[Pkg-clamav-devel] Bug#1006179: Bug#1006179: Bug#1006179: Bug#1006179: Bug#1006179: Bug#1006179: ClamAV 1.0.0 release candidate now available

[Andrew C Aitchison]

On Fri, 23 Dec 2022, Sebastian Andrzej Siewior wrote:

> Then we need to decide what we do about the
> rust bits. I'm currently unsure if we can use the in-source bits or must
> use packages.

>From https://blog.clamav.net/2022/10/
   Starting with ClamAV 0.105.1, some of the ClamAV project is written in
   Rust and depends on Rust libraries. To make it possible for our users
   to build ClamAV offline, we bundle in the Rust dependencies.

I think that means that some of the rust code in the clam tarball
is needed and some can be replaced by system versions.

I am a little uneasy about build time downloads of dependencies,
but that looks like a general rust issue.

Elsewhere ClamAV suggest that packages are built on the oldest system
you wish to support, as that they will run on newer systems too.
Personally I prefer each system version to have its own package built
on that system, but I'd stick with the standard Debian way.

-- 
Andrew C. Aitchison                      Kendal, UK
                    andrew at aitchison.me.uk