.8. Or do you mean it needs your LOCALBASE twea

Re: [new] devel/cargo

2016-05-19 Thread Sebastien Marie
I just updated openbsd-wip in order to replace quote ’ with quote ' in pkg/DESCR. On Fri, May 20, 2016 at 05:51:54AM +0200, Sebastien Marie wrote: > Hi, > > I would like to import cargo-0.10.0. > > The attached tgz is the same as openbsd-wip port. > > From pkg/DESCR: > > Cargo is a tool that a

[new] devel/cargo

2016-05-19 Thread Sebastien Marie
Hi, I would like to import cargo-0.10.0. The attached tgz is the same as openbsd-wip port. >From pkg/DESCR: Cargo is a tool that allows Rust projects to declare their various dependencies, and ensure that you’ll always get a repeatable build. To accomplish this goal, Cargo does four things: -

Re: NEW: devel/cargo/bootstrap

2016-01-25 Thread Lampshade
Thanks for answer. I have done following list of commands and it seems to compile and install. I don't used Cargo yet, so I don't know if it works correctly. One weird thing is need to create symlink for python mkdir /usr/ports/ #my script to get and/or update ports tree /budowanieOpenBSD/aktu

Re: NEW: devel/cargo/bootstrap

2016-01-24 Thread Sebastien Marie
On Sun, Jan 24, 2016 at 12:22:15AM +0100, Lampshade wrote: > I wonder if this port is still usable with current version of Rust and Cargo? > Rust 1.6 was announced. In previous version of Rust 1.5 there was added > cargo install > command to allow install Rust applications to local systems, > so i

Re: NEW: devel/cargo/bootstrap

2016-01-24 Thread Lampshade
I wonder if this port is still usable with current version of Rust and Cargo? Rust 1.6 was announced. In previous version of Rust 1.5 there was added cargo install command to allow install Rust applications to local systems, so it becomes more and more complete and stabilized. I have gone through

Re: NEW: devel/cargo/bootstrap

2015-09-01 Thread Sebastien Marie
Hi Steven, First thanks for you work in this area. I have a question: does the produced cargo binary is as functionnal than a cargo binary builded with cargo ? (the normal build process for cargo is to compile it with cargo). cargo has a testsuite. does the produced binary would pass this testsu

NEW: devel/cargo/bootstrap

2015-08-29 Thread Steven McDonald
Hi ports@, I've been working on a port for Cargo, the package manager for the Rust language. I already know this isn't ready for inclusion as is, but I was hoping to solicit some feedback on the approach I've taken so far. The port can be downloaded here: https://steven.bucket.nchr.io/openbsd-p