News for hackers. Stuff that matters.
Re:Bingo – The missing package manager for Go binaries (Home... by awestroke on Sunday December 26, 2021 @02:59AM (#29690585)
Homebrew has been around for a long time. I've never seen a better alternative for macOS, do you think you could mention any of them?

Regarding MacPorts:

> MacPorts distributes source code that is compiled on install, so Macports is generally much slower to install packages. Macports installs packages under “/opt/local”. Macports uses root, which can lead to users goofing up their system or workplace policy issues

Sounds horrifying

Re:Bingo – The missing package manager for Go binaries (Home... by siraben on Sunday December 26, 2021 @03:22AM (#29690684)
Homebrew has been pretty poor IME. It is not possible to pin the homebrew repository per project, dependency confusion happens a lot (try installing different versions of core libraries at the same time), the way it messes with macOS file system permissions in /usr/local should be considered a risk (and not working with multiple users), and it’s generally very slow.

At this point I only use Homebrew for casks and Nix for everything else on macOS, which is far more up to date, reproducible, and cross-platform.

Re:Bingo – The missing package manager for Go binaries (Home... by cpach on Sunday December 26, 2021 @06:22AM (#29691499)
Hm. Using Nix looks interesting (I’m a fellow Mac user).

When you do that, do you also need to compile the applications during installation…? (E.g. stuff written in Rust/C/C++)

Do you need to edit the “recipes” a lot or do they generally Just Work?

Re:Bingo – The missing package manager for Go binaries (Home... by rgoulter on Sunday December 26, 2021 @11:30AM (#29693752)
> Hm. Using Nix looks interesting (I’m a fellow Mac user).

Nix is very powerful; there's a steep learning curve the more of its ecosystem you use. If "declarative", "generational", "immutable" are all words you like, it's worth looking into.

It's one of the best ways to be able to get a consistent set of tools (and versions of) across macOS/Linux.

> When you do that, do you also need to compile the applications during installation…? (E.g. stuff written in Rust/C/C++)

My experience using Nixpkgs with macOS was that most stuff downloaded from the cache. I would run into a few cache-misses where Nix would fetch & compile the source. (e.g. KeePassXC .. although maybe it wasn't cached because other users would install programs like that from casks).

> Do you need to edit the “recipes” a lot or do they generally Just Work?

Mostly it works. The caveats:

- I have run into a case where some test failed because of path length limits(?). I worked around that by skipping the test.

- I'd guess the order of popularity of community usage is "NixOS > other Linux > macOS > other". Some packages might be able to work on macOS, but either have metadata marked as linux-only, or don't take care of (maybe) macOS specific needs. (e.g. It's been fixed, and the workaround wasn't difficult before that, but I'd run into this https://github.com/NixOS/nixpkgs/issues/56348).

- Nix is weird; so, sometimes when it's not doing what you want, it can be difficult to figure out what it is you have to do. (So, you can fall-back and use homebrew or whatever).

Re:Bingo – The missing package manager for Go binaries (Home... by siraben on Sunday December 26, 2021 @07:15AM (#29691805)
> When you do that, do you also need to compile the applications during installation…? (E.g. stuff written in Rust/C/C++)

If it's in Nixpkgs and it builds, then you skip the building step entirely and fetch from cache.

> Do you need to edit the “recipes” a lot or do they generally Just Work?

They generally just work.[0] If you do need to edit the package expressions it's usually to switch versions or to a fork, IME.

[0] https://hydra.nixos.org/jobset/nixpkgs/nixpkgs-21.11-darwin

Re:Bingo – The missing package manager for Go binaries (Home... by angio on Sunday December 26, 2021 @06:54AM (#29691668)
I don't know on MacOS, but on NixOS nix fetches pre-built binaries from Cachix. It only needs to build derivations if you customize them.
Re:Bingo – The missing package manager for Go binaries (Home... by pxc on Sunday December 26, 2021 @12:17PM (#29694231)
The main binary cache for NixOS is built using Hydra, an open-source CI system for Nix which is much older than Cachix.

Cachix is a proprietary SaaS alternative to Hydra's binary caching component. It's free to use for F/OSS, and it's much easier to set up than Hydra, so plugging Cachix in to a generic CI system like Travis or GitHub actions is a popular choice for open-source projects in the Nix community.

