From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Staying on top of Qt security Date: Thu, 18 Feb 2016 17:35:29 -0500 Message-ID: <20160218223529.GC9390@jasmine> References: <20160214200143.GA19744@jasmine> <20160218204349.GA4179@solar> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56094) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aWXAd-0002mb-HW for guix-devel@gnu.org; Thu, 18 Feb 2016 17:35:36 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aWXAa-00073y-AN for guix-devel@gnu.org; Thu, 18 Feb 2016 17:35:35 -0500 Received: from out5-smtp.messagingengine.com ([66.111.4.29]:48698) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aWXAa-00073l-6f for guix-devel@gnu.org; Thu, 18 Feb 2016 17:35:32 -0500 Content-Disposition: inline In-Reply-To: <20160218204349.GA4179@solar> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Andreas Enge Cc: guix-devel@gnu.org On Thu, Feb 18, 2016 at 09:43:49PM +0100, Andreas Enge wrote: > Hi Leo, > > thanks for your initiative! > > On Sun, Feb 14, 2016 at 03:01:43PM -0500, Leo Famulari wrote: > > I think we need a Qt champion(s) for Guix. > > I am not volunteering, mainly because I am not a Qt champion (but I am > interested in the package). > > > $ guix refresh -l qt-4 > > Building the following 18 packages would ensure 24 dependent packages > > are rebuilt: soprano-2.9.4 python2-pyqt-4.11.4 polkit-qt-1-0.112.0 > > frescobaldi-2.18.1 keepassx-2.0.2 hydrogen-0.9.5.1 strigi-0.7.8 > > attica-0.4.2 pumpa-0.9.2 libdbusmenu-qt-0.9.2 phonon-4.8.3 > > brdf-explorer-17 gpsbabel-1.5.0 librecad-2.0.6-rc > > alsa-modular-synth-2.1.2 qtractor-0.7.3 ardour-4.4 jalv-1.4.6 > > Some of them have no dependent packages, and I think they are mainly or > exclusively used for KDE-4, which I started packaging a while ago (and > dropped again when I got my Novena, as it turns out that KDE is too > resource demanding). In any case, we would package KDE-5 now, and I would > suggest to simply remove these packages. There are traces in git, so if > it turns out we will need them in the end, we can still revive them. > This concerns: > attica soprano strigi polkit-qt automoc4 qjson libdbusmenu-qt > So while we are it it, I suggest to simply remove kde.scm (there is no use > in keeping a lonely oxygen-icons around...). > > Also, python2-pyqt has no dependent package. > > I looked at frescobaldi; they claim that a Qt-5 port is on the TODO list > for their version 3, but without giving any timings. > > If there is no outcry, I will remove the above-mentioned packages/modules. > > Could maybe people using the other packages have a look at them? I noticed that Efraim has upgraded a few qt-4 dependencies so that they can use qt(-5). > > Chris, what about pumpa? > > Andreas >