Re: Does glib really need python at runtime?

On 14/12/2022 11:11, Yasuhiro Kimura wrote:
> From: Arthur Chance <freebsd@qeng-ho.org>
> Subject: Does glib really need python at runtime?
> Date: Wed, 14 Dec 2022 10:57:42 +0000
> 
>> I installed a package that needs glib on a server and noticed that
>> python was installed as glib depends on it
>>
>> root@arthur:1# pkg info -d glib
>> glib-2.74.1,2:
>> 	libxml2-2.10.3_1
>> 	python39-3.9.15       <-----
>> 	pcre2-10.40
>> 	libffi-3.4.3
>> 	gettext-runtime-0.21
>> 	libiconv-1.17
>>
>> I can understand python being need for building glib, but as a run time
>> dependency it's ridiculous, as well as exposing a massive attack
>> surface. Does anyone know what's going on here?
> 
> glib-genmarshal and glib-mkenums are python script. So they require
> python to run.

Yes, but they're build time utilities. I found this page which says that
glib specifically doesn't need python at runtime, only at build time.

https://gitlab.gnome.org/GNOME/glib/-/issues/1716

> yasu@eastasia[3311]% file /usr/local/bin/glib-genmarshal /usr/local/bin/glib-mkenums
> /usr/local/bin/glib-genmarshal: a /usr/bin/env /usr/local/bin/python3.11 script, ASCII text executable
> /usr/local/bin/glib-mkenums:    a /usr/bin/env /usr/local/bin/python3.11 script, ASCII text executable
> yasu@eastasia[3311]%


-- 
We build our computer systems the way we build our cities; over time,
without a plan, on top of ruins.
			— Ellen Ullman