From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id wBVxBB/c015fZwAA0tVLHw (envelope-from ) for ; Sun, 31 May 2020 16:32:31 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id 2CZHAB/c0172FQAA1q6Kng (envelope-from ) for ; Sun, 31 May 2020 16:32:31 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 23FE1940039 for ; Sun, 31 May 2020 16:32:30 +0000 (UTC) Received: from localhost ([::1]:40050 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jfQsu-0006mo-Hm for larch@yhetil.org; Sun, 31 May 2020 12:32:28 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:54492) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jfQsZ-0006kw-Ju for guix-devel@gnu.org; Sun, 31 May 2020 12:32:07 -0400 Received: from wout2-smtp.messagingengine.com ([64.147.123.25]:56339) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jfQsY-0005fi-4t; Sun, 31 May 2020 12:32:07 -0400 Received: from compute2.internal (compute2.nyi.internal [10.202.2.42]) by mailout.west.internal (Postfix) with ESMTP id A99F4529; Sun, 31 May 2020 12:32:03 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute2.internal (MEProxy); Sun, 31 May 2020 12:32:03 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=Sy9FZ04tfYyk0vFpi765Oxms UUia/Oj8OlP+3ZMa7K8=; b=MwY0Um3a1QLzuDAFu+TIIcT0PbEjUpbntey7bG9A 08OsD/3jjyOsSe7fcIUB2CUxkJWntXQAYJjJZgMzpdr8nZywMPBw/7ijikq0rCVj zzQ9wIzv/RsBqgLTjx5CCEELM76UBs+kh7n+0jKSmIbF8GoKb5yVnzn1z4ykm+JM CFI= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=Sy9FZ0 4tfYyk0vFpi765OxmsUUia/Oj8OlP+3ZMa7K8=; b=aR1jNhRg5k/nJAgL+P5JUY W3ASa7M5vXGgx7wx0cpM0hAs/HU5bJGcEStR9gy50dmxZT3JWb+BuuvEvFRvZEmy blHVFtOTQ0CUWE7FiDHGQVyN7vm5OXr9P1mOxI+qDgXpW+GUZShczE9tkjx8zaMm RflQtoyZhNp0uOjPjV7Db4jxmbZK6A4Wq9FMvkZxj+5rgjUxIzNFwpbSWCKAsWB0 mIRf/hJ+rtmR+UZnjP26GNKlHLkDPO2UdeDs2+kOZ/lyZLdJf5yS4Oq8oroABg2m QGwl5mKbjFzXWl4e0PoVI758fNZwptKy7H6ExqoA+ylLjHswHcI4SNZYQ4C1mNkg == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduhedrudeffedgleelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffukfhfgggtuggjsehgtderredttddvnecuhfhrohhmpefnvghoucfh rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtth gvrhhnpedtfeeltdevudekledvhfegtddujeeiieeljefghfffkeejffdufeefuddvfeet gfenucffohhmrghinhepmhhithhrvgdrohhrghenucfkphepjeeirdduvdegrddufeekrd eifeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehl vghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: from localhost (c-76-124-138-63.hsd1.pa.comcast.net [76.124.138.63]) by mail.messagingengine.com (Postfix) with ESMTPA id F0A2D3060F09; Sun, 31 May 2020 12:32:02 -0400 (EDT) Date: Sun, 31 May 2020 12:32:00 -0400 From: Leo Famulari To: Marius Bakke Subject: Re: Git repos with large submodules Message-ID: <20200531163200.GA6253@jasmine.lan> References: <20200525020403.56f16a38@riseup.net> <87zh9pw1sn.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="9amGYk9869ThD9tj" Content-Disposition: inline In-Reply-To: <87zh9pw1sn.fsf@gnu.org> Received-SPF: pass client-ip=64.147.123.25; envelope-from=leo@famulari.name; helo=wout2-smtp.messagingengine.com X-detected-operating-system: by eggs.gnu.org: First seen = 2020/05/31 12:32:04 X-ACL-Warn: Detected OS = Linux 2.2.x-3.x [generic] [fuzzy] X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=fail (rsa verify failed) header.d=famulari.name header.s=mesmtp header.b=MwY0Um3a; dkim=fail (rsa verify failed) header.d=messagingengine.com header.s=fm2 header.b=aR1jNhRg; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Spam-Score: -0.61 X-TUID: 8md+GkGmFbOc --9amGYk9869ThD9tj Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, May 30, 2020 at 11:28:08PM +0200, Marius Bakke wrote: > raingloom writes: >=20 > > Hey all! > > > > So, I recently gave a go to packaging EDK2 on my channel, and found out > > that it requires several submodules, including OpenSSL, which take up > > quite a bit of space and take way longer to download than necessary. > > > > Since I couldn't find a way to shallow-init the submodules, I added > > them as separate origins and copied / symlinked them after the unpack > > phase. >=20 > That sounds like a decent workaround. Even better to symlink > (package-source openssl) to use the OpenSSL sources from Guix. Yes, we should definitely make that work instead of letting EDK2 handle it. Same for the Oniguruma dependency, as that is also a very security-sensitive program: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=3Doniguruma Let us know if you need help raingloom! --9amGYk9869ThD9tj Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAl7T2/0ACgkQJkb6MLrK fwgeCg//WGvwKncRF2V3Nvuj0+zklCGXiL8txwXr8W8LT/DqaTztbi3MfydeAs8r aFPkDXZYEUd7ELtTs2kWlOPH2HziGvt9gj6tFr0Ft1Fdmy+UIxKai6NZmuoW93tJ wDa4TvDKC6CBc0OTZgXX1FbAbjBzgEjkAqogxPNo+LYs3jBgr8cMt1LcFkPdOv5K oIWfD2bAIEMZtnGmINu6V2p6+CM9XlduqwmzGG1DWiKHAh7haMEwgyWgJJfNHbOq QvNK3kGdMSC/ydnHFjZRIZQJpv2DTS1NIj/SAIXPwxfaukooyQc4xUz8UVvdFY33 Qmjco/3ciJekgo38QS6hqd44YOTx4t6Jgx+zyPuTpqijH8vsnOr9ZzKFiQfRD4D0 VSitU20mKdtSnT4Hyo2SY+RTY1Ft2QZBKe5o3Tqd299Fkn4WK+d9x+KCY3uMoStl EosVYaat7VuhcKzxGXLxE2m0+j7iKd252giM7RbgeZIA3ofzkNsBvcENBP1JeJ6N K+NbnelkTs8raAhlGk8E9WINhnu1+Tg9Lhg+c+AHrxJD8iDS1SEDA4qIY0qJQNad 5lL8mNYlbgf3a87maGrBn+hBwgyxnBwXpIl8f82CiGTopCMmrsN3roJz6XHVgINa a/vTKUm1wY7Wc9cF5XPE0u6ZMwDrkCS5bF14/qY4ILD1VWsF9Is= =HAlX -----END PGP SIGNATURE----- --9amGYk9869ThD9tj--