[gentoo-dev] *DEPEND mismatches

[gentoo-dev] *DEPEND mismatches

[Sven Wegener]

[-- Attachment #1: Type: text/plain, Size: 1654 bytes --]

Hi all!

Short explanation for the subject: A *DEPEND mismatch is when a package
is listed in DEPEND, but missing in RDEPEND and vice versa. I have a
list of ebuilds at http://dev.gentoo.org/~swegener/qa/depend-mismatches
that contain such mismatches. I've already whitelisted packages like
automake and autoconf, that are safe to be only in DEPEND. And I also
whitelisted packages like emul-linux-x86-baselibs for being
RDEPEND-only. Pure meta packages like gnome-base/gnome or kde-base/kde
have everything whitelisted for RDEPEND and everything blacklisted for
DEPEND. Additional blacklistings include virtual/modutils for DEPEND.

This check is important, because when merging binary packages portage
will only install RDEPEND and when building stages (via ROOT support)
DEPEND will go to / and RDEPEND will got to the specified ROOT. I want
to clean *DEPEND up, so that we have sane dependencies. Currently, for
normal merging, portage forces both DEPEND and RDEPEND to be installed,
even after the merging is complete. This might or will change in the
future and break packages that have these mismatches.

I want developers to take a look at the list and see if packages they
maintain are listed. I'm aware that the list is quite large and still
contains a lot of false positives. I can whitelist packages for DEPEND
or RDEPEND either general, based on eclass usage or for a specific
package. If you are sure that your package has a safe mismatch, I can
add it to the whitelist. But please one after the other, this is just an
initial test.

Cheers,
Sven

-- 
Sven Wegener
Gentoo Developer
http://www.gentoo.org/

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Mike Frysinger]

On Tuesday 05 July 2005 08:00 pm, Sven Wegener wrote:
> contains a lot of false positives. I can whitelist packages for DEPEND
> or RDEPEND either general, based on eclass usage or for a specific
> package. If you are sure that your package has a safe mismatch, I can
> add it to the whitelist. But please one after the other, this is just an
> initial test.

you should def whitelist for DEPEND only:
app-arch/zip
app-arch/unrar
dev-util/jam
media-gfx/nvidia-cg-toolkit
games-util/loki_patch
-mike
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] *DEPEND mismatches

[Diego 'Flameeyes' Pettenò]

[-- Attachment #1: Type: text/plain, Size: 402 bytes --]

On Wednesday 06 July 2005 02:12, Mike Frysinger wrote:
> you should def whitelist for DEPEND only:
dev-util/cvs is used by vlc during build process (BDEPEND?)

Still there are a few other RDEPEND which makes sense to not be DEPEND, 
especially for scripts.

-- 
Diego "Flameeyes" Pettenò
Gentoo Developer - http://dev.gentoo.org/~flameeyes/
(Gentoo/FreeBSD, Video, Gentoo/AMD64, Sound, PAM)

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Sven Wegener]

[-- Attachment #1: Type: text/plain, Size: 366 bytes --]

On Tue, Jul 05, 2005 at 08:12:31PM -0400, Mike Frysinger wrote:
> you should def whitelist for DEPEND only:
> app-arch/zip
> app-arch/unrar
> dev-util/jam
> media-gfx/nvidia-cg-toolkit
> games-util/loki_patch

I added them to the list of packages being safe to be used in DEPEND
only.

Sven

-- 
Sven Wegener
Gentoo Developer
http://www.gentoo.org/

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Robin H. Johnson]

[-- Attachment #1: Type: text/plain, Size: 1006 bytes --]

On Wed, Jul 06, 2005 at 02:00:24AM +0200, Sven Wegener wrote:
[snip]
Could you possibly split the stuff into two files?
one for RDEPEND.only and one for DEPEND.only?

I see a lot more FP for RDEPEND.only.

Many of the RDEPEND.only are correct, as the packages are just scripts
that call other binaries to do their work. On the flipside, there are a
lot of packages that only need something to build properly (eg
sys-cluster/torque needs sys-apps/ed, and dev-libs/openssl has a build
system that needs perl).

I suspect that you'd end up with a massive whitelist if we tried to
catch everything.

For the moment however, I can offer some general items:
anything inheriting php-ext*eclass is correct with DEPEND of dev-php/php but
and RDEPEND of virtual/php.

-- 
Robin Hugh Johnson
E-Mail     : robbat2@orbis-terrarum.net
Home Page  : http://www.orbis-terrarum.net/?l=people.robbat2
ICQ#       : 30269588 or 41961639
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85

[-- Attachment #2: Type: application/pgp-signature, Size: 241 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Petteri Räty]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sven Wegener wrote:
> I want developers to take a look at the list and see if packages they
> maintain are listed. I'm aware that the list is quite large and still
> contains a lot of false positives. I can whitelist packages for DEPEND
> or RDEPEND either general, based on eclass usage or for a specific
> package. If you are sure that your package has a safe mismatch, I can
> add it to the whitelist. But please one after the other, this is just an
> initial test.
> 

Please add Netbeans to the whitelist (DEPEND).

