open-cogsci/opensesame-conda-recipes

Warning issued for cogsci packages

Opened this issue · 4 comments

On MacOS, the following warning is issued lately when installing any one of these cogsci packages:

Package cogsci::python-datamatrix-0.4.4-py_0 uses a pre-link script. Pre-link scripts are potentially dangerous  discouraged.
This is because pre-link scripts have the ability to change the package contents in the
package cache, and therefore modify the underlying files for already-created conda
environments.  Future versions of conda may deprecate and ignore pre-link scripts.

Package cogsci::python-fileinspector-1.0.2-py_0 uses a pre-link script. Pre-link scripts are potentially dangerous  discouraged.
This is because pre-link scripts have the ability to change the package contents in the
package cache, and therefore modify the underlying files for already-created conda
environments.  Future versions of conda may deprecate and ignore pre-link scripts.

Package cogsci::python-qdatamatrix-0.1.13-py_0 uses a pre-link script. Pre-link scripts are potentially dangerous  discouraged.
This is because pre-link scripts have the ability to change the package contents in the
package cache, and therefore modify the underlying files for already-created conda
environments.  Future versions of conda may deprecate and ignore pre-link scripts.

Package cogsci::python-qnotifications-1.1.1-py_0 uses a pre-link script. Pre-link scripts are potentially dangerous  discouraged.
This is because pre-link scripts have the ability to change the package contents in the
package cache, and therefore modify the underlying files for already-created conda
environments.  Future versions of conda may deprecate and ignore pre-link scripts.

Package cogsci::python-qprogedit-4.0.9-py_0 uses a pre-link script. Pre-link scripts are potentially dangerous  discouraged.
This is because pre-link scripts have the ability to change the package contents in the
package cache, and therefore modify the underlying files for already-created conda
environments.  Future versions of conda may deprecate and ignore pre-link scripts.

Package cogsci::python-opensesame-3.1.5a7-py_0 uses a pre-link script. Pre-link scripts are potentially dangerous  discouraged.
This is because pre-link scripts have the ability to change the package contents in the
package cache, and therefore modify the underlying files for already-created conda
environments.  Future versions of conda may deprecate and ignore pre-link scripts.

@smathot do you have any idea what this means? We aren't doing anything special in the recipes, are we? If not, I can see if I can escalate this to the conda crew.

That's a bit mysterious. I think it's not the recipes, but my build environment, which I haven't updated—on purpose, because I don't want to change anything in the way that packages are built.

I'm building in a virtualbox with conda 4.0.8 on Ubuntu 16.04.

I do keep my conda build stack updated (as it is part of my main conda environment) and I think I have built python-qosf with it. This doesn't show up in the list, so this could indeed be caused by older versions of conda-build. In any case, it doesn't seem harmful, so let's not pay too much attention to this as long as things keep working.

bokeh/bokeh#5663 (comment) attributes this message to using an older type of noarch packages. So I guess this will disappear in due time when we switch to the 'newer' noarch package (of which there is little information as of now). In general, this issue seems harmless, so we can ignore it for now.

Right, I see. Well, let's leave this issue open for now as a reminder. But it's definitely low priority.