From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marius Bakke Subject: Re: Fetching patches as origins instead of copying them into the Guix Git repo Date: Thu, 31 Aug 2017 23:52:25 +0200 Message-ID: <87shg7l812.fsf@fastmail.com> References: <87inh5uqpd.fsf@gmail.com> <87inh4lw7y.fsf@fastmail.com> <87y3q0ow9h.fsf@gmail.com> <87k21jjyzy.fsf@fastmail.com> <20170831213806.GA22308@jasmine.lan> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56045) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dnXO6-00033J-FT for guix-devel@gnu.org; Thu, 31 Aug 2017 17:52:35 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dnXO1-0005au-Jx for guix-devel@gnu.org; Thu, 31 Aug 2017 17:52:34 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:41829) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dnXO1-0005ag-6Y for guix-devel@gnu.org; Thu, 31 Aug 2017 17:52:29 -0400 In-Reply-To: <20170831213806.GA22308@jasmine.lan> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari , guix-devel@gnu.org --=-=-= Content-Type: text/plain Leo Famulari writes: > On Thu, Aug 31, 2017 at 09:52:49PM +0200, Marius Bakke wrote: >> Side note: I think we should start adding patches as origins instead of >> copying them wholesale, to try and keep the git repository slim. > > We should make a git-minimal package for things like this, or use > guile-git / libgit2. Git itself is a very "heavy" package. No, I mean adding patches like this: (define %CVE-1970-0001.patch (origin (method url-fetch) (uri "https://example.com/CVE-2017-0001.patch") (sha256 (base32 "12c60iwxyc3rj6ih06a1g80vmkf8khvhm44xr9va4h21b74v8f5k")))) (package (... (patches (list (search-patch "guix-specific-stuff.patch") %CVE-1970-0001.patch))) That only requires the built-in guix downloader. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAlmohRkACgkQoqBt8qM6 VPpjIQf/agcviYy6FI9S9WofViyltSXI4kcwU5yqe4N2YXdxSZ1I4NTGieqBPD1T I+90IisMfUlH7m7mmaO1TrkiS129t+FrGzyFeKyZnfzOalea+iF7oFC2BZx/oKYM YTL1EhriCOO+5MW4QghI9pqxqQrhtrEc47VMbc0P7OjpgHszvXAKLLTATgpmHxWj MmAM+UK4qwdgdjaExa2sAgWOS5FqjIZw6M3ZPr8CyeBpxq20fgGjAEiU+LZ4wgVD fbRALnV4nCgstqOqg7G/LJ2ND9Oie7etlM0n4m/TkntwfxWXNJW0vI10rYXXAARh +hEbrHHr70eRLKvlDjD5xRDMDKHsJA== =adMg -----END PGP SIGNATURE----- --=-=-=--