[Guix packaging] Sangband #501

New issue

Open

opened 2026-08-24 17:33:17 +00:00 by htayj · 1 comment

htayj commented

2026-08-24 17:33:17 +00:00

(Migrated from github.com)

Candidate

Project: Sangband
Candidate upstream/homepage: https://github.com/NickMcConnell/Sangband
Discovery evidence: Variant catalogs
Reported license: NOASSERTION
License status: needs authoritative upstream verification before packaging

Scope

Package the independently playable roguelike variant from source. The canonical repository, latest stable release, source hash, complete dependency closure, and relationship to parent games or sibling forks must be established before implementation. Do not substitute an opaque prebuilt binary.

Research checklist

Identify the canonical maintained source repository and immutable release/commit.
Verify the exact FOSS license for code and every installed font, tile, sound, map, documentation, and bundled dependency.
Check GNU Guix and the channel audit set for an equivalent same-upstream package.
Determine the offline build system and source closure, including submodules or language registries.
Identify updater, telemetry, runtime download, mutable-state, and network behavior that needs Guix integration.

Acceptance checks

guix lint -L . <package> has no package-specific findings.
guix build -L . --no-grafts <package> succeeds without network access or opaque binaries.
Upstream tests run where available, and guix build -L . --no-grafts --check <package> verifies reproducibility.
A fresh HOME/XDG smoke test starts a real local game, exercises meaningful gameplay or save/load behavior, and proves no store writes.
Installed license and third-party notices cover the shipped closure and assets.

Imported from GitHub issue/PR. Originally posted by htayj on 2026-08-24T17:33:17Z.

## Candidate - Project: Sangband - Candidate upstream/homepage: https://github.com/NickMcConnell/Sangband - Discovery evidence: [Variant catalogs](https://www.roguebasin.com/index.php/Category:Angband_variants) - Reported license: NOASSERTION - License status: needs authoritative upstream verification before packaging ## Scope Package the independently playable roguelike variant from source. The canonical repository, latest stable release, source hash, complete dependency closure, and relationship to parent games or sibling forks must be established before implementation. Do not substitute an opaque prebuilt binary. ## Research checklist - Identify the canonical maintained source repository and immutable release/commit. - Verify the exact FOSS license for code and every installed font, tile, sound, map, documentation, and bundled dependency. - Check GNU Guix and the channel audit set for an equivalent same-upstream package. - Determine the offline build system and source closure, including submodules or language registries. - Identify updater, telemetry, runtime download, mutable-state, and network behavior that needs Guix integration. ## Acceptance checks - `guix lint -L . <package>` has no package-specific findings. - `guix build -L . --no-grafts <package>` succeeds without network access or opaque binaries. - Upstream tests run where available, and `guix build -L . --no-grafts --check <package>` verifies reproducibility. - A fresh HOME/XDG smoke test starts a real local game, exercises meaningful gameplay or save/load behavior, and proves no store writes. - Installed license and third-party notices cover the shipped closure and assets. --- Imported from [GitHub issue/PR](https://github.com/htayj/guix-channel/issues/501). Originally posted by [htayj](https://github.com/htayj) on 2026-08-24T17:33:17Z.

htayj commented

2026-09-12 11:24:29 +00:00

(Migrated from github.com)

Goocastle recorded disposition: blocked.

Blocked: no safe Guix delivery brief is established. The proposed repository https://github.com/NickMcConnell/Sangband is not publicly resolvable (GitHub REST returned HTTP 404; git ls-remote could not authenticate), so no maintained canonical repository or immutable commit can be fixed. The only authoritative source artifact located is the SourceForge project https://sourceforge.net/projects/sangband/, attributed to lmarrick: folder "0.9.9, Beta 20d (stable)", source file sang099-r20d-src.zip, dated 2007-04-21, SHA256 71be60e08a4d851aaf09b37b3dfd0ddf32e118049cd8bf903ccfc4beceb77a8a. Its readme.txt identifies Version 1.0.0 and says the current valid license remains the traditional Moria/Angband license, permitting copying/distribution only for educational, research, and not-for-profit purposes; it expressly says the GPL alternative does not govern the current distribution. This is not a clear FOSS redistribution grant suitable for Guix. The archive has no LICENSE, COPYING, or NOTICE entry and bundles fonts and WAV sound assets without separate license/provenance evidence; the credits also identify Moria/Angband and numerous variant/contributor origins. Build metadata is technically plausible but not package proof: src/Makefile.std builds a sangband executable with GCC and ncurses/X11 alternatives, while compile.txt documents configure or make -f Makefile.std; config defaults to ./lib and ~/.sangband, requiring writable-state integration. No Guix daemon-backed build was attempted because the host explicitly disallows it. Unblock only when the rights holders publish a reachable canonical source at a fixed revision and explicit FOSS-compatible redistribution evidence for Sangband, every bundled asset, and each independent origin (or remove/replace unlicensed assets), with the exact source hash confirmed; a documented deterministic meaningful runtime invocation must then be defined for the wrapper and smoke proof.

Imported from GitHub comment. Originally posted by htayj on 2026-09-12T11:24:29Z.

Goocastle recorded disposition: blocked. Blocked: no safe Guix delivery brief is established. The proposed repository https://github.com/NickMcConnell/Sangband is not publicly resolvable (GitHub REST returned HTTP 404; git ls-remote could not authenticate), so no maintained canonical repository or immutable commit can be fixed. The only authoritative source artifact located is the SourceForge project https://sourceforge.net/projects/sangband/, attributed to lmarrick: folder "0.9.9, Beta 20d (stable)", source file sang099-r20d-src.zip, dated 2007-04-21, SHA256 71be60e08a4d851aaf09b37b3dfd0ddf32e118049cd8bf903ccfc4beceb77a8a. Its readme.txt identifies Version 1.0.0 and says the current valid license remains the traditional Moria/Angband license, permitting copying/distribution only for educational, research, and not-for-profit purposes; it expressly says the GPL alternative does not govern the current distribution. This is not a clear FOSS redistribution grant suitable for Guix. The archive has no LICENSE, COPYING, or NOTICE entry and bundles fonts and WAV sound assets without separate license/provenance evidence; the credits also identify Moria/Angband and numerous variant/contributor origins. Build metadata is technically plausible but not package proof: src/Makefile.std builds a sangband executable with GCC and ncurses/X11 alternatives, while compile.txt documents configure or make -f Makefile.std; config defaults to ./lib and ~/.sangband, requiring writable-state integration. No Guix daemon-backed build was attempted because the host explicitly disallows it. Unblock only when the rights holders publish a reachable canonical source at a fixed revision and explicit FOSS-compatible redistribution evidence for Sangband, every bundled asset, and each independent origin (or remove/replace unlicensed assets), with the exact source hash confirmed; a documented deterministic meaningful runtime invocation must then be defined for the wrapper and smoke proof. --- Imported from [GitHub comment](https://github.com/htayj/guix-channel/issues/501#issuecomment-5645584694). Originally posted by [htayj](https://github.com/htayj) on 2026-09-12T11:24:29Z.