Re:Bingo – The missing package manager for Go binaries (Home... by bloopernova on Sunday December 26, 2021 @07:42AM (#29691965)
For anything versioned, I use asdf: https://github.com/asdf-vm/asdf

It's straightforward enough that the software devs I work with consider it "painless" to use.

asdf describes itself as "asdf is a CLI tool that can manage multiple language runtime versions on a per-project basis. It is like gvm, nvm, rbenv & pyenv (and more) all in one!"

Re:Bingo – The missing package manager for Go binaries (Home... by amrox on Sunday December 26, 2021 @07:49AM (#29692006)
This is what I do as well.

I use Homebrew for general purpose niceties like starship, fzf, and casks.

Project deps are managed with asdf.

The “right answer” may in fact be Nix however. I just haven’t fully grokked it yet.

Re:Bingo – The missing package manager for Go binaries (Home... by Spivak on Sunday December 26, 2021 @03:52PM (#29696225)
But Homebrew is first in the metric that really matters, availability of the packages that people want to install. Like I just don’t care about the minutia when all I ever have to do is add some lines to my Brewfile every now and again and run brew bundle to completely set up my system.
Re:Bingo – The missing package manager for Go binaries (Home... by Maursault on Wednesday December 29, 2021 @09:40AM (#29725203)
What you're saying is hype is all that matters, as hype is the only reason new packages are added to Homebrew, and only because Homebrew got to the developer first, which is to say, by accident. But not all package managers were created equal. Hype is just hype, a tribalistic enthusiasm for the team you arbitrarily happen to support. But if the foundation is weak, and it really is, the underlying egotistical ideology of ignoring the standards of the targeted system, then everything that is built upon it is in jeopardy of failing, and to mitigate this Homebrew requires unrelated projects to keep it functional. It's a bloody mess and makes a bloody mess. So beating the alternatives to the developers door, the alternatives that aren't even bothering to do this, is what you say is the only metric that matters. You're saying politics is all that matters, and effectively claiming substance (the quality of the code and adhering to standards) is irrelevant. Ok. \o/
Re:Bingo – The missing package manager for Go binaries (Home... by rapsey on Sunday December 26, 2021 @05:02AM (#29691070)
Homebrew does not need to be in /usr/local everything will work fine running from your home folder.
Re:Bingo – The missing package manager for Go binaries (Home... by pxc on Sunday December 26, 2021 @12:19PM (#29694252)
You lose most binary caching if you do that, which is the major advantage of Homebrew over MacPorts cited by the relevant poster.
Re:Bingo – The missing package manager for Go binaries (Home... by Maursault on Sunday December 26, 2021 @10:16AM (#29692981)
> Homebrew has been around for a long time.

Since 2009. There is no package manager younger. But it sure has a lot of hype.

> I've never seen a better alternative for macOS

Because you've never looked. Every other package manager available on macOS is better than Homebrew. pkgsrc. Nix. Fink. All of them are better. Homebrew is dead last in features and stability. After using Homebrew for only a short time, you'll have a mess on your file system. Good luck cleaning it up.

MacPorts will install pre-built binaries with the -b option, if you want. But building from source is superior. It's called rolling your own, because what you build is yours and yours alone, and it is more secure, allowing review of the code, has the advantage of customizing with specific variants and deeper customizations, and allows installing the most recent version of the code. With binary installs, your're stuck with whatever you get. Also, MacPorts is more compatible, will install and build from Tiger on up, anc works for all users on the system with sudo access. Homebrew abandons older systems rapidly, and only works for one user. But the most obnoxious thing about Homebrew is what it does to /usr/local, which is to say it fubars the directory and everything that lives there.

Re:Bingo – The missing package manager for Go binaries (Home... by jolux on Sunday December 26, 2021 @10:29AM (#29693130)
> After using Homebrew for only a short time, you'll have a mess on your file system. Good luck cleaning it up.

Been using Homebrew for a decade and haven’t had serious problems with it in a very long time. I do use asdf for versioning language runtimes though. I’m not saying it doesn’t have these problems, just that it’s possible to use without running into them, which is why I haven’t felt compelled to switch.

> But building from source is superior.

