Re: [arch-dev-public] Split openssl package

2020-11-21 Thread Eli Schwartz via arch-dev-public
On 11/21/20 4:52 AM, Pierre Schmitz wrote:
> Hi all,
> 
> there is a new set of openssl packages in testing that are split into
> openssl, openssl-doc and openssl-perl. See
> https://bugs.archlinux.org/task/54887

As I mentioned there, I don't really see the need to make a split
package just for 25kb of optional scripts that can just use optdepends.

"I tendo o lean towards a separate package instead of using optdepends
as it is more explicit and you do not end up with partly invalid package."

Do you then propose Arch should switch policies and start using split
packages everywhere instead of our usual optdepends? Not sure what to
think here. This feels inconsistent.

> As most users just need the library the perl dependency can be
> dropped. Summing up:
> 
> Before:
> openssl: depends on Perl; size:  3.6 MiB (7.31 MiB)
> 
> After:
> openssl: depends just on glibc; size: 1.78 MiB (5.49 MiB)
> openssl-perl: depends on Perl
> openssl-doc: size: 1.82 MiB
> 
> We actually talked about this at ArchConf last year. Splitting the
> package was the easy part, but dropping the Perl dependency means that
> any package up the tree that depends on openssl needs to be checked if
> it actually needs Perl itself. Thanks to everybody who did the hard
> work here!
> 
> PS: Do you think we should post a news item about this change? Most
> people won't need to worry about this, but those few who need the perl
> scripts need to install the separate package.

I don't see any need for a news post to tell people that a script no one
uses comes in a different package.

If you did want to message this to people, it doesn't require manual
intervention so a post_upgrade message is perfectly suitable.

-- 
Eli Schwartz
Bug Wrangler and Trusted User


OpenPGP_0x84818A6819AF4A9B.asc
Description: application/pgp-keys


OpenPGP_signature
Description: OpenPGP digital signature


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Eli Schwartz via arch-dev-public
On 11/21/20 11:58 AM, Filipe Laíns via arch-dev-public wrote:
> pyenv forces users to compile the Python interpreter themselves, which
> can take a long time with --enable-optimizations.
> None of the user repos available builds with optimizations, or has
> signed packages AFAIK. Of course they could in the future, but I think
> having the packages in the repos is much better in terms of security
> and usability. I run one of the user which provides these packages and
> I don't see myself fixing any of the issues I pointed out due to
> technical limitations.

Incidentally... if you don't see yourself fixing the
--enable-optimizations or gpg --detach-sign problem for your own builds,
I'm morbidly curious as to the technical limitations and would like to
know why you think these technical limitations will vanish once you're
uploading them to repos.archlinux.org specifically.


-- 
Eli Schwartz
Bug Wrangler and Trusted User


OpenPGP_0x84818A6819AF4A9B.asc
Description: application/pgp-keys


OpenPGP_signature
Description: OpenPGP digital signature


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Eli Schwartz via arch-dev-public
On 11/21/20 11:59 AM, Filipe Laíns via arch-dev-public wrote:
> On Sat, 2020-11-21 at 16:58 +0100, Andreas Radke via arch-dev-public
> wrote:
>> Am Sat, 21 Nov 2020 14:34:24 +
>> schrieb Filipe Laíns via arch-dev-public
>> :
>>
>>
>>> Does anyone have any big issue with this? What are your thoughts?
>>>
>>> [1] https://www.python.org/downloads/
>>>
>>> Cheers,
>>> Filipe Laíns
>>
>> -1
>>
>> Arch is yours. Whoever needs more and older releases on the system -
>> just do it yourself! In the past we said "use abs and AUR - Arch is
>> the base to make it your own".
> 
> This argument can be used to deny adding any package to the repos. You
> need this library, tool, etc.? Just add it yourself.
> 
> Why are we packaging software that is used by far less people but we
> can't package these Python interpreters which are being actively missed
> by people?
> 
>> I don't want to see users raising bugs that something doesn't work
>> with an older version of python. And I don't want to see these
>> requests
>> pop up every now and then to add even more stuff in different
>> versions.
> 
> We already have multiple versions of Java, Ruby, Javascript, etc. hell,

Your analysis is correct, it is indeed hell. I'm not sure why that is an
argument in favor of doing even more of it though.

