Project

General

Profile

Bug #3527

Please, do not automatically download and build third parity packages

Added by Ivan Kalvachev over 5 years ago. Updated about 5 years ago.

Status:
New
Priority:
Normal
Assignee:
Category:
Configuration
Target version:
-
Start date:
2016-01-24
Due date:
% Done:

0%

Estimated time:
Found in version:
git 9be8881b6f5cc0887e6e2d687bb0abb022ab3778
Affected Versions:

Description

Please, do not automatically download and build third parity packages.

It's horrible idea, all the way around.

1. It downloads and builds stuff by default.
Even when you run `./configure` without any options.

2. There is absolutely no indication that configure have failed to detect these components.

3. It downloads and builds stuff that I already have latest versions. (yasm, libvpx, ffmpeg, etc ). It makes build slow and huge, for no reason at all.

4. There is no indication that it is going to download and compile third parity stuff on its own.
Configure is supposed to detect what is available and adapt to it...

5. There is no way to disable some of the stuff that you seem to consider essential. There is no way to change their configure options, other than editing the build files...

6. Security.
So many things could go wrong. Things that are out of your control...

History

#1

Updated by Jaroslav Kysela over 5 years ago

  • Assignee set to Adam Sutton
#2

Updated by K Shea over 5 years ago

I'm reading this and while I think I understand what is being asked, I'll also opine that many TVHeadEnd users like it precisely because you can install Ubuntu Server or Debian Linux, install TVHeadEnd, maybe install any needed tuner drivers and you are pretty much off and running. The majority of users probably appreciate that TVHeadEnd automatically installs whatever it needs, and such users don't particularly care if a newer version of a package is replaced with an older one as long as it all works. For ever Linux guru that wants complete control over every aspect of their system, there's a guy like me who barely "gets" Linux (on a good day) and doesn't want to have to deal with installing individual dependencies if it can be avoided.

I'm not saying he isn't making valid points, in fact I honestly don't know, and the one thing I will agree with is the last part of point 5, that users should not have to build TVHeadEnd themselves (let alone edit build files) to enable certain options, because that's simply not in the skill set of many users. I might also agree with point 6, "Security", if I had any idea what the problem is, but I don't. Suffice it to say that I do want the system to be secure, but up to this point I haven't perceived anything about it as being particularly insecure, as long as you are good about applying all the Ubuntu/Debian system updates as they become available.

#3

Updated by Sam Stenvall about 5 years ago

The only packages that are downloaded is ffmpeg, and you can disable that.

#4

Updated by Ivan Kalvachev about 5 years ago

Sam Stenvall wrote:

The only packages that are downloaded is ffmpeg, and you can disable that.

If you take a look of Makefile.ffmpeg you can see that the packages that are downloaded are:

ffmpeg
libogg
libvorbis
x264
x265
libvpx
yasm
libmfx

My points are:

- I DO have system FFmpeg, I DO want that one to be used.

- I DO NOT want automated download of stuff from internet. (Unless I have explicitly allowed it).

Also available in: Atom PDF