@mgorny@treehouse.systems:

After seeing yet another dozen packages lose keywords on Gentoo because of a single key dependency switching to uv-build, I would like to plea on behalf of Gentoo users: please don’t use uv-build as a build backend.

Just to be clear, this is not about uv itself or any other Astral tools; these are good tools with a nice and responsive upstream. The uv-build backend is one thing we have to disagree on. I’m not saying it’s bad; I’m saying that its benefits don’t outweigh the drawbacks.

  • tal@lemmy.today
    link
    fedilink
    English
    arrow-up
    13
    ·
    edit-2
    2 days ago

    I don’t use Gentoo or uv-build, but I don’t get the problem.

    Gentoo builds packages from source for each user. Okay.

    But I assume that it can’t be building the entire toolchain from scratch for each package. It can’t be rebuilding, say, GNU autotools for each package that uses it during its build. It’s presumably either packaging the toolchain dependencies and not updating them between packages or caching the build.

    Why can’t Gentoo just do whatever it does there for this uv-build thing?

    EDIT: Here’s a Hacker News thread on this same article, which I turned up in trying to get some context:

    https://news.ycombinator.com/item?id=50076048

    I discovered partway through that I don’t care as much about Python or Gentoo build expectations as some of the people involved, enough to fully understand it, but it sounds like, from a quick skim, that some people feel that there are unspecified expectations from the Python build environment. Some people feel that an unspecified dependency version means that one must use the latest verson as of time of build, and since Gentoo typically builds packages for a given user at different times, this entails using different versions of the build tool. Others do not feel that way.

    Some snippets:

    UV maintainer asking why Gentoo doesn’t just pick a version and freeze there and then some responses

    (I am one of uv’s maintainers.)

    …I don’t understand why Gentoo needs to rebuild every single release of uv-build. It doesn’t change as much as uv itself, and it’s intentionally compatible across uv versions. Why not set a policy of only updating once weekly, or even less frequently, with exceptions for important breaking changes or bug fixes?

    Because if you don’t pin a version of uv-build in your project, that means “use the latest version available”. Gentoo can’t second guess you–even if it were able to verify somehow that the new version of uv-build that just got released will end up producing an identical wheel for your project as the previous version, without actually using the new version of uv-build.

    Other distros don’t necessarily have quite the same problem because, if they include packages of Python projects, they don’t normally track the build backend as a dependency. So if uv-build pushes an update, the distro would push an updated package for uv-build, but they wouldn’t look at every Python project they package to see if it used uv-build as a build backend and rebuild it if it did. It’s the “rebuild from source every time” aspect of Gentoo that forces that connection.

    i guess gentoo is rolling-release, vs something like debian where every package is frozen in time (+ backports), and debian does seem to largely solve the coordination problem by making everything on the system use a fixed version of some package; with rare situations allowing >1 version of the package at a time.

    my take on linux distros being annoyed by their own policies is that perhaps they should change the policy. in this case, perhaps they should pretend uv-build updates once a month or something.

    • AnyOldName3@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      24 hours ago

      It does seem hypocritical for Gentoo to complain about wasted time building things from source over and over because of another project’s policies when the whole point of Gentoo is building things from source over and over.

      Also, assuming any project that doesn’t pin a specific version of a dependency requires the latest possible version seems backwards, as that’s typically how things indicate that they’re independent of any particular version.