Now, if you were proposing to get rid of some of this, I could get
behind that.

> even Python.

I don't know if maybe you've missed the fact that we've spent like a
year now aggressively upgrading or removing leaf packages depending on
python2 in search of that glorious Promised Future where we can finally
remove the python2 package itself?

And we're doing that even for a major incompatible release that most
people argue is actually a different language.

I'm not sure how this suddenly became an argument to package a ton of
point releases that aren't even incompatible.

> I don't think having people opening bugs because they are
> deliberately using an older version of Python is a big problem. It
> hasn't been for any of the other languages, I don't think it will be
> here.
> I think this is an hypothetical that doesn't really materialize into
> reality.

You're proposing something far beyond the scope of what we do for other
languages, and ignoring that for other languages we only do it if driven
to in desperation because another official repository package depends on it.

We don't introduce leaf packages of ancient versions of currently
packaged interpreters just for fun. I don't even think anyone else does
that either.

>> It's sad enough we still have python2 and gtk2 around. To have gcc9
>> around and other duplicates is not what I want to see growing in
>> Arch. 
> 
> What you call sad I call a bad UX. Why do we need to force users to
> compile active releases of the Python interpreters themselves, which
> can take a long time if they are building with optimization, or to
> resort to pre-built repos with much lower security standards than us,
> when there are people willing to maintain them?
> 
> I can't understand how it's sad to help out users by not forcing them
> to resort the sort of things I mentioned above, as long as we are not
> struggling to do so. I like helping people, that's why I am a packager,
> that is the opposite of sad for me, so I really can't understand this.

I have... no idea what the problem is supposed to be here? I'm
desperately trying to understand what the actual point of your proposal is.

You want to package old versions of the python3 interpreter "but not
modules", because "people would like to use it for tox".

Old versions of stuff that people need for who knows what weird reason
is *the textbook reason* why the AUR exists. How long it takes to
compile stuff in the AUR is not our problem, and we don't have a
rationale to upload gcc-{4,5,6,7,8,9} because actual users need to use a
lot of diverse compilers "to test that it still works on really old
compilers".

Likewise, if people want to test support for old versions of python3,
they have options which don't involve uploading trash into [community].

- Do what normal people do, and build AUR packages they need
- Ask FFY00 to provide signed repos
- Use travis CI, which doesn't use distro packages but provides a
  diverse set of hand-compiled python versions, which is apparently some
  kind of gold standard for doing regression testing on lots of
  different python releases ;)
- Use pyenv

Apparently none of these are viable options in your mind, and the most
Arch-like of them, option #1 "use the AUR" you believe to be problematic
because it takes a long time to build with optimizations... even though
you yourself said those packages don't enable optimizations and don't
take a long time???

(If you're using python-$old exclusively for regression tests in tox,
you don't need a super optimized version.)

>> I don't want to see our distribution transformed into another Debian.
> 
> That is not what is happening.

Yeah, even Debian doesn't do this. 

Re: [arch-dev-public] Orphaned packages from arcanis

2020-11-21 Thread Doug Newgard via arch-dev-public
On Sat, 21 Nov 2020 20:09:12 +0100
Morten Linderud via arch-dev-public  wrote:

> Yo!
> 
> As a followup from the recent TU removal, I have composed a list of orphaned
> packages from arcanis. Please write back if you adopt anything else I'll drop
> packages into the AUR after some time has passed. As of now there are no 
> package
> resigning that needs to be done.

If you adopt a package, please remember to check the bug tracker and reassign
any open tickets for that package to yourself. I went through and made sure
anything that had a comaintainer was reassigned already.

Doug


pgpiKM0rkYaQI.pgp
Description: OpenPGP digital signature


Re: [arch-dev-public] Orphaned packages from arcanis

2020-11-21 Thread Felix Yan via arch-dev-public
On Sat, 2020-11-21 at 20:09 +0100, Morten Linderud via arch-dev-public
wrote:
> scala

Adopted.

