From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id OSQgFPSoRGLOiwAAgWs5BA (envelope-from ) for ; Wed, 30 Mar 2022 21:01:08 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id ELLxD/SoRGIeJQAAauVa8A (envelope-from ) for ; Wed, 30 Mar 2022 21:01:08 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id E653637CF5 for ; Wed, 30 Mar 2022 21:01:07 +0200 (CEST) Received: from localhost ([::1]:39978 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nZdZ4-00078X-Ub for larch@yhetil.org; Wed, 30 Mar 2022 15:01:07 -0400 Received: from eggs.gnu.org ([209.51.188.92]:54622) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nZdTZ-0007ux-Jl for guix-devel@gnu.org; Wed, 30 Mar 2022 14:55:29 -0400 Received: from [2a00:1450:4864:20::644] (port=36485 helo=mail-ej1-x644.google.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nZdTX-0006Xx-Va for guix-devel@gnu.org; Wed, 30 Mar 2022 14:55:25 -0400 Received: by mail-ej1-x644.google.com with SMTP id bi12so43457492ejb.3 for ; Wed, 30 Mar 2022 11:55:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:subject:from:to:date:in-reply-to:references:user-agent :mime-version:content-transfer-encoding; bh=xE7LwJnfb4DKX3R5o6q+I+C5xiuOcKb3hX/DjlbCGQs=; b=ZmS1m+VZjr/wNhg4LFm+mU5MEQAZFiU18WM9CSP0SvDyHlu0fFb98stk5sQqu3JttT tdPBBDWYiCw//Rg0hDDcM5ny938VFr7Y7OF3Ka+9ZPeTxzAu1jQzjEEhmuss66o02qZk 1d3WbLT205lMt15evf6YW0zB300SLho+pWe7xdR7QgkkCWqwO75PYhGrBeODz7OhZ/8S h89TcrM1MpQ8eedeTAPfZYLssPHhGAHAaBMgOfcrvvgTUUUVzHV/jXtfnQfa/tH66pWc hgXEUtvACPs2WAdszPrq8uTNl8isZ4ptGaSdjlyUqIds73OOYSx2Y37R23xKL+T8lGwP Yjhg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:subject:from:to:date:in-reply-to :references:user-agent:mime-version:content-transfer-encoding; bh=xE7LwJnfb4DKX3R5o6q+I+C5xiuOcKb3hX/DjlbCGQs=; b=6olzKFzPPzmEbR7goPP1Hq5035U/bwrhtRt4U03Tik17bVkyD8HzDrUJvN8b9f3p+c WKXH4iPxvJ+tz1GB/+xUJkoRicGqZbNAyVvClbpgjvX+h3iFbdgSvsWuma0BzFh7wNWD 1XoB9JoY4SzpgafxhVoHTiGz+AkI24q0+BKEAb4G2I+L7lO3pZTOXKeiHr4lcb/6uYPx 2dsTZUcem0r9zYQMZSgD0d03mh/DfJK1kglWdez1hqQmkZna37FXp7eAfOlxbnfOkJHZ cieHIBwpoVrW1u3DSiwpPYBo+2nFjTYYBOhAlMyPqTfh+7KWp1c958pAym8cAnA4FV3N CYyg== X-Gm-Message-State: AOAM533ZbbuytKO9BPbZhcTBqWUYBsp0v2vg2WGqQfz1aV34taOT5fLd C7hDfyHS4/4U/M56RSAo4n4= X-Google-Smtp-Source: ABdhPJwdV7Tu0nRSZqzrW227mYLBp8KMkaGVIV40/UUtvMA+RQNCXtH8iVwaMpgi9NvtmU/8mMS2EQ== X-Received: by 2002:a17:907:72c5:b0:6da:e99e:226c with SMTP id du5-20020a17090772c500b006dae99e226cmr1066327ejc.515.1648666522205; Wed, 30 Mar 2022 11:55:22 -0700 (PDT) Received: from nijino.fritz.box (85-127-52-93.dsl.dynamic.surfer.at. [85.127.52.93]) by smtp.gmail.com with ESMTPSA id hs12-20020a1709073e8c00b006dfd7dee980sm8527085ejc.30.2022.03.30.11.55.21 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 30 Mar 2022 11:55:21 -0700 (PDT) Message-ID: Subject: Re: Autotools-generated 'configure' & 'Makefile.in' considered binaries? From: Liliana Marie Prikler To: Maxime Devos , guix-devel@gnu.org Date: Wed, 30 Mar 2022 20:55:20 +0200 In-Reply-To: <9c2ca57d59672fc4f9ebc0230b08d8953030a456.camel@telenet.be> References: <9c2ca57d59672fc4f9ebc0230b08d8953030a456.camel@telenet.be> Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.42.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Host-Lookup-Failed: Reverse DNS lookup failed for 2a00:1450:4864:20::644 (failed) Received-SPF: pass client-ip=2a00:1450:4864:20::644; envelope-from=liliana.prikler@gmail.com; helo=mail-ej1-x644.google.com X-Spam_score_int: -6 X-Spam_score: -0.7 X-Spam_bar: / X-Spam_report: (-0.