zero-install-devel — Discussion about the Zero Install system (bugs, patches, suggestions)

Re: [Zero-install-devel] Zero-install-devel Digest, Vol 140, Issue 2

[ciryat <i...@ci...>]

Great to see the new docs unified and automated from MD.

Care should be taken to not reword why-not section into something 
subjective. An operating system distribution is made up by its package 
manager, see f.e. gentoo's portage, Arch's pacman, Void's xbps, and 
people are sensitive.

De facto zeroinstall is a niche package manager that some reject due to 
containerization. This is a valid contra, that of course also has its 
pros, like encapsulation and the dependencies in different versions.

IMO zeroinstall universal package manager is very useful but it not 
adopted well and it is a different approach than mainline package 
managers which is easiest seen in maintenance when looking at Arch or 
Void package managers + AUR.
While with standard package managers one maintains all software to be 
compatible at the stable edge and if one is not, then it is updated to 
become compatible again, maybe breaking other software depending on the 
tool just updated. Thus these are updated to become compatible again. 
You get the point, this is a neverending story if and only if there are 
new modifications to existing software. If not then there was indeed an 
ending when all got compatible to each other.

ZeroInstall opted out of this maintenance game by ensuring one program 
gets what it needs for the functionality it provides.

This is very good.
As is the bundling of the template and release XML with the source 
repository.

Yet people do not use it because it simply is no viable up to date, 
complete alternative yet. If one wanted to use 0install instead of pip 
and npm one first had to package way to many packages, not to speak 
about maintaining them. Only automated generation and periodic update of 
all packages in existence will give zero-install the edge.

Then we'd have distributed package hosting by each developer or 
maintainer. In the most ideal case that would be only one maintainer 
which most often is the developer. In contrast to the current situation 
where every distro needs its maintainer for every package.

This goal of distributed single source principle distribution can be 
compared to how devs converted from SVN to Git or mercurial. Or maybe 
from piecemeal deployment to deploying a docker image. I see 0install as 
inbetween those and as a very noble goal to pursue.

I use it for as much of my code works whenever it makes sense, i.e. it 
needs be distributed other than using Git clone, i.e. if there are 
dependencies that git submodules can not sensibly handle.

Thank you for your work.




On 2018-08-30 12:01 PM, zer...@li... 
wrote:
> Send Zero-install-devel mailing list submissions to
> 	zer...@li...
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.sourceforge.net/lists/listinfo/zero-install-devel
> or, via email, send a message with subject or body 'help' to
> 	zer...@li...
>
> You can reach the person managing the list at
> 	zer...@li...
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Zero-install-devel digest..."
>
>
> Today's Topics:
>
>     1. Zero Install documentation web-site
>        https://km-200.github.io/docs (s4...@go...)
>     2. Zero Install documentation web-site (s4...@go...)
>     3. To get your own programs added, please announce them here on
>        the ML (s4...@go...)
>     4. why to not use 0install (s4...@go...)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Wed, 29 Aug 2018 15:48:00 +0000
> From: s4...@go...
> To: 0 ml <zer...@li...>
> Subject: [Zero-install-devel] Zero Install documentation web-site
> 	https://km-200.github.io/docs
> Message-ID: <756...@go...>
> Content-Type: text/plain; charset=utf-8
>
>
>
> see my fork    ;-)
>
>
>   https://km-200.github.io/docs
>
>
> however, this does not make sense! People specifically use 0install
> to get rid of github and github-pages due to the agressive censorship
> on github and such places.
>
> so there is little point to host stuff on github-pages ,  e.g.
>
>
>   https://km-200.github.io/docs
>
>
>
>
> ------------------------------
>
> Message: 2
> Date: Wed, 29 Aug 2018 15:50:00 +0000
> From: s4...@go...
> To: 0 ml <zer...@li...>
> Subject: [Zero-install-devel] Zero Install documentation web-site
> Message-ID: <540...@go...>
> Content-Type: text/plain; charset=utf-8
>
>
>> Finally, I set up free automatic building and hosting using ReadTheDocs at
>> https://0install.readthedocs.io/. This service also supports custom domains
>> using CNAMEs, including automatically issuing TLS certificates. So we could
>> serve this from https://docs.0install.net/ for example.
>>
>> Next, I will start integrating documentation for Zero Install for Windows
>> from http://0install.de/ into this web-site.
>>
>> What do you guys think? Is this a viable approach? Any areas you think need
>> improvement?
>>
>> Regards
>> Bastian
>
> nice idea though Linux is more important than windoofus warez
>
>
>
> ------------------------------
>
> Message: 3
> Date: Wed, 29 Aug 2018 16:41:00 +0000
> From: s4...@go...
> To: 0 ml <zer...@li...>
> Subject: [Zero-install-devel] To get your own programs added, please
> 	announce them here on the ML
> Message-ID: <d8d...@go...>
> Content-Type: text/plain; charset=windows-1252
>
>
>
> http://roscidus.com/0mirror/
>
>
> says:
>
>>   To get your own programs added, please announce them and your GPG key on the mailing list.
> OK so here I want to announce that.
>
>
> What is the next step?
>
>
> http://roscidus.com/0mirror
>
>
>
>
>
>
>
> ------------------------------
>
> Message: 4
> Date: Wed, 29 Aug 2018 16:51:00 +0000
> From: s4...@go...
> To: 0 ml <zer...@li...>
> Subject: [Zero-install-devel] why to not use 0install
> Message-ID: <6a3...@go...>
> Content-Type: text/plain; charset=utf-8
>
>
>
>> Users only have to learn one extra package manager, not one per language.
> from  http://0install.net/why-not.html
>
>
> I would reword it like this:
>
>
> even though some package managers clearly are much more ergonomic than
> others, it seems like every new manager makes a completely new interface
> requiring folks to learn stuff they loathe to learn since it seems very
> much redundant and tends to confuse everybody.
>
>
> Programmers of package managers are not as user-friendly as they could
> be by not adhering to the most relevant standard which might be apt or
> snyaptic or something.
>
>
> No wonder that users are 0enthusiastic about manager #66666 to lear and
> soon forget and relarn again.
>
>
> What a waste of time !
>
>
>
> ------------------------------
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> Zero-install-devel mailing list
> Zer...@li...
> https://lists.sourceforge.net/lists/listinfo/zero-install-devel
>
>
> ------------------------------
>
> End of Zero-install-devel Digest, Vol 140, Issue 2
> **************************************************

-- 
<em>Club board</em>
Free enivronment-friendly Technology, Research, Prototyping and Cyber systems
Network solutions and simple web pages and shops
Social and ethical hacking
Ecological, sustainable automata

[Zero-install-devel] why to not use 0install

[<s4...@go...>]

> Users only have to learn one extra package manager, not one per language.

from  http://0install.net/why-not.html


I would reword it like this:


even though some package managers clearly are much more ergonomic than
others, it seems like every new manager makes a completely new interface
requiring folks to learn stuff they loathe to learn since it seems very
much redundant and tends to confuse everybody.


Programmers of package managers are not as user-friendly as they could
be by not adhering to the most relevant standard which might be apt or
snyaptic or something.


No wonder that users are 0enthusiastic about manager #66666 to lear and
soon forget and relarn again.


What a waste of time !

[Zero-install-devel] To get your own programs added, please announce them here on the ML

[<s4...@go...>]

http://roscidus.com/0mirror/


says:

>  To get your own programs added, please announce them and your GPG key on the mailing list. 

OK so here I want to announce that.


What is the next step?


http://roscidus.com/0mirror

[Zero-install-devel] Zero Install documentation web-site

[<s4...@go...>]

> 
> Finally, I set up free automatic building and hosting using ReadTheDocs at
> https://0install.readthedocs.io/. This service also supports custom domains
> using CNAMEs, including automatically issuing TLS certificates. So we could
> serve this from https://docs.0install.net/ for example.
> 
> Next, I will start integrating documentation for Zero Install for Windows
> from http://0install.de/ into this web-site.
> 
> What do you guys think? Is this a viable approach? Any areas you think need
> improvement?
> 
> Regards
> Bastian


nice idea though Linux is more important than windoofus warez

[Zero-install-devel] Zero Install documentation web-site https://km-200.github.io/docs

[<s4...@go...>]

see my fork    ;-)


 https://km-200.github.io/docs


however, this does not make sense! People specifically use 0install
to get rid of github and github-pages due to the agressive censorship
on github and such places.

so there is little point to host stuff on github-pages ,  e.g.


 https://km-200.github.io/docs

[Zero-install-devel] Zero Install documentation web-site

[Bastian E. <ba...@ei...>]

Hi all,

I finally got around to working on the idea of a shared documentation
web-site based on http://0install.net/ and http://0install.de/.

I forked https://github.com/0install/web-site to
https://github.com/0install/docs and removed all non-documentation content
(landing page, feeds, etc.). Then I moved and renamed files and directories
to match the menu structure. Next I replaced the XSLT-based build system
with the MkDocs (https://www.mkdocs.org/) static site generator. I believe
this provides a number of advantages:

MkDocs uses Markdown files as its input. Markdown is wildly popular for
documentation these days, dead simple to write and has native support in
many tools (e.g. GitHub's web interface). Speaking of GitHub, MkDocs
generates automatic "Edit this page on GitHub" links.

MkDocs comes with responsive themes, making the generated doc pages easier
to read on mobile devices. I added some custom CSS to better match look of
http://0install.net/. It also applies language-specific syntax highlighting
to Markdown code blocks, which makes the XML and Python samples in the docs
look nicer.

MkDocs automatically derives the menu structure from the file and directory
structure. This makes adding new pages very easy. It also detects and
reports dead links between pages during build.