Not if you value your time. Also Homebrew supports it with --build-from-source, so this is really just a question of defaults. Homebrew values my time.

Re:Bingo – The missing package manager for Go binaries (Home... by Maursault on Sunday December 26, 2021 @12:13PM (#29694191)
> just that it’s possible to use without running into them, which is why I haven’t felt compelled to switch.

Try using from another user account

Re:Bingo – The missing package manager for Go binaries (Home... by jolux on Sunday December 26, 2021 @01:08PM (#29694749)
Sure, but that’s a known flaw, and it’s also not a use case I have. I already said I’m not a fan of it’s design, but feel compelled to use it because of its dominance. Brew is solidly a “worse is better” proposition. I do not care nearly as much about how my package manager works as long as it has the packages I need when I need them. This is the priority for user experience.
Re:Bingo – The missing package manager for Go binaries (Home... by Maursault on Sunday December 26, 2021 @02:30PM (#29695490)
I feel you, sudo port install <package> is way too complicated. btw, anything in brew can be anywhere else, like macports or nix, all it takes is a maintainer to sponsor it. But I have to respect your brand loyalty, even in spite of fatal flaws and less than a quarter of the packages available elsewhere. It is then recommended that you never install anything else into /usr/local. But some tools will install there by default, such as BBEdit command line tools that will default to /usr/local/bin, which actually abides by the UNIX filesystem standards by doing so.
Re:Bingo – The missing package manager for Go binaries (Home... by jolux on Sunday December 26, 2021 @02:50PM (#29695677)
> But I have to respect your brand loyalty, even in spite of fatal flaws and less than a quarter of the packages available elsewhere.

Again, since you don't seem to be reading what I'm writing:

The primary reason I use Homebrew is not because I think it has a superior design for package management or because it has the absolute greatest number of packages but because I have never once encountered a dependency that was not in its registry. It always has what I need. The same is not true of MacPorts. It is immaterial to me how many MacPorts packages exist that I don't need, because it doesn't always have the ones I do need.

Here's a good example that I just found randomly right now:

MacPorts Erlang: version 23.1, from September 23, 2020 (https://ports.macports.org/port/erlang/).

Homebrew Erlang: 24.2, from December 15, 2021 (https://formulae.brew.sh/formula/erlang).

Yes, when encountering something like this, I could take the time to update the port definition. Or I could just install the version that already exists in Homebrew and get on with things. Can you understand why I would choose the latter in the absence of a need for multi-user functionality or any other real issues with brew in day-to-day usage?

Re:Bingo – The missing package manager for Go binaries (Home... by Maursault on Wednesday December 29, 2021 @09:26AM (#29725048)
> because I have never once encountered a dependency that was not in its registry. It always has what I need. The same is not true of MacPorts.

This is the primary reason for using a package manager. What you are claiming is extraordinary, that MacPorts has some number of ports that can't build because of missing dependencies. What you are claiming is MacPorts is hopelessly broken, which ironically is precisely the way I feel about Homebrew, that while using it for a handful of ports may be fine, but that it plays fast and loose with UNIX standards and ultimately breaks down. I think it is far more likely that you came across a problem either due to the state of your system, or that there was an actual defect (which is ordinary, and that likely as not had been fixed before long), and you didn't understand and didn't want to bother with it. What I suspect is that you had one single problem somewhere and incorrectly believe, for reasons beyond understanding, a fallacious and sweeping generalization that MacPorts pervasively has missing dependencies. That's what I think because your claim is borderline absurd.

But if you're happy with Homebrew, more power to you. As I stated, I disagree, and personally find Homebrew not merely superfluous but broken fundamentally for it's underlying ideology, which is to ignore the standards on the systems it is targeting, and if not for it's constant desperate and ravenous marketing, and being propped up by unrelated projects, would have died years ago, but the momentum of its hype keeps it dragging its ugly mess along without actually moving forward. I could be mistaken, but that's how I see it.

> Here's a good example that I just found randomly right now: MacPorts Erlang: version 23.1, from September 23, 2020 (https://ports.macports.org/port/erlang/). Homebrew Erlang: 24.2, from December 15, 2021 (https://formulae.brew.sh/formula/erlang).