> Cheers,
> Sven
> 

Regards,
Petteri Räty (betelgeuse@freenode)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCy8Y3cxLzpIGCsLQRAnrIAJ40Mikfu04Sl7pggVS8dZkUOHXGZQCfT0xd
9Ubzoot9aJ/jde24bDqjHvc=
=o04/
-----END PGP SIGNATURE-----
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] *DEPEND mismatches

[Sven Wegener]

[-- Attachment #1: Type: text/plain, Size: 1695 bytes --]

On Tue, Jul 05, 2005 at 06:19:01PM -0700, Robin H. Johnson wrote:
> On Wed, Jul 06, 2005 at 02:00:24AM +0200, Sven Wegener wrote:
> [snip]
> Could you possibly split the stuff into two files?
> one for RDEPEND.only and one for DEPEND.only?

http://dev.gentoo.org/~swegener/qa/depend-mismatches-DEPEND
http://dev.gentoo.org/~swegener/qa/depend-mismatches-RDEPEND

> I see a lot more FP for RDEPEND.only.
>
> Many of the RDEPEND.only are correct, as the packages are just scripts
> that call other binaries to do their work. On the flipside, there are a
> lot of packages that only need something to build properly (eg
> sys-cluster/torque needs sys-apps/ed, and dev-libs/openssl has a build
> system that needs perl).

Yeah, plugins are often RDEPEND-only and binary packages have an empty
DEPEND. Those are special packages. I could whitelist *-plugins/* for
RDEPEND that would remove them from the list. I see about 30 packages
in the list that use them, maybe a good thing to whitelist for RDEPEND.
I added sys-apps/ed for sys-cluster/torque and dev-lang/perl for
dev-libs/openssl to the whitelist.

> I suspect that you'd end up with a massive whitelist if we tried to
> catch everything.

The whitelist is already quite large. I don't want to catch everything
that should be whitelisted. FPs that affect a lot of packages and can
easy be whitelisted either general or by the means of eclass usage are
good.

> For the moment however, I can offer some general items:
> anything inheriting php-ext*eclass is correct with DEPEND of dev-php/php but
> and RDEPEND of virtual/php.

Added.

Sven

-- 
Sven Wegener
Gentoo Developer
http://www.gentoo.org/

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Armando Di Cianno]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2005-07-05 20:00:24 -0400 Sven Wegener <swegener@gentoo.org> wrote:

> Short explanation for the subject: A *DEPEND mismatch is when a 
> package
> is listed in DEPEND, but missing in RDEPEND and vice versa. I have a
> list of ebuilds at 
> http://dev.gentoo.org/~swegener/qa/depend-mismatches
> that contain such mismatches. I've already whitelisted packages like
> automake and autoconf, that are safe to be only in DEPEND. And I also
> whitelisted packages like emul-linux-x86-baselibs for being
> RDEPEND-only. Pure meta packages like gnome-base/gnome or kde-base/kde
> have everything whitelisted for RDEPEND and everything blacklisted for
> DEPEND. Additional blacklistings include virtual/modutils for DEPEND.

gnustep-apps/zipper is a frontend to:
app-arch/tar, app-arch/unzip, app-arch/lha, app-arch/unlzx
... so it's safe for RDEPEND only.

__armando di cianno
fafhrd -at- gentoo org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1-ecc0.1.6 (GNU/Linux)
Comment: Using the GPG bundle for GNUMail

iD8DBQFCy/EzwgiTPLI9xhcRAjjfAJ94tWBnFmRWq9wt/D3LtcVkS5IgkQCfSe5w
z8YMNyI7WeszYK6QYmL+Fis=
=Z6rY
-----END PGP SIGNATURE-----

-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] *DEPEND mismatches

[Michael Cummings]

[-- Attachment #1: Type: text/plain, Size: 2413 bytes --]

Are we forbidden from DEPEND=RDEPEND...? I only ask because 90% of the 
dev-perl portions would fall into that category - if it's an rdepend, it can 
be a depend as well (technically you can build without most of the underlying 
rdepends, but you will get warnings from perl that prereqs weren't met). And 
if so, which is preferred - globbing the list in rdepend and having 
depend=rdepend, or globbing it in depend and having rdepend=depend? Thanks :)

~M

(i'm old, humor me)