I converted the HTML content of the existing web-site into Markdown using
Turndown (https://github.com/domchristie/turndown). Then I went through all
the pages manually improving the generated Markdown, adding code blocks,
etc..

Finally, I set up free automatic building and hosting using ReadTheDocs at
https://0install.readthedocs.io/. This service also supports custom domains
using CNAMEs, including automatically issuing TLS certificates. So we could
serve this from https://docs.0install.net/ for example.

Next, I will start integrating documentation for Zero Install for Windows
from http://0install.de/ into this web-site.

What do you guys think? Is this a viable approach? Any areas you think need
improvement?

Regards
Bastian

[Zero-install-devel] Zero Install for Windows 2.15 released

[Bastian E. <ba...@ei...>]

Version 2.15 of the Windows version of Zero Install has been released.
Changes since 2.13 include:

Dependency solver improvements:
* Support <executable-in-*> in <command>s
* Treat network problems as warnings instead of critical errors
* Find more solutions using dependency order permutation and width search
* Do not remove rejected optional dependencies from Selections document
* Improved candidate sorting to matching behavior of OCaml/Linux version of
Zero Install
* Propagate unknown XML attributes and elements in Feeds through to
Selections

Support for <file executable="true" ...> 

Windows native dependencies:
* Detect Java 9 and 10 (http://repo.roscidus.com/java/openjdk-jre)
* Detect .NET Framework 4.7 and 4.7.1
(http://repo.roscidus.com/dotnet/framework)
* Detect Windows PowerShell (http://repo.roscidus.com/powershell/windows)

Misc tweaks:
* Show warning when TLS 1.2 support is not available due to missing Windows
updates
* Prevent multiple self-update prompts appearing simultaneously
* Prevent multiple background update checks for same feed starting
simultaneously
* Prevent background update checks from keeping lock on the working
directory

Bug fixes:
* Stopped expanding environment variables in user-specified arguments
* Fixed handling of executable bits on hardlinked elements in TAR archive
* Fixed race condition in icon cache (may have caused icons in app catalog
to be switched)
* Fixed "stack smashing" error on Mono

Developer improvements:
* Split Git repository into platform-agnostic part (Zero Install .NET) and
Windows-specific part (Zero Install for Windows)
* .NET Standard 2.0 support to NuGet Packages
* Introduced C# 7 features and switched to SDK-style MSBuild project files
* Use AppVeyor for CI builds

Existing installations can be updated from the main GUI by clicking on the
yellow update notice.
You can also trigger an immediate update using the command line: 0install
self-update
For new installations please download here: https://0install.de/downloads/

[Zero-install-devel] 0install 2.13

[Thomas L. <ta...@gm...>]

0install 2.13 is now available (source and generic binaries):

  http://0install.net/install-source.html
  http://0install.net/install-linux.html#generic

Note: the binaries are now built with Ubuntu 14.04, as 12.04's SSL
support no longer seems to work with sf.net, and this is needed to
build.
I've also stopped building 32-bit x86 binaries, as I doubt anyone uses
them these days.


Changes since 2.12.3


New features:

- Add support for the <file executable='true' .../> attribute.
Requested by Bastian Eicher and already implemented in the .NET
version.


Other changes:

- Clarify a log message about invalid package names - the package is
invalid on the current platform, but may be valid elsewhere.

- Detect when SourceForge is in Disaster Recovery mode. When this
happens sf.net returns a success code, but the content is just a
textual error saying "SourceForge is currently in Disaster Recovery
mode". We now treat this as a network failure and try the mirror
instead.

- Update installation instructions in README. Was missing
cppo_ocamlbuild dependency.


Build / code cleanups:

- Depend on lablgtk >= 2.18.2 to avoid Obj.magic.

- Update gnupg unit-test workaround for gnupg 2.1.13. gnupg now looks
for the socket in /run/user/UID/gnupg/HASH. This means that it doesn't
find our dummy socket and instead starts a real agent, adding a 1
second delay to every unit test. See:
https://lists.gnupg.org/pipermail/gnupg-devel/2016-June/031192.html

- Require sha >= 1.9.

- Test with OCaml 4.06, and drop support for 4.02.

- Use new Format.kasprintf instead of providing our own

- Import 0install.install file from opam-repository. This tells opam
what other files need to be installed, if installing 0install with
"opam install".


-- 
talex5 (GitHub/Twitter)        http://roscidus.com/blog/
GPG: 5DD5 8D70 899C 454A 966D  6A51 7513 3C8F 94F6 E0CC

Re: [Zero-install-devel] Proposal: Trust feeds served via HTTPS without GPG signature

[Thomas L. <ta...@gm...>]

On 15 May 2018 at 20:58, Miess, Philip (TR Technology & Ops)
<phi...@th...> wrote:
> Bastian,
>         Generally, this means that any CA, or government controlling one, could potentially sign any package.
> That's a pretty big attack surface. Its already failed at least twice when Comodo and DigiNotar where compromised.
> One mitigation for that problem is certificate pinning. Chrome, Firefox and Opera implemented that but now Chrome is going to pull it out in Chrome 67.
> https://www.zdnet.com/article/google-chrome-is-backing-away-from-public-key-pinning-and-heres-why/
> Also this means that only systems with up to date certificates can install these packages.
>
> I've found getting the dependencies correct, and manually creating commands and entry points to take much more effort than signing the packages.
> On Windows if you have Putty Pageant, you only have to enter your key password once and then signing is as easy as saving the file.
>
> Phil
>
> -----Original Message-----
> From: Bastian Eicher [mailto:ba...@ei...]
> Sent: Tuesday, May 15, 2018 1:43 PM
> To: ''The Zero Install system'' <zer...@li...>
> Subject: [Zero-install-devel] Proposal: Trust feeds served via HTTPS without GPG signature
>
> Hello all,
>
> creating Zero Install feeds is pretty straight-forward for new users, thanks to Thomas' great documentation. Especially the fact that hosting feeds only requires an HTTP server serving static files makes the entry barrier very low. However, the step of signing feeds with GPG signatures adds a slight hurdle. Rather than simply editing XML files with whatever method they chose, publishers must always include tools like 0publish or 0repo in their workflow. While these are fairly easy to get up and running it still lacks the simplicity of "just write a file and upload it".

That's true. However, 0repo can perform other useful checks on the
feeds too, so it's probably worth getting people to use it anyway.

> There seems to be a trend for modern package-manager-like systems to rely on HTTPS for verifying the identity and integrity of a package. Docker images pulled from registries are a great example of this. This meshes well with the wide-spread adoption of Let's Encrypt that make TLS certificates just as accessible as GPG keypairs.

Note that Docker is trying to get people to sign their packages with
Notary (https://docs.docker.com/notary/getting_started/), rather than
rely on just https.

The other https one I'm familiar with is OCaml's opam repository,
which is trying to move to signing with Conex
(https://hannes.nqsb.io/Posts/Conex).

https is useful to prevent replay attacks (where someone pretends to
be the server and serves a once-correct but now out-of-date version,
presumably with some known security flaw), but it has a lot of
limitations:

- The private key must be on the server and available for use at all
times, which makes it an easy target. It's much easier to secure your
GPG key on your own machine.

- You can prove that a server served up a bad feed after the fact, by
showing someone some malicious feed with a valid signature from some
key. https doesn't leave any trace afterwards.

- As Phil notes above, https certificates are rather easy get. Any
authority can issue certificates for any site. Also, if you can
intercept either DNS or plain http connections for a few seconds, you
can get an https certificate.

- The mirror server preserves GPG signatures, so that it can only do
replay attacks, but not change the feeds in other ways.

So I'm not very keen on allowing this.

> I would therefore like to propose a new "feature" for Zero Install: Trust any feed downloaded from an HTTPS URL even if it does not have a GPG signature.
>
> What do you guys think about this? Would it help with adoption? Would we be opening up potential security problems?
>
> Regards
> Bastian


-- 
talex5 (GitHub/Twitter)        http://roscidus.com/blog/
GPG: 5DD5 8D70 899C 454A 966D  6A51 7513 3C8F 94F6 E0CC

Re: [Zero-install-devel] Proposal: Trust feeds served via HTTPS without GPG signature

[Miess, P. (TR T. & Ops) <phi...@th...>]

Bastian,
	Generally, this means that any CA, or government controlling one, could potentially sign any package. 
That's a pretty big attack surface. Its already failed at least twice when Comodo and DigiNotar where compromised. 
One mitigation for that problem is certificate pinning. Chrome, Firefox and Opera implemented that but now Chrome is going to pull it out in Chrome 67.
https://www.zdnet.com/article/google-chrome-is-backing-away-from-public-key-pinning-and-heres-why/
Also this means that only systems with up to date certificates can install these packages.

I've found getting the dependencies correct, and manually creating commands and entry points to take much more effort than signing the packages.
On Windows if you have Putty Pageant, you only have to enter your key password once and then signing is as easy as saving the file.

Phil

-----Original Message-----
From: Bastian Eicher [mailto:ba...@ei...] 
Sent: Tuesday, May 15, 2018 1:43 PM
To: ''The Zero Install system'' <zer...@li...>
Subject: [Zero-install-devel] Proposal: Trust feeds served via HTTPS without GPG signature

Hello all,

creating Zero Install feeds is pretty straight-forward for new users, thanks to Thomas' great documentation. Especially the fact that hosting feeds only requires an HTTP server serving static files makes the entry barrier very low. However, the step of signing feeds with GPG signatures adds a slight hurdle. Rather than simply editing XML files with whatever method they chose, publishers must always include tools like 0publish or 0repo in their workflow. While these are fairly easy to get up and running it still lacks the simplicity of "just write a file and upload it".

