From owner-freebsd-ports@FreeBSD.ORG Mon May 28 17:56:10 2012 Return-Path: Delivered-To: freebsd-ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4889D106566C; Mon, 28 May 2012 17:56:10 +0000 (UTC) (envelope-from stephen@missouri.edu) Received: from wilberforce.math.missouri.edu (wilberforce.math.missouri.edu [128.206.184.213]) by mx1.freebsd.org (Postfix) with ESMTP id 087F18FC0C; Mon, 28 May 2012 17:56:09 +0000 (UTC) Received: from [127.0.0.1] (wilberforce.math.missouri.edu [128.206.184.213]) by wilberforce.math.missouri.edu (8.14.5/8.14.5) with ESMTP id q4SHu8c6025359; Mon, 28 May 2012 12:56:08 -0500 (CDT) (envelope-from stephen@missouri.edu) Message-ID: <4FC3BC38.3050504@missouri.edu> Date: Mon, 28 May 2012 12:56:08 -0500 From: Stephen Montgomery-Smith User-Agent: Mozilla/5.0 (X11; Linux i686; rv:12.0) Gecko/20120430 Thunderbird/12.0.1 MIME-Version: 1.0 To: Chris Rees References: <20120526090137.001691dc@scorpio> <4FC0F8EA.1090005@missouri.edu> <4FC11B66.9000302@missouri.edu> <4b8eeb05337b220f301268ce014a159d@anthesphoria.net> <4FC2D159.4050801@missouri.edu> <4FC387A9.5070700@missouri.edu> <4FC39E17.1060205@freebsd.org> <4FC3A4FB.1060106@missouri.edu> <4FC3A93C.6080009@t-hosting.hu> <4FC3B1B9.1050703@missouri.edu> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: =?ISO-8859-1?Q?G=E1bor_K=F6vesd=E1n?= , freebsd-ports@FreeBSD.org Subject: Re: Request to review: print/texlive-install X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 May 2012 17:56:10 -0000 On 05/28/2012 12:31 PM, Chris Rees wrote: > On 28 May 2012 18:11, Stephen Montgomery-Smith wrote: >> On 05/28/2012 11:35 AM, Gábor Kövesdán wrote: >>> >>> On 2012.05.28. 18:16, Stephen Montgomery-Smith wrote: >>>>> >>>>> >>>>> >>>>> On 5/28/12 10:11 AM, Stephen Montgomery-Smith wrote: >>>>>> >>>>>> >>>>>> How about if I add lines like this: >>>>>> >>>>>> .if !defined(IGNORE_SECURITY_RISK) >>>>>> IGNORE= has a security risk because it downloads a file \ >>>>>> without a checksum. Define IGNORE_SECURITY_RISK to build this port >>>>>> .endif >>>>>> >>>>>> Would it be considered OK to commit it then? >>>>> >>>>> could you host it somewhere that won't go away at missouri.edu? >>>>> >>>> >>>> >>>> I could host it somewhere at missouri.edu that will stay as long as I >>>> am alive or keep my job. >>> >>> Better to host it on the FreeBSD mirrors. You only have to create a >>> public_distfiles in your home directory after logging in to freefall and >>> drop the file there. This is the usual way of doing it. >> >> >> Thank you for the info. Here is my latest version: >> >> http://people.freebsd.org/~stephen/ >> > > I'm afraid my concerns still hold [1]. > > This port fetches $WHOKNOWSWHAT from $WHOKNOWSWHERE outside the fetch > stage, which isn't how ports are supposed to work. > > I know 'having a port' is usually considered a good thing, but as I > said before, it's no easier or safer to install this via the port than > just download and run the script. > > [1] http://lists.freebsd.org/pipermail/freebsd-ports/2012-May/075236.html Yes, this will never become part of the ports tree as it is. I am merely going to offer this to people as something they can download from my web page. The advantage it offers over the usual script is that the binaries are built for your particular system. And /var/db/pkg is populated. And links are created to ${PREFIX}/bin. > [2] > ''' > Install texlive-install. > Use texlive to grab funky new package. > Upgrade texlive-install /* XXX funky new package is now added to > texlive-instal plist */ > Upgrade texlive-install again > > Hey, where did $FUNKY go? > ''' Hopefully $FUNKY will now be part of the complete texlive install, and so it will be reinstalled in the second (and first) upgrades. Otherwise I see no way around this problem. === One thing I might do is to create a port called "texlive-binaries" with instructions in pkg-message on how to incorporate it into the texlive distribution when you use the script downloaded from their web page. (I need to check that the name "texlive-binaries" doesn't conflict with http://code.google.com/p/freebsd-texlive.)