From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E26CD1382C5 for ; Mon, 8 Feb 2021 17:56:13 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id D03B1E0961; Mon, 8 Feb 2021 17:56:10 +0000 (UTC) Received: from mail-ej1-x635.google.com (mail-ej1-x635.google.com [IPv6:2a00:1450:4864:20::635]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9BC21E0946 for ; Mon, 8 Feb 2021 17:56:10 +0000 (UTC) Received: by mail-ej1-x635.google.com with SMTP id bl23so26369241ejb.5 for ; Mon, 08 Feb 2021 09:56:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=GPH+ge8MFWnIBpVhezf6XQYdlOWeO5TpzBuwTrQP8CU=; b=Ih/G8zQp6sjQWDjLeX7ZXCWQLd0tljKG+kqvdMfdsCHjKJetK95tLLR94h19IeArQ4 MRzue4lwnOdzJ3ORvB1Bus4+nxe9SYqVUcIxawknVunC0tlgvdwk+Nb1KOjvchJGeD6g i6nDTqMAvxB3O4wz3fVH9dhSDwtVvWXnlcMzm31uTEzDPFnoHDtREYqFKJ7cztbdveO1 acXlJRNa92W+x/d8fjWJ0kCmr97HRELiiM795rN/Pu6EXV/Q0hzTbMw3H5oBa/23XPHd kh7BX0psQQ5LKvsqWufwKv6bhubMPIL/eICegN6QIFMhN2UtbFgV+LIK192mU54jdX7M AzBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=GPH+ge8MFWnIBpVhezf6XQYdlOWeO5TpzBuwTrQP8CU=; b=UJpZvL8AinJTwkRjmXvIfy0J5D1OHEfNNZFhOO3QGJFbY9EaaXDGXy+7AcE0aQnSHu AI5UmqLkR1tFYxJBPukESzdQc3X6sf3AzYVDbr1uNxGz1rHfFWOuYA1fic527UsxfzVj FnwXKu/EEF3+ceglpEyDighiE7vEAB0/SvJriuhN2sPIz3gzEcn3S0mTBELoriKN/xBU h7kH/B652J/VT4oDVESPFgiRKAur7eZndVJI/vOExj15fwc5bcRsqFORj4iWL1dNp0Nx 0ezcr8aJsUHLnUwxho2mvrTVhp2azuqDLvfKKllyvju0heOMvpm6AUAyjCDKPQEVLnaI 0CxQ== X-Gm-Message-State: AOAM533B8jh0l3YIYaunMx2DMat78zP6iNItsRc4Q6FR1r5yA1CuLYQq tdFgT+rLbfLGZ3xg63tHprAypnG3qfIjZarME3c8wbGj X-Google-Smtp-Source: ABdhPJx/ie1VYu+vBO2x+TP54zBco8q19cjwBuk73OOsWFvo9N3tkl/hGUsXrqOMbd4VpLt9kQPA4evL+px69JmjgFI= X-Received: by 2002:a17:907:20c4:: with SMTP id qq4mr17127808ejb.495.1612806969030; Mon, 08 Feb 2021 09:56:09 -0800 (PST) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 References: In-Reply-To: From: Alessandro Barbieri Date: Mon, 8 Feb 2021 18:56:00 +0100 Message-ID: Subject: Re: [gentoo-dev] dev-python/cryptography to use rust, effectively killing alpha, hppa, ia64, m68k, s390 To: gentoo-dev@lists.gentoo.org Content-Type: multipart/alternative; boundary="0000000000007afc7f05bad6e265" X-Archives-Salt: 108fad3b-6650-461b-9351-79528d706941 X-Archives-Hash: 3851299b49039b4fdfe06f236bcf806c --0000000000007afc7f05bad6e265 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Il Lun 8 Feb 2021, 12:19 Micha=C5=82 G=C3=B3rny ha scri= tto: > Hi, > > FYI the developers of dev-python/cryptography decided that Rust is going > to be mandatory for 1.5+ versions. It's unlikely that they're going to > provide LTS support or security fixes for the old versions. > > Since cryptography is a very important package in the Python ecosystem, > and it is an indirect dependency of Portage, this means that we will > probably have to entirely drop support for architectures that are not > supported by Rust. > > According to upstream platform support information [1], this probably > means (eventually) entirely removing the following architectures: > - alpha (stable) > - hppa (stable) > - ia64 (stable) > - m68k (exp) > - s390 (except for s390x, exp) > > Furthermore, the Gentoo Rust packages are missing support > for the following platforms, apparently supported upstream: > - mips (exp) > - ppc (32) (stable) > - sparc (stable) > - s390x (exp) > - riscv (stable) > > Apparently it's non-trivial to bootstrap Rust on these platforms, > so it's unclear when Gentoo is going to start providing Rust on them. > > I've raised a protest on the cryptography bug tracker [2] but apparently > upstream considers Rust's 'memory safety' more important than ability to > actually use the package. > > Honestly, I don't think it likely that Rust will gain support for these > platforms. This involves a lot of work, starting with writing a new > LLVM backend and getting it accepted (getting new code into LLVM is very > hard unless you're doing that on behalf one of the big companies). You > can imagine how much effort that involves compared to rewriting the new > code from Cryptography into C. > > If we can't convince upstream, I'm afraid we'll either have to drop > these architectures entirely or fork Cryptography. > > > [1] https://doc.rust-lang.org/nightly/rustc/platform-support.html > [2] https://github.com/pyca/cryptography/issues/5771 > > -- > Best regards, > Micha=C5=82 G=C3=B3rny > Should we shed tears for those legacy architectures or move forward? Does anyone really use them in production? > --0000000000007afc7f05bad6e265 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Il Lun 8 Feb 2021, 12:19 Micha=C5=82 G=C3=B3rny <mgorny@gentoo.org> ha scritto:
<= blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px= #ccc solid;padding-left:1ex">Hi,

