From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Jim Porter Newsgroups: gmane.emacs.devel Subject: Re: [PROPOSAL] Builder, a build system integration for Emacs Date: Wed, 24 May 2023 16:32:26 -0700 Message-ID: <923c628d-80a1-bfea-66ab-743329ad41c7@gmail.com> References: <95980ffc-86e7-ad54-4a20-539d8c6ea5d0@mailo.com> <3f68f4bc-d426-0bcc-1329-674c12b29386@mailo.com> <76e12f7c-335f-476b-ffb3-fd8e8e4ab5d0@mailo.com> <87pm6rx4ea.fsf@yahoo.com> <87wn0ytefw.fsf@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="33976"; mail-complaints-to="usenet@ciao.gmane.io" Cc: emacs-devel@gnu.org To: rms@gnu.org, "Dirk-Jan C. Binnema" Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Thu May 25 01:33:24 2023 Return-path: Envelope-to: ged-emacs-devel@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1q1xyu-0008cL-5u for ged-emacs-devel@m.gmane-mx.org; Thu, 25 May 2023 01:33:24 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1q1xy7-0004WX-EQ; Wed, 24 May 2023 19:32:35 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1q1xy5-0004VN-7h for emacs-devel@gnu.org; Wed, 24 May 2023 19:32:33 -0400 Original-Received: from mail-pf1-x429.google.com ([2607:f8b0:4864:20::429]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1q1xy3-0004Zo-Bm; Wed, 24 May 2023 19:32:32 -0400 Original-Received: by mail-pf1-x429.google.com with SMTP id d2e1a72fcca58-64d57cd373fso281382b3a.1; Wed, 24 May 2023 16:32:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1684971149; x=1687563149; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:mime-version:date:message-id:from:to:cc :subject:date:message-id:reply-to; bh=MuK2YvJB+LLc0RfLF/cgU4R86SGiDK9yTFntmtlsR0s=; b=gNIo014wOoVRKc9OsupHbj0JOelIVTFCAM13Zz+8VUJO2PHKBXU9LjUUMTAF0AMo+1 LY98JBvXkzKUcceux6oxupBX6m7Qd6vfEs884ZxELYvWbphHxpTxRcO56DD3oINlrSwy cnmu3bJR+7VPupLgfC0actZIMYxeL/yl7FeyVqMydaUiXhyOBQ2fQLGLsjU4nps7B1p7 bKdVkGP9gyh/MaJOzDvvgEtPj9aq8vfU98QQ07F7rNzhrxR9Ah6cVbKbgn8PwVpftVkm E/qbdyVXRq4Wy9KE2mE9BbSp0CbhPkXDr3+YlGmmfefUCDrj6AhiF6jgmoZ2MwgZY4ag PVwg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1684971149; x=1687563149; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=MuK2YvJB+LLc0RfLF/cgU4R86SGiDK9yTFntmtlsR0s=; b=CYczFcKI0ysGeFX7DAFI01lkRGZYEEbCxhi4Ffc2S5hq2ZaDKdxrHNuEYcUI0eGc3A CWHphkWoyCTjwUYM8NKYkOkiyfTASYwkcemed4efeK016bGxPUYDKZzPvZ9jvfgx9PWf N7Bx5WbrHPQC2RwkrNIR+H0LbvpUGsD6+iJkKfxRyGjepeCiYqk2fYpCKy3Hnij64GBJ mbO+q468r/EY+gzbcKANnZQ/vb9V3FnLy/vp3A7il9CAlgFb6Yvx+c++d2v36DIDt5bG 0+JYqQQAjfbD4gr/i54BjEdRnO2TZONOWyxkdhSKjc7J24XMLsL3kqQxyhbiIlNuOCYX y7RA== X-Gm-Message-State: AC+VfDx2xzRqMSEVMtcFIe9spblnLCq4n4oy7a5BJrkERMNJlknUHY3L m1TcxMIU0MCoddh7M74tvQwfXGWsv7M= X-Google-Smtp-Source: ACHHUZ6G+MBIH1QCz44zAPtkiTO1phG98LAV3E24vGXf+0PeZnYIvVIw0fdP8S2Dt4uuI9wzTTR8pA== X-Received: by 2002:a05:6a20:5488:b0:10d:951f:58bd with SMTP id i8-20020a056a20548800b0010d951f58bdmr1072486pzk.19.1684971148924; Wed, 24 May 2023 16:32:28 -0700 (PDT) Original-Received: from [192.168.1.2] (cpe-76-168-148-233.socal.res.rr.com. [76.168.148.233]) by smtp.googlemail.com with ESMTPSA id s11-20020a62e70b000000b00634a96493f7sm7908656pfh.128.2023.05.24.16.32.27 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 24 May 2023 16:32:28 -0700 (PDT) Content-Language: en-US In-Reply-To: Received-SPF: pass client-ip=2607:f8b0:4864:20::429; envelope-from=jporterbugs@gmail.com; helo=mail-pf1-x429.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.devel:306309 Archived-At: On 5/24/2023 2:35 PM, Richard Stallman wrote: > I think that means it leads people to do their building in someone > else's server, rather than on your own computer. For moral reasons, > that is not good. I don't think this is true, though I'm not an expert on Cargo. When you build your Cargo project via `cargo build`, it will download the source code for any dependent libraries from crates.io and then build them all on your computer. (The Cargo manual makes this a bit confusing by talking about "binary packages", but those are really "packages that produce an executable program", not "packages distributed as precompiled binaries".) I suppose it would be possible to distribute precompiled data in some form on crates.io (similar to how the Linux kernel has binary blobs), but I'm not aware of this happening in practice. > ISTR that Cargo has a catalog of libraries, some of them nonfree, > and that this makes it hard to build a Rust package and ensure > no nonfree library is used. This I'm not sure about. The documentation[1] says: "The crate registry at crates.io distributes the source code of your packages, so it primarily hosts code that is open source." The word "primarily" makes me somewhat concerned, and I don't see any further documentation on the matter. For Rust developers who are concerned about licensing of dependencies, there's "cargo-deny"[2], which (among other things) lets you ensure that your dependencies' licenses are acceptable to you. That requires the user to set all this up, but it would then provide an automated way to ensure you only use free libraries. [1] https://doc.rust-lang.org/book/ch14-02-publishing-to-crates-io.html [2] https://crates.io/crates/cargo-deny