There seems to be a trend for modern package-manager-like systems to rely on HTTPS for verifying the identity and integrity of a package. Docker images pulled from registries are a great example of this. This meshes well with the wide-spread adoption of Let's Encrypt that make TLS certificates just as accessible as GPG keypairs.

I would therefore like to propose a new "feature" for Zero Install: Trust any feed downloaded from an HTTPS URL even if it does not have a GPG signature.

What do you guys think about this? Would it help with adoption? Would we be opening up potential security problems?

Regards
Bastian


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot&d=DwICAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=DyZCViLjyeufTHY2AgBZfHyFKQPX2npUhcXGGW4ZNYE&s=9hW07GRARFwissy4fqtdI0ZweYDucEd-S3PALs8xwMU&e=
_______________________________________________
Zero-install-devel mailing list
Zer...@li...
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_zero-2Dinstall-2Ddevel&d=DwICAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=DyZCViLjyeufTHY2AgBZfHyFKQPX2npUhcXGGW4ZNYE&s=0poaaZ0YOw2rRBrwH8gN0cfqpKmzPK1eq7RTmVGbzEk&e= 

[Zero-install-devel] Proposal: Trust feeds served via HTTPS without GPG signature

[Bastian E. <ba...@ei...>]

Hello all,

creating Zero Install feeds is pretty straight-forward for new users, thanks
to Thomas' great documentation. Especially the fact that hosting feeds only
requires an HTTP server serving static files makes the entry barrier very
low. However, the step of signing feeds with GPG signatures adds a slight
hurdle. Rather than simply editing XML files with whatever method they
chose, publishers must always include tools like 0publish or 0repo in their
workflow. While these are fairly easy to get up and running it still lacks
the simplicity of "just write a file and upload it".

There seems to be a trend for modern package-manager-like systems to rely on
HTTPS for verifying the identity and integrity of a package. Docker images
pulled from registries are a great example of this. This meshes well with
the wide-spread adoption of Let's Encrypt that make TLS certificates just as
accessible as GPG keypairs.

I would therefore like to propose a new "feature" for Zero Install: Trust
any feed downloaded from an HTTPS URL even if it does not have a GPG
signature.

What do you guys think about this? Would it help with adoption? Would we be
opening up potential security problems?

Regards
Bastian

Re: [Zero-install-devel] Executable bit for <file/>

[Thomas L. <ta...@gm...>]

On 22 April 2018 at 18:20, Bastian Eicher <ba...@ei...> wrote:
> Hello all,
>
> I added support for this in the .NET version of Zero Install in this commit:
> https://github.com/0install/0install-dotnet/commits/582f8a913104e2dffdc605e7
> 84eca695af049db9
> This was released in version 2.14.1.
> There is a PR for documentation of the new attribute here:
> https://github.com/0install/web-site/pull/1

Merged - thanks!

> @Thomas: Could you perhaps implement the same feature in the OCaml version
> of Zero Install? I started a quick attempt at a PR but unfortunately my
> OCaml-foo turned out to be rather limited. :(

Done! https://github.com/0install/0install/pull/77

> There are already a few feeds using this feature, .e.g.:
> http://repo.roscidus.com/docker/compose
> http://repo.roscidus.com/kubernetes/minikube
>
> Regards
> Bastian
>
> -----Original Message-----
> From: Thomas Leonard <ta...@gm...>
> Sent: Sonntag, 6. August 2017 14:05
> To: The Zero Install system <zer...@li...>
> Subject: Re: [Zero-install-devel] Executable bit for <file/>
>
> On 4 August 2017 at 17:46, Bastian Eicher <ba...@ei...> wrote:
>> Hi all,
>>
>> While creating feeds for Docker Compose
>> (http://repo.roscidus.com/docker/compose) and Docker Machine
>> (http://repo.roscidus.com/docker/machine) I noticed there is [no?] way
>> to use <file/> to download a stand-alone executable and set its executable
> bit.
>>
>> Maybe adding a new 'executable' attribute for the <file/> retrieval
>> method would be a good idea. Something like this:
>> <file href="http://.../docker-compose" size="123" dest="docker-compose"
>> executable="true"/>
>>
>> What do you guys think?
>
> Sounds good to me!


-- 
talex5 (GitHub/Twitter)        http://roscidus.com/blog/
GPG: 5DD5 8D70 899C 454A 966D  6A51 7513 3C8F 94F6 E0CC

Re: [Zero-install-devel] Executable bit for <file/>

[Bastian E. <ba...@ei...>]

Hello all,

I added support for this in the .NET version of Zero Install in this commit:
https://github.com/0install/0install-dotnet/commits/582f8a913104e2dffdc605e7
84eca695af049db9
This was released in version 2.14.1.
There is a PR for documentation of the new attribute here:
https://github.com/0install/web-site/pull/1

@Thomas: Could you perhaps implement the same feature in the OCaml version
of Zero Install? I started a quick attempt at a PR but unfortunately my
OCaml-foo turned out to be rather limited. :(

There are already a few feeds using this feature, .e.g.:
http://repo.roscidus.com/docker/compose
http://repo.roscidus.com/kubernetes/minikube

Regards
Bastian

-----Original Message-----
From: Thomas Leonard <ta...@gm...> 
Sent: Sonntag, 6. August 2017 14:05
To: The Zero Install system <zer...@li...>
Subject: Re: [Zero-install-devel] Executable bit for <file/>

On 4 August 2017 at 17:46, Bastian Eicher <ba...@ei...> wrote:
> Hi all,
>
> While creating feeds for Docker Compose
> (http://repo.roscidus.com/docker/compose) and Docker Machine
> (http://repo.roscidus.com/docker/machine) I noticed there is [no?] way 
> to use <file/> to download a stand-alone executable and set its executable
bit.
>
> Maybe adding a new 'executable' attribute for the <file/> retrieval 
> method would be a good idea. Something like this:
> <file href="http://.../docker-compose" size="123" dest="docker-compose"
> executable="true"/>
>
> What do you guys think?

Sounds good to me!


-- 
talex5 (GitHub/Twitter)        http://roscidus.com/blog/
GPG: 5DD5 8D70 899C 454A 966D  6A51 7513 3C8F 94F6 E0CC

----------------------------------------------------------------------------
--
Check out the vibrant tech community on one of the world's most engaging
tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Zero-install-devel mailing list
Zer...@li...
https://lists.sourceforge.net/lists/listinfo/zero-install-devel

[Zero-install-devel] 0repo 0.6

[Thomas L. <ta...@gm...>]

0repo 0.6 is now out:

   http://www.0install.net/0repo.html

   0install add 0repo http://0install.net/tools/0repo.xml

0repo provides an easy and reliable way to maintain a repository of
0install software for others to use.


Since 0.5:

- Add new "0repo modify" command (Bastian Eicher). This is useful,
e.g., for promoting a `testing` release to `stable`.

- Ignore subkeys when creating a repository. Newer versions of Gnupg
(tested with `gpg (GnuPG) 2.1.18`) return multiple fingerprints.


-- 
talex5 (GitHub/Twitter)        http://roscidus.com/blog/
GPG: 5DD5 8D70 899C 454A 966D  6A51 7513 3C8F 94F6 E0CC

Re: [Zero-install-devel] How do you depend on having a command in the path

[Bastian E. <ba...@ei...>]

Hi Philip,

Zero Install requires all components within a selection to have the same
family of CPU architectures (e.g. any combination of i386/i486/etc. or
x86_64 but not both).
For library dependencies that are used in-process this exactly what you
want. However, for executable dependencies that run in separate processes
this restriction is unnecessary. Unfortunately, 0install does not (yet) know
the difference between the two.

To avoid the kind of problem you have run into, try using the following
pattern:
If there is only a 32-bit version of a Windows executable available specify
its architecture as Windows-*.
If there are both 32-bit and 64-bit versions of a Windows executable
available specify their architectures as Windows-i486 and Windows-x86_64
respectively.

Regards
Bastian


-----Original Message-----
From: phi...@th...
[mailto:phi...@th...] 
Sent: 27. Dezember 2017 23:06
To: zer...@li...
Subject: [Zero-install-devel] How do you depend on having a command in the
path

0installers,
        I’m trying to setup a 32 bit app with 64bit version of diff in the
path.
But it rejects that.
“Can't use x86_64 with selection of http://localhost/unison.xml (i386)”
 
Is there a way to depend on x86 or x64 exe in windows?
 
Philip Miess
Sr. Software Test Engineer
Phone: (585) 327-6195
mailto:phi...@th...
50 Broad Street
Rochester, NY 14694

[Zero-install-devel] How do you depend on having a command in the path

[<phi...@th...>]

0installers,
        I'm trying to setup a 32 bit app with 64bit version of diff in the path.
But it rejects that.
"Can't use x86_64 with selection of http://localhost/unison.xml (i386)"

Is there a way to depend on x86 or x64 exe in windows?

Philip Miess
Sr. Software Test Engineer

Phone: (585) 327-6195
phi...@th...<mailto:phi...@th...>
50 Broad Street
Rochester, NY 14694

Re: [Zero-install-devel] windows x-xz-compressed-tar Unsupported compression options

[<phi...@th...>]

Bastian,
                2.14.2  works for me.
Thanks for fixing it.
Phil

From: Bastian Eicher [mailto:ba...@ei...]
Sent: Wednesday, November 29, 2017 7:59 PM
To: 'The Zero Install system'
Subject: Re: [Zero-install-devel] windows x-xz-compressed-tar Unsupported compression options

Hello Phil,

thanks for reporting this. I was able to reproduce the bug and determine that it was introduced in Zero Install for Windows 2.13.1. An incorrect change to the .NET App.config files was causing the wrong version of the .NET Runtime to be used, which in turned caused problems with the native library used for XZ decompression.

