From nobody Tue Sep 26 07:17:21 2023 X-Original-To: freebsd-ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4RvrfW3g8wz4tkhj for ; Tue, 26 Sep 2023 07:17:23 +0000 (UTC) (envelope-from madpilot@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4RvrfW32Sxz4Q75; Tue, 26 Sep 2023 07:17:23 +0000 (UTC) (envelope-from madpilot@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1695712643; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=PtcwV/qYqfF0cVbuP04sRXWcYzKZklQ8oF52FcXN0SI=; b=tVDmPbvG29DGckEhsH8SxNyH/9oZ7XTEpcHMlJplZGypZyFWmWZuTBkRKNb9Bz31PriKjE 4j2oT3bCQHlOL6gL0fdMQAahHOf75GPhYShD4qfz+Nxs/LQQ/9Hz2e/+90e2ZUT80+bKpH M5XOdQ94q5uFGsRJ473Fw8cihHasQXgx+WiHAiUzOs1RycqLIhGBTGQ2TIiQlv9TUhaRfi Cv0/mQkwOtpGZ5XvmtZ1FsWExFbYHwYAUAdp6BcaBasFVFJUTPftX2ozlSweXkbJq2QPIq Dq3J1iAmW5rqCEyugX3KAdVQDLHhSqrX0BMidgdfWFG5PHLjE/0Qth419AgJfg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1695712643; a=rsa-sha256; cv=none; b=Uq8FD1nss5ZcyziHTZNxg9vVM8y3wt5t6KSR1wsm4uTt/0SgKAjHYeiYYeBtd4iCw92oO3 SuJNvQ98WrzDjkhgDHJ0kg36EPFGTjzgqB8eznNcESz8W5dMVzUe56M7xNwi3Ifon0caSo EII3F/qYmVsmETK37y9XmE8qfCBm9yFWrRdHTDjtAAUgWX2bzBzY4TahgzJnEDgVCQwVi4 zghrioPTgWXzWTaCGQOUPPS7It/CF+VUzVnsmvxZOfmGhnWEWGNC5EaT30RAiZ84t3glrD YHq0oMdOylmv/7667QhYopiBG09sy4WA+ehsNm7M9iUksccdtgEy2VjQL0cDVg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1695712643; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=PtcwV/qYqfF0cVbuP04sRXWcYzKZklQ8oF52FcXN0SI=; b=DGvtmUnFfBK4mYafWajlgxeU22IPJS1vcQHs46nDAIrR4rB/+uL8PsLmogFNddHLtXD3Pu z8ry6k6wLe/OPr/cYhuo6BIFMjoOcWyttq0KzrXeIsVX2yGCYbpcInCZko4L8P/HB8B/YL Nwaoc1GOEMZSy5UgVMZVtPbkoW8TZg1m9PMFF22a7FTE85Z4GNqXa/5SRjy1w4hJKAfTFi shpaC07BZfjq3Gid484Q5REyMaknybVmcJ7aXP2RMv23Nx7C28HjVhqg+byR+nBy+GxYav 3J8/3s4LUTNtf88tpdVlg14i0qic4YZ1AiY+ZBCq60q/zVVUFfoxBiYUxOaWGw== Received: from [IPV6:2a01:e11:2002:4280::13:1] (unknown [IPv6:2a01:e11:2002:4280::13:1]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) (Authenticated sender: madpilot/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4RvrfV5zNgz5y9; Tue, 26 Sep 2023 07:17:22 +0000 (UTC) (envelope-from madpilot@FreeBSD.org) Message-ID: <6d9121e9-87ac-1a2a-3cb8-b9bccaab4e96@FreeBSD.org> Date: Tue, 26 Sep 2023 09:17:21 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:102.0) Gecko/20100101 Thunderbird/102.15.1 Subject: Re: dns/bind916 builds rust unexpectedly Content-Language: en-US To: Helge Oldach , Gareth de Vaux Cc: freebsd-ports@freebsd.org References: <202309260653.38Q6rISB011933@nuc.oldach.net> From: Guido Falsi In-Reply-To: <202309260653.38Q6rISB011933@nuc.oldach.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 26/09/23 08:53, Helge Oldach wrote: > Gareth de Vaux wrote on Mon, 25 Sep 2023 17:06:54 +0200 (CEST): >> Hi all, I've just upgraded bind916 which brought half my system down since >> it suddenly required a mountain of python packages and rust which needed >> around 13GB (and hours) to build - space which I didn't have nor have ever >> remotely expected to need for a ports build. >> >> My bind configuration options are basically the defaults: >> >> # grep OPTIONS_FILE_SET /var/db/ports/dns_bind916/options >> OPTIONS_FILE_SET+=IDN >> OPTIONS_FILE_SET+=JSON >> OPTIONS_FILE_SET+=LMDB >> OPTIONS_FILE_SET+=MANPAGES >> OPTIONS_FILE_SET+=TCP_FASTOPEN >> OPTIONS_FILE_SET+=GSSAPI_NONE >> OPTIONS_FILE_SET+=DLZ_FILESYSTEM >> >> These are the top level dependencies: >> >> # make -C /usr/ports/dns/bind916 build-depends-list >> /usr/ports/ports-mgmt/pkg >> /usr/ports/textproc/py-sphinx >> /usr/ports/devel/pkgconf >> /usr/ports/security/openssl >> /usr/ports/converters/libiconv >> /usr/ports/devel/libuv >> /usr/ports/textproc/libxml2 >> /usr/ports/dns/libidn2 >> /usr/ports/devel/json-c >> /usr/ports/databases/lmdb >> /usr/ports/devel/libedit >> >> Does anyone know which option/dependency is causing this? I suspect >> MANPAGES -> py-sphinx since it has 'py' but who knows. Which itself would >> be crazy that just a manpage would trigger this kind of intense build. >> > > Indeed, it's py-sphinx, requiring py-openssl at some stage, which is in > turn requiring py-cryptography which needs rust. > > DEFAULT_VERSIONS+=pycryptography=legacy > > in make.conf fixed this BS for me. Beware of the dogs, you might get > bitten by software that requires the new py-cryptography - I did stumble > over py-certbot and py-awscli for example. py-cryptography was kept at an old version for a long time, for various reasons, the new mandatory dependency on rust being the main one. But that old version does not work with OpenSSL 3, so the update of OpenSSL in FreeBSD 14 imposed the update of py-cryptography. This is the perfect example of why I say: - there are external pressures we have little power on (keeping an old OpenSSL indefinitely is not an option) - keeping old version of software (to avoid heavy dependencies or whatever) is a landmine waiting to go off The problem showed up now because the landmine of keeping an old version of py-cryptography in the tree finally went off. I'm sure there are more similar landmines waiting to explode under our feet in the ports tree. -- Guido Falsi