Re: [Sugar-devel] What are all activity bundle sources & how to interpret differect exec values in activity.info files

2020-04-23 Thread James Cameron 
Thanks Manish,

There is no reliable way to prove a bundle does not contain Python 2,
Python 3, or JavaScript code.  While the exec value in metadata does
indicate a probability, it is not accurate.

I don't think we want any automated process for generating the static
app store from any of our existing bundle collections.  We have no
Python 3 collection yet, because we have no app store yet.

Your app store generator ought to use as input a bundle collection
specified as a filesystem directory.  One of the minimum requirements
[1] is to support activity bundles uploaded via SSH; which means they
could be used either as a filesystem directory when the generator runs
on the downloads web server, or as an HTTP URL which uses requests to
download the collection, or a set of URLs.

I recommend against any _execution_ of the activity bundles, because
of the security risks, so please don't use setup.py.

References:

1.
https://github.com/sugarlabs/GSoC/blob/master/Ideas-2020.md#sugar-app-store-for-python-3-activities-aslov4

On Thu, Apr 23, 2020 at 07:39:38AM +0200, su...@radii.dev wrote:
> Thanks James. I knew yesterday I saw latest bundle on [1]http://
> activities.sugarlabs.org/activities to be added last month. But couldn't find
> it today and assumed it to be my misunderstanding. I see that parent directory
> may show last modified data older than sub-directory as the case in [2]http://
> mirror.aarnet.edu.au/pub/sugarlabs/sources/ .
> 
> Many activities in [3]http://activities.sugarlabs.org/activities/?C=M;O=D do
> not have exec in their activity.info but by inspecting their shebang it  can 
> be
> determined that these are python2 activities. But some such as jukebox have
> neither of these. Though in jukebox repository, from branches since sugar-0.94
> it is specified as either sugar-activity or sugar-activity3.
> 
> In summary, I am looking for pattern to determine if an activity bundle is
> python2, python3, js (also if meant for sugarizer only or sugar compatible) or
> something else + sources from where I can fetch bundles (mainly python3). This
> is needed for automating entire process of generating static app store.
> Difficulty I am facing:
> 1) some have non-standard exec
> 2) some (in link you have mentioned) have no exec
> 3) where to find all python3 activity bundles . I will try executing 'setup.py
> dist_xo' in all sources found in [4]http://mirror.aarnet.edu.au/pub/sugarlabs/
> sources/ where setup.py is available in source tarball. Is this the way to go?
> 
> Regards,
> Manish
> 
> Apr 23, 2020, 14:38 by qu...@laptop.org:
> 
> Ah, I've found what you mean.
> 
> When a directory is viewed, the date of last modification is the date
> of last insertion to or deletion from the directory.
> 
> It is easy to misinterpret.
> 
> On Thu, Apr 23, 2020 at 02:26:18PM +1000, James Cameron wrote:
> 
> Thanks for asking.
> 
> Yes, those resources are updated regularly. Each time an activity or
> component is released. The date you saw for December 2018 may be an
> interpretation that does not fit the facts.
> 
> http://download.sugarlabs.org/activities/?C=M;O=D is the same as
> http://activities.sugarlabs.org/activities/?C=M;O=D and both show
> updates to 25th March.
> 
> http://mirror.aarnet.edu.au/pub/sugarlabs/ is an rsync mirror of
> http://download.sugarlabs.org/
> 
> http://mirror.aarnet.edu.au/pub/sugarlabs/sources/honey/?C=M;O=D shows
> updates to 21st April.
> 
> http://mirror.aarnet.edu.au/pub/sugarlabs/sources/sucrose/fructose/?C=
> M;O=D
> shows updates to 22nd April.
> 
> No, there is no single source of all latest activity bundles or all
> sources. I don't think such a source is needed. I also release
> Python 2 latest activity bundles, and again, I don't have a single
> source.
> 
> Yes, Tony's repository has not changed, does not include Python 3
> activities, and does include different exec values in bundles. It may
> also include bundles that are not part of Sugar Labs, for various
> reasons.
> 
> On Thu, Apr 23, 2020 at 04:47:14AM +0200, su...@radii.dev wrote:
> > Is [1]download.sugarlabs.org & 
> [2]mirror.aarnet.edu.au/pub/sugarlabs/
> updated
> > regularly? I found latest update on these on 3rd of December 2018. I
> think [3]
> > activities.sugarlabs.org/activities is only for python2 activities.
> Where can I
> > find bundles of all activities (primarily python3). Currently I am
> using Tony
> > Anderson 's [4]app store repo as source. Latest activity bundle 
> added
> to it was
> > on 14th July 2018 and no bundle of them is python3 activity i.e.
> 'exec =
> > "sugar-activity3"' . Can anyone please help me identify a single
> source of all
> > latest activity

Re: [Sugar-devel] What are all activity bundle sources & how to interpret differect exec values in activity.info files

2020-04-22 Thread sugar 
Thanks James. I knew yesterday I saw latest bundle on 
http://activities.sugarlabs.org/activities to be added last month. But couldn't 
find it today and assumed it to be my misunderstanding. I see that  parent 
directory may show last modified data older than sub-directory as the case in 
http://mirror.aarnet.edu.au/pub/sugarlabs/sources/ .