No this is not in the least what you were specifying. Now your newly introduced complaint is not that dependencies are missing, but that the package is not at the bleeding edge, because you need your packages at the bleeding edge in your production for unnamed reasons. You are among those that have apparently not yet been burned by applying every update the moment you see it, have not yet seen your production grind to a halt because of your itchy trigger finger. But it is inevitable if you're applying updates without consideration of the fact that the only possible reasons for applying an update to production (as opposed to development) is 1) new features that are essential to your production, 2) bug fixes that repair your production, and/or 3) security patches which are relevant to your production or system. Without consideration of these, that is, if these considerations make no difference to your production or system, you are applying updates without reason. I never let it get this far with Homebrew, so I don't have experience with rolling back updates or upgrades with it. But MacPorts takes this into consideration, and the method for doing so is well documented in the online manual and proscribed by its listserv members generously if the manual was ignored.

Re:Bingo – The missing package manager for Go binaries (Home... by wbl on Sunday December 26, 2021 @03:40PM (#29696100)
Macports uses binaries if they exist. If not it uses source.
Re:Bingo – The missing package manager for Go binaries (Home... by pxc on Sunday December 26, 2021 @04:09AM (#29690863)
> Sounds horrifying

Let's break this down.

> Macports is generally much slower to install packages

MacPorts and Homebrew are both source-based package managers. Distributing source code to be compiled on install is the basic design of both. And both also have binary caches. I think compared to the size of each package collection, Homebrew's binary cache is more complete, so it might save you some time sometimes.

(As package managers go, though, Homebrew is extremely slow.)

> Macports installs packages under “/opt/local”

This is much better behavior than taking over /usr/local, which is generally for packages you install manually. It's much more portable and much less prone to compatibility problems.

> Macports uses root, which can lead to users goofing up their system or workplace policy issues

Homebrew uses root and it just hides from you that it uses root by giving ownership of /usr/local to your particular user, which constitutes a system policy issue. It's a security problem and it's also just a disgusting thing to do on a nominally multi-user operating system.

The only one of these issues where Homebrew wins is with the binary cache size (which has apparently come at the cost of reducing customizability for many Homebrew packages, if the comments of longtime Homebrew users on GitHub and HN are to be believed).

Re:Bingo – The missing package manager for Go binaries (Home... by saghm on Sunday December 26, 2021 @03:13PM (#29695878)
> This is much better behavior than taking over /usr/local, which is generally for packages you install manually. It's much more portable and much less prone to compatibility problems.

Isn't using `/usr/local` pretty standard for BSDs? I remember that on FreeBSD the package manager installs things there, and I _think_ NetBSD and OpenBSD might also, but it's been so long that I've played around with them that I can't remember for sure.

Re:Bingo – The missing package manager for Go binaries (Home... by pxc on Sunday December 26, 2021 @03:48PM (#29696183)
NetBSD's package manager is pkgsrc, which (at least on foreign systems) uses /usr/pkg for the source tree and /opt/pkg for installs.

While ports packages are always considered 'optional', they are sometimes first-party (as opposed to 'foreign') in the sense that they're made by the same community of developers as the base system, and they are universally expected to be the main package manager on that particular OS. I think usage of /usr/local as an install prefix is more typical for ports systems that are 'first-party' in this sense.

When Homebrew was created, MacPorts already used /usr/local, and Homebrew's choice to do the same made them incompatible with one another. /usr/local is also directly used by language-specific package managers for global package installs by default, which is another potential source of conflict.

Because /usr/local is on a lot of default search paths, it's more likely that libraries installed there will be picked up by default by random programs on the system (both at build time and at runtime). This is somewhat convenient, especially if you want your package manager to modify the behavior of the underlying base system. But it's also less portable, less predictable, and more presumptuous in that it is more likely to cause conflicts with other tools (and thus assumes/asserts that you won't use them). For these reasons, most ports systems that target foreign operating systems (e.g., Pkgsrc, MacPorts, Ravenports, Gentoo Prefix, and, oddly enough, Linuxbrew) don't target or recommend /usr/local as the default install prefix.

