From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id +DwyDB8TW2BXDQAA0tVLHw (envelope-from ) for ; Wed, 24 Mar 2021 10:23:27 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id uA4OCB8TW2DAQwAAB5/wlQ (envelope-from ) for ; Wed, 24 Mar 2021 10:23:27 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B98351B759 for ; Wed, 24 Mar 2021 11:23:26 +0100 (CET) Received: from localhost ([::1]:57940 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lP0fd-0005Li-SS for larch@yhetil.org; Wed, 24 Mar 2021 06:23:25 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:35584) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lP0fM-0005KV-W0 for guix-devel@gnu.org; Wed, 24 Mar 2021 06:23:09 -0400 Received: from mail-wm1-x336.google.com ([2a00:1450:4864:20::336]:46059) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lP0fI-0004au-9a for guix-devel@gnu.org; Wed, 24 Mar 2021 06:23:08 -0400 Received: by mail-wm1-x336.google.com with SMTP id r10-20020a05600c35cab029010c946c95easo855749wmq.4 for ; Wed, 24 Mar 2021 03:23:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:in-reply-to:references:date:message-id :mime-version:content-transfer-encoding; bh=k5VOE6+Y2zd5/sxRd2VRNwgXJOg7ba+x4vWbJHLF9TI=; b=jDPOVoLVIRdOmr0HNfW0viJHl5JSB9duUZY79o2ZGhwS4ZFQu5Mn0EqiKzuPsB6ojy Ne2qAwhz3pbnFlvWrS8QHoYbHo8IKTFKg87GbhgDO+I1I4gBCtF2OUkWQuS6ia13Svy5 IbRu1ua+BcezaF0Eq3MaXNE4eACZbWsoSR3sjJtjaaa7P29PUn+rg7fGdKK+kLEsOIy+ mG47uLyqV3wEMPfL9g/pLIrwizGQe9qqmZKQM0e/0eIN5+BsIDKzbwxiCwbzXTfM25sb KBW4PATdKx9WZORgymkFMGtL0I+w3Ln32zjS9KGcBrUe4hTSBa7EVXh4KUucgvr9fQA2 atjQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=k5VOE6+Y2zd5/sxRd2VRNwgXJOg7ba+x4vWbJHLF9TI=; b=Vt4I25PDmxMiJWBx79dKl5z353r5hjKQxahJPNGI7ILgxzupgeJETpXc0Cdou4Y+z+ GC0TwRAFibHp0MURHoWz4U0k1IH38SLg02g4pMiF1yxG9y3TpNVnWH1Gip+b5oJwF/qp Zp/vXghd10z4sOD6Ebrycad5mUgswR5zOnqqY62i7qMFYsMFhtZiZfNquimhX3eE0rTk l3KMirMpZaeRqcs4K4OvQ/IDzZ5wK2oy//vgoUsCui113wNby5FsVWBMw/4yo5Bw+LCJ 9mt5jUMPEg32UTMVI/BBaH3haNXnSuHmh300jFRuFVugO+6bOGhjFa/wQmDEY5CPcxN6 4B4Q== X-Gm-Message-State: AOAM5321xS6GwzOB0zY4RkzairQXFDBe8b0DXS+IiXyYWZG2KTaHwh5Q MIy54cx7G7Qym8A0u8nYXatLgzHcXQE= X-Google-Smtp-Source: ABdhPJzgv1OA3I3i486dVW/bNpbjf+sDFY9veT0a4nyarAbEPUKzsU+O7wWWe1cLmLNGk6MHDTQFCQ== X-Received: by 2002:a1c:b0c4:: with SMTP id z187mr2120399wme.81.1616581382680; Wed, 24 Mar 2021 03:23:02 -0700 (PDT) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id v14sm2403069wrd.48.2021.03.24.03.23.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 24 Mar 2021 03:23:02 -0700 (PDT) From: zimoun To: Mark H Weaver , Andreas Enge Subject: Re: imagemagick@6.9.11-48 to graft or not to graft with 6.9.12-2 In-Reply-To: <871rc5jv1o.fsf@netris.org> References: <87v99iki3l.fsf@netris.org> <871rc5jv1o.fsf@netris.org> Date: Wed, 24 Mar 2021 11:15:05 +0100 Message-ID: <86czvohn86.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=2a00:1450:4864:20::336; envelope-from=zimon.toutoune@gmail.com; helo=mail-wm1-x336.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1616581406; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=k5VOE6+Y2zd5/sxRd2VRNwgXJOg7ba+x4vWbJHLF9TI=; b=syKoy7zY0G21ZZq5nxMyRl4lFk3UBxYFdhkI8+L6IkF8vl7RJnyEdP/XusyCQlDK6KXXz4 kYe2zYNf+f+9QA2KANpjVY2KWHBpzdJM2o7XZJkFDEXsfKsMecWuwya2P7NjAjx5m6xYoy 51Cis6ZvfMxdCGLPIfbQ1gd26JmhugZ3P8gchTqj0tE1FGo3aOOh4qhF4vOw5ej1KfkWWq 3J84ySyqUfHgnNI2Sr1UWf7je0n+8zkpYr5I0SDQgaMN84UqOWgVFXBiVqSGfxhMC0EqdO BPpOXkbPVMXdaM1tvAxK0T9DUWWGkfUk+NewbYyJHQGW0h/MmhVdGutD/J/2xA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1616581406; a=rsa-sha256; cv=none; b=qkvHDqJ73QHUCkM61WeoGDV084TQPDHRRyk38oYnnfDFlJ0oj5/yP2jeIa50kcS9KrxGJf o+ZyovGeHKRslrqOjWqpq/Vg+jJN+SX49XYqOTv3ERPhpblmJRAklbB3e/7xU7Jy2I8/ah VQZdEhzHi7fYD5sZAJzwyIGNLa5b4JHSrtW4E1XUfxE8LwSXgdNNH+Btj49UM9a1WWAzv0 ztNfsihcLBLxsVeDkop8d1AWfy9l/80efzJR4pHH0h2iEQFonbwxRoVspaVCv8htEkYjay 7FJBMfr4y4wDjR08GqEWEotqkvF02rL9GWLikyq0YF+xITA/4EGAqpYQoD/TIA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b=jDPOVoLV; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -3.12 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20161025 header.b=jDPOVoLV; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: B98351B759 X-Spam-Score: -3.12 X-Migadu-Scanner: scn0.migadu.com X-TUID: nQqVD6pda1pa Hi Mark, On Tue, 23 Mar 2021 at 19:42, Mark H Weaver wrote: > Andreas