Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 07 Sep 2017 20:09:05 +0200
From:      David Naylor <naylor.b.david@gmail.com>
To:        Russell Haley <russ.haley@gmail.com>
Cc:        Freebsd-mono <freebsd-mono@freebsd.org>, Robert Alegrid <eralegrid@hotmail.com>, Romain =?ISO-8859-1?Q?Tarti=E8re?= <romain@freebsd.org>
Subject:   Re: Update on porting mono 5
Message-ID:  <2223962.JDsoWRiPl4@dragon.local>
In-Reply-To: <CABx9NuR6knOHfGEwZLvDZcTMn8e0TR5uscjh52DY1yq1-ujybQ@mail.gmail.com>
References:  <17078253.u2dgjZK1Z6@dragon.local> <1557586.GGzvBQ0jK6@dragon.local> <CABx9NuR6knOHfGEwZLvDZcTMn8e0TR5uscjh52DY1yq1-ujybQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart1626266.8Q2CAVUMu1
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"

On Tuesday, 5 September 2017 13:09:14 Russell Haley wrote:
> On Tue, Sep 5, 2017 at 12:25 PM, David Naylor <naylor.b.david@gmail.com> 
wrote:
> > On Saturday, 2 September 2017 07:40:28 Russell Haley wrote:
> >> On Sat, Sep 2, 2017 at 4:55 AM, Robert Alegrid <eralegrid@hotmail.com>
> >> Worrying about per-port repositories for Nuget is not a thing because
> >> the manifest within DotNet applications decides what runtime version
> >> of the assembly to use at build time so it is necessarily per-port.
> >> Also, DotNet can have hard or soft links (I forget the terminology) to
> >> required assemblies in the sense they can specify to use any version
> >> or a specific version, and can specify if the assemblies require to be
> >> signed (i.e. verified by the authors credentials against a trusted
> >> list). The GAC handles versioning for system level assemblies and if
> >> you overwrite a required version in your local repository it's a
> >> development error that you need to sort yourself.
> > 
> > Unfortunately, we do need to worry about per ports dependencies.  In the
> > practical case it is around the need to download the nuget packages within
> > the Ports Collections framework (so we get security protection, etc),
> > before the build phase.  Ports are not allowed interest access during
> > build.
> 
> In my mind, all the build tools/build dependencies should be handled
> differently from the runtime dependencies. These binaries we are
> discussing are only used for bootstrapping if I understand correctly.
> Build items specified within the port that are only available as
> binaries from nuget should be downloaded into the "work" directory and
> discarded after the build is complete (via make clean). I would think
> this is true unless said binaries are also runtime requirements, but
> in that case I would think the runtime required copies should be built
> from source where possible.

I agree with the above - except how do we define a runtime dependency:
 a) If the dependency needs to be installed (i.e. `pkg add`) for the program 
to run; or
 b) The program needs the dependency's dll (even if it is bundled) to run

I think the policy should be for (b) [but (a) for now due to practical 
issues].  

Regards

--nextPart1626266.8Q2CAVUMu1
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----
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=m3Pq
-----END PGP SIGNATURE-----

--nextPart1626266.8Q2CAVUMu1--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2223962.JDsoWRiPl4>