From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=17.151.62.25; helo=mail-in2.apple.com; envelope-from=afish@apple.com; receiver=edk2-devel@lists.01.org Received: from mail-in2.apple.com (mail-out2.apple.com [17.151.62.25]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 22F392250EDC7 for ; Thu, 8 Mar 2018 14:13:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=apple.com; s=mailout2048s; c=relaxed/simple; q=dns/txt; i=@apple.com; t=1520547586; x=2384461186; h=From:Sender:Reply-To:Subject:Date:Message-id:To:Cc:MIME-version:Content-type: Content-transfer-encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-reply-to:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=aRdoO4SOU3hKV4DfEjQRTo/HSqJCjRJmnXY2c/Wwclw=; b=TrrPhgDsIc9AtBYHJC0ILS14XMhaFw+hx+p7UmueASONf3L7gcTBZk9xtgYueZOG jTSC5LHncbPUcFz7CsMxgaanK74+wp3ShOgZEQ9cZcEVv+hKIVIFE2acbkCVCNYE MfUgO5qXoPi2bDjrlw5RvUvtTopuSFPVmah304o1Ho+Kieo8PG65CYUY37PqY8os I3OIXGYMy+Qq8SxGMqraxvncWqVfG6Slc4QFKX9hQ4aywLlWL1g6D7GiGuHdFh8e PzAPar1QbHpcEv1yONjjXlA5Q+AFRJJMFFX7J0FW8mwov+ljrAfRYNLoHvWMnBXd g2b8IncSI62fuqBfG0a52A==; Received: from relay6.apple.com (relay6.apple.com [17.128.113.90]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mail-in2.apple.com (Apple Secure Mail Relay) with SMTP id 4F.AD.13823.207B1AA5; Thu, 8 Mar 2018 14:19:46 -0800 (PST) X-AuditID: 11973e11-d4eb59e0000035ff-97-5aa1b702b544 Received: from nwk-mmpp-sz11.apple.com (nwk-mmpp-sz11.apple.com [17.128.115.155]) by relay6.apple.com (Apple SCV relay) with SMTP id 0A.57.23861.207B1AA5; Thu, 8 Mar 2018 14:19:46 -0800 (PST) MIME-version: 1.0 Received: from [17.114.154.228] by nwk-mmpp-sz11.apple.com (Oracle Communications Messaging Server 8.0.2.2.20180130 64bit (built Jan 30 2018)) with ESMTPSA id <0P5A00DEOM0YY620@nwk-mmpp-sz11.apple.com>; Thu, 08 Mar 2018 14:19:46 -0800 (PST) Sender: afish@apple.com From: Andrew Fish In-reply-to: <017401d3b725$92422e00$b6c68a00$@insyde.com> Date: Thu, 08 Mar 2018 14:19:45 -0800 Cc: Laszlo Ersek , "Bjorge, Erik C" , edk2-devel@lists.01.org Message-id: References: <7FE3244EBB31F1449E4EC79CFE44E3F4ACA8ED8F@ORSMSX114.amr.corp.intel.com> <00ef01d3b708$059e05e0$10da11a0$@insyde.com> <2936c498-170d-84b8-4b1b-e103c463eefd@redhat.com> <017401d3b725$92422e00$b6c68a00$@insyde.com> To: Tim Lewis X-Mailer: Apple Mail (2.3445.5.20) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrHLMWRmVeSWpSXmKPExsUi2FAYpcu0fWGUwdU2RYs9h44yW8zp2sJs sezYDhaLiz9WMTmweLS/+c/msXjPSyaP7tn/WDze77vKFsASxWWTkpqTWZZapG+XwJWx8vUS loLt4hVXPzWwNzA2CXcxcnJICJhIbD+5j7mLkYtDSGA1k8Sab59ZYBI32xqgEocYJU50HGID SfAKCEr8mHwPqIiDg1lAXuLgeVmQMLOAlsT3R60sEPXfGCW2PehkAkkIC4hLvDuziRnCjpXY 1j2bHcRmE1CWWDH/AzvIHE4BS4mpe+xBwiwCqhKff7QxQYzPluj6Igqx1Ubi48GJTBDjnzNK NEx+wwiSEBFQkWiduJId4mYlienfb7OBFEkILGCTmPf3JNsERuFZSM6ehXD2LCRnL2BkXsUo lJuYmaObmWekl1hQkJOql5yfu4kRFAHT7QR3MB5fZXWIUYCDUYmH18JlYZQQa2JZcWXuIUZp DhYlcd6K0gVRQgLpiSWp2ampBalF8UWlOanFhxiZODilGhil/zya1bg7cLHc1+0no4+daZ+7 +t7jSyE3OWdr7jG59nrBfWalP7u2dfSdS3MR2TZ13UQt2asqxcsu/fMtPZBiuaFuidOhtytf 3xWv8PRz/ut8xIzt0eu9Ao+2LX3kLqt0Yc79Jwlq6sekmXc+ygid0vNx2un752aFVNStmKMn fK/hTCh7b2r4GSWW4oxEQy3mouJEAA+cUxNhAgAA X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrILMWRmVeSWpSXmKPExsUi2FA8W5dp+8Iog7kH5Cz2HDrKbDGnawuz xbJjO1gsLv5YxeTA4tH+5j+bx+I9L5k8umf/Y/F4v+8qWwBLFJdNSmpOZllqkb5dAlfGytdL WAq2i1dc/dTA3sDYJNzFyMkhIWAicbOtgbmLkYtDSOAQo8SJjkNsIAleAUGJH5PvsXQxcnAw C8hLHDwvCxJmFtCS+P6olQWi/hujxLYHnUwgCWEBcYl3ZzYxQ9ixEtu6Z7OD2GwCyhIr5n9g