On Sat, Mar 16, 2013 at 04:30:41AM +0100, Jérémie Courrèges-Anglas wrote:
> 
> The opam tarball comes with a ocp-build.boot bytecode file which writes
> to $HOME, right at the beginning of the build process.
> ocp-build/README.md says the sources are in TypeRex[1].  After a quick
> look I don't find a way to generate a fresh ocp-build.  Commenting the
> first call to ocp-build leads to systrace that prevents curl from
> calling home.
> 
> ''curl --insecure -OL \
> https://gforge.inria.fr/frs/download.php/31910/cudf-0.6.3.tar.gz''
> 
> This doesn't smell good imho. :)
> 
> [1] https://github.com/OCamlPro/typerex/

opam pulls down a few OCaml libraries at build time and then statically
compiles them into the opam binary, cudf is one of those libraries.

I didn't notice anything being written to $HOME. I don't normally build
with systrace (probably should) so I wonder if whatever is written is
removed farther in the build process.

I very very new to OCaml so I do appreciate your input!

-- 
James Turner

Reply via email to