From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: Re: Staying on top of Qt security Date: Wed, 09 Mar 2016 09:46:19 +0100 Message-ID: <87fuw082ec.fsf@elephly.net> References: <20160214200143.GA19744@jasmine> <20160225083545.GA21159@solar> <20160225090430.GA21236@solar> <20160225090642.GA21644@solar> <20160305114124.GA23846@solar> <87d1r8aane.fsf@mdc-berlin.de> <20160305211845.GA28755@solar> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:38101) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1adZlK-0000M3-L9 for guix-devel@gnu.org; Wed, 09 Mar 2016 03:46:35 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1adZlG-00022o-Js for guix-devel@gnu.org; Wed, 09 Mar 2016 03:46:34 -0500 Received: from sender163-mail.zoho.com ([74.201.84.163]:25165) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1adZlG-00022g-BO for guix-devel@gnu.org; Wed, 09 Mar 2016 03:46:30 -0500 In-reply-to: <20160305211845.GA28755@solar> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Andreas Enge Cc: guix-devel@gnu.org Andreas Enge writes: > On Sat, Mar 05, 2016 at 10:16:05PM +0100, Ricardo Wurmus wrote: >> We could ask drobilla for a new suil release. I don’t think we should >> package the development version as it’s not clear if dependent >> applications would work with the latest suil. > > Sounds good. Would you like to do it, since you are clearly the expert? I just checked some packaging information for Suil. Maybe we should just split it into different packages: The purpose of Suil is to abstract plugin UI toolkits away from host code. To achieve this, Suil performs its magic by dynamically loading modules for each toolkit. The main Suil library does NOT depend on any toolkit libraries, and thus neither should your package. Please package the individual modules (e.g. libsuil_gtk2_in_qt4.so) as separate packages, which themselves depend on the involved toolkits. These packages should also be versioned as described above to support parallel installation. Please do not make the main Suil package depend on any toolkit package, this defeats the purpose of Suil and will severely irritate those who for whatever reason do not want a particular toolkit dependency. The main Suil package may have a weak dependency (e.g. "recommends") on the individual wrapper modules, and it's fine if these are installed by default, but it must be possible to install Suil without installing them if the user explicitly wishes to do so. [http://svn.drobilla.net/lad/trunk/suil/PACKAGING] How about we do just that? Maybe we’ll find that the qt4 backend is not needed by any other package at all. ~~ Ricardo