[Build-common-hackers] Bug#652274: cdbs: happily downloads modules for Perl / Module::AutoInstall

[gregor herrmann]

Package: cdbs
Version: 0.4.100
Severity: important

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

While trying to build a newer libhttp-lrdd-perl, I noticed that cdbs
goes to the CPAN and downloads stuff:

(cd . && /usr/bin/perl Makefile.PL  INSTALLDIRS=vendor )
*** Module::AutoInstall version 1.03
*** Checking for Perl dependencies...
[Core Features]
- - ExtUtils::MakeMaker ...loaded. (6.57_05 >= 6.42)
- - Test::More          ...loaded. (0.98 >= 0.61)
- - Scalar::Util        ...loaded. (1.21)
- - XML::Atom::OWL      ...loaded. (0.102 >= 0.100)
- - HTTP::Link::Parser  ...too old. (0.101 < 0.102)
- - URI                 ...loaded. (1.59)
- - RDF::RDFa::Parser   ...loaded. (1.096 >= 1.096)
- - URI::Escape         ...loaded. (3.31)
- - HTTP::Status        ...loaded. (6.00)
- - RDF::TrineShortcuts ...loaded. (0.104 >= 0.104)
- - HTML::HTML5::Sanity ...too old. (0.101 < 0.102)
- - Object::AUTHORITY   ...missing.
- - HTML::HTML5::Parser ...too old. (0.103 < 0.107)
- - XRD::Parser         ...loaded. (0.101 >= 0.101)
==> Auto-install the 4 mandatory module(s) from CPAN? [Y/n] y
*** Dependencies will be installed the next time you type 'make'.
    (You may need to do that as the 'root' user.)
*** Module::AutoInstall configuration finished.
Checking if your kit is complete...
Looks good
Warning: prerequisite HTML::HTML5::Parser 0.107 not found. We have 0.103.
Warning: prerequisite HTML::HTML5::Sanity 0.102 not found. We have 0.101.
Warning: prerequisite HTTP::Link::Parser 0.102 not found. We have 0.101.
Warning: prerequisite Object::AUTHORITY 0 not found.
Writing Makefile for HTTP::LRDD
Writing MYMETA.yml
/usr/bin/make  -C . CFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security -Werror=format-security -Wall" CXXFLAGS="-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security -Werror=format-security -Wall" CPPFLAGS="" LDFLAGS=""  all
make[1]: Entering directory `/tmp/buildd/libhttp-lrdd-perl-0.105'
/usr/bin/perl "-Iinc" Makefile.PL --config= --installdeps=HTTP::Link::Parser,0.102,HTML::HTML5::Sanity,0.102,Object::AUTHORITY,0,HTML::HTML5::Parser,0.107
*** Installing dependencies...
[MSG] No '/tmp/buildd/.cpanplus/custom-sources' dir, skipping custom sources
[MSG] No '/tmp/buildd/.cpanplus/custom-sources' dir, skipping custom sources
[MSG] No '/tmp/buildd/.cpanplus/custom-sources' dir, skipping custom sources
*** Installing HTTP::Link::Parser...
Running [/usr/bin/perl /usr/bin/cpanp-run-perl /tmp/buildd/.cpanplus/5.14.2/build/HTTP-Link-Parser-0.103/Makefile.PL INSTALLDIRS=site]...

[and so on]

I strongly suggest that cdbs sets $ENV{PERL_AUTOINSTALL}="--skipdeps" like
debhelper's perl_makemaker module does since quite some time (or
passes it via the command line or whatever).


Cheers,
gregor

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQIcBAEBCAAGBQJO6lv3AAoJELs6aAGGSaoGBf0QAK2VoXe5q3OT8jkFxFPrysM5
gn7RktYT+dgfI4kcd1E95UrUKzi1akTaeX9W6HsB3JVRsLCfpNy+rllK9KoY1crj
0BvvJVsi5zDOtkeNIbAThTKzvwxJkHiz/loQ+TNmNcnse3cCVM8CCmbtkiaG0cwk
YxNK3JC9ZTUm/4vOMqAkEayMGq06keHA+dG+GdNVdwipeY4zrw34VGKp1b551AfL
cnjca/ZHKAjWpH2lDOsmvaGbcxAEfYizxVbdqRjy8iTL5vk9rfXPWLfDBSShS0tF
a/aUxarKFnDsdpqG2sKjDb4aHLVFRPjZqmF0JjqPj3qX4NgUW04AUjE/Mkllm4Jo
3beJ1hZan2AXHlzmxtgXDI2D1inLqNzm+pqiAgtwxGQb/G7+hHSwZPKN0m/XRQGO
COqNcc1GWMGKZKeZZdCHmA8Q3gW3c5Pqwinj/xdGzRxRhfeJ7kyzd39EBuNH9o9Q
+saMDcQX/FMdBpU8eAUqxDPZhPx5fvxLsoqGu4jnp5eHjzWo6KbqMSXaMTgpSFWU
rwgepxMPB6r/Us8UkAo/LgXDhOhjumQuhqKhbQsA+ngxfxY1veZkZQKjw6pxSuE6
objUmicb35LDy+/6rHSszCd6k5lcw8i8zqjsWDJXj6551wQNq+WYvINoUk5BwQcc
FJ1B4bLS9wE261i4y99T
=tMn+
-----END PGP SIGNATURE-----