FYI the developers of dev-python/cryptography decided that Rust is going to be mandatory for 1.5+ versions.=C2=A0 It's unlikely that they're= going to
provide LTS support or security fixes for the old versions.

Since cryptography is a very important package in the Python ecosystem,
and it is an indirect dependency of Portage, this means that we will
probably have to entirely drop support for architectures that are not
supported by Rust.

According to upstream platform support information [1], this probably
means (eventually) entirely removing the following architectures:
- alpha (stable)
- hppa (stable)
- ia64 (stable)
- m68k (exp)
- s390 (except for s390x, exp)

Furthermore, the Gentoo Rust packages are missing support
for the following platforms, apparently supported upstream:
- mips (exp)
- ppc (32) (stable)
- sparc (stable)
- s390x (exp)
- riscv (stable)

Apparently it's non-trivial to bootstrap Rust on these platforms,
so it's unclear when Gentoo is going to start providing Rust on them.
I've raised a protest on the cryptography bug tracker [2] but apparentl= y
upstream considers Rust's 'memory safety' more important than a= bility to
actually use the package.

Honestly, I don't think it likely that Rust will gain support for these=
platforms.=C2=A0 This involves a lot of work, starting with writing a new LLVM backend and getting it accepted (getting new code into LLVM is very hard unless you're doing that on behalf one of the big companies).=C2= =A0 You
can imagine how much effort that involves compared to rewriting the new
code from Cryptography into C.

If we can't convince upstream, I'm afraid we'll either have to = drop
these architectures entirely or fork Cryptography.


[1] https://doc.rust-lang.or= g/nightly/rustc/platform-support.html
[2] https://github.com/pyca/cryptography/= issues/5771

--
Best regards,
Micha=C5=82 G=C3=B3rny

Should we shed tears for those legacy architectures o= r move forward? Does anyone really use them in production?
--0000000000007afc7f05bad6e265--