[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Failing to replace vendored code copies by Debian packages (Was: Update golang-github-appc-cni to 1.0 (was Re: singularity-container: CVE-2021-33622))



On 2/20/22 12:19 AM, Andreas Tille wrote:
I'm afraid the version bump was not responsible for the strange grpc
issue.  I kept on working on version 3.9.4 of singularity-container to
reduce the number of vendored code copies.  As I wrote down in
d/README.source[1] I failed in replacing any vendored copy by the Debian
packaged version and it all ended up in
[...]

That was due to pre-generated .pb.go file compiled with new protoc.

I have fixed this, and also managed to un0vendor ~20 deps, and used that
with the packages in archive. I tried to unvendor more, but it might break things, so
we may be we cannot make it to a much better state than it already is.
All changes are in salsa.

After the said changes, I uploaded 3.9.5 to experimental.

Hope that helps.

Regards,
Nilesh


Attachment: OpenPGP_signature
Description: OpenPGP digital signature


Reply to: