Mailing List Archive: gradle as source? How safe are overlays?

gradle as source? How safe are overlays?

Oct 16, 2023, 12:29 PM

Post #1 of 4 (108 views)

In order to build an android app, I need gradle. Apparently, there's
only a binary version in gentoo, dev-java/gradle-bin, but there's a
source version in the mva overlay. Why might it only be in an overlay?

This link:

https://wiki.gentoo.org/wiki/Gradle#Availability

links to:

https://github.com/msva/mva-overlay/tree/master/dev-java/gradle

containing 3 files, none of which is 100 lines.

If that's all it takes, why not be part of the distribution?

TIA

Re: gradle as source? How safe are overlays? [ In reply to ]

xp.vit.blr at gmail

Oct 16, 2023, 12:30 PM

Post #2 of 4 (108 views)

Permalink

Usually all gradle projects contain gradle wrappers (gradlew.bat and
gradlew.sh). If you have them, you just need Java and run: ./gradlew build

Viktar

On Mon, Oct 16, 2023 at 9:29?PM n952162 <n952162@web.de> wrote:

> In order to build an android app, I need gradle. Apparently, there's
> only a binary version in gentoo, dev-java/gradle-bin, but there's a
> source version in the mva overlay. Why might it only be in an overlay?
>
> This link:
>
> https://wiki.gentoo.org/wiki/Gradle#Availability
>
> links to:
>
> https://github.com/msva/mva-overlay/tree/master/dev-java/gradle
>
> containing 3 files, none of which is 100 lines.
>
> If that's all it takes, why not be part of the distribution?
>
> TIA
>
>
>
>

Re: gradle as source? How safe are overlays? [ In reply to ]

mjo at gentoo

Oct 16, 2023, 1:54 PM

Post #3 of 4 (108 views)

Permalink

On Mon, 2023-10-16 at 21:29 +0200, n952162 wrote:
> Why might it only be in an overlay?

Because it bundles 100+ other packages. That is inherently a security
risk, although plenty of people use Windows and install all of their
software that way and are perfectly happy on those days of the year
when their documents aren't encrypted by ransomware.

Re: gradle as source? How safe are overlays? [ In reply to ]

n952162 at web

Oct 16, 2023, 10:29 PM

Post #4 of 4 (105 views)

Permalink

That's what I was afraid of hearing .... ;-)

On 10/16/23 22:54, Michael Orlitzky wrote:
> On Mon, 2023-10-16 at 21:29 +0200, n952162 wrote:
>> Why might it only be in an overlay?
> Because it bundles 100+ other packages. That is inherently a security
> risk, although plenty of people use Windows and install all of their
> software that way and are perfectly happy on those days of the year
> when their documents aren't encrypted by ransomware.
>
>