I have just released Zero Install for Windows 2.14.2 which fixes this issue.

Regards
Bastian

From: phi...@th...<mailto:phi...@th...> [mailto:phi...@th...]
Sent: Mittwoch, 29. November 2017 21:40
To: zer...@li...<mailto:zer...@li...>
Subject: [Zero-install-devel] windows x-xz-compressed-tar Unsupported compression options

Bastian,
        There seems to be a bug in the tar.xz code in 2.14.0. I'm not sure where between 2.13.0 and 2.14.0 it browk however.
When I try to load this archive http://repo.msys2.org/msys/x86_64/msys2-runtime-2.7.0-1-x86_64.pkg.tar.xz<https://urldefense.proofpoint.com/v2/url?u=http-3A__repo.msys2.org_msys_x86-5F64_msys2-2Druntime-2D2.7.0-2D1-2Dx86-5F64.pkg.tar.xz&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=4vWmOq-GAlaOTlCjL1niAL1Bv0RIU8Qwu0XHTxBuhhk&s=1XlvUZ2_4AVo_zpevdJQjRPR9Z5_GZyG4OczvIneXAw&e=> now it fails.
I was able to do this previously for this file. But I tried some other XZ compressed files and got this error.
I deleted the cache for this file that previously worked. When zero install extracts the archive it fails with the following error.

Unhandled Exception: System.Exception: Unsupported compression options

Server stack trace:
   at XZ.NET.XZInputStream.Read(Byte[] buffer, Int32 offset, Int32 count)
   at NanoByte.Common.Streams.DisposeWarpperStream.Read(Byte[] buffer, Int32 offset, Int32 count)
   at ICSharpCode.SharpZipLib.Tar.TarBuffer.ReadRecord()
   at ICSharpCode.SharpZipLib.Tar.TarBuffer.ReadBlock()
   at ICSharpCode.SharpZipLib.Tar.TarInputStream.GetNextEntry()
   at ZeroInstall.Store.Implementations.Archives.TarExtractor.ExtractArchive()
   at ZeroInstall.Store.Implementations.Archives.ArchiveExtractor.Execute()
   at NanoByte.Common.Tasks.TaskBase.Run(CancellationToken cancellationToken, ICredentialProvider credentialProvider, IProgress`1 progress)
   at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)

Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at NanoByte.Common.Tasks.ITask.Run(CancellationToken cancellationToken, ICredentialProvider credentialProvider, IProgress`1 progress)
   at NanoByte.Common.Tasks.CliTaskHandler.RunTask(ITask task)
   at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)

Exception rethrown at [1]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at NanoByte.Common.Tasks.ITaskHandler.RunTask(ITask task)
   at ZeroInstall.Store.Implementations.DirectoryStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at ZeroInstall.Store.Implementations.CompositeStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)

Exception rethrown at [2]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at ZeroInstall.Store.Implementations.IStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at ZeroInstall.Store.Implementations.IpcStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at ZeroInstall.Store.Implementations.CompositeStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at ZeroInstall.Services.Fetchers.FetcherBase.ApplyArchives(IList`1 archives, IList`1 files, ManifestDigest manifestDigest)
   at ZeroInstall.Services.Fetchers.FetcherBase.Cook(Recipe recipe, ManifestDigest manifestDigest)
   at ZeroInstall.Services.Fetchers.FetcherBase.Retrieve(RetrievalMethod retrievalMethod, ManifestDigest manifestDigest)
   at ZeroInstall.Services.Fetchers.FetcherBase.<>c__DisplayClass6_0.<Retrieve>b__1(RetrievalMethod retrievalMethod)
   at NanoByte.Common.ExceptionUtils.TryAny[T](IEnumerable`1 elements, Action`1 action)
   at ZeroInstall.Services.Fetchers.FetcherBase.Retrieve(Implementation implementation)
   at ZeroInstall.Services.Fetchers.SequentialFetcher.Fetch(Implementation implementation, Object tag)
   at ZeroInstall.Services.Fetchers.SequentialFetcher.Fetch(IEnumerable`1 implementations)
   at ZeroInstall.Commands.CliCommands.Download.DownloadUncachedImplementations()
   at ZeroInstall.Commands.CliCommands.Run.Execute()
   at ZeroInstall.Commands.ProgramUtils.Run(String exeName, String[] args, ICommandHandler handler)


Phil

Re: [Zero-install-devel] windows x-xz-compressed-tar Unsupported compression options

[Bastian E. <ba...@ei...>]

Hello Phil,

 

thanks for reporting this. I was able to reproduce the bug and determine
that it was introduced in Zero Install for Windows 2.13.1. An incorrect
change to the .NET App.config files was causing the wrong version of the
.NET Runtime to be used, which in turned caused problems with the native
library used for XZ decompression.

 

I have just released Zero Install for Windows 2.14.2 which fixes this issue.

 

Regards

Bastian

 

From: phi...@th...
[mailto:phi...@th...] 
Sent: Mittwoch, 29. November 2017 21:40
To: zer...@li...
Subject: [Zero-install-devel] windows x-xz-compressed-tar Unsupported
compression options

 

Bastian,

        There seems to be a bug in the tar.xz code in 2.14.0. I'm not sure
where between 2.13.0 and 2.14.0 it browk however.

When I try to load this archive
http://repo.msys2.org/msys/x86_64/msys2-runtime-2.7.0-1-x86_64.pkg.tar.xz
now it fails.

I was able to do this previously for this file. But I tried some other XZ
compressed files and got this error.

I deleted the cache for this file that previously worked. When zero install
extracts the archive it fails with the following error.

 

Unhandled Exception: System.Exception: Unsupported compression options

 

Server stack trace:

   at XZ.NET.XZInputStream.Read(Byte[] buffer, Int32 offset, Int32 count)

   at NanoByte.Common.Streams.DisposeWarpperStream.Read(Byte[] buffer, Int32
offset, Int32 count)

   at ICSharpCode.SharpZipLib.Tar.TarBuffer.ReadRecord()

   at ICSharpCode.SharpZipLib.Tar.TarBuffer.ReadBlock()

   at ICSharpCode.SharpZipLib.Tar.TarInputStream.GetNextEntry()

   at
ZeroInstall.Store.Implementations.Archives.TarExtractor.ExtractArchive()

   at ZeroInstall.Store.Implementations.Archives.ArchiveExtractor.Execute()

   at NanoByte.Common.Tasks.TaskBase.Run(CancellationToken
cancellationToken, ICredentialProvider credentialProvider, IProgress`1
progress)

   at
System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(In
tPtr md, Object[] args, Object server, Int32 methodPtr, Boolean
fExecuteInContext, Object[]& outArgs)

   at
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessa
ge msg, Int32 methodPtr, Boolean fExecuteInContext)

 

Exception rethrown at [0]:

   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)

   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData&
msgData, Int32 type)

   at NanoByte.Common.Tasks.ITask.Run(CancellationToken cancellationToken,
ICredentialProvider credentialProvider, IProgress`1 progress)

   at NanoByte.Common.Tasks.CliTaskHandler.RunTask(ITask task)

   at
System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(In
tPtr md, Object[] args, Object server, Int32 methodPtr, Boolean
fExecuteInContext, Object[]& outArgs)

   at
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessa
ge msg, Int32 methodPtr, Boolean fExecuteInContext)

 

Exception rethrown at [1]:

   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)

   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData&
msgData, Int32 type)

   at NanoByte.Common.Tasks.ITaskHandler.RunTask(ITask task)

   at
ZeroInstall.Store.Implementations.DirectoryStore.AddArchives(IEnumerable`1
archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)

   at
ZeroInstall.Store.Implementations.CompositeStore.AddArchives(IEnumerable`1
archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)

   at
System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(In
tPtr md, Object[] args, Object server, Int32 methodPtr, Boolean
fExecuteInContext, Object[]& outArgs)

   at
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessa
ge msg, Int32 methodPtr, Boolean fExecuteInContext)

 

Exception rethrown at [2]:

   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage
reqMsg, IMessage retMsg)

   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData&
msgData, Int32 type)

   at ZeroInstall.Store.Implementations.IStore.AddArchives(IEnumerable`1
archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)

   at ZeroInstall.Store.Implementations.IpcStore.AddArchives(IEnumerable`1
archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)

   at
ZeroInstall.Store.Implementations.CompositeStore.AddArchives(IEnumerable`1
archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)

   at ZeroInstall.Services.Fetchers.FetcherBase.ApplyArchives(IList`1
archives, IList`1 files, ManifestDigest manifestDigest)

   at ZeroInstall.Services.Fetchers.FetcherBase.Cook(Recipe recipe,
ManifestDigest manifestDigest)

   at ZeroInstall.Services.Fetchers.FetcherBase.Retrieve(RetrievalMethod
retrievalMethod, ManifestDigest manifestDigest)

   at
ZeroInstall.Services.Fetchers.FetcherBase.<>c__DisplayClass6_0.<Retrieve>b__
1(RetrievalMethod retrievalMethod)

   at NanoByte.Common.ExceptionUtils.TryAny[T](IEnumerable`1 elements,
Action`1 action)

   at ZeroInstall.Services.Fetchers.FetcherBase.Retrieve(Implementation
implementation)

   at ZeroInstall.Services.Fetchers.SequentialFetcher.Fetch(Implementation
implementation, Object tag)

   at ZeroInstall.Services.Fetchers.SequentialFetcher.Fetch(IEnumerable`1
implementations)

   at
ZeroInstall.Commands.CliCommands.Download.DownloadUncachedImplementations()

   at ZeroInstall.Commands.CliCommands.Run.Execute()

   at ZeroInstall.Commands.ProgramUtils.Run(String exeName, String[] args,
ICommandHandler handler)

 

 

Phil

 

[Zero-install-devel] windows x-xz-compressed-tar Unsupported compression options

[<phi...@th...>]

Bastian,
        There seems to be a bug in the tar.xz code in 2.14.0. I'm not sure where between 2.13.0 and 2.14.0 it browk however.
When I try to load this archive http://repo.msys2.org/msys/x86_64/msys2-runtime-2.7.0-1-x86_64.pkg.tar.xz now it fails.
I was able to do this previously for this file. But I tried some other XZ compressed files and got this error.
I deleted the cache for this file that previously worked. When zero install extracts the archive it fails with the following error.

