GNU bug report logs - #38500
Ruby is built against libruby-static.a

Previous Next

Package: guix;

Reported by: Vicente Eduardo <vic798 <at> gmail.com>

Date: Thu, 5 Dec 2019 15:26:02 UTC

Severity: normal

Done: Brett Gilio <brettg <at> posteo.net>

Bug is archived. No further changes may be made.

Full log


Message #17 received at 38500 <at> debbugs.gnu.org (full text, mbox):

From: Tobias Geerinckx-Rice <me <at> tobias.gr>
Cc: 38500 <at> debbugs.gnu.org, Brett Gilio <brettg <at> posteo.net>,
 Vicente Eduardo <vic798 <at> gmail.com>
Subject: Re: bug#38500: Ruby is built against libruby-static.a
Date: Sun, 08 Dec 2019 16:42:15 +0100
[Message part 1 (text/plain, inline)]
Vincente, Brett,

Brett Gilio 写道:
> Vicente Eduardo <vic798 <at> gmail.com> writes:
>
>> I would like to have two versions, or at least the dynamic one, 
>> that's the common way
>> Ruby should be built, and also the Guixy style.

Important: static linking isn't the Guixy style at all!

Statically linking different packages ‘subverts’ Guix, can subvert 
grafting and lead to undetected security holes.

> Generally, I think we dynamically link most objects.

Correct.

> _BUT_, I could be
> missing part of the story here. So I am going to wait for the 
> higher
> powers that be to respond.

You could ask Pjotr Prins and David Thompson but I suspect that it 
was simply an oversight: most packages link dynamically by default 
because it's the sane thing to do, and it would have been 
reasonable to assume Ruby did too.

If there is a good reason to link statically, it should be added 
in a comment.

Kind regards,

T G-R
[signature.asc (application/pgp-signature, inline)]

This bug report was last modified 5 years and 221 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.