Re: CI setup

Simon Josefsson via Bug reports for the GNU Internet utilities <[email protected]> Sat, 02 Aug 2025 20:20:45 +0200
Newsgroups gmane.comp.gnu.inetutils.bugs
Message-ID <[email protected]>
Bruno Haible via Bug reports for the GNU Internet utilities
<[email protected]> writes:

>> - My primary use of CI is to have confidence in the tarball I release,
>>   thus it is important to widely test the actual gnulib commit used for
>>   the release on many platforms.
>
> That is, well, an "occasional" build, not a "continuous" build. One of
> my packages (libffcall) uses an occasional build, and just yesterday I had
> to fix a regression that I made 11 months ago. It costs me more time
> to fix a bug after 11 months than after at most one week: the time to
> re-think about the old patches that are not present in memory any more.
>
> The advantage of a "continuous" build is also that any new maintainer can
> make a new release in relatively short time, because release show-stoppers
> have not had time to accumulate.

My view is changing towards seeing gnulib like just any other build-time
dependency.  We are using versioned build dependencies of
Trisquel/Guix/Debian/RHEL and autoconf, automake, help2man, etc in CI/CD
because we want to test those versions.  We aren't using bleeding edge
autoconf, automake, etc in CI/CD when building inetutils.  So using a
specific gnulib commit seems to match how we treat all other build
dependencies.

However I do agree with you about the utility of ALSO building inetutils
with bleeding edge gnulib.  Even using bleeding edge Debian testing
helps to catch similar issues.  Using bleeding edge autoconf, automake
etc would probably help too, although it is serious work to keep such a
complex CI happy all the time.  So yes, I think we need building of both
bleeding edge dependencies AND some known set of released old and stable
build dependencies that we still support.

/Simon
signature.asc (application/pgp-signature, 1.2 KB)
-----BEGIN PGP SIGNATURE-----

iQNoBAEWCAMQFiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmiOVv0UHHNpbW9uQGpv
c2Vmc3Nvbi5vcmfCHCYAmDMEXJLOtBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9f
V+QlTmXxo2naObDuGtw58YaxlOu0JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9z
ZWZzc29uLm9yZz6IlgQTFggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYh
BLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XQkBQkNZGbwAAoJENc89jjFPAa+BtIA
/iR73CfBurG9y8pASh3cbGOMHpDZfMAtosu6jbpO69GHAP4p7l57d+iVty2VQMsx
+3TCSAvZkpr4P/FuTzZ8JZe8BrgzBFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAx
I2hIX4HK9bQTpNVei708oNr1Klm8qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0
+MTXPPY4xTwGvgUCZ9F0SgUJDWRmSQCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9R
cisI/kdFogUCXJLPgQAKCRBRcisI/kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE
8GZHYNuFHmM9FEQS6AD6A4x5aYvoY6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4J
ENc89jjFPAa+wUUBAO64fbZek6FPlRK0DrlWsrjCXuLi6PUxyzCAY6lG2nhUAQC6
qobB9mkZlZ0qihy1x4JRtflqFcqqT9n7iUZkCDIiDbg4BFySz2oSCisGAQQBl1UB
BQEBB0AxlRumDW6nZY7A+VCfek9VpEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggA
JgIbDBYhBLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XTSBQkNZGboAAoJENc89jjF
PAa+0M0BAPPRq73kLnHYNDMniVBOzUdi2XeF32idjEWWfjvyIJUOAP4wZ+ALxIeh
is3Uw2BzGZE6ttXQ2Q+DeCJO3TPpIqaXDAAKCRBRcisI/kdFokRAAP44uFZHkFWP
FRwRayYErDKMuSoOOBM4LbXtxmsUA1EJawD+PvLHIiMheyZACYZZwGWbhOWBdpjr
YQqzRVdO0ootCQM=
=cH1R
-----END PGP SIGNATURE-----