Unhandled Exception: System.Exception: Unsupported compression options

Server stack trace:
   at XZ.NET.XZInputStream.Read(Byte[] buffer, Int32 offset, Int32 count)
   at NanoByte.Common.Streams.DisposeWarpperStream.Read(Byte[] buffer, Int32 offset, Int32 count)
   at ICSharpCode.SharpZipLib.Tar.TarBuffer.ReadRecord()
   at ICSharpCode.SharpZipLib.Tar.TarBuffer.ReadBlock()
   at ICSharpCode.SharpZipLib.Tar.TarInputStream.GetNextEntry()
   at ZeroInstall.Store.Implementations.Archives.TarExtractor.ExtractArchive()
   at ZeroInstall.Store.Implementations.Archives.ArchiveExtractor.Execute()
   at NanoByte.Common.Tasks.TaskBase.Run(CancellationToken cancellationToken, ICredentialProvider credentialProvider, IProgress`1 progress)
   at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)

Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at NanoByte.Common.Tasks.ITask.Run(CancellationToken cancellationToken, ICredentialProvider credentialProvider, IProgress`1 progress)
   at NanoByte.Common.Tasks.CliTaskHandler.RunTask(ITask task)
   at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)

Exception rethrown at [1]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at NanoByte.Common.Tasks.ITaskHandler.RunTask(ITask task)
   at ZeroInstall.Store.Implementations.DirectoryStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at ZeroInstall.Store.Implementations.CompositeStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)

Exception rethrown at [2]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at ZeroInstall.Store.Implementations.IStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at ZeroInstall.Store.Implementations.IpcStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at ZeroInstall.Store.Implementations.CompositeStore.AddArchives(IEnumerable`1 archiveInfos, ManifestDigest manifestDigest, ITaskHandler handler)
   at ZeroInstall.Services.Fetchers.FetcherBase.ApplyArchives(IList`1 archives, IList`1 files, ManifestDigest manifestDigest)
   at ZeroInstall.Services.Fetchers.FetcherBase.Cook(Recipe recipe, ManifestDigest manifestDigest)
   at ZeroInstall.Services.Fetchers.FetcherBase.Retrieve(RetrievalMethod retrievalMethod, ManifestDigest manifestDigest)
   at ZeroInstall.Services.Fetchers.FetcherBase.<>c__DisplayClass6_0.<Retrieve>b__1(RetrievalMethod retrievalMethod)
   at NanoByte.Common.ExceptionUtils.TryAny[T](IEnumerable`1 elements, Action`1 action)
   at ZeroInstall.Services.Fetchers.FetcherBase.Retrieve(Implementation implementation)
   at ZeroInstall.Services.Fetchers.SequentialFetcher.Fetch(Implementation implementation, Object tag)
   at ZeroInstall.Services.Fetchers.SequentialFetcher.Fetch(IEnumerable`1 implementations)
   at ZeroInstall.Commands.CliCommands.Download.DownloadUncachedImplementations()
   at ZeroInstall.Commands.CliCommands.Run.Execute()
   at ZeroInstall.Commands.ProgramUtils.Run(String exeName, String[] args, ICommandHandler handler)


Phil

[Zero-install-devel] 0repo 0.5.2

[Thomas L. <ta...@gm...>]

0repo 0.5.2 is now out:

   http://www.0install.net/0repo.html

   0install add 0repo http://0install.net/tools/0repo.xml

0repo provides an easy and reliable way to maintain a repository of
0install software for others to use.


Since 0.5:

- Remove elements which were moved out to a group (BenjaminH). When a
feed is merged and there are <environment> tags in the new
implementation, these tags are then pulled out to a group (same as
with <requires> elements). While the extracted <requires> elements are
removed from their original parent element (the <implementation>), the
<environment> elements remain as duplicates inside the the
<implementation> .

- Exclude feeds with <replaced-by/> from catalog (Bastian Eicher).

- Feed stylesheet: Generate download links for <file>s (Bastian Eicher).

- Sort feeds alphabetically before importing (Bastian Eicher). This
makes the order of new implementations more predictable when importing
multiple versions of a single app.

- Fix bug in handling TRACK_TESTING_IMPLS (Bastian Eicher).


-- 
talex5 (GitHub/Twitter)        http://roscidus.com/blog/
GPG: 5DD5 8D70 899C 454A 966D  6A51 7513 3C8F 94F6 E0CC

[Zero-install-devel] 0install 2.12.3

[Thomas L. <ta...@gm...>]

0install 2.12.3 is now available (source and generic binaries):

  http://0install.net/install-source.html
  http://0install.net/install-linux.html#generic

The main changes are fixing the bug reporter and adding support for
OCaml 4.06 and Lwt 3.0. I also tidied up the distribution-handling
code a little, and made some improvements and bug-fixes around there
too.

Since 2.12.2:


Changes

- Use api.0install.net for bug reports. SourceForge no longer allows
us to send email from their web server, so the bug reporter had
stopped working. I have moved the bug service to a different host (and
migrated the rest of the web-site to GitHub, which should be more
reliable).

- Add progress display for apt-cache queries. This allows the user to
see what's happening and, in the GUI, to cancel it.


Bug fixes

- Don't report Lwt.Canceled warnings if apt-cache is cancelled (e.g.
by closing the GUI window quickly).

- Protect gnupg invocations with a mutex.
  gnupg does not work reliably when multiple processes are using the
keyring at once (at least on OS X).

- Fix package filtering on Debian. We intended to pass only available
packages to PackageKit, but treated a cached negative result as a
valid package. Discovered while cleaning up the apt-cache code, which
is now in its own sub-module.

- Fix curl connection leak when reporting bugs.


Code cleanups

- Replace camlp4 build dependency with cppo.
  camlp4 is old, large and incompatible with newer technologies such
as ppx and jbuilder.

- Remove dependency on extlib. We were only using the Base64 module
(we now bundle a simple decoder). Note: testing with afl-fuzz, it
seems that the new decoder is stricter than extlib about malformed
input, but it should process valid input the same.

- Re-enable safe-string everywhere. We now depend on a recent Lwt anyway.

- Update the GUI to log a warning if the refresh thread fails.

- Cleaned up the distro code a bit:
  - Separate out Distro.t from the provider API. This makes it clearer
which parts of the API are for users of distributions, and which are
things that should be provided by each distribution implementation.
  - Split out the interface that *must* be implemented
(Distro.provider) from the helper base-class (distribution).
  - Move is_installed_quick out of the provider API. Nothing needs to
override this.
  - Move Debian apt-cache and dpkg-query handling to submodules.
  - Use OCaml 4.02 match exception syntax. This is simpler and more
reliable, as we only catch exceptions from the match expression.
  - Split out Distro.with_main_path from add_package_implementation.
  - Remove unused ?init argument on get_impls_for_feed.
  - Move Distro.query to a submodule and make abstract.

- Add Impl.make helper.


Build updates

- Pre-trust keys in Travis tests. Avoids the build failing if the key
server is slow.

- Fix build for Lwt 3.0. `lwt.glib` is now `lwt_glib`.

- Fix dynlink when building byte-code.

- Don't install the gui_gtk.cmxa file.
  This was due to a lazy attempt at matching .cma and .cmxs that
accidentally matched .cmxa too.

- Fix Travis on OS X again.


-- 
talex5 (GitHub/Twitter)        http://roscidus.com/blog/
GPG: 5DD5 8D70 899C 454A 966D  6A51 7513 3C8F 94F6 E0CC

Re: [Zero-install-devel] Migration of 0install.net web-site

[Thomas L. <ta...@gm...>]

On 6 June 2015 at 12:05, Thomas Leonard <ta...@gm...> wrote:
> I had a go at mirgrating the 0install.net web-site from SourceForge to
> GitHub pages (http://0install.github.io/web-site/).
>
> However, I hit a problem: GitHub doesn't provide PHP, which we use to
> handle bug reports (when you fill in the bug report box in the GTK GUI
> it sends a POST there).
>
> I'm not sure what to do about this. My current thought is to create a
> new api.0install.net domain for this, update the software to use that,
> wait a few years, and then migrate. Anyone got a better plan?

It seems that sf.net has solved the problem for us by disabling all
mail delivery anyway
(https://sourceforge.net/p/forge/site-support/15404/).

I have therefore migrated the web site to GitHub. Let me know if you
spot anything odd!

> (I also rewrote the OS-detection PHP code used on the front page to
> use Javascript instead, which seems to work fine)


-- 
talex5 (GitHub/Twitter)        http://roscidus.com/blog/
GPG: 5DD5 8D70 899C 454A 966D  6A51 7513 3C8F 94F6 E0CC

Re: [Zero-install-devel] Error in python-gtk running feed for diffuse.

