GNU logs - #68264, boring messages


Message sent to bug-guix@HIDDEN:


X-Loop: help-debbugs@HIDDEN
Subject: bug#68264: awscli@HIDDEN downloads and runs a docker container from a large american corporation
Resent-From: "Collin J. Doering" <collin@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 05 Jan 2024 14:54:01 +0000
Resent-Message-ID: <handler.68264.B.170446639530455 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: report 68264
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 68264 <at> debbugs.gnu.org
X-Debbugs-Original-To: bug-guix@HIDDEN
Received: via spool by submit <at> debbugs.gnu.org id=B.170446639530455
          (code B ref -1); Fri, 05 Jan 2024 14:54:01 +0000
Received: (at submit) by debbugs.gnu.org; 5 Jan 2024 14:53:15 +0000
Received: from localhost ([127.0.0.1]:56755 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rLlZS-0007v8-Ra
	for submit <at> debbugs.gnu.org; Fri, 05 Jan 2024 09:53:15 -0500
Received: from lists.gnu.org ([2001:470:142::17]:44630)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <collin@HIDDEN>) id 1rLlZP-0007uu-JJ
 for submit <at> debbugs.gnu.org; Fri, 05 Jan 2024 09:53:13 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <collin@HIDDEN>)
 id 1rLlZF-0003sW-Ru
 for bug-guix@HIDDEN; Fri, 05 Jan 2024 09:53:01 -0500
Received: from out-175.mta1.migadu.com ([2001:41d0:203:375::af])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <collin@HIDDEN>)
 id 1rLlZC-0002WH-Vp
 for bug-guix@HIDDEN; Fri, 05 Jan 2024 09:53:01 -0500
X-Report-Abuse: Please report any abuse attempt to abuse@HIDDEN and
 include these headers.
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rekahsoft.ca;
 s=key1; t=1704466373;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type;
 bh=4mOVF9QJH7RMxOOE01Gf8SV5rMJdMBtcYC6VNN0DY2U=;
 b=HIQm25684m/7wD1LXrzpYy4DvrhiywfkMZ7vUdWMrHYF+0wNzfqv6h+1nTUX6DM14bH6+X
 hrq7xDyOhN5pwWR7SSYKG4vYGR3abr6vPOwJni17RRE8X0aiZGYmx37kz4cCUHKr5PcPxj
 vmuSLsSdSyRRo5m5gx3X14MiUQTS0Dc=
From: "Collin J. Doering" <collin@HIDDEN>
Date: Fri, 05 Jan 2024 09:40:02 -0500
Message-ID: <87il474ytd.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
X-Migadu-Flow: FLOW_OUT
Received-SPF: pass client-ip=2001:41d0:203:375::af;
 envelope-from=collin@HIDDEN; helo=out-175.mta1.migadu.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.9 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.1 (/)

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

One thing I deeply appreciate about Gnu Guix is the fact that I have assura=
nce that I have installed and am using software that respects my fundamenta=
l software freedoms. My understanding based on Guix's packaging guidelines =
(https://guix.gnu.org/manual/en/html_node/Packaging-Guidelines.html) is tha=
t a package should include all necessary software, libraries and resources =
necessary for the program to function; either directly or via dependencies.=
 However, it appears that awscli@HIDDEN (and all former versions of the v2 v=
ariant of awscli) download a docker image and run it. This is evident by th=
e following, where guix shell is used to run awscli@HIDDEN in a container, b=
ut docker and its daemon are not present.

=2D-8<---------------cut here---------------start------------->8---
=E2=9E=9C guix shell -C awscli@HIDDEN -- awsv2 --version
2.2.0
AWS CLI v2 command: docker run -i --rm -v /home/collin/.aws:/root/.aws -v /=
home/collin:/aws amazon/aws-cli
14:45:09 - awscliv2 - ERROR - Executable not found: docker
=2D-8<---------------cut here---------------end--------------->8---

I propose awscli@HIDDEN be removed immediately from guix.

Kind regards

PS: I have a packaged version of awscliv2 (2.15.6) available https://git.re=
kahsoft.ca/rekahsoft/rekahsoft-guix/src/branch/master/rekahsoft-gnu/package=
s/python-xyz.scm#L244-L329

It is still in need of some cleanup, and awscli is in an odd place (given t=
he dependencies they vendor and fork), but it does work, and it depends on =
sources. This also follows closely to what nix does (see https://github.com=
/NixOS/nixpkgs/blob/master/pkgs/tools/admin/awscli2/default.nix).

=2D-=20
Collin J. Doering

http://rekahsoft.ca
http://blog.rekahsoft.ca
http://git.rekahsoft.ca

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQFIBAEBCAAyFiEE+NVG868371PRtki+e03rkyErMCIFAmWYF74UHGNvbGxpbkBy
ZWthaHNvZnQuY2EACgkQe03rkyErMCLLQQf9HmnHgJj5V+qwvSK0qzq9ivG4xu+5
CbpdY/qXJlh18nRQjEyYYbFfJavS161EHC4+03EI+blCMRQavMovZK8b01EWUeT6
/hgfQt33sUlevkHX8I98ptdHJ6z3J6iZJeeeN/W+ymIM4SHZr2xfo0/6wgQ/fq8G
+a7fc6hxCkdbfVfG/4/9oZHc619AFxzcSaGoZSERmzFlsSHBUlvrU7CDt8sfzy5O
VyIQN1Wltqwhl07E46CL6aXH7svoYCd4JnX/ULDF1HIiLtMFmOwcoGWY1xTx4Xuz
yTcjXCDrsBfr5D15dMev0AcGABVQr42wVXkqmRsBtKndZgTR6Wk+kzRcgw==
=E7SR
-----END PGP SIGNATURE-----
--=-=-=--




Message sent:


Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: "Collin J. Doering" <collin@HIDDEN>
Subject: bug#68264: Acknowledgement (awscli@HIDDEN downloads and runs a
 docker container from a large american corporation)
Message-ID: <handler.68264.B.170446639530455.ack <at> debbugs.gnu.org>
References: <87il474ytd.fsf@HIDDEN>
X-Gnu-PR-Message: ack 68264
X-Gnu-PR-Package: guix
Reply-To: 68264 <at> debbugs.gnu.org
Date: Fri, 05 Jan 2024 14:54:01 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 68264 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
68264: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D68264
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems



Last modified: Sat, 20 Jan 2024 12:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.