From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id WOZqAYk8uWCiKgAAgWs5BA (envelope-from ) for ; Thu, 03 Jun 2021 22:33:13 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id +P9COIg8uWAYSAAAbx9fmQ (envelope-from ) for ; Thu, 03 Jun 2021 20:33:12 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 653852F569 for ; Thu, 3 Jun 2021 22:33:12 +0200 (CEST) Received: from localhost ([::1]:45572 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lou1f-0002bn-Aa for larch@yhetil.org; Thu, 03 Jun 2021 16:33:11 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42880) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lou1T-0002bd-At for guix-devel@gnu.org; Thu, 03 Jun 2021 16:32:59 -0400 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:48479) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lou1R-0003IY-De for guix-devel@gnu.org; Thu, 03 Jun 2021 16:32:59 -0400 Received: from compute6.internal (compute6.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id C36C85C018C; Thu, 3 Jun 2021 16:32:55 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute6.internal (MEProxy); Thu, 03 Jun 2021 16:32:55 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-transfer-encoding:in-reply-to; s=mesmtp; bh=bntHVHE5LidWY/UTChnuW2siaq2HQzZSuNNu45SVvug=; b=kZUMApDLV3fC kf1CJ940hzCpup1mciAyCrudYPVDykNxzKKbs6MrqRgUN2MZwX6ZCwCSVqVmOovk nGfiJaGSeIrrcRV4Z/ht/uJl+Zlm3dpuuk85HUKhMc9YcozObVHSyiwunCtTDrPU MZNYyRDHbzTx7xTqH3vLOtinhrFPyek= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; bh=bntHVHE5LidWY/UTChnuW2siaq2HQzZSuNNu45SVv ug=; b=O40Xqqh9nyaPn9h7f9xXfsCMXi1LH4AITlYDTPduiMbURGhSu5tqwULGQ lhSBB3E6p8WMaB0yGsjTTqkt4Ka57O7MNnqrHgMy7GG59MEWmnG9SdbZFggNkPMU L7YFIbAeh5l0Az9LotuTgCHagpBWqtwf5q5vml9zbEq2gTdJolS05vfWTM9+InH3 H7S6K5pcUmLSVLuZaXc8tpqphSMFixevT4dUvXHLefZoAyHn95rXKyC9XbyHBfSU lB6DvJXJrUUsPCfl6Orueu5JfsJ41upnME8OtuAi+QMggS9a+Qd8jvPuziT95m4G 7rR+AVKRtoCz9aq1fVOi89hBGE/7g== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrvdelledgudehtdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpeffhffvuffkfhggtggugfgjsehtkeertddttdejnecuhfhrohhmpefnvgho ucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrg htthgvrhhnpeegjeeggeehtddugfffuddtvdfffeffjeekffffveffheegvddvuedtffek jeejjeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpe hlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 3 Jun 2021 16:32:55 -0400 (EDT) Date: Thu, 3 Jun 2021 16:32:53 -0400 From: Leo Famulari To: Ignacio Coterillo Subject: Re: Questions reqarding packaging and conventions Message-ID: References: <87eedk22ir.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <87eedk22ir.fsf@gmail.com> Received-SPF: pass client-ip=66.111.4.28; envelope-from=leo@famulari.name; helo=out4-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1622752392; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=bntHVHE5LidWY/UTChnuW2siaq2HQzZSuNNu45SVvug=; b=b+sgVwpNymBtO4M+uoACsp4YuuLKE8eNvNbDyEPr2282XX3k+6srmq8+r3j2cfJu+O0yA1 XPO+6fyERgn5mfUWlSV8O4J1j9U8zlxhiY2u476sbWCtdDi4CIrZeXuNb1j2nBM7//+E8o wWNLvUiFnkf47BDJzRYRqDNDMc5IqJzP1UZca/3TT3qeZlzmFEkv9fzrxZKRvxaqEktJH8 w8QmlfU++KqqgUJUOocYIiXDPgRX/G/hqCTQQPQBTOgiZCAfIe3XKkf8qLCk+S2F39a8Hb i1o60HFtGmYLjwev3w9YcHem1JGE41ovcwmE0LX+Yi0YaB48fB06wmPLH+A8jQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1622752392; a=rsa-sha256; cv=none; b=ucSfSrRwzJbwFtg01Arl6W01l2nSrpXaVEw/X/mG18w3Zh8EFfOhh0oc3LA+orvverQBZ8 V887BCh/b5/XytdYD/uA0NY4Bh8VVS+YbUbAvkjxz0daXGqT73fK/8ejAiI2F1VbzpJ3S7 IQUhaXs0hVuXppNXjGyo0lpjmUd7cwCiyhJ/PwsprZCjO9usR8XSngnHmvTPn4EFgjMG98 mOk7bYYbzMX8t12Cr7EaSEXzlaCTrGSlnhqBMWPwSrrDOt2AqdsiIxdY7fBm5DLGjB2oOe