From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Thompson, David" Subject: Re: Problem with pkgconfig source https redirect Date: Wed, 10 Feb 2016 16:40:03 -0500 Message-ID: References: <874mdhp91g.fsf@mordocai.net> <20160210094344.7aff4457@debian-netbook> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:51173) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aTcUX-00085p-7u for guix-devel@gnu.org; Wed, 10 Feb 2016 16:40:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aTcUW-0002bQ-8T for guix-devel@gnu.org; Wed, 10 Feb 2016 16:40:05 -0500 Received: from mail-yw0-x230.google.com ([2607:f8b0:4002:c05::230]:35247) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aTcUW-0002bM-0F for guix-devel@gnu.org; Wed, 10 Feb 2016 16:40:04 -0500 Received: by mail-yw0-x230.google.com with SMTP id g127so25288770ywf.2 for ; Wed, 10 Feb 2016 13:40:03 -0800 (PST) In-Reply-To: <20160210094344.7aff4457@debian-netbook> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Efraim Flashner Cc: guix-devel On Wed, Feb 10, 2016 at 2:43 AM, Efraim Flashner wrote: > On Tue, 09 Feb 2016 20:56:59 -0600 > Christopher W Carpenter wrote: > >> Talked about this on IRC davexunit, but there appears to be a circular dependency >> issue with gnutls and pkg-config now that pkg-config needs to be >> downloaded via https. >> > [snip] >> >> davexunit on #guix mentioned that this may need to be solved using a >> minimal build of gnutls that doesn't require pkg-config for https >> downloads but i'm a bit out of my depth here so I'm just reporting :). >> >> I am happy to do some grunt work once the project decides what direction >> to go. >> >> Thanks, >> Christopher Carpenter >> > > Another option is to try to build gnutls without pkg-config and as part of > the configure phase manually tell it where to find the dependencies. IIRC we > do that with some of the less complicated lower level packages. The bigger problem to be aware of is this: No package in the gnutls dependency graph may have its source code downloaded over HTTPS. Even if we hack around this for pkg-config, I'm sure it will bite us again when another upstream starts enforcing HTTPS. So, what can we do here? - Dave