X-Loop: help-debbugs@HIDDEN Subject: bug#68264: awscli@HIDDEN downloads and runs a docker container from a large american corporation Resent-From: "Collin J. Doering" <collin@HIDDEN> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> Resent-CC: bug-guix@HIDDEN Resent-Date: Fri, 05 Jan 2024 14:54:01 +0000 Resent-Message-ID: <handler.68264.B.170446639530455 <at> debbugs.gnu.org> Resent-Sender: help-debbugs@HIDDEN X-GNU-PR-Message: report 68264 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 68264 <at> debbugs.gnu.org X-Debbugs-Original-To: bug-guix@HIDDEN Received: via spool by submit <at> debbugs.gnu.org id=B.170446639530455 (code B ref -1); Fri, 05 Jan 2024 14:54:01 +0000 Received: (at submit) by debbugs.gnu.org; 5 Jan 2024 14:53:15 +0000 Received: from localhost ([127.0.0.1]:56755 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rLlZS-0007v8-Ra for submit <at> debbugs.gnu.org; Fri, 05 Jan 2024 09:53:15 -0500 Received: from lists.gnu.org ([2001:470:142::17]:44630) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <collin@HIDDEN>) id 1rLlZP-0007uu-JJ for submit <at> debbugs.gnu.org; Fri, 05 Jan 2024 09:53:13 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <collin@HIDDEN>) id 1rLlZF-0003sW-Ru for bug-guix@HIDDEN; Fri, 05 Jan 2024 09:53:01 -0500 Received: from out-175.mta1.migadu.com ([2001:41d0:203:375::af]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <collin@HIDDEN>) id 1rLlZC-0002WH-Vp for bug-guix@HIDDEN; Fri, 05 Jan 2024 09:53:01 -0500 X-Report-Abuse: Please report any abuse attempt to abuse@HIDDEN and include these headers. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rekahsoft.ca; s=key1; t=1704466373; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=4mOVF9QJH7RMxOOE01Gf8SV5rMJdMBtcYC6VNN0DY2U=; b=HIQm25684m/7wD1LXrzpYy4DvrhiywfkMZ7vUdWMrHYF+0wNzfqv6h+1nTUX6DM14bH6+X hrq7xDyOhN5pwWR7SSYKG4vYGR3abr6vPOwJni17RRE8X0aiZGYmx37kz4cCUHKr5PcPxj vmuSLsSdSyRRo5m5gx3X14MiUQTS0Dc= From: "Collin J. Doering" <collin@HIDDEN> Date: Fri, 05 Jan 2024 09:40:02 -0500 Message-ID: <87il474ytd.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Migadu-Flow: FLOW_OUT Received-SPF: pass client-ip=2001:41d0:203:375::af; envelope-from=collin@HIDDEN; helo=out-175.mta1.migadu.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.1 (/) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable One thing I deeply appreciate about Gnu Guix is the fact that I have assura= nce that I have installed and am using software that respects my fundamenta= l software freedoms. My understanding based on Guix's packaging guidelines = (https://guix.gnu.org/manual/en/html_node/Packaging-Guidelines.html) is tha= t a package should include all necessary software, libraries and resources = necessary for the program to function; either directly or via dependencies.= However, it appears that awscli@HIDDEN (and all former versions of the v2 v= ariant of awscli) download a docker image and run it. This is evident by th= e following, where guix shell is used to run awscli@HIDDEN in a container, b= ut docker and its daemon are not present. =2D-8<---------------cut here---------------start------------->8--- =E2=9E=9C guix shell -C awscli@HIDDEN -- awsv2 --version 2.2.0 AWS CLI v2 command: docker run -i --rm -v /home/collin/.aws:/root/.aws -v /= home/collin:/aws amazon/aws-cli 14:45:09 - awscliv2 - ERROR - Executable not found: docker =2D-8<---------------cut here---------------end--------------->8--- I propose awscli@HIDDEN be removed immediately from guix. Kind regards PS: I have a packaged version of awscliv2 (2.15.6) available https://git.re= kahsoft.ca/rekahsoft/rekahsoft-guix/src/branch/master/rekahsoft-gnu/package= s/python-xyz.scm#L244-L329 It is still in need of some cleanup, and awscli is in an odd place (given t= he dependencies they vendor and fork), but it does work, and it depends on = sources. This also follows closely to what nix does (see https://github.com= /NixOS/nixpkgs/blob/master/pkgs/tools/admin/awscli2/default.nix). =2D-=20 Collin J. Doering http://rekahsoft.ca http://blog.rekahsoft.ca http://git.rekahsoft.ca --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFIBAEBCAAyFiEE+NVG868371PRtki+e03rkyErMCIFAmWYF74UHGNvbGxpbkBy ZWthaHNvZnQuY2EACgkQe03rkyErMCLLQQf9HmnHgJj5V+qwvSK0qzq9ivG4xu+5 CbpdY/qXJlh18nRQjEyYYbFfJavS161EHC4+03EI+blCMRQavMovZK8b01EWUeT6 /hgfQt33sUlevkHX8I98ptdHJ6z3J6iZJeeeN/W+ymIM4SHZr2xfo0/6wgQ/fq8G +a7fc6hxCkdbfVfG/4/9oZHc619AFxzcSaGoZSERmzFlsSHBUlvrU7CDt8sfzy5O VyIQN1Wltqwhl07E46CL6aXH7svoYCd4JnX/ULDF1HIiLtMFmOwcoGWY1xTx4Xuz yTcjXCDrsBfr5D15dMev0AcGABVQr42wVXkqmRsBtKndZgTR6Wk+kzRcgw== =E7SR -----END PGP SIGNATURE----- --=-=-=--
Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) Content-Type: text/plain; charset=utf-8 X-Loop: help-debbugs@HIDDEN From: help-debbugs@HIDDEN (GNU bug Tracking System) To: "Collin J. Doering" <collin@HIDDEN> Subject: bug#68264: Acknowledgement (awscli@HIDDEN downloads and runs a docker container from a large american corporation) Message-ID: <handler.68264.B.170446639530455.ack <at> debbugs.gnu.org> References: <87il474ytd.fsf@HIDDEN> X-Gnu-PR-Message: ack 68264 X-Gnu-PR-Package: guix Reply-To: 68264 <at> debbugs.gnu.org Date: Fri, 05 Jan 2024 14:54:01 +0000 Thank you for filing a new bug report with debbugs.gnu.org. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): bug-guix@HIDDEN If you wish to submit further information on this problem, please send it to 68264 <at> debbugs.gnu.org. Please do not send mail to help-debbugs@HIDDEN unless you wish to report a problem with the Bug-tracking system. --=20 68264: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D68264 GNU Bug Tracking System Contact help-debbugs@HIDDEN with problems
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.