-- 
Regards,
Felix Yan


signature.asc
Description: This is a digitally signed message part


Re: [arch-dev-public] Orphaned packages from arcanis

2020-11-21 Thread Filipe Laíns via arch-dev-public
On Sat, 2020-11-21 at 20:09 +0100, Morten Linderud via arch-dev-public wrote:
pymol
python-biopython

Adopted.

Filipe Laíns


signature.asc
Description: This is a digitally signed message part


[arch-dev-public] Orphaned packages from arcanis

2020-11-21 Thread Morten Linderud via arch-dev-public
Yo!

As a followup from the recent TU removal, I have composed a list of orphaned
packages from arcanis. Please write back if you adopt anything else I'll drop
packages into the AUR after some time has passed. As of now there are no package
resigning that needs to be done.


$ pkgsearch -m arcanis -l 1 | cleanup-list.py -
Orphans required by maintained packages:
- eric:
arcanis: eric-i18n-en, eric-i18n-es, eric-i18n-de
- g15daemon:
idevolder: lcdproc
- mftrace:
arcanis: lilypond
dvzrv: lilypond

Unneeded orphans:
canorus
eric-i18n
julius
libasl
libg15
libg15render
libmatio
libmmtf
pdfsam
pychecker
pymol
python-biopython
python-pmw
scala
voxforge-am-julius


Cheers!

-- 
Morten Linderud
PGP: 9C02FF419FECBE16


signature.asc
Description: PGP signature


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Filipe Laíns via arch-dev-public
Whoops, my email client messed up the formatting :/

Here's the reply without the quotes:


Looking at some package stats for pyenv[1], we see a usage of 3,4%. I
think that is a big enough number.

pyenv does have another usage, which is managing custom Python
interpreters, which is mainly used in CPython development, but I'd say
that only a small percentage of the users use it uniquely for that.

We can also look directly at the python36 and python37 packages
reported, which users might be getting from the AUR or user repos.

python37 has 1.18% [2]
python36 has 1.63% [3]

The main reason why the packages might be required, as I explained in
the original email, is for package testing. It puts every maintainer
and most contributors to projects that target Python 3.6 or 3.7 in need
of an interpreter. Most open source Python project target at least a
few different Python versions.

These metrics are not perfect by any means, but I do think they present
relevant enough data to show an existent need.

[1] https://pkgstats.archlinux.de/api/packages/pyenv
[2] https://pkgstats.archlinux.de/api/packages/python36
[3] https://pkgstats.archlinux.de/api/packages/python37


Cheers,
Filipe Laíns


signature.asc
Description: This is a digitally signed message part


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Filipe Laíns via arch-dev-public
On Sat, 2020-11-21 at 19:11 +0100, Bartłomiej Piotrowski via arch-dev-public 
wrote:
On 21/11/2020 18.48, Filipe Laíns via arch-dev-public wrote:
> I understand that. I am not asking to put all releases of Python on
> the
> repos, only the active ones, which people are using.

I presume you can back it up with numbers how widely 3.7 and 3.6 are
used by Arch users. All I can see is that both have less than 30 votes in AUR. 
Even if I take into account how irrelevant AUR votes are, I
assume the problem is exaggerated.

I have some metrics that might be relevant.

The people that are missing these interpreters generally use pyenv to
make up for it, which is not an optimal solution, but the most common
when the interpreters are missing.

Looking at some package stats for pyenv[1], we see a usage of 3,4%. I
think that is a big enough number.

pyenv does have another usage, which is managing custom Python
interpreters, which is mainly used in CPython development, but I'd say
that only a small percentage of the users use it uniquely for that.

We can also look directly at the python36 and python37 packages
reported, which users might be getting from the AUR or user repos.

python37 has 1.18% [2]
python36 has 1.63% [3]

The main reason why the packages might be required, as I explained in
the original email, is for package testing. It puts every maintainer
and most contributors to projects that target Python 3.6 or 3.7 in need
of an interpreter. Most open source Python project target at least a
few different Python versions.

These metrics are not perfect by any means, but I do think they present
relevant enough data to show an existent need.

Why are we packaging software that is used by far less people but we
can't package these Python interpreters which are being actively missed
by people?

