From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id MMb5Miw/UmB5EAAA0tVLHw (envelope-from ) for ; Wed, 17 Mar 2021 17:41:00 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id IADtLiw/UmDzPwAA1q6Kng (envelope-from ) for ; Wed, 17 Mar 2021 17:41:00 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8467F1FAF4 for ; Wed, 17 Mar 2021 18:41:00 +0100 (CET) Received: from localhost ([::1]:48422 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lMaAF-0007NN-J3 for larch@yhetil.org; Wed, 17 Mar 2021 13:40:59 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:44996) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lMZgC-0007Jm-0z for guix-devel@gnu.org; Wed, 17 Mar 2021 13:10:03 -0400 Received: from mail.zaclys.net ([178.33.93.72]:60913) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lMZg9-00047B-M8 for guix-devel@gnu.org; Wed, 17 Mar 2021 13:09:55 -0400 Received: from guix-xps.local (82-64-145-38.subs.proxad.net [82.64.145.38]) (authenticated bits=0) by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 12HH9ou7021675 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Wed, 17 Mar 2021 18:09:50 +0100 DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 12HH9ou7021675 Authentication-Results: mail.zaclys.net; spf=fail smtp.mailfrom=lle-bout@zaclys.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net; s=default; t=1616000990; bh=8jJqEaMyg9soadkZLsSlhsZdyT/U+qnHAX6GXOrBVg0=; h=Subject:From:To:Cc:Date:In-Reply-To:References:From; b=sBQbmPwWEzXvxlhMFmI/lzR0Of2ePt32Wnkr1zJeDsPAcDR3MY3aA2mVY2djnQACr ch2pxANPmEPYJIfARhFvEr5xnnvVtTaKDDlUB95H3+TVaUkndk7plVx5/9IYbvxm0+ 4Pb8/U81mfn6MH2XBbu24BG6BbOaQWiYn5w2Luv0= Message-ID: Subject: Re: Why [bug#47081] Remove mongodb? From: =?ISO-8859-1?Q?L=E9o?= Le Bouter To: zimoun Cc: guix-devel@gnu.org Date: Wed, 17 Mar 2021 18:09:45 +0100 In-Reply-To: <86ft0twwg8.fsf@gmail.com> References: <20210312005632.13690-1-lle-bout@zaclys.net> <86ft0twwg8.fsf@gmail.com> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-7hrxwUCEY1URM9GiXY4k" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 Received-SPF: pass client-ip=178.33.93.72; envelope-from=lle-bout@zaclys.net; helo=mail.zaclys.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1616002860; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=8jJqEaMyg9soadkZLsSlhsZdyT/U+qnHAX6GXOrBVg0=; b=cILz2cXSf4M+POYLB01BdJteSvSHN65LV/zm0QMo3RPYGjLVU/J/3REgXwKpmNggwvCe/Y FIY5uJ4peLZ9NizAc09LcU3E48h5WnpPrxPWIm5Sl+3zY16etxU6IS2ornmsrjlqxKPA7D /ZYwo5eEyfa6He+na2HtuDhnZjUt0lFmcBA6O9+9XNZKCm+8Xi410dnkkignmTkZBuWMEk TIVO+ERC8e3OtXxMEAPozGURMuNtWU0EJQiOGSeBx54wDeM7kwjLeEASLG0p7CLvZ9L9T/ 6MmzI1S08TEdInRHu7wzbrOnAW4jEIfx+YZSylQOnLQ2SCta6B2ySp/H0rm8pQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1616002860; a=rsa-sha256; cv=none; b=YcBor4upkaMUDSGjAMCSBYiIRyy1R6FaYE8Ir9Dm8abUAfvIyUvEJYuTG/i4GMVrFYq8Ko