Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.devel > #111417

Re: New supply-chain security tool: backseat-signed

From "Theodore Ts'o" <tytso@mit.edu>
Newsgroups linux.debian.devel
Subject Re: New supply-chain security tool: backseat-signed
Date 2024-04-11 16:30 +0200
Message-ID <Is3B8-5A6w-5@gated-at.bofh.it> (permalink)
References (3 earlier) <Iq8Zy-4oGU-3017@gated-at.bofh.it> <Iqcfv-4qPN-1@gated-at.bofh.it> <Iqd1T-4rqn-3@gated-at.bofh.it> <Iqf3H-4sDx-1@gated-at.bofh.it> <Iqgj7-4tix-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Sat, Apr 06, 2024 at 04:30:44PM +0100, Simon McVittie wrote:
> 
> But, it is conventional for Autotools projects to ship the generated
> ./configure script *as well* (for example this is what `make dist`
> outputs), to allow the project to be compiled on systems that do not
> have the complete Autotools system installed.

Or, because some upstream maintainers have learned through, long,
bitter experience that newer versions of autoconf tools may result in
the generated configure script to be busted (sometimmes subtly), and
so distrust relying on blind autoreconf always working.

(For Debian, I always make sure that the upstream configure script for
autoconf is generated on a Debian testing system, and yes, I have had
to make adjustments to the "prefferred form of modification" files so
that the resulting configure script works.  For me, it's not that the
configure file is the preferred form of modification, but rather, the
preferred form of distriibution.)

Yes, I realize that the logical follow-on to this is that perhaps we
should just abandon autotools completely; unfortunately, I'm not quite
willing to make the assertion, "all the world's Linux and I don't care
about portability to non-Linux systems" ala the position taken by the
systemd maintainers --- and for all its faults, autoconf still has
decades of potability work that is not easy to replace.

	   	      	   	       - Ted

Back to linux.debian.devel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: New supply-chain security tool: backseat-signed Adrian Bunk <bunk@debian.org> - 2024-04-06 09:50 +0200
  Re: New supply-chain security tool: backseat-signed Jeremy Stanley <fungi@yuggoth.org> - 2024-04-06 09:50 +0200
  Re: New supply-chain security tool: backseat-signed kpcyrd <kpcyrd@archlinux.org> - 2024-04-06 09:51 +0200
    Re: New supply-chain security tool: backseat-signed Adrian Bunk <bunk@debian.org> - 2024-04-06 09:51 +0200
      Re: New supply-chain security tool: backseat-signed kpcyrd <kpcyrd@archlinux.org> - 2024-04-06 09:51 +0200
        Re: New supply-chain security tool: backseat-signed Adrian Bunk <bunk@debian.org> - 2024-04-06 09:52 +0200
      Re: New supply-chain security tool: backseat-signed James McCoy <jamessan@debian.org> - 2024-04-06 09:52 +0200
      Re: New supply-chain security tool: backseat-signed Sean Whitton <spwhitton@spwhitton.name> - 2024-04-06 13:20 +0200
        Re: New supply-chain security tool: backseat-signed Adrian Bunk <bunk@debian.org> - 2024-04-06 14:10 +0200
          Re: New supply-chain security tool: backseat-signed kpcyrd <kpcyrd@archlinux.org> - 2024-04-06 16:20 +0200
            Re: New supply-chain security tool: backseat-signed Adrian Bunk <bunk@debian.org> - 2024-04-06 17:00 +0200
            Re: New supply-chain security tool: backseat-signed Simon McVittie <smcv@debian.org> - 2024-04-06 17:40 +0200
              Re: New supply-chain security tool: backseat-signed Jeremy Stanley <fungi@yuggoth.org> - 2024-04-06 18:00 +0200
              Re: New supply-chain security tool: backseat-signed "Theodore Ts'o" <tytso@mit.edu> - 2024-04-11 17:00 +0200
              Re: New supply-chain security tool: backseat-signed "G. Branden Robinson" <g.branden.robinson@gmail.com> - 2024-04-11 20:30 +0200
                Re: New supply-chain security tool: backseat-signed Colin Watson <cjwatson@debian.org> - 2024-04-12 01:20 +0200
              Re: New supply-chain security tool: backseat-signed "Theodore Ts'o" <tytso@mit.edu> - 2024-04-11 16:30 +0200
                Re: New supply-chain security tool: backseat-signed Colin Watson <cjwatson@debian.org> - 2024-04-11 16:40 +0200
          Re: New supply-chain security tool: backseat-signed Sean Whitton <spwhitton@spwhitton.name> - 2024-04-07 09:50 +0200
        Re: New supply-chain security tool: backseat-signed Guillem Jover <guillem@debian.org> - 2024-04-06 14:30 +0200
          Re: New supply-chain security tool: backseat-signed Sean Whitton <spwhitton@spwhitton.name> - 2024-04-07 09:50 +0200

csiph-web