From owner-freebsd-ports@freebsd.org Wed Mar 24 13:03:48 2021 Return-Path: Delivered-To: freebsd-ports@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 2D93D5B58CE for ; Wed, 24 Mar 2021 13:03:48 +0000 (UTC) (envelope-from rene@freebsd.org) Received: from mailman.nyi.freebsd.org (mailman.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:13]) by mx1.freebsd.org (Postfix) with ESMTP id 4F57j00Zybz4TPp for ; Wed, 24 Mar 2021 13:03:48 +0000 (UTC) (envelope-from rene@freebsd.org) Received: by mailman.nyi.freebsd.org (Postfix) id 11C715B5A0A; Wed, 24 Mar 2021 13:03:48 +0000 (UTC) Delivered-To: ports@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 118F15B58CD for ; Wed, 24 Mar 2021 13:03:48 +0000 (UTC) (envelope-from rene@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4F57j0032Nz4TPn for ; Wed, 24 Mar 2021 13:03:48 +0000 (UTC) (envelope-from rene@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1616591028; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=zlPOtRgobQkeALsP0bm513GiqGB8nYgrnWUXr4bzYTo=; b=xN5TdDj4ZKQ5J3YST8G+8NYP91R5K0tJoO8TPrXGJDfK+d3uXkbgeZd02ePRdKLxKDgo91 zKpN2D3JJohlduCDgzAO3nCTWc8saI92mbUYNMJI1yNx5i8LoSxwniRkZJ028N6dQqIAk6 ByvKjw30gQLJxGfykGOwze0gTErZl08k87vL9Y+lNvoU/AH5RoPFfCLyKwel1tJ50mpexB RyL1MVY0JxcyjDvt37zzWRuk2ucJ0Vueiyw9uzIbk/B4a32REyLs2KFSaGY+uFbmVAgTFx bniWyDhx1R51v1EgGKqykVC7f0Te/O447I3gpKALXGcOCqT+19zD2T+T/kAT/g== Received: by freefall.freebsd.org (Postfix, from userid 1185) id DE19F9B6A; Wed, 24 Mar 2021 13:03:47 +0000 (UTC) Date: Wed, 24 Mar 2021 13:03:47 +0000 From: Rene Ladan To: ports@freebsd.org Subject: Python 2.7 removal outline Message-ID: <20210324130347.GA29020@freefall.freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1616591028; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=zlPOtRgobQkeALsP0bm513GiqGB8nYgrnWUXr4bzYTo=; b=h9cIFkGA8G2TtndBPqlQy8TZDAF7kwc+gTGnBu0squ/h2clIWmI3kXPCD+ub+i/hqntnrY taV79gpaDix7UPm5Uso1/xFrfbxXZHhy04Mrlg5BjuqFy0ZcjS7jpsLT6eCN0UNBP7slHV H9dRfCxGdrp1vRji02mzA3eCLZQzT72rRp1F7o9j77XT38D4SR1SNzgDcl2PRudVJ+YYV3 izUBqu0TafyvT/q8MjOkmYK/Dgl0t/RBf5USU+4nLy0/9L3t79UZTw3HsIRYo3Z8sxQemp dZQhfMscVpLXZsJK0/i1ckZk7L0blsvlFHmDOuNDVymJ4zrUzEEJDpvItYidhg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1616591028; a=rsa-sha256; cv=none; b=UX2v5niHVuTDABCkG1AS1+3OWFUUisuKOu3q2u1LRbq6Q0D7lN7HjKCw5bhVnVH5xPAbEE H+WSesNAKjmiq7lV4ViHIfi12V7IP4yq6cg1sZPEKTnNqW+dhdrtek6fjD88Ju+TEz3nFx pFdcyGv6E95DR9u4fla2LkDI89lWCq4zg78GDR9RgjuFxvsiQ87YLzzXPvmSENqeIl24pn fYA3pmp/K9mgqW8XBz+lpY3/YMwPGwDlRTDv2V2g8ME04jwyBuhWE+QysT8SW10aL5NyMq KLO3OHfpUF3UjG20cXnN5WXOAwlJ2X9PIKPyqWro9qt8A0kN8YaKjlCE8xFS2g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Mar 2021 13:03:48 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, below is an outline continuing the Python 2.7 cleanup: - - all affected ports are now marked as deprecated, with an expiration date of either 2020-12-31 or 2021-06-23. - - we will have to wait for Chromium to fully switch to Python 3 before we can fully remove Python 2.7. This is work in progress on their