Arch Linux User Repository

Hi there - Would you consider switching the dependency on go-pie to go? You can still build PIE binaries by building exercism using:

  go build \
    -buildmode pie \
    -ldflags "-extldflags $LDFLAGS" \
    -trimpath \
    -o out/exercism \
    exercism/main.go

The first flag is what go-pie does by default. AIUI, according to this task https://bugs.archlinux.org/task/60928, it seems like some TUs want to eliminate go-pie and have go build PIE by default (and instead have a go-nopie package in place for builds incompatible with PIE for some reason).

The other 2 flags are meant to enable reproducible builds, and were referenced from https://wiki.archlinux.org/index.php/Go_package_guidelines#Flags_and_build_options. I can confirm by verifying with namcap that the three flags together produce reproducible binary builds.

Here's a patch for an update to 3.0.13.

From 42a2fea73cb1b67e25f19af9ec5815c7cb43462f Mon Sep 17 00:00:00 2001
From: "Thor K. H" <thor@roht.no>
Date: Wed, 27 Nov 2019 14:31:32 +0100
Subject: [PATCH] Update to 3.0.13 and remove dep

---
 .SRCINFO | 7 +++----
 PKGBUILD | 8 ++++----
 2 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/.SRCINFO b/.SRCINFO
index 9748eaa..3595ab9 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,16 +1,15 @@
 pkgbase = exercism
    pkgdesc = Command line client for https://exercism.io
-   pkgver = 3.0.10
+   pkgver = 3.0.13
    pkgrel = 2
    url = https://github.com/exercism/cli
    arch = i686
    arch = x86_64
    license = MIT
-   makedepends = dep
    makedepends = go-pie
    depends = glibc
-   source = https://github.com/exercism/cli/archive/v3.0.10.tar.gz
-   sha256sums = 0dbb34ba3bb3571fbc75fa9f5cb0b061317589a98a1af12fe7318a2c4cdbda5b
+   source = https://github.com/exercism/cli/archive/v3.0.13.tar.gz
+   sha256sums = ecc27f272792bc8909d14f11dd08f0d2e9bde4cc663b3769e00eab6e65328a9f

 pkgname = exercism

diff --git a/PKGBUILD b/PKGBUILD
index ae92a3b..49413d7 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,16 +1,17 @@
 # Maintainer: Federico Squartini <federico.squartini at gmail dot com>
+# Contributor: Thor K. Høgås <thor at roht dot no>

 pkgname=exercism
-pkgver=3.0.10
+pkgver=3.0.13
 pkgrel=2
 pkgdesc="Command line client for https://exercism.io"
 arch=("i686" "x86_64")
 url="https://github.com/exercism/cli"
 license=("MIT")
 depends=('glibc')
-makedepends=('dep' 'go-pie')
+makedepends=('go-pie')
 source=("https://github.com/exercism/cli/archive/v${pkgver}.tar.gz")
-sha256sums=('0dbb34ba3bb3571fbc75fa9f5cb0b061317589a98a1af12fe7318a2c4cdbda5b')
+sha256sums=('ecc27f272792bc8909d14f11dd08f0d2e9bde4cc663b3769e00eab6e65328a9f')

 prepare() {
   export GOPATH="$srcdir"/.gopath
@@ -21,7 +22,6 @@ prepare() {
 build() {
   export GOPATH="$srcdir"/.gopath
   cd "$GOPATH"/src/github.com/exercism/cli
-  dep ensure
   go build -o out/exercism exercism/main.go
 }

-- 
2.24.0

There is another exercism package on aur, which ships the official binary. Instead this one builds from source.