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, PDS_HP_HELO_NORDNS=0.659, RCVD_IN_DNSWL_NONE=-0.0001, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1648666867; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=xE7LwJnfb4DKX3R5o6q+I+C5xiuOcKb3hX/DjlbCGQs=; b=I6o+ne87WRNTd5rKl/4SEDteVM8rEbjKv6GXVsC1HtuS+i+hYpems0fuXdw5Di0eEtfTTa NbDVq83d5CmnwWg8OPhG9bysgsjzTbXDZVWPTJQKHN7IM7dB6vVBrIjyA5kbwVf25R6DJX xQd/01nzTmpuQ0vmfiNSMXQ4qFUk/qzao8eKj4yqvrUFzVI4WU6P2RNlRqtZiQPlc9psv+ XL3d1dV6592jn2WDcq8PNHb0ilkgIS9hIZkfjASfEwTzOGpRvnQu+FGMgoEIUAxQ33ABXv 31ZW6l3vM1B3codI8AYazhOhEgVg9Oj0QFYjJbTJ+VsYHj9W/J3acn9OCeL2hg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1648666867; a=rsa-sha256; cv=none; b=fjGat0qgmDE/RSWEksbEemMvEZ6v7VPYrkXvca4ybuyX6Zaz+d8syJu6GnRuw5BHLHGYPH yKpwafaaQyy8R0IXy/rY4R0kWyscjrF6gCWpt3gYyYXIWdpi4fCF0SMJjb4UtNeTNeV/oP ASgfswr6WRq3V8v+/f1+VFeAG93wbxsocpuB38Sj7t0ZC9NIa5mLivhaUtnWatRnJFEM5D LmiqyPufwCDz6z1ZllEGkDEYlxbNUNNvD4V2gWqh4Y8VcMTZaKB9xxcl2MHLEn0gF8IQRI FTxe6bGhedeaNea4v+NeEuYlexw0sAreJqSX2k6JH/9Z5Fd7Aww7ZvxUs2Ht/A== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=ZmS1m+VZ; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -4.57 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=ZmS1m+VZ; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: E653637CF5 X-Spam-Score: -4.57 X-Migadu-Scanner: scn0.migadu.com X-TUID: n4Uchx18kE+j Am Mittwoch, dem 30.03.2022 um 14:04 +0200 schrieb Maxime Devos: > Hi guix, > > Quite some packages in Guix use the Autotools system.  In this > system, a 'configure.ac' and 'Makefile.am' script / makefile is > written, from which 'autoconf' & 'automake' generate a very long bash > script and a Makefile.in.  Depending on the maintainer of the > upstream package, this 'configure' and 'Makefile.in' are sometimes > included in release tarballs. > > This seems in conflict with: > >   * (guix)Submitting patches: ‘Make sure the package does not use >     bundled copies of software already available as separate >     packages.’ > >     Autotools packages have a 'config.guess' and 'config.sub' script >     that need to be updated whenever there's a new architecture.  As >     such, for some packages, these need to be replaced for aarch64, >     powerpc or risv64.  There are also some packages with very old >     configure scripts that don't support --build/--host/--target, >     which could gain --build/--host/--target support by just >     regenerating them. > >     This also makes ensuring a package does not contain any malware >     much harder, because the configure script (and related files) >     needs to be read in their entirity. > >  * When an upstream tarball contains .so, .dll, .a, etc. binaries, >    they are removed downstream in a snippet.  Why would the Autotools >    be an exception? Note that many autotools-based packages already require the addition of autoconf and friends due to being pulled from git. That being said, it's somewhat hard to argue for completely dropping them, because a. simply matching files via ".in" suffix would be error-prone b. autoreconf should regenerate these files regardless Therefore, my counter-proposal would be to just simply always run the bootstrap script or autoreconf, even if the respective files are tarballed, as well as adding autoconf and automake to the implicit native inputs of gnu build system. > For some ‘early’ packages (gcc, glibc, binutils, ...), there's a > circularity problem The obvious solution to which would be to implement m4 in mes :) > [B]uilding 'configure' and 'Makefile.in' from source might not always > be possible, but WDYT of building 'configure' & 'Makefile.in' from > source for packages where it does not result in bootstrapping > problems? See above, but to reiterate, I'm generally in favor. Regarding tooling support, I think autotools should have an option to build a non-bootstrapped dist tarball. If more upstreams produced such stripped tarballs, we wouldn't even be having that debate. Cheers