From: shannonskipper@...
Date: 2020-01-08T00:38:25+00:00
Subject: [ruby-core:96707] [Ruby master Misc#16483] How about stopping new	*.tar.bz2 releases?

Issue #16483 has been updated by shan (Shannon Skipper).


If bz2 removal goes forward, it might be nice to deprecate now but not remove until later. It'd be ideal to have working versions of RVM, ruby-install and ruby-build in wide distribution before bz2 goes away. If we change the tools now but don't remove bz2 for a few years, I think it'd go smoother without having users tempted to bypass checksums.

For ruby-install, users will have to upgrade the tool itself to move off bz2. It uses a different repo, ruby-versions, for checksums, so it already has xz, etc. But, the choice of bz2 is hardcoded in ruby-install. Currently, bz2 is used for Ruby and Rubinius and tar is used for MRuby, JRuby and TruffleRuby. Only small code changes are necessary, but everyone would have to upgrade the tool rather than just using the --latest flag to fetch the latest Ruby metadata like normal. Since metadata isn't handled in the tool itself, ruby-install isn't updated frequently. Users tend not to upgrade often and it doesn't have a self-update mechanism.

RVM has bz2 md5 and sha512 checksums hardcoded inline, so it's just the RVM repo to update to new checksums. RVM already has tooling to support alternative decompression, but I'm not sure where all else bz2 might be intertwined. It's probably not too bad after changing a bunch of checksums. Users would need to get an updated version of RVM for bz2 support too, but that's also the normal upgrade mechanism for access to new Ruby metadata���so it's normal for RVM users to upgrade fairly often.

----------------------------------------
Misc #16483:  How about stopping new *.tar.bz2 releases?
https://bugs.ruby-lang.org/issues/16483#change-83695

* Author: znz (Kazuhiro NISHIYAMA)
* Status: Open
* Priority: Normal
* Assignee: 
----------------------------------------
Current ruby releases generate `*.tar.gz`, `*.tar.bz2`, `*.tar.xz`, and `*.zip`.
But I think we can stop generating `*.tar.bz2`.

I think `*.tar.bz2` are less merit.
For better size, `*.tar.xz` exist.
For better compatibility, `*.tar.gz` and `*.zip` exist.

I check some programming languages source package archives.

- https://jdk.java.net/13/ tar.gz zip
- https://gcc.gnu.org/mirrors.html tar.gz tar.xz
- https://www.python.org/downloads/source/ tgz tar.xz
- https://nodejs.org/dist/v12.14.0/ tar.gz tar.xz (and 7z zip for win)
- https://www.perl.org/get.html tar.gz
- https://www.php.net/downloads.php tar.bz2 tar.gz tar.xz

`tar.bz2` are rare.

How about stopping `*.tar.bz2` since next release?

(I know [ruby-build](https://github.com/rbenv/ruby-build) use `*.tar.bz2`. And it can use `*.tar.gz`)



-- 
https://bugs.ruby-lang.org/

Unsubscribe: <mailto:ruby-core-request@ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>