Our approach of "YOLO push random new packages to repos" is something I never 
agreed with, for the record. Unfortunately it's a kingdom with
almost no rules.

BP

[1] https://pkgstats.archlinux.de/api/packages/pyenv
[2] https://pkgstats.archlinux.de/api/packages/python36
[3] https://pkgstats.archlinux.de/api/packages/python37

Cheers,
Filipe Laíns


signature.asc
Description: This is a digitally signed message part


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Bartłomiej Piotrowski via arch-dev-public
On 21/11/2020 18.48, Filipe Laíns via arch-dev-public wrote:
> I understand that. I am not asking to put all releases of Python on the
> repos, only the active ones, which people are using.

I presume you can back it up with numbers how widely 3.7 and 3.6 are
used by Arch users. All I can see is that both have less than 30 votes
in AUR. Even if I take into account how irrelevant AUR votes are, I
assume the problem is exaggerated.

> Why are we packaging software that is used by far less people but we
> can't package these Python interpreters which are being actively missed
> by people?

Our approach of "YOLO push random new packages to repos" is something I
never agreed with, for the record. Unfortunately it's a kingdom with
almost no rules.

BP


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Filipe Laíns via arch-dev-public
On Sat, 2020-11-21 at 11:24 -0600, Doug Newgard via arch-dev-public
wrote:
> On Sat, 21 Nov 2020 16:59:21 +
> Filipe Laíns via arch-dev-public 
> wrote:
> 
> > On Sat, 2020-11-21 at 16:58 +0100, Andreas Radke via arch-dev-
> > public
> > wrote:
> > > Am Sat, 21 Nov 2020 14:34:24 +
> > > schrieb Filipe Laíns via arch-dev-public
> > > :
> > > 
> > >   
> > > > Does anyone have any big issue with this? What are your
> > > > thoughts?
> > > > 
> > > > [1] https://www.python.org/downloads/
> > > > 
> > > > Cheers,
> > > > Filipe Laíns  
> > > 
> > > -1
> > > 
> > > Arch is yours. Whoever needs more and older releases on the
> > > system -
> > > just do it yourself! In the past we said "use abs and AUR - Arch
> > > is
> > > the base to make it your own".  
> > 
> > This argument can be used to deny adding any package to the repos.
> > You
> > need this library, tool, etc.? Just add it yourself.
> > 
> > Why are we packaging software that is used by far less people but
> > we
> > can't package these Python interpreters which are being actively
> > missed
> > by people?
> > 
> > > I don't want to see users raising bugs that something doesn't
> > > work
> > > with an older version of python. And I don't want to see these
> > > requests
> > > pop up every now and then to add even more stuff in different
> > > versions.  
> > 
> > We already have multiple versions of Java, Ruby, Javascript, etc.
> > hell,
> > even Python. I don't think having people opening bugs because they
> > are
> > deliberately using an older version of Python is a big problem. It
> > hasn't been for any of the other languages, I don't think it will
> > be
> > here.
> > I think this is an hypothetical that doesn't really materialize
> > into
> > reality.
> > 
> > > It's sad enough we still have python2 and gtk2 around. To have
> > > gcc9
> > > around and other duplicates is not what I want to see growing in
> > > Arch.   
> > 
> > What you call sad I call a bad UX. Why do we need to force users to
> > compile active releases of the Python interpreters themselves,
> > which
> > can take a long time if they are building with optimization, or to
> > resort to pre-built repos with much lower security standards than
> > us,
> > when there are people willing to maintain them?
> > 
> > I can't understand how it's sad to help out users by not forcing
> > them
> > to resort the sort of things I mentioned above, as long as we are
> > not
> > struggling to do so. I like helping people, that's why I am a
> > packager,
> > that is the opposite of sad for me, so I really can't understand
> > this.
> 
> It's more concerning to me that you can't understand this argument
> than
> anything else so far. Arch keeps old things around in the repos when
> they're
> required by other things in the repos. It's a necessary evil, not
> something to
> be actively encouraged.

I understand that. I am not asking to put all releases of Python on the
repos, only the active ones, which people are using.

