Programming Leftovers

-
The Rust Programming Language Blog: Call for testing: Cargo sparse-registry
The Cargo nightly sparse-registry feature is ready for testing. The feature causes Cargo to access the crates.io index over HTTP, rather than git. It can provide a significant performance improvement, especially if the local copy of the git index is out-of-date or not yet cloned.
-
This Week In Rust: This Week in Rust 448
-
Vetting the cargo
Modern language environments make it easy to discover and incorporate externally written libraries into a program. These same mechanisms can also make it easy to inadvertently incorporate security vulnerabilities or overtly malicious code, which is rather less gratifying. The stream of resulting vulnerabilities seems like it will never end, and it afflicts relatively safe languages like Rust just as much as any other language. In an effort to avoid the embarrassment that comes with shipping vulnerabilities (or worse) by way of its dependencies, the Mozilla project has come up with a new supply-chain management tool known as "cargo vet".
-
Rethinking Fedora's Java packaging
Linux distributors are famously averse to shipping packages with bundled libraries; they would rather ship a single version of each library to be shared by all packages that need it. Many upstream projects, instead, are fond of bundling (or "vendoring") libraries; this leads to tension that has been covered here numerous times in the past (examples: 1, 2 3, 4, 5, ...). The recent Fedora discussion on bundling libraries with its Java implementation would look like just another in a long series, but it also shines a light on the unique challenges of shipping Java in a fast-moving community distribution.
As is often the case with Fedora, the conversation started with the announcement of a Fedora change proposal; this one is authored by Jiri Vanek. The proposal is aimed at the Fedora 37 release, which is currently planned for late October. Vanek proposes to change Fedora's builds of the OpenJDK Java development kit (JDK) to link against several of that project's bundled libraries (including zlib, FreeType, libjpeg, and HarfBuzz) rather than the versions packaged separately in Fedora. The JDK would also be statically linked against Fedora's build of the libstdc++ library.
This proposal, however, is only the first step in a longer project to change how the JDK is built. In short, once the JDK (along with the Java runtime environment, or JRE) has been made to use its own libraries, the way these components are packaged will change. The RPM for a given JDK release will contain a single tarball that will be unpacked on the target system. Notably, this tarball will be the same for all Fedora releases, from the oldest supported release through Rawhide; the use of bundled libraries will help to ensure that this package will work the same way on all target distributions.
-
Wielaard: Sourceware – GNU Toolchain Infrastructure roadmap
Mark Wielaard writes about improvements at Sourceware, the site that holds the repository for many projects in the GNU toolchain and beyond.
-

- Login or register to post comments
Printer-friendly version- 4321 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is released
After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release.
|
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future Tech
The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world.
Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility.
|
today's howtos
|








.svg_.png)
Content (where original) is available under CC-BY-SA, copyrighted by original author/s.

Recent comments
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago
1 year 11 weeks ago