On Sunday, May 18, 2025 4:57:15 PM Coordinated Universal Time you wrote: > Hi Yifei, > > Since oniux depends on arti crates [1] via onion-tunnel [2], I think > before packaging it we should have a clear way forward for packaging > arti -- or at least, if not the application itself, most of its > libraries. I discussed this with upstream last summer and we agreed it > was better, for the time being, to package arti outside of Debian [3]. > We should resume that conversation before starting to package oniux. >
Agree, upon a closer look arti is indeed a complex beast and I have doubt in its long-term maintainability with our current workflow considering that it's more security-critical than most other crates we maintain. It's probably better to get the upstream involved early. > For the record, I still have a branch locally with all the dependencies > required to package arti. It's a huge amount of work (~70-80 crates last > year, will be less now, and not all of them may be needed for oniux), > I'm happy to help and share it :-) Could you please put that branch somewhere? Maybe on Salsa, I'd like to see what scale we are dealing with. Honestly I'm not sure if we have enough bandwidth within Debian to keep them secure and up-to-date in the long run....
