Re: [PATCH] Install recent rustc in Debian stable

[Mark Wielaard <mark@klomp.org>]

Hi Marc,

On Tue, Aug 27, 2024 at 09:08:24AM +0200, Marc wrote:
> Marc Poulhiès <dkm@kataplop.net> writes:
> 
> > +# Rust from Debian stable is too old to build the small dependencies of GCCRS
> > +# The project currently use 1.72.0, so install and use the same.
> > +RUN (curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0 --no-modify-path)
> 
> "someone" already raised a possible issue with this curl|sh install
> method.

It might just be a "feeling", we do trust the distro image and package
repositories after all. But just piping a shell script from a website
into the shell does feel a little iffy.

> I don't have strong feeling about that. I can also download the shell
> script and execute it. Or follow another install method.

The script seems to mainly be to detect which architecture/distro you
are running and which tools are installed to download another
downloader binary rust-init. It then tries to execute this binary to
download other binaries (cargo, clippy, rust-docs, rust-std, rustc and
rustfmt).

Since we are after a specific version, could we try to fetch that one directly?
https://static.rust-lang.org/rustup/archive/1.27.1/x86_64-unknown-linux-gnu/rustup-init
And then check against the expected sha256sum?

Then at least we know we got the "correct" downloader.

> FWIW, it's the recommended way of using rustup:
> 
> https://rustup.rs/
> 
> Let me know if you'd prefer I change this.

Let me know what you think of the above. Paranoid?

Also, maybe we should create a new container, just for a full gcc
(with rust) builder to keep the default Debian container smaller (we
can then also drop gdc and gnat).

> Also, I recalled that there's already a gccrust builder, so there must
> be a container with a recent enough rustc: maybe the gcc-all could use
> the same container? I didn't find the info last night.

There are a couple of container and non-container builders that try to
build gccrust (non-gcc-tree):
https://builder.sourceware.org/buildbot/#/builders?tags=gccrust
Most currently fail because they don't have a recent cargo installed.

Lets look at those (and switch them to the gcc tree?) after we got
this debian container build going.

Cheers,

Mark