[<phi...@th...>]

Bastian,
                It works for me now.
Thanks for the fix,
Phil



From: Bastian Eicher [mailto:ba...@ei...]
Sent: Sunday, October 01, 2017 6:37 AM
To: Miess, Philip (TR Technology & Ops); 'The Zero Install system'
Subject: RE: [Zero-install-devel] Error in python-gtk running feed for diffuse.

Hi Philip,

sorry for the long wait. I have finally found the cause of the issue:
https://github.com/0install/repo.roscidus.com/pull/40<https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_0install_repo.roscidus.com_pull_40&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=hFgSRwirJ-eLyRg01bB9-ht4c1JoUFY1kM5GdrWXq3A&s=jxOISS2Z4QToZXTRXr8jP8d_LUpimF-eL7-rVWSE_6Y&e=>

Until this is merged you can work around the issue by adding this to your feed:
    <requires interface="http://repo.roscidus.com/lib/gtk">
      <environment insert="bin" name="PATH"/>
    </requires>

Regards
Bastian

From: phi...@th...<mailto:phi...@th...> [mailto:phi...@th...]
Sent: Donnerstag, 21. September 2017 23:03
To: zer...@li...<mailto:zer...@li...>
Subject: Re: [Zero-install-devel] Error in python-gtk running feed for diffuse.

Bastian,
                I had python  2.7.13 and pygtk 2.24.2 both 32 bits.
I uninstalled them, meld and tortiosehg to get all python and GTK out of the path.

C:\Users\u0158518\Documents\zeroinstall>0install run diffuse.xml
Traceback (most recent call last):
  File "C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse", line 126, in <module>
    import gtk
  File "C:\ProgramData\0install.net\implementations\sha256new_5NQCQXEZAJRXGOM6H4Z4AXIBG4R7Z5RSBCRB5RFZHXNN2NMNIPTQ\gtk-2.0\gtk\__init__.py", line 30, in <module>
    import gobject as _gobject
  File "C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\gobject\__init__.py", line 26, in <module>
    from glib import spawn_async, idle_add, timeout_add, timeout_add_seconds, \
  File "C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\glib\__init__.py", line 22, in <module>
    from glib._glib import *
ImportError: DLL load failed: The specified module could not be found.

I wonder what is different between my system and yours.

Phil

From: Bastian Eicher [mailto:ba...@ei...]
Sent: Wednesday, September 20, 2017 11:45 AM
To: 'The Zero Install system'
Subject: Re: [Zero-install-devel] Error in python-gtk running feed for diffuse.

Hi Philip,

curios, I just copy&pasted the feed you provided into a local file and ran "0install run" on it and the application launched fine.
Perhaps the locally installed Python + PyGTK added something DLL to the PATH that is causing the 0install version to misbehave.
Which version of Python and PyGTK do you have installed on your Windows Box? Are they 32-bit or 64-bit builds?

Regards
Bastian

From: phi...@th...<mailto:phi...@th...> [mailto:phi...@th...]
Sent: Montag, 11. September 2017 17:44
To: zer...@li...<mailto:zer...@li...>
Subject: [Zero-install-devel] Error in python-gtk running feed for diffuse.

Zero installers,
        I'm trying to make a feed for Diffuse.
I'm using window7.
I get an error from the command line, that seems to indicate that pygtk is trying to load a file that's not a DLL as a DLL.
I cant find any feeds that list pygtk as a dependency, even apps that say they are pygtk apps, so I'm wondering if anyone has actually packaged a python-gtk app with dependencies, that I could use as an example.
0publish-GUI, for instance doesn't list it and fails with "ImportError: No module named pygtk" when run. Its worked correctly on Linux for me though, so its a windows problem.
python C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse.py
works as expected, because I have python 2.7 installed natively as well as python-gtk.

The error when run from the command line as an alias.
Traceback (most recent call last):
  File "C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse", line 126, in <module>
    import gtk
  File "C:\ProgramData\0install.net\implementations\sha256new_5NQCQXEZAJRXGOM6H4Z4AXIBG4R7Z5RSBCRB5RFZHXNN2NMNIPTQ\gtk-2.0\gtk\__init__.py", line 30, in <module>
    import gobject as _gobject
  File "C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\gobject\__init__.py", line 26, in <module>
    from glib import spawn_async, idle_add, timeout_add, timeout_add_seconds, \
  File "C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\glib\__init__.py", line 22, in <module>
    from glib._glib import *
ImportError: DLL load failed: %1 is not a valid Win32 application.

The feed file created with Zero Install Publishing Tools.
<?xml version="1.0" encoding="utf-8"?>
<interface xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://zero-install.sourceforge.net/2004/injector/interface http://0install.de/schema/injector/interface/interface.xsd<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_injector_interface_interface.xsd&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=jlq5-KJJ-DY11IIFnGVIp3wLYDkS_VHmFzSAaZnIBM8&e=> http://0install.de/schema/desktop-integration/capabilities<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_desktop-2Dintegration_capabilities&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=9x0wDoy6sd7fh3rMw3lcToyUNdUq3hamqrqjjtzaE0s&e=> http://0install.de/schema/desktop-integration/capabilities/capabilities.xsd<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_desktop-2Dintegration_capabilities_capabilities.xsd&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=s1oEdQBKQiWRIoRix5ONwIOrX7-jDPZSzUg7Bl2dPLY&e=>" xmlns="http://zero-install.sourceforge.net/2004/injector/interface<https://urldefense.proofpoint.com/v2/url?u=http-3A__zero-2Dinstall.sourceforge.net_2004_injector_interface&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=m_TV5uZSAnI1AGgKtJBj3tvvbH2iHnP83xLEb6BV2rU&e=>">
  <name>diffuse</name>
  <summary xml:lang="en">Diffuse is a graphical tool for comparing and merging text files. It can retrieve files for comparison from Bazaar, CVS, Darcs, Git, Mercurial, Monotone, RCS, Subversion, and SVK repositories.</summary>
  <description xml:lang="en">Diffuse is a graphical tool for merging and comparing text files. Diffuse is able to compare an arbitrary number of files side-by-side and gives users the ability to manually adjust line-matching and directly edit files. Diffuse can also retrieve revisions of files from Bazaar, CVS, Darcs, Git, Mercurial, Monotone, RCS, Subversion, and SVK repositories for comparison and merging.
Features

    ability to compare and merge an arbitrary number of files side-by-side (n-way merges)
    line matching can be manually corrected by the user
    ability to directly edit files
    syntax highlighting
    Bazaar, CVS, Darcs, Git, Mercurial, Monotone, RCS, Subversion, and SVK support
    support for UTF-8 encoded unicode
    unlimited undo
    easy keyboard navigation
</description>
  <icon href="http://diffuse.sourceforge.net/favicon.ico<https://urldefense.proofpoint.com/v2/url?u=http-3A__diffuse.sourceforge.net_favicon.ico&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=l7dp1UX-vFNnL_KOvQzu9veOkKAffwpZwL_bWNM3dI4&e=>" type="image/vnd.microsoft.icon" />
  <icon href="https://a.fsdn.com/allura/p/diffuse/icon?1369755631<https://urldefense.proofpoint.com/v2/url?u=https-3A__a.fsdn.com_allura_p_diffuse_icon-3F1369755631&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=N4NFMLJoRrPbIKbfg5UiOTs-KiEfQuH0TUQj_-WPeWM&e=>" type="image/png" />
  <category>Development</category>
  <homepage>http://diffuse.sourceforge.net/about.html</homepage<https://urldefense.proofpoint.com/v2/url?u=http-3A__diffuse.sourceforge.net_about.html-253c_homepage&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=kCZ7SONELsEyU2IC7JrztSwtReBeRcD-lZ2fc9dTDvM&e=>>
  <implementation langs="cs de en es it ja ka pl ru zh_CN zh_TW" version="0.4.8" released="2014-07-18" license="GPL v2 (GNU General Public License)" id="sha1new=c0b27b92ae61c5d9fb818f4808775486a7ae29c4">
    <requires interface="http://repo.roscidus.com/python/python-gtk<https://urldefense.proofpoint.com/v2/url?u=http-3A__repo.roscidus.com_python_python-2Dgtk&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=kQl6gAobb0MKz1iWrURT117EpLGKRkA_NFbl07AE4P8&e=>" version="2.10.." />
    <command name="run" path="src/usr/bin/diffuse">
      <runner interface="http://repo.roscidus.com/python/python<https://urldefense.proofpoint.com/v2/url?u=http-3A__repo.roscidus.com_python_python&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=9Hh1k21lzTMfnSpCin4ErT8pOSfpjfzvna-QS2l1eZ0&e=>" version="2.4..!3.0" command="run" />
    </command>
    <manifest-digest sha1new="c0b27b92ae61c5d9fb818f4808775486a7ae29c4" sha256="5eb2ffa798ec361f9fcb3ec62a691d18d2bbde399daa2117df40f06125155172" sha256new="L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA" />
    <archive href="https://sourceforge.net/projects/diffuse/files/diffuse/0.4.8/diffuse-0.4.8.tar.bz2<https://urldefense.proofpoint.com/v2/url?u=https-3A__sourceforge.net_projects_diffuse_files_diffuse_0.4.8_diffuse-2D0.4.8.tar.bz2&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=iKvtoSvLRSrMVxaamGePkqhZXVD4Dpw8AcqpL22ow4I&e=>" size="557966" type="application/x-bzip-compressed-tar" extract="diffuse-0.4.8" />
  </implementation>
  <entry-point command="run" binary-name="diffuse" />
</interface>


Philip Miess

Re: [Zero-install-devel] Error in python-gtk running feed for diffuse.