Many activities in http://activities.sugarlabs.org/activities/?C=M;O=D do not 
have exec in their activity.info but by  inspecting their shebang it  can be 
determined that these are python2 activities. But some such as jukebox have 
neither of these. Though in jukebox repository, from branches since sugar-0.94 
it is specified as either sugar-activity or sugar-activity3.

In summary, I am looking for pattern to determine if an activity bundle is 
python2, python3, js (also if meant for sugarizer only or sugar compatible) or 
something else + sources from where I can fetch bundles (mainly python3). This 
is needed for automating entire process of generating static app store. 
Difficulty I am facing:
1) some have non-standard exec
2) some (in link you have mentioned) have no exec
3) where to find all python3 activity bundles . I will try executing 'setup.py 
dist_xo' in all sources found in 
http://mirror.aarnet.edu.au/pub/sugarlabs/sources/ 

 where setup.py is available in source tarball. Is this the way to go?

Regards,
Manish

Apr 23, 2020, 14:38 by qu...@laptop.org:

> Ah, I've found what you mean.
>
> When a directory is viewed, the date of last modification is the date
> of last insertion to or deletion from the directory.
>
> It is easy to misinterpret.
>
> On Thu, Apr 23, 2020 at 02:26:18PM +1000, James Cameron wrote:
>
>> Thanks for asking.
>>
>> Yes, those resources are updated regularly.  Each time an activity or
>> component is released.  The date you saw for December 2018 may be an
>> interpretation that does not fit the facts.
>>
>> http://download.sugarlabs.org/activities/?C=M;O=D is the same as
>> http://activities.sugarlabs.org/activities/?C=M;O=D and both show
>> updates to 25th March.
>>
>> http://mirror.aarnet.edu.au/pub/sugarlabs/ is an rsync mirror of
>> http://download.sugarlabs.org/
>>
>> http://mirror.aarnet.edu.au/pub/sugarlabs/sources/honey/?C=M;O=D shows
>> updates to 21st April.
>>
>> http://mirror.aarnet.edu.au/pub/sugarlabs/sources/sucrose/fructose/?C=M;O=D
>> shows updates to 22nd April.
>>
>> No, there is no single source of all latest activity bundles or all
>> sources.  I don't think such a source is needed.  I also release
>> Python 2 latest activity bundles, and again, I don't have a single
>> source.
>>
>> Yes, Tony's repository has not changed, does not include Python 3
>> activities, and does include different exec values in bundles.  It may
>> also include bundles that are not part of Sugar Labs, for various
>> reasons.
>>
>> On Thu, Apr 23, 2020 at 04:47:14AM +0200, su...@radii.dev wrote:
>> > Is [1]download.sugarlabs.org & [2]mirror.aarnet.edu.au/pub/sugarlabs/ 
>> > updated
>> > regularly? I found latest update on these on 3rd of December 2018. I think 
>> > [3]
>> > activities.sugarlabs.org/activities is only for python2 activities. Where 
>> > can I
>> > find bundles of all activities (primarily python3). Currently I am using 
>> > Tony
>> > Anderson 's [4]app store repo as source. Latest activity bundle added to 
>> > it was
>> > on 14th July 2018 and no bundle of them is python3 activity i.e. 'exec =
>> > "sugar-activity3"' .  Can anyone please help me identify a single source 
>> > of all
>> > latest activity bundles or all sources, how frequently they are updates and
>> > which one contains latest for which 'exec'/language/platform.
>> > 
>> > Also there are 38 different execs in bundles in Tony's repo which are:
>> > 
>> > sugar-activity-web
>> > sugar-activity
>> > Breakout.sh
>> > etoys-activity
>> > runevil
>> > riverhexactivity-activity
>> > EtoysBasedActivityStart.sh
>> > sugarGedit
>> > geogebra
>> > sugarGnumeric
>> > kaleidoscope.sh
>> > ./firefox
>> > sugarMinecraft
>> > minivmac-activity
>> > quake-activity
>> > launcher
>> > StackAttack.sh
>> > activity/activity
>> > launch
>> > ./google-chrome
>> > activityname.sh
>> > ./firefox-activity.py
>> > sugarGTranslator
>> > sugaridle
>> > jpeces
>> > sugar-launch
>> > sugarOggConvert
>> > sugarOOo4Kids
>> > scribble_start
>> > ./Ejecutar.sh
>> > sugarTotem
>> > tuxmath-activity
>> > activity/tuxpaint
>> > usb-creator-sugar
>> > sugarVascolet
>> > ./ldshim.py
>> > sugarXa
>> > bin/activity.sh
>> > 
>> > Please help me in understanding how I should interpret them and determine 
>> > their
>> > programming language (python2, python3, javascript etc.) & compatibility 
>> > with
>> > sugar & sugarizer.
>> > 
>> > Regards,
>> > Manish
>> > 
>> > References:
>> > 
>> > [1] https://download.sugarlabs.org/?C=M;O=D
>> > [2] https://mirror.aarnet.edu.au/pub/sugarlabs/?C=M;O=D
>> > [3]

Re: [Sugar-devel] What are all activity bundle sources & how to interpret differect exec values in activity.info files

2020-04-22 Thread James Cameron 
Ah, I've found what you mean.

