From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 100000 invoked by alias); 3 Feb 2018 08:16:07 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 99989 invoked by uid 89); 3 Feb 2018 08:16:06 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=0.3 required=5.0 tests=BAYES_40,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW autolearn=no version=3.3.2 spammy=H*M:local, downloads, 10s, CygWin X-HELO: outmail149115.authsmtp.co.uk Received: from outmail149115.authsmtp.co.uk (HELO outmail149115.authsmtp.co.uk) (62.13.149.115) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Sat, 03 Feb 2018 08:16:04 +0000 Received: from mail-c245.authsmtp.com (mail-c245.authsmtp.com [62.13.128.245]) by punt21.authsmtp.com. (8.15.2/8.15.2) with ESMTP id w138G1dH072602; Sat, 3 Feb 2018 08:16:01 GMT (envelope-from David.Allsopp@cl.cam.ac.uk) Received: from romulus.metastack.com (114.212-105-213.static.virginmediabusiness.co.uk [213.105.212.114]) (authenticated bits=0) by mail.authsmtp.com (8.15.2/8.15.2) with ESMTPSA id w138FvSc022103 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 3 Feb 2018 08:15:59 GMT (envelope-from David.Allsopp@cl.cam.ac.uk) Received: from remus.metastack.local (remus.metastack.com [172.16.0.1]) by romulus.metastack.com (8.14.2/8.14.2) with ESMTP id w138FqsC005362; Sat, 3 Feb 2018 08:15:52 GMT Received: from Remus.metastack.local ([fe80::547c:3c42:e1da:eda2]) by Remus.metastack.local ([fe80::547c:3c42:e1da:eda2%10]) with mapi id 14.03.0361.001; Sat, 3 Feb 2018 08:15:52 +0000 From: David Allsopp To: Ben CC: "cygwin@cygwin.com" Subject: RE: Searching full, portable Cygwin package for windows and NOT just the installer Date: Sat, 03 Feb 2018 08:16:00 -0000 Message-ID: References: <38d7c1fc-4093-fad0-d7bd-03e6f869e09e@yahoo.co.uk> In-Reply-To: <38d7c1fc-4093-fad0-d7bd-03e6f869e09e@yahoo.co.uk> Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Server-Quench: 78c4669c-08ba-11e8-9f3b-9cb654bb2504 X-AuthReport-Spam: If SPAM / abuse - report it at: http://www.authsmtp.com/abuse X-AuthRoute: OCd1ZAARAlZ5RRob BmUtCCtbTh09DhZI RxQKKE1TKxwUVhJU L0JGL0JXPR1GBEcB AHl9DgZLUl1wUXN1 YwBQaw9dYwRMXgZ0 UUhMXFBTFhtpABge BBsBU1c1dgZODjgT NkZgXHFbXwp9ckR5 DElcRmkAY24zdWAX AhFFdgIBeB5DKBwX d1ksBnUIZTdVZH9g QxkJEmJ5BjhWMi9V QwcCZVwPRUJPViY7 XQwLFzEiVWYUSDoy KVQ+I1UfFUkceks1 KxM+WFQUNAAJQgRY EwlrJxM7b1scXDZj EQNXFU8YCyFURSNR GHUA X-Authentic-SMTP: 61633634383431.1039:706 X-AuthFastPath: 0 (Was 255) X-AuthSMTP-Origin: 213.105.212.114/25 X-AuthVirus-Status: No virus detected - but ensure you scan with your own anti-virus system. X-IsSubscribed: yes X-SW-Source: 2018-02/txt/msg00017.txt.bz2 Ben via cygwin wrote: > When I go to web page >=20 > http://cygwin.com/ >=20 > then I can download CygWin from there (currently the file "setup- > x86_64.exe"). >=20 > Unfortunately this file is just an installer which retrieves in turn > several other files from Internet and remote servers. >=20 > Since I have no overview what is downloaded from which server I distrust > such installers in general. I assume that each month you review the Microsoft Security Advisories, visi= t and digest the page for each individual update and then download and appl= y the .msu patches by hand, rather than trusting the highly fishy "Check fo= r updates" feature of Windows Update? You do have an overview: you get to pick the mirror, and the URL it will do= wnload files from is declared there. For example, my closest mirror is http= ://mirrorservice.org/sites/sourceware.org/pub/cygwin/ which you can browse = online. > I prefer full packages which contains everything needed and can be > inspected in advance (e.g. by virus scanners) before actual installation. The Cygwin installer downloads and saves the files - even a dumb filesystem= -only virus scanner gets a chance to inspect the files.=20 > 99,9% of all software is offered in such a way. That number is plucked out of your mind, and simply isn't true, even on Win= dows (there's the Microsoft Store and even third party packagers such as ht= tps://chocolatey.org/). Microsoft's own products on Windows are now distrib= uted this way too (e.g. the Visual Studio Installer and the Office 365 inst= aller). > Why use Cygwin such a fishy distribution way? Well, it's not fishy. Cygwin is not an application, as another answer to your previous question p= ointed out, Cygwin is a library providing a Posix layer for applications on= Windows. The setup program is an application for installing that library a= nd then adding packages of programs which use it from a curated collection,= but you can point the installer to your own collection if you wish. > Is there really no full package to download? The setup program includes a "Download" option which allows you to save the= entire package repository locally, which you can use in future. Some of th= e mirrors (including the one I referenced above) also support rsync, which = allows you to download the package repository and the installer from the we= bsite without running any Cygwin software initially. Packages are updated quite frequently, and the entire repository is 10s of = gigabytes - it would be impractical to offer a single file for download bei= ng updated so frequently. David=20 -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple