Project

General

Profile

Freedom issue #2107

nextcloud-client depends on qt5-webengine

theova - 10 months ago - . Updated about 2 months ago.

Status:
confirmed
Priority:
freedom issue
Assignee:
-
% Done:

0%


Description

nextcloud-client depends on qt5-webengine:


Repository : community
Name : nextcloud-client
Version : 2.5.0-4
Description : Nextcloud desktop client
Architecture : x86_64
URL : https://nextcloud.com/
Licenses : GPL
Groups : None
Provides : None
Depends On : sqlite qtkeychain qt5-svg qt5-webengine qt5-webkit xdg-utils
Optional Deps : kio: integration with Dolphin
nemo-python: integration with Nemo
python-nautilus: integration with Nautilus
python2-caja: integration with Caja
Conflicts With : None
Replaces : None
Download Size : 2.55 MiB
Installed Size : 9.65 MiB
Packager : Chih-Hsuan Yen <yan12125@archlinux.org>
Build Date : Sat 17 Nov 2018 03:49:31 PM CET
Validated By : MD5 Sum SHA-256 Sum Signature

Since the webinterface shoudt not be needed necessarely and the origin owncloud-client hasn't it as a dependencie, I think, it should be possible to run it without qt5-webengine.

Thanks a lot!


Files

PKGBUILD (1.42 KB) PKGBUILD theova, 2019-04-27 10:37 AM
auth.patch (7.48 KB) auth.patch theova, 2019-04-27 10:37 AM
PKGBUILD (1.53 KB) PKGBUILD PKGBUILD (v2.5.3) theova, 2019-07-31 02:58 PM
PKGBUILD (1.55 KB) PKGBUILD PKGBUILD (v2.5.3 - fixed arch) theova, 2019-08-01 10:50 AM

Related issues

Related to Packages - Freedom issue #1167: [chromium][qt5-webengine][electron] QTWebgine/Electron embeds "entire Chromium platform"confirmed

Actions
Related to Packages - Packaging request #1115: [nextcloud-client] add package to PCRnot-a-bug

Actions

History

#1

Updated by theova 10 months ago

The daily image doesn't use qt5-webengine. An example of a pkgbuild can be seen in the AUR . It would be cool to have this package in the official repository.

#2

Updated by bill-auger 10 months ago

"appimage" in the package name indicates that as a blob package with qt5-webengine baked in - i.e. not built from source code - i.e. not fit for parabola

i could be wrong about that? - but it is indeed the latest casualty of the chromium->qt5-webengine->electron deluge

#3

Updated by bill-auger 10 months ago

  • Related to Freedom issue #1167: [chromium][qt5-webengine][electron] QTWebgine/Electron embeds "entire Chromium platform" added
#4

Updated by theova 10 months ago

bill-auger wrote:

"appimage" in the package name indicates that as a blob package with qt5-webengine baked in - i.e. not built from source code - i.e. not fit for parabola

I didn't know this, thanks.

I contacted the developers of nextloud-client. See https://github.com/nextcloud/desktop/issues/932.

#5

Updated by bill-auger 10 months ago

i would not expect that github issue to be convincing - this is not a new issue - the qt5-webengine dev team have already been confronted with this issue and they do not believe it is true

also, it is not correct to say that qt5-webengine is definitively considered non-free - it is considered non-free only because it has never been definitively shown to be free

also the link to the FSF is not going to be convincing either - if you really wanted to show them something relevant, this would be a better link to offer

https://lists.gnu.org/archive/html/directory-discuss/2017-11/msg00003.html

IIRC a qt5-webengine dev posted to that thread saying they were willing to fix any freedom issues that can be shown conclusively, if chromium does not address them first - that is the best you could ask of any upstream

lastly, i can say that any problem with qt5-webengine is in what it inherits from chromium - if there is any work to be done verifying or liberating qt5-webengine or electron, the upstream chromium would be the ideal place to do that work - in time, the changes would propagate to the others

#6

Updated by bill-auger 7 months ago

  • Status changed from open to confirmed
#7

Updated by theova 5 months ago

There is a patch to build nextcloud-desktop without qt5-webengine. I can't estimate, if there are any security issues, so it would be good, if somebody could have a look at it.

You can find the patch and the modified (Arch-)PKGBUILD in the attachment.

#8

Updated by bill-auger 5 months ago

  • Priority changed from bug to freedom issue

it looks that people are taking the patch favorably upstream - maybe we should just wait a bit and see if they accept it

#9

Updated by bill-auger 4 months ago

#10

Updated by theova about 2 months ago

Here is the updated PKGBUILD for Version 2.5.3.

#11

Updated by freemor about 2 months ago

Theova nice work on the updated PKGBUILD. I'm looking at it now. First issue
this is definitely NOT an "arch=(any)" package. It'll build fine that way and
even install on other ARCHs that way but if you try to execute it on an i686
machine you'll be met with an "Can not execute binary file: Exec format error".
This is something you see in AUR packaged a lot and they generally get away
with it due to Archlinux only supporting x86_64. So no biggie but something to
be watching for in the future. Parabola can and does have "any" packages but
these are generally things written in languages like python, perl, bash, or
something like java that is machine independent as it has it's own JVM to
abstract away the actual metal.

Keep up the good work. I'll keep getting to them as I am able. Not sure how
deeply I can test nextcloud client as I do not use nextcloud.

#12

Updated by theova about 2 months ago

Thanks for the feedback.
So I have replaced "arch=(any)" with

arch=(x86_64)
arch+=('i686' 'armv7h')

Also available in: Atom PDF