Packages

  • Status Closed
  • Percent Complete
    100%
  • Task Type Feature Request
  • Category Any
  • Assigned To No-one
  • Operating System Hyperbola GNU/Linux-libre
  • Severity Low
  • Priority Very Low
  • Reported Version Any
  • Due in Version Undecided
  • Due Date Undecided
  • Votes 1
  • Private
Attached to Project: Packages
Opened by koszko - 20/02/2019
Last edited by Emulatorman - 01/11/2019

FS#1359 - ready PKGBUILDs modified for Hyperbola + openRC init scripts

Description:
GNU Guix is a purely functional package manager that can coexist peacefully with GNU/Linux distribution’s native package manaer and allows unprivileged per-user software installation.
Guix depends on several guile libraries not yet present in Hyperbola repo that need to be packaged too.

I have already prepared the necessary PKGBUILDs (attached to this task)

and I’m only asking for checking if they’re ok (since it’s my first attempt at packaging) and adding them to Hyperbola.

I did have some doubts as to which versions of packages were I supposed choose (newest ones or ones that were available as of May 8th 2017). I am also not sure if guile’s .go files are architecture dependent (some existsing PKGBUILDs I used declare arches separately but one declares ‘any’). I might have also made some mistakes along the way, hence I hope someone experienced will take a look at it.

I really hope someone will make use of guix once it’s added :)

Closed by  Emulatorman
01.11.2019 02:28
Reason for closing:  Won't implement

I am not sure if I agree anymore... a while back I would have voted yes, but now I think its bad idea, especially considering the chromium issue that guix is overlooking...

Well, I added this task 8 months ago and later decided to not use guix for completely other reason. Even if any of the devs actually looked at this task, it could be denied exactly because of what You said (or also because of a rule of not having 3rd party package managers in the distro...).

Still, it seems that guix uses ungoogled version of chromium. I guess Hyperbola would reject that browser just because of WebExtensions support in it. I remember reading about WebExts having an unfixable vulnerability, but despite searching Hyperforum I can't find the topic about it and it makes me wonder whether chromium-based and firefox57+-based browsers are really that hopelessly insecure or there's something more to the story. After all, other ethical distros have WebExtensions-supporting browsers... This might not actually be "guix's overlooking"

Admin

There are 2 reasons to don't implement it:

* Hyperbola doesn't support 3rd party package managers.
* Guix violates our Social Contract (eg. Chromium).

The ungoogled version of Chromium isn't enough to protect freedom and privacy. Chromium supports the use of Widevine DRM, Adobe Pepper Flash, and third-party codecs which are nonfree and Guix only disable it at the build time, however it isn't enough to follow our social contract, because we require remove (support and references about it) from the source to protect freedom for users who would build it from the source. Also, Chromium has critical privacy issues and it violates our social contract (see Hyperbola and privacy in our social contract for further details).

Date User Effort (H:M)
watch my effort tracking timers

Loading...

Available keyboard shortcuts

Tasklist

Task Details

Task Editing