> > > I don't want to see our distribution transformed into another
> > > Debian.  
> > 
> > That is not what is happening.
> > 
> > Cheers,
> > Filipe Laíns
> 

-- 
Filipe Laíns


signature.asc
Description: This is a digitally signed message part


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Doug Newgard via arch-dev-public
On Sat, 21 Nov 2020 16:59:21 +
Filipe Laíns via arch-dev-public  wrote:

> On Sat, 2020-11-21 at 16:58 +0100, Andreas Radke via arch-dev-public
> wrote:
> > Am Sat, 21 Nov 2020 14:34:24 +
> > schrieb Filipe Laíns via arch-dev-public
> > :
> > 
> >   
> > > Does anyone have any big issue with this? What are your thoughts?
> > > 
> > > [1] https://www.python.org/downloads/
> > > 
> > > Cheers,
> > > Filipe Laíns  
> > 
> > -1
> > 
> > Arch is yours. Whoever needs more and older releases on the system -
> > just do it yourself! In the past we said "use abs and AUR - Arch is
> > the base to make it your own".  
> 
> This argument can be used to deny adding any package to the repos. You
> need this library, tool, etc.? Just add it yourself.
> 
> Why are we packaging software that is used by far less people but we
> can't package these Python interpreters which are being actively missed
> by people?
> 
> > I don't want to see users raising bugs that something doesn't work
> > with an older version of python. And I don't want to see these
> > requests
> > pop up every now and then to add even more stuff in different
> > versions.  
> 
> We already have multiple versions of Java, Ruby, Javascript, etc. hell,
> even Python. I don't think having people opening bugs because they are
> deliberately using an older version of Python is a big problem. It
> hasn't been for any of the other languages, I don't think it will be
> here.
> I think this is an hypothetical that doesn't really materialize into
> reality.
> 
> > It's sad enough we still have python2 and gtk2 around. To have gcc9
> > around and other duplicates is not what I want to see growing in
> > Arch.   
> 
> What you call sad I call a bad UX. Why do we need to force users to
> compile active releases of the Python interpreters themselves, which
> can take a long time if they are building with optimization, or to
> resort to pre-built repos with much lower security standards than us,
> when there are people willing to maintain them?
> 
> I can't understand how it's sad to help out users by not forcing them
> to resort the sort of things I mentioned above, as long as we are not
> struggling to do so. I like helping people, that's why I am a packager,
> that is the opposite of sad for me, so I really can't understand this.

It's more concerning to me that you can't understand this argument than
anything else so far. Arch keeps old things around in the repos when they're
required by other things in the repos. It's a necessary evil, not something to
be actively encouraged.

> > I don't want to see our distribution transformed into another Debian.  
> 
> That is not what is happening.
> 
> Cheers,
> Filipe Laíns



pgpjkdiILK286.pgp
Description: OpenPGP digital signature


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Filipe Laíns via arch-dev-public
On Sat, 2020-11-21 at 16:58 +0100, Andreas Radke via arch-dev-public
wrote:
> Am Sat, 21 Nov 2020 14:34:24 +
> schrieb Filipe Laíns via arch-dev-public
> :
> 
> 
> > Does anyone have any big issue with this? What are your thoughts?
> > 
> > [1] https://www.python.org/downloads/
> > 
> > Cheers,
> > Filipe Laíns
> 
> -1
> 
> Arch is yours. Whoever needs more and older releases on the system -
> just do it yourself! In the past we said "use abs and AUR - Arch is
> the base to make it your own".

This argument can be used to deny adding any package to the repos. You
need this library, tool, etc.? Just add it yourself.

Why are we packaging software that is used by far less people but we
can't package these Python interpreters which are being actively missed
by people?

> I don't want to see users raising bugs that something doesn't work
> with an older version of python. And I don't want to see these
> requests
> pop up every now and then to add even more stuff in different
> versions.

We already have multiple versions of Java, Ruby, Javascript, etc. hell,
even Python. I don't think having people opening bugs because they are
deliberately using an older version of Python is a big problem. It
hasn't been for any of the other languages, I don't think it will be
here.
I think this is an hypothetical that doesn't really materialize into
reality.

