From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id AF33MmfBuWITGgEAbAwnHQ (envelope-from ) for ; Mon, 27 Jun 2022 16:40:39 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id 4A79MWfBuWK/TwAAG6o9tA (envelope-from ) for ; Mon, 27 Jun 2022 16:40:39 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 08AC8BF86 for ; Mon, 27 Jun 2022 16:40:07 +0200 (CEST) Received: from localhost ([::1]:33432 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o5puG-0005w9-F0 for larch@yhetil.org; Mon, 27 Jun 2022 10:40:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:56960) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o5pn6-0004iz-JA for guix-devel@gnu.org; Mon, 27 Jun 2022 10:32:41 -0400 Received: from andre.telenet-ops.be ([2a02:1800:120:4::f00:15]:35186) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1o5pn1-000302-Cm for guix-devel@gnu.org; Mon, 27 Jun 2022 10:32:40 -0400 Received: from ptr-bvsjgyhxw7psv60dyze.18120a2.ip6.access.telenet.be ([IPv6:2a02:1811:8c09:9d00:3c5f:2eff:feb0:ba5a]) by andre.telenet-ops.be with bizsmtp id oEYX270054UW6Th01EYXlp; Mon, 27 Jun 2022 16:32:31 +0200 Message-ID: Subject: Re: Dealing with upstream issues From: Maxime Devos To: zimoun , Ludovic =?ISO-8859-1?Q?Court=E8s?= Cc: Tobias Kortkamp , guix-devel@gnu.org Date: Mon, 27 Jun 2022 16:32:25 +0200 In-Reply-To: <87wnd2w9mm.fsf@gmail.com> References: <6d31ff958ec0c75cbba8324a275315d195a54902.1653045472.git.tobias.kortkamp@gmail.com> <87sfntu6ft.fsf@gnu.org> <87r13aifi3.fsf_-_@gnu.org> <87wnd2w9mm.fsf@gmail.com> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-s17kwWutoI3W5fAO8zlN" User-Agent: Evolution 3.38.3-1 MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r22; t=1656340351; bh=LpxcNiym2CDhK4KKL20BITqu9IJUo5byk8nnQU1QeWM=; h=Subject:From:To:Cc:Date:In-Reply-To:References; b=TR4vmUkarzh0icfnJ4NMvhTM+Vr21TMN9v+Gzv2eO1Adu3SoDPm441+Y8bkD1IeTx eEmz96s6/NVssq25iWtq9+6ZGo8dCHC/yyzfBECE0z3RZFNwKpqKD61x4IDWYMByPj aL3L2dDmsi24D6PtqrWlCT4BJhDgr8BYPzV1TVM6cLcD2PFSleCnpZDLmSvaOJmXfF Vp/IpuNhgm6yHHHM/KJGR1JMApai71C49KKM1LpFROT4uMUyIgDgMt33H6ofkfSj58 ydHErHg7kxNvAvusYP9ZBWaxZF8RzoZTwE86k20sfCb0WBza62hwnTeBLNKilGa69v 65EJ3DV6KOM0Q== Received-SPF: pass client-ip=2a02:1800:120:4::f00:15; envelope-from=maximedevos@telenet.be; helo=andre.telenet-ops.be X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, T_SPF_HELO_TEMPERROR=0.01 autolearn=unavailable autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1656340807; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=LpxcNiym2CDhK4KKL20BITqu9IJUo5byk8nnQU1QeWM=; b=FaWEsSEht5PkttNXuurincsfjP5RI4q06K+HN7/kwiqy27J3fc3DH0XMhyPKifIhkaIiLI tAEnucDs0bRcY8/fAHqdUuJjHR2GjjUVP0WDWzZudBc5kaMM5gu/kImQl2b3vkJdXJFDxj JelzW77uE09HvVXm1Spn8LgZiLAEc8e2WGKfeMhwMmIGT167kYP49MwKwOFNGR5VPjXWb4 mm2NGWJKFQDEdRhinXfjN922lsVPujhX6p1jjxLlmTCWzVHCEW2pDQAcrQSLZ2oNtXPkVt 4izS2EvnQfj+Uh6hKKZXo5Tg68KL+x2z7Ysga4O62UwF/oUZLvBkWrSL41AiAQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1656340807; a=rsa-sha256; cv=none; b=kMpKT11yK13TrJSA/QjfME+lybsfahJ4m8XxATOPnHVpmJ/n4b4pr565I9KA7ZGUfJDru4 nFbFGOr5tMuhZ5qFO5BBTr3LAYJ6N0KZ817ExJw1q174I4dr+qHosPLr+KnMoapYzVkQFF XtUASJVC7bLkFS0TcbaNGceOTzRbC6g8MnNJ0/hznhNDyILTuXf3ptUqK/pakxrQb4p1kp 6iHxCrIj1bdB04917+CDIMb+nU84nLrEXPhiJK3ch05eExMlwgTg5rF7z3+tC39tgjji69 dUMflB1c8U5/p/j5Id14xC7bpHT1noZyBYQVFUq+l2+xEr/Vi+Kouv1EhYf7zg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=telenet.be header.s=r22 header.b=TR4vmUka; dmarc=pass (policy=none) header.from=telenet.be; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -4.65 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=telenet.be header.s=r22 header.b=TR4vmUka; dmarc=pass (policy=none) header.from=telenet.be; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 08AC8BF86 X-Spam-Score: -4.65 X-Migadu-Scanner: scn1.migadu.com X-TUID: s1TkMQIBjrOi --=-s17kwWutoI3W5fAO8zlN Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable zimoun schreef op ma 27-06-2022 om 14:53 [+0200]: > Maybe I misunderstand the point.=C2=A0 To me, the aim of the package > submission is the inclusion in Guix.=C2=A0 AFAIK, the Guix project is not > applying any standard audit on the upstream code before inclusion. >=20 > Therefore, if the upstream code is poor in some areas, then it is not > blocking for the package adoption in Guix=E2=80=A6 I think there should be some degree of standards (where I mean standards in the non-shodyness sense of the word, not in the sense=C2=A0of specs, though specs would be nice too) and of audit (bundling, malware, non-free, bugs) -- some of which are blocking (bundling, malware, non- free, some bugs), some of which aren't (some other bugs). E.g., see removal of unmaintained Python, of some old SSL libraries >>> However, AFAICT, none of that has happened yet. > =E2=80=A6and such adoption does not mean the upstream quality cannot be > improved, by reporting or add a patch. The problem is that this sometimes seems to be neglected unless people are practically forced to make the issue be reported upstream. > > My view is that such issues should be reported upstream but cannot > alone > > block package adoption in Guix. >=20 > I agree; we cannot fix the world. ;-) In the case of patch#55541, the > issues of cross-compilation can be reported directly to upstream Agreed -- I did not ask that explicitely in #55541, but the implied question was to report it upstream (or fix local, that could be done too). But my point is that this should have been done _before_ merging the patch. > and another Debbugs number could be open. Would be pointless. Standard policy seems to be to leave the debbugs issue unresolved forever, then someone does some cleanup in debbugs to close the debbugs number due to lack of activity or such. Things would be delayed forever. Greetings, Maxime. --=-s17kwWutoI3W5fAO8zlN Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYrm/eRccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7mgjAQChrl+AFbS4cjCtqGGfm1V9FPVi s6QErFxzyPZt+uGbtwD9FXkHQaeEM9nY5wB6vDqszEvF57giDFnaY7FXYHXruAI= =YoQe -----END PGP SIGNATURE----- --=-s17kwWutoI3W5fAO8zlN--