Hello.
I've troubles packaging w3af for mageia (more exactly, updating the
current package from 1.1 to 1.5), because of dependencies management.
Here is the list of dependencies given in documentation:
- python 2.7
- fpconst-0.7.2
- nltk
- SOAPpy
- pdfminer
- Python bindings for the libxml2 library
- Python OpenSSL
- json.py
- scapy
- pysvn
- python sqlite3
However, if python guess-langage isn't installed, w3af_console crashes
immediatly. So, this module should be also added to this list.
Once installed, the software just refuse to run, because of automated
dependencies checking, and requires at least the following python modules:
- esmre
- pybloomfiltermmap
- phply
- msgpack
- pip
It is not clear, tough, if those modules are really needed for anything
excepted satisfying this automated dependencies checking.
And even after installing all of them, the software still doesn't run,
and output the following error message:
On Debian systems please install the following operating system packages
before running the pip installer:
sudo apt-get install build-essential python-setuptools git
python-pip python2.7-dev libsqlite3-dev libxslt1-dev libxml2-dev
First, the check if obviouslty broken: I'm not running debian.
Second, even if I did, why would any software requires development
packages at runtime ? I assume those packages are actually needed for
building others, but that's a confusion between 'what is needed' and
'how to install what is needed'. Unless you consider your end-users as
unable to understand it, you should at least make the distinction explicit:
- you need python module esmre
- in order to install it from pypi, you'll also need a buildchain ready
(build-essential and python-setuptools on debian platform)
Even reading the code, I couldn't find exactly what triggered this check
failure, and the only way I had to execute the software was to disable
automatic dependencies check at startup.
I understand perfectly that you are trying to make life easier for
newbies, but you're currently making life harder for packagers, by
trying to handle their work directly. Before trying any kind of software
based solution, with all associated error risks, you should really
ensure your documentation is correct, and can be used as a reference.
Because your current method seems closer from the problem than from the
solution for me :)
--
Guillaume
------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and
AppDynamics. Performance Central is your source for news, insights,
analysis and resources for efficient Application Performance Management.
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
_______________________________________________
W3af-develop mailing list
W3af-develop@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/w3af-develop
