[Sugar-devel] What are all activity bundle sources & how to interpret differect exec values in activity.info files
James Cameron
quozl at laptop.org
Thu Apr 23 02:02:46 EDT 2020
Thanks Manish,
There is no reliable way to prove a bundle does not contain Python 2,
Python 3, or JavaScript code. While the exec value in metadata does
indicate a probability, it is not accurate.
I don't think we want any automated process for generating the static
app store from any of our existing bundle collections. We have no
Python 3 collection yet, because we have no app store yet.
Your app store generator ought to use as input a bundle collection
specified as a filesystem directory. One of the minimum requirements
[1] is to support activity bundles uploaded via SSH; which means they
could be used either as a filesystem directory when the generator runs
on the downloads web server, or as an HTTP URL which uses requests to
download the collection, or a set of URLs.
I recommend against any _execution_ of the activity bundles, because
of the security risks, so please don't use setup.py.
References:
1.
https://github.com/sugarlabs/GSoC/blob/master/Ideas-2020.md#sugar-app-store-for-python-3-activities-aslov4
On Thu, Apr 23, 2020 at 07:39:38AM +0200, sugar at radii.dev wrote:
> Thanks James. I knew yesterday I saw latest bundle on [1]http://
> activities.sugarlabs.org/activities to be added last month. But couldn't find
> it today and assumed it to be my misunderstanding. I see that parent directory
> may show last modified data older than sub-directory as the case in [2]http://
> mirror.aarnet.edu.au/pub/sugarlabs/sources/ .
>
> Many activities in [3]http://activities.sugarlabs.org/activities/?C=M;O=D do
> not have exec in their activity.info but by inspecting their shebang it can be
> determined that these are python2 activities. But some such as jukebox have
> neither of these. Though in jukebox repository, from branches since sugar-0.94
> it is specified as either sugar-activity or sugar-activity3.
>
> In summary, I am looking for pattern to determine if an activity bundle is
> python2, python3, js (also if meant for sugarizer only or sugar compatible) or
> something else + sources from where I can fetch bundles (mainly python3). This
> is needed for automating entire process of generating static app store.
> Difficulty I am facing:
> 1) some have non-standard exec
> 2) some (in link you have mentioned) have no exec
> 3) where to find all python3 activity bundles . I will try executing 'setup.py
> dist_xo' in all sources found in [4]http://mirror.aarnet.edu.au/pub/sugarlabs/
> sources/ where setup.py is available in source tarball. Is this the way to go?
>
> Regards,
> Manish
>
> Apr 23, 2020, 14:38 by quozl at laptop.org:
>
> Ah, I've found what you mean.
>
> When a directory is viewed, the date of last modification is the date
> of last insertion to or deletion from the directory.
>
> It is easy to misinterpret.
>
> On Thu, Apr 23, 2020 at 02:26:18PM +1000, James Cameron wrote:
>
> Thanks for asking.
>
> Yes, those resources are updated regularly. Each time an activity or
> component is released. The date you saw for December 2018 may be an
> interpretation that does not fit the facts.
>
> http://download.sugarlabs.org/activities/?C=M;O=D is the same as
> http://activities.sugarlabs.org/activities/?C=M;O=D and both show
> updates to 25th March.
>
> http://mirror.aarnet.edu.au/pub/sugarlabs/ is an rsync mirror of
> http://download.sugarlabs.org/
>
> http://mirror.aarnet.edu.au/pub/sugarlabs/sources/honey/?C=M;O=D shows
> updates to 21st April.
>
> http://mirror.aarnet.edu.au/pub/sugarlabs/sources/sucrose/fructose/?C=
> M;O=D
> shows updates to 22nd April.
>
> No, there is no single source of all latest activity bundles or all
> sources. I don't think such a source is needed. I also release
> Python 2 latest activity bundles, and again, I don't have a single
> source.
>
> Yes, Tony's repository has not changed, does not include Python 3
> activities, and does include different exec values in bundles. It may
> also include bundles that are not part of Sugar Labs, for various
> reasons.
>
> On Thu, Apr 23, 2020 at 04:47:14AM +0200, sugar at radii.dev wrote:
> > Is [1]download.sugarlabs.org & [2]mirror.aarnet.edu.au/pub/sugarlabs/
> updated
> > regularly? I found latest update on these on 3rd of December 2018. I
> think [3]
> > activities.sugarlabs.org/activities is only for python2 activities.
> Where can I
> > find bundles of all activities (primarily python3). Currently I am
> using Tony
> > Anderson 's [4]app store repo as source. Latest activity bundle added
> to it was
> > on 14th July 2018 and no bundle of them is python3 activity i.e.
> 'exec =
> > "sugar-activity3"' . Can anyone please help me identify a single
> source of all
> > latest activity bundles or all sources, how frequently they are
> updates and
> > which one contains latest for which 'exec'/language/platform.
> >
> > Also there are 38 different execs in bundles in Tony's repo which
> are:
> >
> > sugar-activity-web
> > sugar-activity
> > Breakout.sh
> > etoys-activity
> > runevil
> > riverhexactivity-activity
> > EtoysBasedActivityStart.sh
> > sugarGedit
> > geogebra
> > sugarGnumeric
> > kaleidoscope.sh
> > ./firefox
> > sugarMinecraft
> > minivmac-activity
> > quake-activity
> > launcher
> > StackAttack.sh
> > activity/activity
> > launch
> > ./google-chrome
> > activityname.sh
> > ./firefox-activity.py
> > sugarGTranslator
> > sugaridle
> > jpeces
> > sugar-launch
> > sugarOggConvert
> > sugarOOo4Kids
> > scribble_start
> > ./Ejecutar.sh
> > sugarTotem
> > tuxmath-activity
> > activity/tuxpaint
> > usb-creator-sugar
> > sugarVascolet
> > ./ldshim.py
> > sugarXa
> > bin/activity.sh
> >
> > Please help me in understanding how I should interpret them and
> determine their
> > programming language (python2, python3, javascript etc.) &
> compatibility with
> > sugar & sugarizer.
> >
> > Regards,
> > Manish
> >
> > References:
> >
> > [1] https://download.sugarlabs.org/?C=M;O=D
> > [2] https://mirror.aarnet.edu.au/pub/sugarlabs/?C=M;O=D
> > [3] https://activities.sugarlabs.org/activities/?C=M;O=D
> > [4] https://github.com/tony37/Sugaractivities/tree/master/activities
>
> > _______________________________________________
> > Sugar-devel mailing list
> > Sugar-devel at lists.sugarlabs.org
> > http://lists.sugarlabs.org/listinfo/sugar-devel
>
> --
> James Cameron
> http://quozl.netrek.org/
>
> --
> James Cameron
> http://quozl.netrek.org/
> _______________________________________________
> Sugar-devel mailing list
> Sugar-devel at lists.sugarlabs.org
> http://lists.sugarlabs.org/listinfo/sugar-devel
>
> References:
>
> [1] http://activities.sugarlabs.org/activities
> [2] http://mirror.aarnet.edu.au/pub/sugarlabs/sources/
> [3] http://activities.sugarlabs.org/activities/?C=M;O=D
> [4] http://mirror.aarnet.edu.au/pub/sugarlabs/sources/sucrose/fructose/Browse/?C=M;O=D
--
James Cameron
http://quozl.netrek.org/
More information about the Sugar-devel
mailing list