On Tuesday 05 July 2005 08:00 pm, Sven Wegener wrote:
> Hi all!
>
> Short explanation for the subject: A *DEPEND mismatch is when a package
> is listed in DEPEND, but missing in RDEPEND and vice versa. I have a
> list of ebuilds at http://dev.gentoo.org/~swegener/qa/depend-mismatches
> that contain such mismatches. I've already whitelisted packages like
> automake and autoconf, that are safe to be only in DEPEND. And I also
> whitelisted packages like emul-linux-x86-baselibs for being
> RDEPEND-only. Pure meta packages like gnome-base/gnome or kde-base/kde
> have everything whitelisted for RDEPEND and everything blacklisted for
> DEPEND. Additional blacklistings include virtual/modutils for DEPEND.
>
> This check is important, because when merging binary packages portage
> will only install RDEPEND and when building stages (via ROOT support)
> DEPEND will go to / and RDEPEND will got to the specified ROOT. I want
> to clean *DEPEND up, so that we have sane dependencies. Currently, for
> normal merging, portage forces both DEPEND and RDEPEND to be installed,
> even after the merging is complete. This might or will change in the
> future and break packages that have these mismatches.
>
> I want developers to take a look at the list and see if packages they
> maintain are listed. I'm aware that the list is quite large and still
> contains a lot of false positives. I can whitelist packages for DEPEND
> or RDEPEND either general, based on eclass usage or for a specific
> package. If you are sure that your package has a safe mismatch, I can
> add it to the whitelist. But please one after the other, this is just an
> initial test.
>
> Cheers,
> Sven

-- 

-----o()o---------------------------------------------
Michael Cummings   |    #gentoo-dev, #gentoo-perl
Gentoo Perl Dev    |    on irc.freenode.net 
-----o()o---------------------------------------------

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Sven Wegener]

[-- Attachment #1: Type: text/plain, Size: 1936 bytes --]

On Wed, Jul 06, 2005 at 02:03:32PM -0400, Michael Cummings wrote:
> Are we forbidden from DEPEND=RDEPEND...? I only ask because 90% of the 
> dev-perl portions would fall into that category - if it's an rdepend, it can 
> be a depend as well (technically you can build without most of the underlying 
> rdepends, but you will get warnings from perl that prereqs weren't met). And 
> if so, which is preferred - globbing the list in rdepend and having 
> depend=rdepend, or globbing it in depend and having rdepend=depend? Thanks :)

It doesn't matter if you first populate DEPEND and then assign it to
RDEPEND or the other way round. That's totally up to you. But it is
easier, if you have more packages being RDEPEND-only to start with
DEPEND="..." and then assign RDEPEND="${DEPEND} ..."

To explain some background. Current portage automatically sets RDEPEND
to DEPEND, if RDEPEND is not set by the ebuild. This behaviour will
change in the future. That means all ebuilds need to set DEPEND *and*
RDEPEND, even if they just do RDEPEND="${DEPEND}" after setting DEPEND.
I'll send a separate email on this issue.

I prefer to have DEPEND and RDEPEND as fine grained as possible. As I
wrote, current portage forces both DEPEND and RDEPEND to be installed
for normal merges. This is broken behaviour and will change too.
Packages being only in DEPEND will be removed when running depclean. If
you use a system just for package building, why do you want to install
all runtime-only dependencies? Why do you want buildtime-only
dependencies, when merging binary packages? Why do you want
buildtime-only dependencies for already installed packages? That are the
points why *DEPEND should be fine grained as possible. This mismatch
check is done to catch runtime-dependencies being in DEPEND but missing
in RDEPEND and the other way round.

Sven

-- 
SVen Wegener
Gentoo Developer
http://www.gentoo.org/

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Henrik Brix Andersen]

[-- Attachment #1: Type: text/plain, Size: 1166 bytes --]

On Wed, 2005-07-06 at 02:00 +0200, Sven Wegener wrote:
> I want developers to take a look at the list and see if packages the
> maintain are listed. I'm aware that the list is quite large and still
> contains a lot of false positives. I can whitelist packages for DEPEND
> or RDEPEND either general, based on eclass usage or for a specific
> package. If you are sure that your package has a safe mismatch, I can
> add it to the whitelist. But please one after the other, this is just an
> initial test.

I've checked my packages. There seems to be quite a few false positives
for RDEPEND not being in DEPEND as some of the packages, which I
maintain, simply acts as a frontend to other packages, and thus doesn't
have a build-time dependency for the backend. Do you want me to list all
the packages affected in order to add them to the whitelist?

You might want to whitelist packages having */-firmware in RDEPEND but
not in DEPEND, as firmware is normally only a run-time dependency.

I've fixed the remaining packages I maintain.