[Bastian E. <ba...@ei...>]

Hi Philip,

 

sorry for the long wait. I have finally found the cause of the issue:

https://github.com/0install/repo.roscidus.com/pull/40

 

Until this is merged you can work around the issue by adding this to your
feed:

    <requires interface="http://repo.roscidus.com/lib/gtk">

      <environment insert="bin" name="PATH"/>

    </requires>

 

Regards

Bastian

 

From: phi...@th...
[mailto:phi...@th...] 
Sent: Donnerstag, 21. September 2017 23:03
To: zer...@li...
Subject: Re: [Zero-install-devel] Error in python-gtk running feed for
diffuse.

 

Bastian,

                I had python  2.7.13 and pygtk 2.24.2 both 32 bits.

I uninstalled them, meld and tortiosehg to get all python and GTK out of the
path.

 

C:\Users\u0158518\Documents\zeroinstall>0install run diffuse.xml

Traceback (most recent call last):

  File
"C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU
2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse", line 126, in <module>

    import gtk

  File
"C:\ProgramData\0install.net\implementations\sha256new_5NQCQXEZAJRXGOM6H4Z4A
XIBG4R7Z5RSBCRB5RFZHXNN2NMNIPTQ\gtk-2.0\gtk\__init__.py", line 30, in
<module>

    import gobject as _gobject

  File
"C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW
2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\gobject\__init__.py", line 26, in
<module>

    from glib import spawn_async, idle_add, timeout_add,
timeout_add_seconds, \

  File
"C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW
2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\glib\__init__.py", line 22, in
<module>

    from glib._glib import *

ImportError: DLL load failed: The specified module could not be found.

 

I wonder what is different between my system and yours.

 

Phil

 

From: Bastian Eicher [mailto:ba...@ei...] 
Sent: Wednesday, September 20, 2017 11:45 AM
To: 'The Zero Install system'
Subject: Re: [Zero-install-devel] Error in python-gtk running feed for
diffuse.

 

Hi Philip,

 

curios, I just copy&pasted the feed you provided into a local file and ran
"0install run" on it and the application launched fine.

Perhaps the locally installed Python + PyGTK added something DLL to the PATH
that is causing the 0install version to misbehave.

Which version of Python and PyGTK do you have installed on your Windows Box?
Are they 32-bit or 64-bit builds?

 

Regards

Bastian

 

From: phi...@th...
<mailto:phi...@th...>
[mailto:phi...@th...] 
Sent: Montag, 11. September 2017 17:44
To: zer...@li...
<mailto:zer...@li...> 
Subject: [Zero-install-devel] Error in python-gtk running feed for diffuse.

 

Zero installers,

        I'm trying to make a feed for Diffuse. 

I'm using window7.

I get an error from the command line, that seems to indicate that pygtk is
trying to load a file that's not a DLL as a DLL.

I cant find any feeds that list pygtk as a dependency, even apps that say
they are pygtk apps, so I'm wondering if anyone has actually packaged a
python-gtk app with dependencies, that I could use as an example.

0publish-GUI, for instance doesn't list it and fails with "ImportError: No
module named pygtk" when run. Its worked correctly on Linux for me though,
so its a windows problem.

python
C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU2
I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse.py

works as expected, because I have python 2.7 installed natively as well as
python-gtk.

 

The error when run from the command line as an alias.

Traceback (most recent call last):

  File
"C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU
2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse", line 126, in <module>

    import gtk

  File
"C:\ProgramData\0install.net\implementations\sha256new_5NQCQXEZAJRXGOM6H4Z4A
XIBG4R7Z5RSBCRB5RFZHXNN2NMNIPTQ\gtk-2.0\gtk\__init__.py", line 30, in
<module>

    import gobject as _gobject

  File
"C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW
2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\gobject\__init__.py", line 26, in
<module>

    from glib import spawn_async, idle_add, timeout_add,
timeout_add_seconds, \

  File
"C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW
2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\glib\__init__.py", line 22, in
<module>

    from glib._glib import *

ImportError: DLL load failed: %1 is not a valid Win32 application.

 

The feed file created with Zero Install Publishing Tools.

<?xml version="1.0" encoding="utf-8"?>

<interface xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://zero-install.sourceforge.net/2004/injector/interf
ace http://0install.de/schema/injector/interface/interface.xsd
<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_inje
ctor_interface_interface.xsd&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbL
FebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk
4hurMj3L0LFH2sJMSDJqYcM&s=jlq5-KJJ-DY11IIFnGVIp3wLYDkS_VHmFzSAaZnIBM8&e=>
http://0install.de/schema/desktop-integration/capabilities
<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_desk
top-2Dintegration_capabilities&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIv
bLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFk
qk4hurMj3L0LFH2sJMSDJqYcM&s=9x0wDoy6sd7fh3rMw3lcToyUNdUq3hamqrqjjtzaE0s&e=>
http://0install.de/schema/desktop-integration/capabilities/capabilities.xsd
<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_desk
top-2Dintegration_capabilities_capabilities.xsd&d=DwMFAg&c=4ZIZThykDLcoWk-GV
jSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=V
zJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=s1oEdQBKQiWRIoRix5ONwIOrX7-jDPZ
SzUg7Bl2dPLY&e=> "
xmlns="http://zero-install.sourceforge.net/2004/injector/interface
<https://urldefense.proofpoint.com/v2/url?u=http-3A__zero-2Dinstall.sourcefo
rge.net_2004_injector_interface&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWI
vbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cF
kqk4hurMj3L0LFH2sJMSDJqYcM&s=m_TV5uZSAnI1AGgKtJBj3tvvbH2iHnP83xLEb6BV2rU&e=>
">

  <name>diffuse</name>

  <summary xml:lang="en">Diffuse is a graphical tool for comparing and
merging text files. It can retrieve files for comparison from Bazaar, CVS,
Darcs, Git, Mercurial, Monotone, RCS, Subversion, and SVK
repositories.</summary>

  <description xml:lang="en">Diffuse is a graphical tool for merging and
comparing text files. Diffuse is able to compare an arbitrary number of
files side-by-side and gives users the ability to manually adjust
line-matching and directly edit files. Diffuse can also retrieve revisions
of files from Bazaar, CVS, Darcs, Git, Mercurial, Monotone, RCS, Subversion,
and SVK repositories for comparison and merging.

Features

 

    ability to compare and merge an arbitrary number of files side-by-side
(n-way merges)

    line matching can be manually corrected by the user

    ability to directly edit files

    syntax highlighting

    Bazaar, CVS, Darcs, Git, Mercurial, Monotone, RCS, Subversion, and SVK
support

    support for UTF-8 encoded unicode

    unlimited undo

    easy keyboard navigation

</description>

  <icon href="http://diffuse.sourceforge.net/favicon.ico
<https://urldefense.proofpoint.com/v2/url?u=http-3A__diffuse.sourceforge.net
_favicon.ico&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyH
FQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJM
SDJqYcM&s=l7dp1UX-vFNnL_KOvQzu9veOkKAffwpZwL_bWNM3dI4&e=> "
type="image/vnd.microsoft.icon" />

  <icon href="https://a.fsdn.com/allura/p/diffuse/icon?1369755631
<https://urldefense.proofpoint.com/v2/url?u=https-3A__a.fsdn.com_allura_p_di
ffuse_icon-3F1369755631&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwK
gY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurM
j3L0LFH2sJMSDJqYcM&s=N4NFMLJoRrPbIKbfg5UiOTs-KiEfQuH0TUQj_-WPeWM&e=> "
type="image/png" />

  <category>Development</category>

  <homepage>http://diffuse.sourceforge.net/about.html
<https://urldefense.proofpoint.com/v2/url?u=http-3A__diffuse.sourceforge.net
_about.html-253c_homepage&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFeb
wKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hu
rMj3L0LFH2sJMSDJqYcM&s=kCZ7SONELsEyU2IC7JrztSwtReBeRcD-lZ2fc9dTDvM&e=>
</homepage>

  <implementation langs="cs de en es it ja ka pl ru zh_CN zh_TW"
version="0.4.8" released="2014-07-18" license="GPL v2 (GNU General Public
License)" id="sha1new=c0b27b92ae61c5d9fb818f4808775486a7ae29c4">

    <requires interface="http://repo.roscidus.com/python/python-gtk
<https://urldefense.proofpoint.com/v2/url?u=http-3A__repo.roscidus.com_pytho
n_python-2Dgtk&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAq
yHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2s
JMSDJqYcM&s=kQl6gAobb0MKz1iWrURT117EpLGKRkA_NFbl07AE4P8&e=> "
version="2.10.." />

    <command name="run" path="src/usr/bin/diffuse">

      <runner interface="http://repo.roscidus.com/python/python
<https://urldefense.proofpoint.com/v2/url?u=http-3A__repo.roscidus.com_pytho
n_python&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv
0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJq
YcM&s=9Hh1k21lzTMfnSpCin4ErT8pOSfpjfzvna-QS2l1eZ0&e=> " version="2.4..!3.0"
command="run" />

    </command>

    <manifest-digest sha1new="c0b27b92ae61c5d9fb818f4808775486a7ae29c4"
sha256="5eb2ffa798ec361f9fcb3ec62a691d18d2bbde399daa2117df40f06125155172"
sha256new="L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA" />

    <archive
href="https://sourceforge.net/projects/diffuse/files/diffuse/0.4.8/diffuse-0
.4.8.tar.bz2
<https://urldefense.proofpoint.com/v2/url?u=https-3A__sourceforge.net_projec
ts_diffuse_files_diffuse_0.4.8_diffuse-2D0.4.8.tar.bz2&d=DwMFAg&c=4ZIZThykDL
coWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5
O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=iKvtoSvLRSrMVxaamGePkqhZ
XVD4Dpw8AcqpL22ow4I&e=> " size="557966"
type="application/x-bzip-compressed-tar" extract="diffuse-0.4.8" />

  </implementation>

  <entry-point command="run" binary-name="diffuse" />

</interface>

 

 

Philip Miess

 

 

Re: [Zero-install-devel] Error in python-gtk running feed for diffuse.