rqbr8U3RaJ0EHNg0pJGubcLPR3+X9XtYjok5hus2NeUKYYkoX0W6XQkvSJ0IVFlzbdun7q OIOjGiY6CwRNaR1odCI4s0WMalAYSpEJEI0fJFY8YzGTk26LYIEsNNqPY4Ll3hgm1QQSTp pyj5TZV8yItQkNpxSHARtbHVdWGyoJ+Okfc9i8iEHZTkmgHCzbcK2QR025waJEOL0lQp1/ 2HMTRx/iZ5SUaqcHlVJkXWGZMH8ZJRfAZ0pB1yjIlgF5ngG8Nq9Kb0kBc2XWyA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=sBQbmPwW; dmarc=pass (policy=reject) header.from=zaclys.net; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -4.20 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=sBQbmPwW; dmarc=pass (policy=reject) header.from=zaclys.net; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 8467F1FAF4 X-Spam-Score: -4.20 X-Migadu-Scanner: scn0.migadu.com X-TUID: 2Npol1cWd7RN --=-7hrxwUCEY1URM9GiXY4k Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, 2021-03-17 at 17:56 +0100, zimoun wrote: > If the removal for security reasons had been discussed on IRC, it > could > be nice to point the discussion here. Otherwise, open a discussion > on > the topic on guix-devel or bug-guix. The full removal is a radical > solution (especially, it should be done with 2 commits: service+doc > and > then package; well another story). https://issues.guix.gnu.org/47081 - some of it there:=20 https://logs.guix.gnu.org/guix/2021-03-12.log#001752 Efraim, Cbaines, Lfam was involved there and shown no big objections >=20 > Well, you updated mongodb from 3.4.10 to 3.4.24 on the March 10th, > submitted a patch series for the removal on the March 12th and pushed > on > the March 16th. In the meantime, the update has been reverted on the > March 11th because of license issue, IIUC. >=20 The security update was reverted, then the revert was reverted due to debate on licensing which turns out reverting the revert was actually wrong because some specific files were under SSPL, at that point we were shipping SSPL code which is nonfree, so the removal is also that. Nonfree code + security issue made it kind of stressful L=C3=A9o --=-7hrxwUCEY1URM9GiXY4k Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEFIvLi9gL+xax3g6RRaix6GvNEKYFAmBSN9kACgkQRaix6GvN EKaL1g/9EjV9FGs2CyC0n6j5MUsQrLVomVHG81LNjw1BSPOwj5xQ1fa+uL7yvqCI hdR+/bVLrlTaOSaiQui5O+TIxqRyQko1fDHkDSHHicw/0A34sxWCSwX5ruuxd6zJ LrNWJdbmqF3PV7LikyQCP3EVCXGHSLMlVfWngesWL4TNWKgJt4bkfb9WMZqR0jNa k2+3CfxSddrAXIh8/ri9tC7a2udQd/nm5zLfIWSwH2ub0q3r1zyFyFrereNPiRR6 PfKTP9m/cPi0k5xBNPpK/Mr/psttmNnwkhFp9IcL8796Udvr096jordXRFtMoPlD 5oPO7AVjZqaxzgcz3DzB2XUUn3Aw/XIdDKuWetSJloNWlWdxGziziMH7VmE8wCqA sIleDAJK0y50atkpUez2F2W9sXBHm8Nnqg2EaPM0FA5H/a151jB8QkHPYFPJZHg8 mi+nJTZU76ZnwF96wrA3K8V2pcAsiKVb5hel3fPyPOMEqRT0qVTKDzQ0Dxn6DqMz /Sgs/t1YszS4RCk6xWSuyEbIHtmgsJGc3Kjvk/51EIgll9Gg2uSza49hbhnF+iOO fPdSpiDLbOG58FZ500ncsmN0UlUzqF8IdVdvH66nMCenNxpuxUHYuzL+yMp953KH x7jKa9DzE+Wm3zpmV4MBjOTYwd4r9uGo+suOFYeWFdeXI+J+ITo= =eXCG -----END PGP SIGNATURE----- --=-7hrxwUCEY1URM9GiXY4k--