Re: Building "cargo-c": over 400 packages to be downloaded?

This is a multi-part message in MIME format...

------------=_1773483684-1253-15625
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

Am 13.03.26 um 10:10 schrieb Pierre Scotney ([email protected]
via blfs-support Mailing List):
> On Fri, Mar 13, 2026 at 12:24:47AM +0100, Rainer Fiebig wrote:
>> Am 12.03.26 um 21:43 schrieb Joe Locash ([email protected] via
>> blfs-support Mailing List):
>>> On 3/12/26 6:28 AM, Rainer Fiebig ([email protected] via blfs-support
>>> Mailing List) wrote:
>>>> "Cargo-c" is required for later versions of librsvg which I wanted to
>>>> update for security-reasons (SA 12.4 098).
>>>>
>>>> An offline-build of cargo-c doesn't seem possible and the download of
>>>> file "cargo.lock" is necessary.  I checked version -0.10.21 of that file
>>>> and it has over 400 "package" sections, all with name and url:
>>>
>>> <snip>
>>>
>>> You can do an offline build. On your system with internet access after
>>> you extract and cd into the cargo-c source dir, just do a "cargo vendor".
>>
>> Great!  Thank you!  I now faintly remember that I once used this "cargo
>> vendor" trick for an other package.  And I think that it was _you_ who
>> suggested it at the time.  Maybe in context with offline-building of rustc.
>>
>>>
>>> It will download all the crates it thinks it needs. Save the vendor dir
>>> and copy it to your offline box and put it into the cargo-c source dir
>>> there. Make sure to follow the directions that are displayed after doing
>>> the vendor. I do all of my builds offline.
>>
>> I'll try it tomorrow.  This way one has at least a chance to take a look
>> at what was downloaded and is used for the build.  I build rustc offline
>> but otherwise try to keep away from rust-stuff as much as possible.
> 
> I have tried to avoid rust as much of possible, but I need rustc to 
> build Firefox and Mesa3D AMD drivers.  A lot of crates for a few 
> packages!

Same for the newer librsvg-versions.  They seem to require just one of
the (only) four binaries that cargo-c provides:

[...]
Program cargo-cbuild found: YES 0.10.21 0.10.21 (/bin/cargo-cbuild)
[...]

I don't know whether that's still a sane cost/benefit ratio but then:
what can you do?

The really mean thing is that actually only two programs of my system
seem to use librsvg: emacs and vlc.  So simply removing librsvg might
have been the easier and more reasonable thing to do.

Rainer


------------=_1773483684-1253-15625
Content-Type: text/plain; charset="UTF-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-support
Unsubscribe: See the above information page

------------=_1773483684-1253-15625--