[<phi...@th...>]

Bastian,
                I had python  2.7.13 and pygtk 2.24.2 both 32 bits.
I uninstalled them, meld and tortiosehg to get all python and GTK out of the path.

C:\Users\u0158518\Documents\zeroinstall>0install run diffuse.xml
Traceback (most recent call last):
  File "C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse", line 126, in <module>
    import gtk
  File "C:\ProgramData\0install.net\implementations\sha256new_5NQCQXEZAJRXGOM6H4Z4AXIBG4R7Z5RSBCRB5RFZHXNN2NMNIPTQ\gtk-2.0\gtk\__init__.py", line 30, in <module>
    import gobject as _gobject
  File "C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\gobject\__init__.py", line 26, in <module>
    from glib import spawn_async, idle_add, timeout_add, timeout_add_seconds, \
  File "C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\glib\__init__.py", line 22, in <module>
    from glib._glib import *
ImportError: DLL load failed: The specified module could not be found.

I wonder what is different between my system and yours.

Phil

From: Bastian Eicher [mailto:ba...@ei...]
Sent: Wednesday, September 20, 2017 11:45 AM
To: 'The Zero Install system'
Subject: Re: [Zero-install-devel] Error in python-gtk running feed for diffuse.

Hi Philip,

curios, I just copy&pasted the feed you provided into a local file and ran "0install run" on it and the application launched fine.
Perhaps the locally installed Python + PyGTK added something DLL to the PATH that is causing the 0install version to misbehave.
Which version of Python and PyGTK do you have installed on your Windows Box? Are they 32-bit or 64-bit builds?

Regards
Bastian

From: phi...@th...<mailto:phi...@th...> [mailto:phi...@th...]
Sent: Montag, 11. September 2017 17:44
To: zer...@li...<mailto:zer...@li...>
Subject: [Zero-install-devel] Error in python-gtk running feed for diffuse.

Zero installers,
        I'm trying to make a feed for Diffuse.
I'm using window7.
I get an error from the command line, that seems to indicate that pygtk is trying to load a file that's not a DLL as a DLL.
I cant find any feeds that list pygtk as a dependency, even apps that say they are pygtk apps, so I'm wondering if anyone has actually packaged a python-gtk app with dependencies, that I could use as an example.
0publish-GUI, for instance doesn't list it and fails with "ImportError: No module named pygtk" when run. Its worked correctly on Linux for me though, so its a windows problem.
python C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse.py
works as expected, because I have python 2.7 installed natively as well as python-gtk.

The error when run from the command line as an alias.
Traceback (most recent call last):
  File "C:\ProgramData\0install.net\implementations\sha256new_L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA\src\usr\bin\diffuse", line 126, in <module>
    import gtk
  File "C:\ProgramData\0install.net\implementations\sha256new_5NQCQXEZAJRXGOM6H4Z4AXIBG4R7Z5RSBCRB5RFZHXNN2NMNIPTQ\gtk-2.0\gtk\__init__.py", line 30, in <module>
    import gobject as _gobject
  File "C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\gobject\__init__.py", line 26, in <module>
    from glib import spawn_async, idle_add, timeout_add, timeout_add_seconds, \
  File "C:\ProgramData\0install.net\implementations\sha256new_GTWVISPUFHUCTTJGWC5PW2NYRWGSVES4HBRZ5O3H4K22S4UT5X4Q\gtk-2.0\glib\__init__.py", line 22, in <module>
    from glib._glib import *
ImportError: DLL load failed: %1 is not a valid Win32 application.

The feed file created with Zero Install Publishing Tools.
<?xml version="1.0" encoding="utf-8"?>
<interface xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://zero-install.sourceforge.net/2004/injector/interface http://0install.de/schema/injector/interface/interface.xsd<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_injector_interface_interface.xsd&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=jlq5-KJJ-DY11IIFnGVIp3wLYDkS_VHmFzSAaZnIBM8&e=> http://0install.de/schema/desktop-integration/capabilities<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_desktop-2Dintegration_capabilities&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=9x0wDoy6sd7fh3rMw3lcToyUNdUq3hamqrqjjtzaE0s&e=> http://0install.de/schema/desktop-integration/capabilities/capabilities.xsd<https://urldefense.proofpoint.com/v2/url?u=http-3A__0install.de_schema_desktop-2Dintegration_capabilities_capabilities.xsd&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=s1oEdQBKQiWRIoRix5ONwIOrX7-jDPZSzUg7Bl2dPLY&e=>" xmlns="http://zero-install.sourceforge.net/2004/injector/interface<https://urldefense.proofpoint.com/v2/url?u=http-3A__zero-2Dinstall.sourceforge.net_2004_injector_interface&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=m_TV5uZSAnI1AGgKtJBj3tvvbH2iHnP83xLEb6BV2rU&e=>">
  <name>diffuse</name>
  <summary xml:lang="en">Diffuse is a graphical tool for comparing and merging text files. It can retrieve files for comparison from Bazaar, CVS, Darcs, Git, Mercurial, Monotone, RCS, Subversion, and SVK repositories.</summary>
  <description xml:lang="en">Diffuse is a graphical tool for merging and comparing text files. Diffuse is able to compare an arbitrary number of files side-by-side and gives users the ability to manually adjust line-matching and directly edit files. Diffuse can also retrieve revisions of files from Bazaar, CVS, Darcs, Git, Mercurial, Monotone, RCS, Subversion, and SVK repositories for comparison and merging.
Features

    ability to compare and merge an arbitrary number of files side-by-side (n-way merges)
    line matching can be manually corrected by the user
    ability to directly edit files
    syntax highlighting
    Bazaar, CVS, Darcs, Git, Mercurial, Monotone, RCS, Subversion, and SVK support
    support for UTF-8 encoded unicode
    unlimited undo
    easy keyboard navigation
</description>
  <icon href="http://diffuse.sourceforge.net/favicon.ico<https://urldefense.proofpoint.com/v2/url?u=http-3A__diffuse.sourceforge.net_favicon.ico&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=l7dp1UX-vFNnL_KOvQzu9veOkKAffwpZwL_bWNM3dI4&e=>" type="image/vnd.microsoft.icon" />
  <icon href="https://a.fsdn.com/allura/p/diffuse/icon?1369755631<https://urldefense.proofpoint.com/v2/url?u=https-3A__a.fsdn.com_allura_p_diffuse_icon-3F1369755631&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=N4NFMLJoRrPbIKbfg5UiOTs-KiEfQuH0TUQj_-WPeWM&e=>" type="image/png" />
  <category>Development</category>
  <homepage>http://diffuse.sourceforge.net/about.html</homepage<https://urldefense.proofpoint.com/v2/url?u=http-3A__diffuse.sourceforge.net_about.html-253c_homepage&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=kCZ7SONELsEyU2IC7JrztSwtReBeRcD-lZ2fc9dTDvM&e=>>
  <implementation langs="cs de en es it ja ka pl ru zh_CN zh_TW" version="0.4.8" released="2014-07-18" license="GPL v2 (GNU General Public License)" id="sha1new=c0b27b92ae61c5d9fb818f4808775486a7ae29c4">
    <requires interface="http://repo.roscidus.com/python/python-gtk<https://urldefense.proofpoint.com/v2/url?u=http-3A__repo.roscidus.com_python_python-2Dgtk&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=kQl6gAobb0MKz1iWrURT117EpLGKRkA_NFbl07AE4P8&e=>" version="2.10.." />
    <command name="run" path="src/usr/bin/diffuse">
      <runner interface="http://repo.roscidus.com/python/python<https://urldefense.proofpoint.com/v2/url?u=http-3A__repo.roscidus.com_python_python&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=9Hh1k21lzTMfnSpCin4ErT8pOSfpjfzvna-QS2l1eZ0&e=>" version="2.4..!3.0" command="run" />
    </command>
    <manifest-digest sha1new="c0b27b92ae61c5d9fb818f4808775486a7ae29c4" sha256="5eb2ffa798ec361f9fcb3ec62a691d18d2bbde399daa2117df40f06125155172" sha256new="L2ZP7J4Y5Q3B7H6LH3DCU2I5DDJLXXRZTWVCCF67IDYGCJIVKFZA" />
    <archive href="https://sourceforge.net/projects/diffuse/files/diffuse/0.4.8/diffuse-0.4.8.tar.bz2<https://urldefense.proofpoint.com/v2/url?u=https-3A__sourceforge.net_projects_diffuse_files_diffuse_0.4.8_diffuse-2D0.4.8.tar.bz2&d=DwMFAg&c=4ZIZThykDLcoWk-GVjSLmy8-1Cr1I4FWIvbLFebwKgY&r=pRAqyHFQFv0HoEiWgk-8HFVA7XY6phT8Klx-jbb5O0E&m=VzJ0R_P4PD7KtS8cFkqk4hurMj3L0LFH2sJMSDJqYcM&s=iKvtoSvLRSrMVxaamGePkqhZXVD4Dpw8AcqpL22ow4I&e=>" size="557966" type="application/x-bzip-compressed-tar" extract="diffuse-0.4.8" />
  </implementation>
  <entry-point command="run" binary-name="diffuse" />
</interface>


Philip Miess