addpkg(main/arti): 1.2.8 #21993
addpkg(main/arti): 1.2.8 #21993
Conversation
| } | ||
|
|
||
| termux_step_create_debscripts() { | ||
| cat <<- EOF > ./postinst |
There was a problem hiding this comment.
Need some review especially for this post install script
| echo | ||
| echo "Arti is an EXPERIMENTAL implementation of existing CTor." | ||
| echo | ||
| echo "It is not recommended to use Arti unless you know what you are doing. It may not be up to mark with existing ctor in terms of stability, performance and MOST IMPORTANTLY SECURITY. Use Arti only if you want to help find bugs in the software" |
There was a problem hiding this comment.
Maybe something like:
| echo "It is not recommended to use Arti unless you know what you are doing. It may not be up to mark with existing ctor in terms of stability, performance and MOST IMPORTANTLY SECURITY. Use Arti only if you want to help find bugs in the software" | |
| echo "It is not recommended to use Arti unless you have previous experience with Tor." | |
| echo "It may not be up to parity with existing ctor in terms of stability, performance and MOST IMPORTANTLY SECURITY." | |
| echo "Treat Arti moreso as an experimental package provided to find bugs in the project." |
There was a problem hiding this comment.
That's not nearly strong enough. The warning here is that this implementation is WIP and may wildly fail to provide the guarantees you're expecting of tor.
@thunder-coding I can offer some tweaks to the language, but first: tor is probably the closest thing we ship to safety-critical software. People do things that risk physical harm using tor because they believe it's trustworthy. The devs of this implementation are extremely clear that you should not be using it yet unless you are actively developing tor. Presumably, you felt the loudly repeat that in a postinst because you are aware that packaging something implies a high degree of out-of-the-box readiness.
If the only people who should be using this are developers, why do you want to package this, and is it a good idea to do so? My immediate read on this situation is "heck no".
There was a problem hiding this comment.
Thanks, converting this PR to draft. Will keep on updating versions of arti as they come. Will start shipping this when Tor devs announce about declaring arti to be stable enough!
No description provided.