David Thompson is a user on toot.cat. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.
David Thompson @dthompson

tl;dr- trying to build Firefox 57 is a nightmare.

It needs Rust. OK fine, Guix has that. Oh, but Rust 1.16 is too old. Okay, I'll upgrade to 1.21. Oh, I see why the Rust in Guix is out-of-date: it simply refuses to build without network access because to build rustc you need cargo, Rust's package manager. Requiring network access to build software is bad practice because it's a source of nondeterminism. Requiring a special package manager to build a *COMPILER* is insane. WTF Mozilla!?

· Web · 6 · 8

No self respecting package manager allows network access during builds. I'm going to punt on this project but if we ever want to have a new version of Rust in Guix we'll have to trick Cargo into not downloading anything.

I thought I could trick Cargo, because it turns out we already trick Cargo... in order to build Cargo. That's right, you need Cargo to build Cargo! Unfortunately it is now complaining about checksums of vendored libraries being wrong so I'm just in a sea of despair at this point.

@dthompson yea, it's frustrating 😕

The cargo devs are aware of the problems this can cause, especially when integrating with systems package managers, they have a call for dev help here: internals.rust-lang.org/t/call

@balrogboogie I'm glad they are aware of the problem! Sometimes I feel like no one cares so this is refreshing.

@dthompson Or just that Guix is not a good tool to grab all the depends?

@fredbezies it definitely is a good tool for that.

@dthompson
Well... Not a problem on my PC running Arch... And the main one is building Mozilla Firefox trunk code three times a week.

@fredbezies I'm not sure what your point is. I don't think you've understood what my problem actually is.

@dthompson I'm afraid about some of the new devtools which are on the horizon which I'm pretty sure will require npm

@dthompson we live in an exciting time for language enthusiasts and a terrifying time for package manager enthusiasts, and this is weirdly interrelated

(But people! It doesn't have to be! Having a new package manager for your language is not actually a selling point!)

@cwebber @dthompson I would love to switch to guix for some of my side projects, but my Lua stuff has so few deps that it's hard to justify anything more than just tossing a few source files into my git repo...

Maybe once I find a good Racket side project to dig back into.

@technomancy @cwebber understandable. I manage my whole OS with it now so the energy spent learning it has paid off.

@dthompson I'm disappointed to hear about the difficulties. The Tor Browser hackers are going to have to address this as well.

I'm cheering you on over here!