side. Not waiting would imply removing www/chromium (obviously), editors/vscode (it escaped the recursive-deprecation dance of devel/electron*), but most importantly www/qt5-webengine which would drag half of KDE with it. However, lang/python27 will be marked as RESTRICTED so that all ports mentioned above can still be built and run, but Python 2.7 itself will not be available as a package. - - No more new ports having USES=python:2.7 or USES=python:2.7+ or existing ports reverting to that, no excuses. - - No usage of lang/tauthon by the framework or any port, no excuses. - - lang/tauthon will be removed on 2021-06-23 as noticed in the port itself, no excuses. Tauthon is not guaranteed to be compatible with any official Python version so keeping it would just unnecessarily complicate things. - - mail/mailman is being replaced by clusteradm@ with mlmmj. You can use `pkg lock` to stick with it after removal, if there is no other way. - - you are of course free to provide your own version of Python 2.7, Tauthon and any application using those languages in your local setup, by using overlays for example. Miscellaneous tidbits: - - WHY?!?!? Well, back in 2008, the Python Software Foundation planned to mark Python 2.7 end-of-life at 2015-01-01, see [1], but that date was pushed back to 2020-01-01 because a lot of downstream users had not converted yet. So Python 2.7 is already end-of-life for 1.5 years, which means that according to [1] the PSF is no longer fixing security issues for it. As can be seen on [2], multiple vulnerabilities already have been fixed for Python 3.6 to 3.9 this year. - - On a related note, most software using Python 2.7 was already removed from the Ports Tree last year, a lot of it being unmaintained or more or less abandoned upstream. - - Upstream Chromium is working on converting their codebase to Python 3 but there is no completion date. Interestingly, adridg@ is experimenting with converting www/qt5-webengine to Python 3 too. - - We are indeed faster with dropping Python 2.7 than e.g. Ubuntu, however more recent Debian/Ubuntu distributions are more and more dropping Python 2.7 too. This also has to do with how their branching model works, the package set of Ubuntu LTS is determined a few months before the release itself. [1] https://www.python.org/dev/peps/pep-0373/ [2] https://www.python.org/downloads/release/python-392/ René, on behalf of portmgr -----BEGIN PGP SIGNATURE----- iQGyBAEBCgCcFiEE+zdFyG8V6O2sgTL82ClOw7vE19UFAmBbOBpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZC Mzc0NUM4NkYxNUU4RURBQzgxMzJGQ0Q4Mjk0RUMzQkJDNEQ3RDUeHHBvcnRtZ3It c2VjcmV0YXJ5QGZyZWVic2Qub3JnAAoJENgpTsO7xNfVVB4IAIIzuJare4IiEpAs H+ro/OdZ8J9t+p/Vhv5pRUmN1fhL38gvlmvKSbnm/1HCfXQY8WjccX+9UUsIudLl kkI020DDSC4shESsCnsTGXTr13psS+DjCTdjpgRlaWb38yL8bSoPyyA12jJFVYDi doRkWGleIZrz9kh1lDOX4rzB9hui6B5VFNktcbkG2+h+xs1huhq9/VdyCVRJC6gM kss1yBH04VXqa3G5K2vj4w+sPRQi4gNKA9fkoLIJlpnNZ3QFVxLR+Xa1ySUEQhCE gIRYkZmjLiMoDJizN2d9CGAVSvDvvl+g3tGdP24DwRiHdnofaNijUV7xhNslYiE3 m7QBFbI= =2WOV -----END PGP SIGNATURE-----