Re:Bingo – The missing package manager for Go binaries (Home... by rapsey on Sunday December 26, 2021 @05:00AM (#29691063)
There is nothing keeping you from installing homebrew in your home folder. It is completely painless. No root required.
Re:Bingo – The missing package manager for Go binaries (Home... by pimlottc on Sunday December 26, 2021 @12:06PM (#29694122)
I wouldn't call it completely painless when I tried it a few years ago. Compile times can be very long for some packages (try installing pandoc and all its required dependencies) and there were definitely a few package that just didn't work, though I don't remember which ones now.
Re:Bingo – The missing package manager for Go binaries (Home... by ck45 on Sunday December 26, 2021 @07:18AM (#29691822)
No, it’s not completely painless. You need to recompile a lot of packages and are spammed with warnings.
Re:Bingo – The missing package manager for Go binaries (Home... by rapsey on Sunday December 26, 2021 @09:55AM (#29692793)
I have had zero warning spam and no issues and I use it a lot.
Re:Bingo – The missing package manager for Go binaries (Home... by pxc on Sunday December 26, 2021 @01:13PM (#29694816)
If you run `brew doctor` on a brew installation with a custom prefix, you get several spurious warnings depending on what all you have installed.

It's not spam, but it is annoying if you're trying to use `brew doctor` in an automated process.

Re:Bingo – The missing package manager for Go binaries (Home... by AnonC on Sunday December 26, 2021 @08:48AM (#29692320)
The MacPorts approach is not horrifying or worse. This blog post [1] from April 2019 makes a good case for MacPorts and against Homebrew.

[1]: https://saagarjha.com/blog/2019/04/26/thoughts-on-macos-pack...

Re:Bingo – The missing package manager for Go binaries (Home... by sdedovic on Sunday December 26, 2021 @04:44AM (#29690981)
> I've never seen a better alternative for macOS

I'm quite enjoying Nix as a *nix + mac package manages. Plus using direnv really makes things a breeze. Although Nix has a __very__ steep learning curve... I still recommend it greatly!

Re:Bingo – The missing package manager for Go binaries (Home... by loopz on Sunday December 26, 2021 @07:43AM (#29691969)
I can't speak for macOS, but on Linux using Nix as package manager is relatively painless once you follow a recipe such as this one:

https://www.tecmint.com/nix-package-manager-for-linux/

There may be bugs with packages though, so I use it for what works for me. Not when it breaks with local dynamic libraries. It's a nice addition to get more recent packages than the distro offers.

Guix can be used as additional package manager as well.

NixOS (the distro) is steep though, like driving madly along a cliff steep. Guix even more so but with less speed.

Re:Bingo – The missing package manager for Go binaries (Home... by eptcyka on Sunday December 26, 2021 @07:43AM (#29691972)
brew is horribly slow, auto updates on any invocation I make and isn't nice to use when managing different versions of a package. It doesn't install Android studio for me correctly. Its also not reproducible. And it depends on github. And all build recipes are just Ruby, so its slow to parse and easy to pwn.
Re:Bingo – The missing package manager for Go binaries (Home... by dmitriid on Sunday December 26, 2021 @12:20PM (#29694261)
>auto updates on any invocation

I've found these three options to be very valuable:

    export HOMEBREW_UPDATE_REPORT_ONLY_INSTALLED=1 # only list updates to installed software
    export HOMEBREW_NO_ANALYTICS=1
    export HOMEBREW_NO_AUTO_UPDATE=1
Re:Bingo – The missing package manager for Go binaries (Home... by IshKebab on Sunday December 26, 2021 @08:20AM (#29692178)
I agree, Homebrew is really slow, but as slow as compiling everything from source.
Re:Bingo – The missing package manager for Go binaries (Home... by eptcyka on Sunday December 26, 2021 @02:20PM (#29695397)
No, even using packages that just download binaries, its still slow as wading through petrified excrement.
Re:Bingo – The missing package manager for Go binaries (Home... by saagarjha on Sunday December 26, 2021 @04:19AM (#29690903)
MacPorts has binary builds for a lot of packages these days–pretty much everything that they can distribute without licensing issues.
Re:Bingo – The missing package manager for Go binaries (Home... by amake on Sunday December 26, 2021 @06:56AM (#29691672)
> > MacPorts distributes source code that is compiled on install, so Macports is generally much slower to install packages

False. Binaries, built from source, are used by default.