[Pkg-clamav-devel] Bug#1006179: Bug#1006179: Bug#1006179: Bug#1006179: Bug#1006179: Bug#1006179: ClamAV 1.0.0 release candidate now available

[Scott Kitterman]

On December 23, 2022 11:47:53 AM UTC, Andrew C Aitchison <andrew at aitchison.me.uk> wrote:
>On Fri, 23 Dec 2022, Sebastian Andrzej Siewior wrote:
>
>> Then we need to decide what we do about the
>> rust bits. I'm currently unsure if we can use the in-source bits or must
>> use packages.
>
>From https://blog.clamav.net/2022/10/
>  Starting with ClamAV 0.105.1, some of the ClamAV project is written in
>  Rust and depends on Rust libraries. To make it possible for our users
>  to build ClamAV offline, we bundle in the Rust dependencies.
>
>I think that means that some of the rust code in the clam tarball
>is needed and some can be replaced by system versions.
>
>I am a little uneasy about build time downloads of dependencies,
>but that looks like a general rust issue.
>
>Elsewhere ClamAV suggest that packages are built on the oldest system
>you wish to support, as that they will run on newer systems too.
>Personally I prefer each system version to have its own package built
>on that system, but I'd stick with the standard Debian way.
>

Build time downloads from outside the Debian archive aren't allowed in Debian.  We will need to either use system packages from the archive or the bundled code.  Also, in Debian we compile the packages for each target release/architecture, so running on older systems isn't a concern for the build in our development release.

Scott K