Comments (2)
If distros prefer to package old versions of Rust and Cargo, I suggest they should also package old versions cargo-crev
.
We need to keep the cargo
dependency relatively up to date, as otherwise we risk problems with parsing Cargo.toml
of crates that use newer Cargo features (and probably other files like .cargo/config
or registry cache). Cargo only cares about supporting the latest-stable Rust. In practice it's sometimes compatible with a few versions behind, but nowhere near as old as Debian requires. Many other dependencies don't support Debian either.
I'm afraid that Debian's situation is hopeless and unfixable. Debian has its own reasons for keeping software "stable", and the Rust project has its own reasons for keeping software "evergreen". It doesn't matter which is the better approach, but they just don't work together. Trying to satisfy both opposing strategies creates a lot of tension and extra work for everybody involved. The situation is pretty bad and won't get better until either Debian starts updating Rust frequently, or the Rust project starts designating some LTS versions.
from cargo-crev.
Oh, crap, good point about cargo
dependency. Even packaging older version is not great for the same reason.
The only other viable approach I see is to release signed binaries and perhaps have a small program that can automatically download and upgrade them. This program itself could be packaged (not sure if it could in official Debian repo though). I've seen a similar technique employed by torbrowser on whonix - they also can't package it properly for reason I don't know but the way it works is if you apt upgrade
the dummy package it'll just download the latest torbrowser in postinst.
from cargo-crev.
Related Issues (20)
- Add exponenetial backoff for fetching from repos that fail HOT 2
- cargo-crev repo's nix shell fails with "missing liconv" HOT 5
- `--no-dev-dependencies` flag is not honoured HOT 5
- Bootstrapping
- Release GPG-signed binary HOT 2
- Website's TLS certificate has expired on 2023-03-02 HOT 3
- `No such file or directory` when accessing non existent `ids` directory HOT 3
- cargo-crev panics when trying to review a crate HOT 1
- cargo-vet interoperability? HOT 1
- "Could not find requested crate" unless I revert to the git index HOT 7
- Do we need the `cargo` dependency? HOT 1
- Any show command in cargo crev crev verify does not work expect --show-all
- Outdated Rust in nix HOT 2
- 0.25.5 build failure HOT 4
- index-guix not in repository
- Fails to push main branch after following instruction in quick setup guide HOT 1
- Bug: "the lock file needs to be updated" HOT 1
- Panic in `cargo crev verify --show-all` HOT 5
- confusing helptext
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cargo-crev.