B5nDKWApMXWPPUiYRUBV4vOPNiaI8dkSXV9EIbbaSHw8OJEJYvxzRomGyW8YQRIiAioSrRNX skPcrCQx/ftttgmMArOQXDoL4dJZSC5dwMi8ilGgKDUnsdJML7GgICdVLzk/dxMjOGALo3Yw Niy3OsQowMGoxMP7wHFhlBBrYllxZS4wKDiYlUR4T60ECvGmJFZWpRblxxeV5qQWH2KU5mBR Eudt/jkzSkggPbEkNTs1tSC1CCbLxMEp1cDot32ieuLL0E+2MyKnz5DYveTl0RjlLv996xZt Eb13ke/F9Z8XX1wz588xFHyw/uWepPwfbcdkFj4++Gpn4p5qgxXrdFiloroDF25T0VCb/CTt Zr9sQkDTikjJtXf/fam7uSXyyefQijkb7DgX77p9P26uzl9vsTuFP+x9Ljw2unfIttFisoHT BSWW4oxEQy3mouJEAJsBVaFUAgAA Subject: Re: RFC: Proposal to halt automatic builds of Windows BaseTools executables X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Mar 2018 22:13:30 -0000 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII Tim, It is not just an open source thing. In our world we can't build on the production servers with arbitrary binaries in the tree. We have to file paper work to get an exemption, and given we can build the tools in our source base the answer would always be don't check in the binary. I would assume that a given EFI team at company X could always build and check-in tools binaries as part of their source control repo. But it would be good if that was easy and documented. I'd also point out worse case this is all open source so another project could always provide tools snapshots.... Thanks, Andrew Fish > On Mar 8, 2018, at 1:36 PM, Tim Lewis wrote: > > Laszlo, Erik -- > > I understand this dislike from some open source developers. I respect that and am glad that EDK2 provides a way to accommodate this preference. But "most" is a strong term. I would venture to say that a good number (and probably the majority) of the people using EDK2-derived code and tools are fine with the current situation. > > The only reason I would have Python on most of my company's dev systems would be for EDK2. Since (a) the current system is working and (b) since the possibility for rebuild is available for those who want it, it doesn't weigh heavily enough IMO to change the current situation. > > Regards, > > Tim > > -----Original Message----- > From: Laszlo Ersek > Sent: Thursday, March 8, 2018 1:19 PM > To: Tim Lewis ; 'Bjorge, Erik C' ; edk2-devel@lists.01.org > Subject: Re: [edk2] RFC: Proposal to halt automatic builds of Windows BaseTools executables > > On 03/08/18 19:05, Tim Lewis wrote: >> Erik -- >> >> What is the justification? Moving from more immediately usable to less >> immediately usable doesn't seem, on the surface, to be a good direction. >> Why not go the other direction and pre-build the binaries for the >> other environments? > > I'd just like to offer one data point for the last question: most open source developers *really* dislike running any native binaries that were built by neither (a) themselves nor (b) the provider of their OS distribution. > > To give you an example for (b), Fedora provides the "edk2-tools" package (built from the "edk2" source package), and "edk2-tools" definitely installs native binaries: > > https://koji.fedoraproject.org/koji/rpminfo?rpmID=13354362 > > The difference is that these binaries were built in a build environment that matches the rest of Fedora [*] and is generally trusted by Fedora users. > > [*] For example, binaries could be instrumented for security purposes system-wide; some buffer overflows in a native (C) application could be caught automatically as a result. > > Thanks, > Laszlo > > _______________________________________________ > edk2-devel mailing list > edk2-devel@lists.01.org > https://lists.01.org/mailman/listinfo/edk2-devel