> It's sad enough we still have python2 and gtk2 around. To have gcc9
> around and other duplicates is not what I want to see growing in
> Arch. 

What you call sad I call a bad UX. Why do we need to force users to
compile active releases of the Python interpreters themselves, which
can take a long time if they are building with optimization, or to
resort to pre-built repos with much lower security standards than us,
when there are people willing to maintain them?

I can't understand how it's sad to help out users by not forcing them
to resort the sort of things I mentioned above, as long as we are not
struggling to do so. I like helping people, that's why I am a packager,
that is the opposite of sad for me, so I really can't understand this.

> I don't want to see our distribution transformed into another Debian.

That is not what is happening.

Cheers,
Filipe Laíns


signature.asc
Description: This is a digitally signed message part


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Filipe Laíns via arch-dev-public
On Sat, 2020-11-21 at 16:59 +0100, Morten Linderud via arch-dev-public
wrote:
> On Sat, Nov 21, 2020 at 04:47:27PM +0100, David Runge wrote:
> > On 2020-11-21 14:34:24 (+), Filipe Laíns via arch-dev-public
> > wrote:
> > > Hi all,
> > > 
> > > I want to propose adding all active Python versions to
> > > [community], not
> > > just the latest one. This would only entail adding the
> > > interpreter
> > > itself, no other packages.
> > > 
> > An alternative (in a per-user setup) can be to use pyenv [1]. It
> > works
> > reasonably well with tox etc. and I have used it in the past
> > successfully to develop against several python interpreter
> > versions.
> 
> I'm personally not very excited for the idea of adding more python
> interpreters.
> I'm a bit concerned that we today say "no packages" but in the future
> we relax a
> bit and end up with python36-$pkgname, as it's the pragmatic option
> as opposed
> to blocking entire rebuilds or package updates.

We can add a guideline blocking this.

> What is the downsides of utilizing something like pyenv? There are
> user
> repositories providing older python interpreters as well if people
> need it.
> 

pyenv forces users to compile the Python interpreter themselves, which
can take a long time with --enable-optimizations.
None of the user repos available builds with optimizations, or has
signed packages AFAIK. Of course they could in the future, but I think
having the packages in the repos is much better in terms of security
and usability. I run one of the user which provides these packages and
I don't see myself fixing any of the issues I pointed out due to
technical limitations.

Cheers,
Filipe Laíns


signature.asc
Description: This is a digitally signed message part


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Morten Linderud via arch-dev-public
On Sat, Nov 21, 2020 at 04:47:27PM +0100, David Runge wrote:
> On 2020-11-21 14:34:24 (+), Filipe Laíns via arch-dev-public wrote:
> > Hi all,
> > 
> > I want to propose adding all active Python versions to [community], not
> > just the latest one. This would only entail adding the interpreter
> > itself, no other packages.
> > 
> An alternative (in a per-user setup) can be to use pyenv [1]. It works
> reasonably well with tox etc. and I have used it in the past
> successfully to develop against several python interpreter versions.

I'm personally not very excited for the idea of adding more python interpreters.
I'm a bit concerned that we today say "no packages" but in the future we relax a
bit and end up with python36-$pkgname, as it's the pragmatic option as opposed
to blocking entire rebuilds or package updates.

What is the downsides of utilizing something like pyenv? There are user
repositories providing older python interpreters as well if people need it.

-- 
Morten Linderud
PGP: 9C02FF419FECBE16


signature.asc
Description: PGP signature


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Andreas Radke via arch-dev-public
Am Sat, 21 Nov 2020 14:34:24 +
schrieb Filipe Laíns via arch-dev-public
:


> Does anyone have any big issue with this? What are your thoughts?
> 
> [1] https://www.python.org/downloads/
> 
> Cheers,
> Filipe Laíns

-1

Arch is yours. Whoever needs more and older releases on the system -
just do it yourself! In the past we said "use abs and AUR - Arch is
the base to make it your own".

I don't want to see users raising bugs that something doesn't work
with an older version of python. And I don't want to see these requests
pop up every now and then to add even more stuff in different versions.
It's sad enough we still have python2 and gtk2 around. To have gcc9
around and other duplicates is not what I want to see growing in Arch. 
I don't want to see our distribution transformed into another Debian.

-Andy


pgp6EiOKQF09B.pgp
Description: Digitale Signatur von OpenPGP


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread David Runge
On 2020-11-21 14:34:24 (+), Filipe Laíns via arch-dev-public wrote:
> Hi all,
> 
> I want to propose adding all active Python versions to [community], not
> just the latest one. This would only entail adding the interpreter
> itself, no other packages.
> 
> Having access to interpreters for older active versions is really
> helpful for Python developers. This allows them to easily run test
> suites against older versions. It is very common for developers to
> maintain software against a couple major releases. Tools like tox or
> nox are able to automate testing against multiple Python versions, just
> needing the interpreter.
> 
> The current active Python releases are:
>   - 3.9
>   - 3.8
>   - 3.7
>   - 3.6
>   - 2.7
> 
> The list can be found here[1].
> 
> So, I propose introducing 2 new packages:
>   - python3.7
>   - python3.6
> 
> And when we update the python package to 3.9:
>   - python3.8
> 
> Does anyone have any big issue with this? What are your thoughts?

I guess a downside is the increase in maintenance burden to provide this
and it potentially leading to things not being ported/ fixed (ergo
fragmentation) as maintainers might want to rely on several interpreters
being around in the future (to build packages against).
However, as you are specifically stating you would like to only have the
interpreters added, maybe that's fine?

An alternative (in a per-user setup) can be to use pyenv [1]. It works
reasonably well with tox etc. and I have used it in the past
successfully to develop against several python interpreter versions.

Best,
David

[1] https://www.archlinux.org/packages/community/any/pyenv/

-- 
https://sleepmap.de


signature.asc
Description: PGP signature


Re: [arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Filipe Laíns via arch-dev-public
On Sat, 2020-11-21 at 07:51 -0700, Zach Himsel wrote:
> What would determine what the "default" python be? The latest?
> 
> 
> --
> Zach Himsel
> mailto://z...@himsel.net
> http://zach.himsel.net

Yep, that would stay exactly as it is right now. We would only
additionally provide interpreters (and interpreters only!) for the
older Python versions.

Cheers,
Filipe Laíns


signature.asc
Description: This is a digitally signed message part


[arch-dev-public] Add active Python versions to the repos

2020-11-21 Thread Filipe Laíns via arch-dev-public
Hi all,

I want to propose adding all active Python versions to [community], not
just the latest one. This would only entail adding the interpreter
itself, no other packages.

Having access to interpreters for older active versions is really
helpful for Python developers. This allows them to easily run test
suites against older versions. It is very common for developers to
maintain software against a couple major releases. Tools like tox or
nox are able to automate testing against multiple Python versions, just
needing the interpreter.

The current active Python releases are:
  - 3.9
  - 3.8
  - 3.7
  - 3.6
  - 2.7

The list can be found here[1].

So, I propose introducing 2 new packages:
  - python3.7
  - python3.6

And when we update the python package to 3.9:
  - python3.8

Does anyone have any big issue with this? What are your thoughts?

[1] https://www.python.org/downloads/

Cheers,
Filipe Laíns


signature.asc
Description: This is a digitally signed message part


[arch-dev-public] Split openssl package

2020-11-21 Thread Pierre Schmitz
Hi all,

there is a new set of openssl packages in testing that are split into
openssl, openssl-doc and openssl-perl. See
https://bugs.archlinux.org/task/54887

As most users just need the library the perl dependency can be
dropped. Summing up:

Before:
openssl: depends on Perl; size:  3.6 MiB (7.31 MiB)

After:
openssl: depends just on glibc; size: 1.78 MiB (5.49 MiB)
openssl-perl: depends on Perl
openssl-doc: size: 1.82 MiB

We actually talked about this at ArchConf last year. Splitting the
package was the easy part, but dropping the Perl dependency means that
any package up the tree that depends on openssl needs to be checked if
it actually needs Perl itself. Thanks to everybody who did the hard
work here!

PS: Do you think we should post a news item about this change? Most
people won't need to worry about this, but those few who need the perl
scripts need to install the separate package.

Greetings,

Pierre