Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 905705 - dev-lang/rust-1.69.0-r1 - libssh2-sys crate has a vendored copy of net-libs/libssh2
Summary: dev-lang/rust-1.69.0-r1 - libssh2-sys crate has a vendored copy of net-libs/l...
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Rust Project
Depends on:
Blocks: bundled-libs
  Show dependency tree
Reported: 2023-05-04 15:39 UTC by orbea
Modified: 2024-02-14 10:26 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description orbea 2023-05-04 15:39:17 UTC
Currently dev-lang/rust has a vendored libssh2-sys crate which itself has a vendored copy of the C libssh2. This can be problematic when the rust upstream rarely updates the crate (Or the vendored C library) to a current version and Gentoo may end up with having to patch the same bug in multiple places which is especially annoying how rust tracks the sha256sums of every file provided by the crate in a single giant one liner and will error if they mismatch (Even though its possible and easy to just edit the sum).

Using the system version can be done by exporting 'LIBSSH2_SYS_USE_PKG_CONFIG=1', but perhaps this might introduce unintended consequences if/when libssh2 changes ABI and the system-bootstrap may not work? OpenBSD seems to have been using a system version since 2018 when they updated to rust-1.29 so maybe its not a serious concern?

Personally I strongly prefer system libraries, but this should be investigated to see why this may be a good idea or not.