Enge writes: >> $ guix package -A imagemagick >> imagemagick 6.9.12-2g out,doc gnu/packages/imagemagick.scm:132:2 >> imagemagick 6.9.11-48 out,doc gnu/packages/imagemagick.scm:48:2 >> >> $ guix build imagemagick@6.9.11 >> guix build: error: imagemagick: package not found for version 6.9.11 >> >> $ guix build imagemagick@6.9.11-48 >> /gnu/store/c30y49vg735g6b4hh590zrc9fmvcsy0w-imagemagick-6.9.12-2g-doc >> /gnu/store/l3hr0fimip6v7vmkgxbqygsglxaxasy0-imagemagick-6.9.12-2g Here, there are several points. --8<---------------cut here---------------start------------->8--- $ guix search imagemagick | recsel -p name,version | head -5 name: imagemagick version: 6.9.12-2g name: imagemagick version: 6.9.11-48 $ guix build imagemagick /gnu/store/b91y6ji9ypx8abk00jd33jglxbnjq4dy-imagemagick-6.9.12-2g-doc /gnu/store/l0asah1mggmgli85sp673bnp2yc71g0j-imagemagick-6.9.12-2g --8<---------------cut here---------------end--------------->8--- All is fine, security speaking. Then, there is a bug on how Guix handles the version. Well, 6.9.11 should be understood as 6.9.11-48 and it seems not: --8<---------------cut here---------------start------------->8--- $ guix build imagemagick@6.9.11 guix build: error: imagemagick: package not found for version 6.9.11 $ guix build imagemagick@6.9.11-48 /gnu/store/b91y6ji9ypx8abk00jd33jglxbnjq4dy-imagemagick-6.9.12-2g-doc /gnu/store/l0asah1mggmgli85sp673bnp2yc71g0j-imagemagick-6.9.12-2g --8<---------------cut here---------------end--------------->8--- =E2=80=A6but all is fine security speaking. And the --no-grafts allows to = get the so-well named option. :-) --8<---------------cut here---------------start------------->8--- $ guix build imagemagick@6.9.11-48 --no-grafts /gnu/store/wlnciwhn6llwqwywf4hq739v5bbcrq3h-imagemagick-6.9.11-48-doc /gnu/store/vlix7fclb7ifjgmxgpwr1pvraff89w7b-imagemagick-6.9.11-48 --8<---------------cut here---------------end--------------->8--- However, I am confused by, --8<---------------cut here---------------start------------->8--- $ guix build imagemagick --no-grafts /gnu/store/aby97j4d27zm6ilpcqrdm1lcw34xhcpj-imagemagick-6.9.12-2g-doc /gnu/store/mzlng0n9s811abilzffa3v6pslv184yj-imagemagick-6.9.12-2g --8<---------------cut here---------------end--------------->8--- > To my mind this suggests a bug, or at least suboptimal behavior, in > "guix package". I don't think it's appropriate to set grafting policy > to work around it. If I understand correctly all that, I agree with the 2 parts from your comment made elsewhere: It would be good to reach agreement on whether replacement packages should be made public. I haven't thought much about it, so I don't k= now what the relevant issues are. > How about changing "guix package -A" and "guix package -s" to display > information about the package's replacement, if it has one? The real question seems about =E2=80=99replacement=E2=80=99 with upgraded v= ersion, because otherwise it is already the expected behaviour, I mean the behaviour that I personally expect. :-) --8<---------------cut here---------------start------------->8--- $ guix build python /gnu/store/wbci0x7f1q3k8rrc8d5qcckh59vl5zld-python-3.8.2 /gnu/store/r9f2bbavkbj17h2djjild5v5rd6yymcv-python-3.8.2-tk $ guix build python --no-grafts /gnu/store/rz42ba0my9vrgbkjpkzr2drmnjk5ah50-python-3.8.2 /gnu/store/r61fm38x5zwfaval9nf7ax960qmgsixf-python-3.8.2-tk $ guix show python | recsel -p name,version name: python version: 3.8.2 outputs: out tk --8<---------------cut here---------------end--------------->8--- > Alternatively, those commands could somehow explicitly indicate that the > package has been grafted, and show the version number of the > replacement, in such a way that is less confusing to users. That=E2=80=99s the issue when updating a package using =E2=80=99replacement= =E2=80=99. Is the replaced package still visible at the CLI level? If yes, we could try to indicate something like: --8<---------------cut here---------------start------------->8--- $ guix search imagemagick | recsel -p name,version | head -5 name: imagemagick version: 6.9.12-2g name: imagemagick version: 6.9.11-48 (grafted by 6.9.12-2g) --8<---------------cut here---------------end--------------->8--- but I do not know if it is possible / easy. And even, there are still clumsy behaviour as pointer above. Cheers, simon