p5LdMdWCK35pW4zw8RU5lR6rrQ0YQU+kty18O/btVspZdVW5J4Of+x9j9ZaPCg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=kZUMApDL; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=O40Xqqh9; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -2.63 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=kZUMApDL; dkim=pass header.d=messagingengine.com header.s=fm3 header.b=O40Xqqh9; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 653852F569 X-Spam-Score: -2.63 X-Migadu-Scanner: scn0.migadu.com X-TUID: 5qtX7CmnrJbC On Wed, Jun 02, 2021 at 07:55:31AM +0200, Ignacio Coterillo wrote: > I'm trying to debug and fix issues with Kerberos based authentication on both Icecat and > qutebrowser and got a few questions: > > Via strace I found that icecat tries load `libgssapi.so` which doesn't exist. > > Trivially creating the file as a symbolic link to the `libgssapi_krb5.so` provided > by the `mit-krb5` package and exposing via LD_LIBRARY_PATH solves the issue and > fixes Kerberos based authentication. > > - Question 1: Should this be fixed in the mit-krb5 package or in the icecat package? If the mit-krb5 authors aim to provide libgssapi.so, then we should adjust our package to achieve that. Otherwise, I'd guess it's a problem in icecat / firefox. Do you know what other distros do? > - Question 2: What would be the best way of creating this link in a package? > > I've played with creating a modified `mit-krb5` (i.e. `my-mit-krb5`) with the > following additional build phase: > > (modify-phases %standard-phases > (add-after 'install 'create-link > (lambda _ > (let* ((libpath (getenv "out")) > (origin (format #f "~a/lib/libgssapi_krb5.so" libpath)) > (target (format #f "~a/lib/libgssapi.so" libpath))) > (symlink origin target)) > #t)) That would work, but like I said above, the mit-krb5 build scripts should have a way to do this, or it's likely a change to be made in the icecat package. > This works, but creates the link with full path target instead of relative like the rest of links > created naturally by the original build process: > > ❯ ls -l /gnu/store/irhvqdpc4zvyj9in514lv859mjkyi7p3-my-mit-krb5-1.18/lib/libgssapi* > lrwxrwxrwx 3 root root 21 Jan 1 1970 /gnu/store/irhvqdpc4zvyj9in514lv859mjkyi7p3-my-mit-krb5-1.18/lib/libgssapi_krb5.so -> libgssapi_krb5.so.2.2 > lrwxrwxrwx 3 root root 21 Jan 1 1970 /gnu/store/irhvqdpc4zvyj9in514lv859mjkyi7p3-my-mit-krb5-1.18/lib/libgssapi_krb5.so.2 -> libgssapi_krb5.so.2.2 > -r--r--r-- 2 root root 380520 Jan 1 1970 /gnu/store/irhvqdpc4zvyj9in514lv859mjkyi7p3-my-mit-krb5-1.18/lib/libgssapi_krb5.so.2.2 > lrwxrwxrwx 7 root root 82 Jan 1 1970 /gnu/store/irhvqdpc4zvyj9in514lv859mjkyi7p3-my-mit-krb5-1.18/lib/libgssapi.so -> /gnu/store/irhvqdpc4zvyj9in514lv859mjkyi7p3-my-mit-krb5-1.18/lib/libgssapi_krb5.so > > Should I try to `chdir` to the path before creating the link, or is there a cleaner > way of doing something like this? Not sure, but I agree that it should be a relative link, if adjusting mit-krb5 is the solution we choose. > qutebrowser Kerberos support comes from `qtwebengine`. The only change needed would > be to add `mit-krb5` as input and add the "--webengine-kerberos=yes" qmake option in its > `configure` build phase. Sounds good. > My question here is about whether there is any policy requiring formal justification to > increase the number of dependencies of a certain package or this would be considered a valid > request/patch. There's no policy. In general, we aim to provide fully-featured packages, but that is an informal habit rather than a strict guideline.