Guillaume, On Thu, Aug 22, 2013 at 8:04 AM, Guillaume Rousse <guillomovi...@gmail.com> wrote: > Hello. > > I've troubles packaging w3af for mageia (more exactly, updating the > current package from 1.1 to 1.5), because of dependencies management. > > Here is the list of dependencies given in documentation: > - python 2.7 > - fpconst-0.7.2 > - nltk > - SOAPpy > - pdfminer > - Python bindings for the libxml2 library > - Python OpenSSL > - json.py > - scapy > - pysvn > - python sqlite3
Real dependencies are in [0] [0] https://github.com/andresriancho/w3af/blob/master/core/controllers/dependency_check/platforms/linux.py > However, if python guess-langage isn't installed, w3af_console crashes > immediatly. So, this module should be also added to this list. > > Once installed, the software just refuse to run, because of automated > dependencies checking, and requires at least the following python modules: > - esmre > - pybloomfiltermmap > - phply > - msgpack > - pip > It is not clear, tough, if those modules are really needed for anything > excepted satisfying this automated dependencies checking. Yes, they are required. > And even after installing all of them, the software still doesn't run, > and output the following error message: > On Debian systems please install the following operating system packages > before running the pip installer: > sudo apt-get install build-essential python-setuptools git > python-pip python2.7-dev libsqlite3-dev libxslt1-dev libxml2-dev > > First, the check if obviouslty broken: I'm not running debian. > > Second, even if I did, why would any software requires development > packages at runtime ? We need build-essential to build some packages which you installed previously with pip. In your system you already have them, that's why you were able to build the dependencies without installing them. As I said in other emails, if you're interested in having support for your specific distribution, let me know which packages are needed and I'll create a "mageia" file in the platforms directory to handle it. > I assume those packages are actually needed for > building others, but that's a confusion between 'what is needed' and > 'how to install what is needed'. Unless you consider your end-users as > unable to understand it, you should at least make the distinction explicit: > - you need python module esmre > - in order to install it from pypi, you'll also need a buildchain ready > (build-essential and python-setuptools on debian platform) > > Even reading the code, I couldn't find exactly what triggered this check > failure, and the only way I had to execute the software was to disable > automatic dependencies check at startup. This is the source you should be looking at to understand how all this works: https://github.com/andresriancho/w3af/blob/master/core/controllers/dependency_check/dependency_check.py https://github.com/andresriancho/w3af/blob/master/core/controllers/dependency_check/platforms/current_platform.py https://github.com/andresriancho/w3af/blob/master/core/controllers/dependency_check/platforms/linux.py > I understand perfectly that you are trying to make life easier for > newbies, but you're currently making life harder for packagers, by > trying to handle their work directly. Before trying any kind of software > based solution, with all associated error risks, you should really > ensure your documentation is correct, and can be used as a reference. > Because your current method seems closer from the problem than from the > solution for me :) Happy to help you in any efforts to create a package for 1.5 and/or create a mageia.py inside "platforms". Both things would help our users. > -- > Guillaume > > ------------------------------------------------------------------------------ > Introducing Performance Central, a new site from SourceForge and > AppDynamics. Performance Central is your source for news, insights, > analysis and resources for efficient Application Performance Management. > Visit us today! > http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk > _______________________________________________ > W3af-develop mailing list > W3af-develop@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/w3af-develop -- Andrés Riancho Project Leader at w3af - http://w3af.org/ Web Application Attack and Audit Framework Twitter: @w3af GPG: 0x93C344F3 ------------------------------------------------------------------------------ Introducing Performance Central, a new site from SourceForge and AppDynamics. Performance Central is your source for news, insights, analysis and resources for efficient Application Performance Management. Visit us today! http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk _______________________________________________ W3af-develop mailing list W3af-develop@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/w3af-develop
