From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pjotr Prins Subject: Re: [PATCH] gnu: Add hmmer Date: Sun, 21 Jun 2015 20:11:31 +0200 Message-ID: <20150621181131.GA17424@thebird.nl> References: <55867B39.3020207@uq.edu.au> <87zj3tgziz.fsf@elephly.net> <55868F4B.6060201@uq.edu.au> <87egl57zh0.fsf@netris.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:41359) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z6jjB-0006vX-7Y for guix-devel@gnu.org; Sun, 21 Jun 2015 14:12:22 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Z6jj6-00066g-NU for guix-devel@gnu.org; Sun, 21 Jun 2015 14:12:21 -0400 Received: from mail.thebird.nl ([95.154.246.10]:51559) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z6jj6-000652-Hj for guix-devel@gnu.org; Sun, 21 Jun 2015 14:12:16 -0400 Content-Disposition: inline In-Reply-To: <87egl57zh0.fsf@netris.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Mark H Weaver Cc: guix-devel@gnu.org On Sun, Jun 21, 2015 at 01:17:31PM -0400, Mark H Weaver wrote: > It's not good that hmmer bundles its own copy of easel. If we ever need > easel for another package, we should find a way to build hmmer against > the external easel library. Having multiple copies of the same library > on the system potentially means multiple copies in RAM, and more > importantly: multiple copies that need to be patched for fixes, > especially security fixes. It is quite common in bioinformatics tools to include foreign code. One reason in favour of including the original setup that is it is THAT what the authors and others test and run. Bringing in our own dependencies is bound to open a can of worms - there often is a reason they bring in that packaged code. One reason is that they depend on an older version ;). For that reason I favor deploying what the original authors suggest. I am not too concerned about security fixes as long as the tools run in user space and do not expose network services. Most bioinformatics tools are in that category. Pj.