From mboxrd@z Thu Jan 1 00:00:00 1970 From: ng0 Subject: Re: the importance of rust-build-system [Fwd: [tor-dev] Tor in a safer language: Network team update from Amsterdam] Date: Fri, 8 Dec 2017 10:04:29 +0000 Message-ID: <20171208100429.2mhd7k42ga6qx22i@abyayala> References: <20170401075841.242czleuqvibqmjf@abyayala> <20170401185824.GA27445@jasmine> <87r31bg44p.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="tkcxll7jikaayd2l" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:33421) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eNFWR-0003tA-HM for guix-devel@gnu.org; Fri, 08 Dec 2017 05:04:50 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eNFWL-0008LB-Tm for guix-devel@gnu.org; Fri, 08 Dec 2017 05:04:47 -0500 Content-Disposition: inline In-Reply-To: <87r31bg44p.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Cc: guix-devel@gnu.org --tkcxll7jikaayd2l Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s transcribed 0.9K bytes: > Leo Famulari skribis: >=20 > > On Sat, Apr 01, 2017 at 07:58:41AM +0000, ng0 wrote: > >> tor is seriously considering to switch to rust. I have my own open > >> bugs / roadmap points which depend on our rust-build-system working. > >> tor will not switch immediately, but it shows the importance of having= a > >> working rust-build-system. Firefox will switch at some point. > > > > It's immediately important because the latest version of librsvg (used > > to create the GuixSD GRUB background image) is written in Rust. We could > > even update that package "the hard way", without a full > > rust-build-system. >=20 > For librsvg and Tor, a switch to Rust is both good news and bad news: > it=E2=80=99s good news because using a memory-safe language is indeed a w= ise > decision, but it=E2=80=99s bad news because it introduces a single point = of > trust (opaque Rust binaries built by Mozilla) in our dependency graph. >=20 > Ludo=E2=80=99. >=20 It gets even worse: https://www.mercurial-scm.org/wiki/OxidationPlan So being able to handle rust will be necessary not only for Guix, but for GNU (iirc we had some Mercurial repos somewhere in GNU, at least GNU Octave and GNU Health)! --=20 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://c.n0.is/ng0_pubkeys/tree/keys WWW: https://n0.is --tkcxll7jikaayd2l Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAloqY60ACgkQ4i+bv+40 hYhaMQ/+LaWUveH1d0Y7z5Oa0/wEGlZLsb5mx8sOKjgcPSDHPqxFCuvT32buEVtM vYnEfnW0LI4tNvYUnOsdnqx53dVdz8gMNceVLIuWBYfpNKU8Qptv9N82vMkdXnFQ qUIxscMyxCdZHQq4G8BXZ3ByKBbDNWLbLlInzp90/XOaQoeZ8a2KpBzJB3FltXqX oZOmdSwXKy66QZanFRzgVNm5MDgX2xw6LVRAAe4gYfbGS2VPe57PC0RfaQ3S+biY zOFmI9JrHozBG3sHjFGTbNvbjEuNSGyksnF1uwdrrHVNsg+lnz/cPKgC9sn9H5ag WV7lKkf9QbN4Ewd5KKvV0dBh9FZ+TsRJ0Pc7kZdoXUhHq2xqEjEXbgvpVgXm+IJq kZYRvQi4RkN7rCr9W9xoFftlEB7Oic9IVjxNQtZe+HuRzZoCXOqBlX23mXyxmwO3 jRy9pVoE0cv3aZTCggg3RkpOXZ0VauJKnBORpJwCEMd9L9HAGPL6vRNqRZaVzm8Y P9MQFUIgC9+yvcSgJPLnx9kfrc0Xfk3uuwQ4EfIIKa0GUq5sYxv98pBaFIPd9WV/ RIU/j45zG2H6wIX1jyohE/Zrr089TjY5EiDMDYPxyCwl8A3SehSUN4Y14eVGkyXe ChsQZ241VEBdJPPLia7ZQFSS0aBQQ6OdWMRtJvlV9ChdTxxPogM= =5Mm7 -----END PGP SIGNATURE----- --tkcxll7jikaayd2l--