From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([209.51.188.92]:36303) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gx9qC-00052N-Ft for guix-patches@gnu.org; Fri, 22 Feb 2019 07:22:09 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gx9qA-0001LI-SV for guix-patches@gnu.org; Fri, 22 Feb 2019 07:22:08 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:34086) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gx9q7-0001GG-9B for guix-patches@gnu.org; Fri, 22 Feb 2019 07:22:04 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gx9q7-0000NV-4N for guix-patches@gnu.org; Fri, 22 Feb 2019 07:22:03 -0500 Subject: [bug#34613] Acknowledgement ([PATCH] gnu: Add prometheus.) Resent-Message-ID: MIME-Version: 1.0 References: <20190222114537.1431-1-boskovits@gmail.com> In-Reply-To: From: =?UTF-8?Q?G=C3=A1bor?= Boskovits Date: Fri, 22 Feb 2019 13:21:35 +0100 Message-ID: Content-Type: text/plain; charset="UTF-8" List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: 34613@debbugs.gnu.org Hello, I have packaged prometheus. There are some problems with it however: The tarball has a vendor directory, containing sources of third party go stuff. How do we deal with that? (Should we package the stuff there, and link the sources into the tree?) I have noticed a few possible problems: https://github.com/prometheus/prometheus/blob/master/vendor/github.com/influxdata/influxdb/LICENSE_OF_DEPENDENCIES.md indicates that glyphicons is possibly non-free, needs further investigation. https://github.com/prometheus/prometheus/tree/master/vendor/github.com/shurcooL/httpfs does not copy the original LICENSE file from upstream, it is MIT licensed. Should report a bug against prometheus. Other preliminary license checks does not show further issues. I would like to know if anyone could help me get this package into shape, and point me towards a way to use inputs instead of linking the source into the build tree. It would be nice, if we didn't have to build these stuffs twice. I am willing to do the work, but I need some pointer, as I am not into go. Unbundling would also help to get a more exact license line. Any help welcome. Additionally: 1. this package misses a service, 2. only prometheus is built, the repository contains some other tools, like promtool, those are not provided. Best regards, g_bor