Re: maint: Distribute help2man script.

Simon Josefsson via Bug reports for the GNU Internet utilities <[email protected]> Sat, 19 Apr 2025 12:30:44 +0200
Newsgroups gmane.comp.gnu.inetutils.bugs
Message-ID <[email protected]>
Collin Funk <[email protected]> writes:

> The CI for Inetutils fails to build on OpenBSD [1] since this platform
> does not have a help2man package.
>
> I have pushed the attached patch to distribute the help2man script like
> Coreutils does.

Thanks for the finding!  Is that building from tarball or from git?

But please, let's not add more copies of external tools to version
control sources.  That is a software supply-chain nightmare.  How would
we keep this copy of help2man synchronized with upstream, which could
warrant quick action in case security bugs?  Who will spend time
auditing this?

We should prominently document the build/runtime dependencies, maybe
using a DEPENDENCIES file like Bruno does in some projects (which I
recently started to use in libidn too).  If we don't mention help2man
already.

InetUtils has another CI running at GitLab:

https://gitlab.com/gsasl/inetutils/-/pipelines/1776170049

Alas no BSD runners but should be easy to add, I manage a OpenBSD runner
for other projects.

I think that people building InetUtils in a BSD machine simply have to
install help2man.  We can't vendor every tool that is missing.  We can
install help2man in the CI too, just install it before building.  What
do you think about that solution?

> diff --git a/.x-update-copyright b/.x-update-copyright
> new file mode 100644
> index 00000000..ad9c8533
> --- /dev/null
> +++ b/.x-update-copyright
> @@ -0,0 +1,4 @@
> +^COPYING$
> +^bootstrap$
> +^doc/fdl\.texi$
> +^man/help2man$

There is no need for these .x-* files anymore, put exceptions in cfg.mk
instead.

/Simon
signature.asc (application/pgp-signature, 1.2 KB)
-----BEGIN PGP SIGNATURE-----
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=8OVa
-----END PGP SIGNATURE-----