When a directory is viewed, the date of last modification is the date
of last insertion to or deletion from the directory.

It is easy to misinterpret.

On Thu, Apr 23, 2020 at 02:26:18PM +1000, James Cameron wrote:
> Thanks for asking.
> 
> Yes, those resources are updated regularly.  Each time an activity or
> component is released.  The date you saw for December 2018 may be an
> interpretation that does not fit the facts.
> 
> http://download.sugarlabs.org/activities/?C=M;O=D is the same as
> http://activities.sugarlabs.org/activities/?C=M;O=D and both show
> updates to 25th March.
> 
> http://mirror.aarnet.edu.au/pub/sugarlabs/ is an rsync mirror of
> http://download.sugarlabs.org/
> 
> http://mirror.aarnet.edu.au/pub/sugarlabs/sources/honey/?C=M;O=D shows
> updates to 21st April.
> 
> http://mirror.aarnet.edu.au/pub/sugarlabs/sources/sucrose/fructose/?C=M;O=D
> shows updates to 22nd April.
> 
> No, there is no single source of all latest activity bundles or all
> sources.  I don't think such a source is needed.  I also release
> Python 2 latest activity bundles, and again, I don't have a single
> source.
> 
> Yes, Tony's repository has not changed, does not include Python 3
> activities, and does include different exec values in bundles.  It may
> also include bundles that are not part of Sugar Labs, for various
> reasons.
> 
> On Thu, Apr 23, 2020 at 04:47:14AM +0200, su...@radii.dev wrote:
> > Is [1]download.sugarlabs.org & [2]mirror.aarnet.edu.au/pub/sugarlabs/ 
> > updated
> > regularly? I found latest update on these on 3rd of December 2018. I think 
> > [3]
> > activities.sugarlabs.org/activities is only for python2 activities. Where 
> > can I
> > find bundles of all activities (primarily python3). Currently I am using 
> > Tony
> > Anderson 's [4]app store repo as source. Latest activity bundle added to it 
> > was
> > on 14th July 2018 and no bundle of them is python3 activity i.e. 'exec =
> > "sugar-activity3"' .  Can anyone please help me identify a single source of 
> > all
> > latest activity bundles or all sources, how frequently they are updates and
> > which one contains latest for which 'exec'/language/platform.
> > 
> > Also there are 38 different execs in bundles in Tony's repo which are:
> > 
> > sugar-activity-web
> > sugar-activity
> > Breakout.sh
> > etoys-activity
> > runevil
> > riverhexactivity-activity
> > EtoysBasedActivityStart.sh
> > sugarGedit
> > geogebra
> > sugarGnumeric
> > kaleidoscope.sh
> > ./firefox
> > sugarMinecraft
> > minivmac-activity
> > quake-activity
> > launcher
> > StackAttack.sh
> > activity/activity
> > launch
> > ./google-chrome
> > activityname.sh
> > ./firefox-activity.py
> > sugarGTranslator
> > sugaridle
> > jpeces
> > sugar-launch
> > sugarOggConvert
> > sugarOOo4Kids
> > scribble_start
> > ./Ejecutar.sh
> > sugarTotem
> > tuxmath-activity
> > activity/tuxpaint
> > usb-creator-sugar
> > sugarVascolet
> > ./ldshim.py
> > sugarXa
> > bin/activity.sh
> > 
> > Please help me in understanding how I should interpret them and determine 
> > their
> > programming language (python2, python3, javascript etc.) & compatibility 
> > with
> > sugar & sugarizer.
> > 
> > Regards,
> > Manish
> > 
> > References:
> > 
> > [1] https://download.sugarlabs.org/?C=M;O=D
> > [2] https://mirror.aarnet.edu.au/pub/sugarlabs/?C=M;O=D
> > [3] https://activities.sugarlabs.org/activities/?C=M;O=D
> > [4] https://github.com/tony37/Sugaractivities/tree/master/activities
> 
> > ___
> > Sugar-devel mailing list
> > Sugar-devel@lists.sugarlabs.org
> > http://lists.sugarlabs.org/listinfo/sugar-devel
> 
> 
> -- 
> James Cameron
> http://quozl.netrek.org/

-- 
James Cameron
http://quozl.netrek.org/
___
Sugar-devel mailing list
Sugar-devel@lists.sugarlabs.org
http://lists.sugarlabs.org/listinfo/sugar-devel