GNU bug report logs - #68264
awscli@2.2.0 downloads and runs a docker container from a large american corporation

Message received at submit <at> debbugs.gnu.org:

Received: (at submit) by debbugs.gnu.org; 5 Jan 2024 14:53:15 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Fri Jan 05 09:53:15 2024
Received: from localhost ([127.0.0.1]:56755 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rLlZS-0007v8-Ra
	for submit <at> debbugs.gnu.org; Fri, 05 Jan 2024 09:53:15 -0500
Received: from lists.gnu.org ([2001:470:142::17]:44630)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <collin@HIDDEN>) id 1rLlZP-0007uu-JJ
 for submit <at> debbugs.gnu.org; Fri, 05 Jan 2024 09:53:13 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <collin@HIDDEN>)
 id 1rLlZF-0003sW-Ru
 for bug-guix@HIDDEN; Fri, 05 Jan 2024 09:53:01 -0500
Received: from out-175.mta1.migadu.com ([2001:41d0:203:375::af])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <collin@HIDDEN>)
 id 1rLlZC-0002WH-Vp
 for bug-guix@HIDDEN; Fri, 05 Jan 2024 09:53:01 -0500
X-Report-Abuse: Please report any abuse attempt to abuse@HIDDEN and
 include these headers.
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rekahsoft.ca;
 s=key1; t=1704466373;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type;
 bh=4mOVF9QJH7RMxOOE01Gf8SV5rMJdMBtcYC6VNN0DY2U=;
 b=HIQm25684m/7wD1LXrzpYy4DvrhiywfkMZ7vUdWMrHYF+0wNzfqv6h+1nTUX6DM14bH6+X
 hrq7xDyOhN5pwWR7SSYKG4vYGR3abr6vPOwJni17RRE8X0aiZGYmx37kz4cCUHKr5PcPxj
 vmuSLsSdSyRRo5m5gx3X14MiUQTS0Dc=
From: "Collin J. Doering" <collin@HIDDEN>
To: bug-guix@HIDDEN
Subject: awscli@HIDDEN downloads and runs a docker container from a large
 american corporation
Date: Fri, 05 Jan 2024 09:40:02 -0500
Message-ID: <87il474ytd.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha256; protocol="application/pgp-signature"
X-Migadu-Flow: FLOW_OUT
Received-SPF: pass client-ip=2001:41d0:203:375::af;
 envelope-from=collin@HIDDEN; helo=out-175.mta1.migadu.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.9 (/)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.1 (/)

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

One thing I deeply appreciate about Gnu Guix is the fact that I have assura=
nce that I have installed and am using software that respects my fundamenta=
l software freedoms. My understanding based on Guix's packaging guidelines =
(https://guix.gnu.org/manual/en/html_node/Packaging-Guidelines.html) is tha=
t a package should include all necessary software, libraries and resources =
necessary for the program to function; either directly or via dependencies.=
 However, it appears that awscli@HIDDEN (and all former versions of the v2 v=
ariant of awscli) download a docker image and run it. This is evident by th=
e following, where guix shell is used to run awscli@HIDDEN in a container, b=
ut docker and its daemon are not present.

=2D-8<---------------cut here---------------start------------->8---
=E2=9E=9C guix shell -C awscli@HIDDEN -- awsv2 --version
2.2.0
AWS CLI v2 command: docker run -i --rm -v /home/collin/.aws:/root/.aws -v /=
home/collin:/aws amazon/aws-cli
14:45:09 - awscliv2 - ERROR - Executable not found: docker
=2D-8<---------------cut here---------------end--------------->8---

I propose awscli@HIDDEN be removed immediately from guix.

Kind regards

PS: I have a packaged version of awscliv2 (2.15.6) available https://git.re=
kahsoft.ca/rekahsoft/rekahsoft-guix/src/branch/master/rekahsoft-gnu/package=
s/python-xyz.scm#L244-L329

It is still in need of some cleanup, and awscli is in an odd place (given t=
he dependencies they vendor and fork), but it does work, and it depends on =
sources. This also follows closely to what nix does (see https://github.com=
/NixOS/nixpkgs/blob/master/pkgs/tools/admin/awscli2/default.nix).

=2D-=20
Collin J. Doering

http://rekahsoft.ca
http://blog.rekahsoft.ca
http://git.rekahsoft.ca

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQFIBAEBCAAyFiEE+NVG868371PRtki+e03rkyErMCIFAmWYF74UHGNvbGxpbkBy
ZWthaHNvZnQuY2EACgkQe03rkyErMCLLQQf9HmnHgJj5V+qwvSK0qzq9ivG4xu+5
CbpdY/qXJlh18nRQjEyYYbFfJavS161EHC4+03EI+blCMRQavMovZK8b01EWUeT6
/hgfQt33sUlevkHX8I98ptdHJ6z3J6iZJeeeN/W+ymIM4SHZr2xfo0/6wgQ/fq8G
+a7fc6hxCkdbfVfG/4/9oZHc619AFxzcSaGoZSERmzFlsSHBUlvrU7CDt8sfzy5O
VyIQN1Wltqwhl07E46CL6aXH7svoYCd4JnX/ULDF1HIiLtMFmOwcoGWY1xTx4Xuz
yTcjXCDrsBfr5D15dMev0AcGABVQr42wVXkqmRsBtKndZgTR6Wk+kzRcgw==
=E7SR
-----END PGP SIGNATURE-----
--=-=-=--