Sincerely,
Brix
-- 
Henrik Brix Andersen <brix@gentoo.org>
Gentoo Metadistribution | Mobile computing herd

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Dan Armak]

[-- Attachment #1: Type: text/plain, Size: 3408 bytes --]

On Wednesday 06 July 2005 03:00, Sven Wegener wrote:
> I want developers to take a look at the list and see if packages they
> maintain are listed. I'm aware that the list is quite large and still
> contains a lot of false positives. I can whitelist packages for DEPEND
> or RDEPEND either general, based on eclass usage or for a specific
> package. If you are sure that your package has a safe mismatch, I can
> add it to the whitelist. But please one after the other, this is just an
> initial test.

DEPEND.blacklist of net-wireless/wireless-tools is incorrect. 
kde-base/kwifimanager compiles against iwlib.h.

Please whitelist for REPEND only: 
media-video/transcode
app-admin/sudo
app-dicts/dictd-<list of many dict package> (used by app-dicts/dictd-dicts)
media-libs/media-gst-plugins-* (packages DEPEND on media-libs/gstreamer and 
RDEPEND on plugins for it)
kde-base/artsplugin-* (packages DEPEND on kde-base/arts and RDEPEND on plugins 
for it)
kde-base/kdebase-data (datafiles only useful at runtime)
kde-base/kde{base,multimedia,pim,sdk}-kioslaves
app-crypt/qca-tls (QCA plugin; things DEPEND on qt, RDEPEND on qca-tls)

kde-base/kdebase-startkde is essentially a -meta ebuild and should be listed 
for RDEPEND-only usage.

Also, if you're whitelisting individual ebuilds, these deps are correct (more 
or less everything you had listed for kde-base, but I went and checked what I 
wasn't sure about anyway):
kde-base/kappfinder, kde-base/kdebase
	RDEPEND.only: kde-base/kicker
kde-base/kaudiocreator, kde-base/kdemultimedia, kdemultimedia-kioslaves
	RDEPEND.only: media-libs/flac, media-sound/lame (uses cli tools not libs)
kde-base/kcontrol, kde-base/kdebase
	RDEPEND.only: kde-base/kcminit, kde-base/kdebase-data, kde-base/kdesu, 
kde-base/khelpcenter, kde-base/khotkeys (runtime dynamic loading of libs)
kde-base/kdeaccessibility, kde-base/kttsd:
	RDEPEND.only: app-accessibility/festival, app-accessibility/epos, 
app-accessibility/flite, app-accessibility/freetts (use cli tools)
kde-base/kdebase-kioslaves, kde-base/kdebase
	RDEPEND.only: kde-base/kdialog
kde-base/kdegraphics-kfile-plugins, kde-base/kdegraphics
	RDEPEND.only: app-text/xpdf
kde-base/kdelirc, kde-base/kdeutils:
	RDEPEND.only: app-misc/lirc
kde-base/kdesktop, kde-base/kdebase
	RDEPEND.only: kde-base/kcheckpass, kde-base/kdialog
kde-base/kdvi, kde-base/kdegraphics
	RDEPEND.only: app-text/tetex, app-text/ptex, app-text/cstetex, 
app-text/dvipdfm
kde-base/kghostview, kde-base/kdegraphics
	RDEPEND.only: virtual/ghostscript
kde-base/konqueror-akregator, kde-base/kdeaddons
	DEPEND.only: || ( kde-base/konqueror kde-base/kdebase )
	RDEPEND.only: || ( kde-base/akregator kde-base/kdepim )
kde-base/kontact-specialdates
	RDEPEND.only: kde-base/kmail (only to send mail with)
kde-base/kpovmodeler, kde-base/kdegraphics
	RDEPEND.only: media-gfx/povray
kde-base/krdc, kde-base/kdenetwork
	RDEPEND.only: net-misc/rdesktop
kde-base/ksirc, kde-base/kdenetwork
	RDEPEND.only: dev-perl/IO-Socket-SSL
kde-base/quanta, kde-base/kdewebdev
	RDEPEND.only: kde-base/kfilereplace, kde-base/kimagemapeditor, 
kde-base/klinkstatus, kde-base/kommander, kde-base/kxsldbg, app-text/htmltidy

-- 
Dan Armak
Gentoo Linux developer (KDE)
Public GPG key: http://dev.gentoo.org/~danarmak/danarmak-gpg-public.key
Fingerprint: DD70 DBF9 E3D4 6CB9 2FDD  0069 508D 9143 8D5F 8951

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] *DEPEND mismatches

[Henrik Brix Andersen]

[-- Attachment #1: Type: text/plain, Size: 286 bytes --]

On Fri, 2005-07-08 at 14:46 +0300, Dan Armak wrote:
> DEPEND.blacklist of net-wireless/wireless-tools is incorrect. 
> kde-base/kwifimanager compiles against iwlib.h.

Correct.

./Brix
-- 
Henrik Brix Andersen <brix@gentoo.org>
Gentoo Metadistribution | Mobile computing herd

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]