<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 15.08.23 19:19, Simon McVittie
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:ZNuzrbTZJDgbIyIl@tautology.pseudorandom.co.uk">
<pre class="moz-quote-pre" wrap="">On Tue, 15 Aug 2023 at 18:41:49 +0200, Matthias Geiger wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">the latest rsvg would need ~ 10 NEW rust packages if it were to be
devendored. iirc you can actually run "cargo vendor" and it would revendor
the tarball (even with out upstream vendoring it).
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Given the policy that Jeremy linked to, I imagine Ubuntu will want to
produce a fully-vendored tarball, even if Debian does not.</pre>
</blockquote>
looks like it, yeah.<br>
<blockquote type="cite"
cite="mid:ZNuzrbTZJDgbIyIl@tautology.pseudorandom.co.uk">
<pre class="moz-quote-pre" wrap="">
Producing a fully-vendored tarball of 2.55 or higher would be the closest
thing to the status quo, so I think that would be a valid way to update
librsvg, even if the Debian Rust team would prefer us to do it differently.</pre>
</blockquote>
We vendor rustc and cargo (partially / before build ) so I wouldn't
say the team objects in this case.<br>
<blockquote type="cite"
cite="mid:ZNuzrbTZJDgbIyIl@tautology.pseudorandom.co.uk">
<pre class="moz-quote-pre" wrap="">
Is it possible to vendor *some* dependencies, and take others from
Debian? That seems a lot more feasible to me than de-vendoring literally
everything, and in particular would avoid librsvg getting stuck behind
a new Rust library getting through NEW.
</pre>
</blockquote>
<p>I think so, yeah. The debian cargo wrapper (script) ( <code>/usr/share/cargo/bin</code>
)<code> </code>allows linking from a) the system and b) any
other directory (or both)</p>
<p>The wrapper mentioned has the documentation inside, you can also
checkout my WIP packaging here [0]. All I'd add here for a second
vendor dir</p>
<p>would be a <code> $(CARGO) prepare-debian debian/cargo_registry
vendor-dir </code>( I think). cargo will sort it out then.</p>
<p><br>
</p>
<p>werdahias</p>
<p>[0]
<a class="moz-txt-link-freetext" href="https://salsa.debian.org/werdahias/obfuscate-wip/-/blob/debian/master/debian/rules">https://salsa.debian.org/werdahias/obfuscate-wip/-/blob/debian/master/debian/rules</a><br>
</p>
<p><code></code></p>
<pre class="moz-signature" cols="72">
</pre>
</body>
</html>