[Guix packaging] Steamband #528

New issue

Open

opened 2026-08-24 17:33:55 +00:00 by htayj · 1 comment

htayj commented

2026-08-24 17:33:55 +00:00

(Migrated from github.com)

Candidate

Project: Steamband
Candidate upstream/homepage: https://github.com/NickMcConnell/Steamband
Discovery evidence: Variant catalogs
Reported license: NOASSERTION
License status: needs authoritative upstream verification before packaging

Scope

Package the independently playable roguelike variant from source. The canonical repository, latest stable release, source hash, complete dependency closure, and relationship to parent games or sibling forks must be established before implementation. Do not substitute an opaque prebuilt binary.

Research checklist

Identify the canonical maintained source repository and immutable release/commit.
Verify the exact FOSS license for code and every installed font, tile, sound, map, documentation, and bundled dependency.
Check GNU Guix and the channel audit set for an equivalent same-upstream package.
Determine the offline build system and source closure, including submodules or language registries.
Identify updater, telemetry, runtime download, mutable-state, and network behavior that needs Guix integration.

Acceptance checks

guix lint -L . <package> has no package-specific findings.
guix build -L . --no-grafts <package> succeeds without network access or opaque binaries.
Upstream tests run where available, and guix build -L . --no-grafts --check <package> verifies reproducibility.
A fresh HOME/XDG smoke test starts a real local game, exercises meaningful gameplay or save/load behavior, and proves no store writes.
Installed license and third-party notices cover the shipped closure and assets.

Imported from GitHub issue/PR. Originally posted by htayj on 2026-08-24T17:33:55Z.

## Candidate - Project: Steamband - Candidate upstream/homepage: https://github.com/NickMcConnell/Steamband - Discovery evidence: [Variant catalogs](https://www.roguebasin.com/index.php/Category:Angband_variants) - Reported license: NOASSERTION - License status: needs authoritative upstream verification before packaging ## Scope Package the independently playable roguelike variant from source. The canonical repository, latest stable release, source hash, complete dependency closure, and relationship to parent games or sibling forks must be established before implementation. Do not substitute an opaque prebuilt binary. ## Research checklist - Identify the canonical maintained source repository and immutable release/commit. - Verify the exact FOSS license for code and every installed font, tile, sound, map, documentation, and bundled dependency. - Check GNU Guix and the channel audit set for an equivalent same-upstream package. - Determine the offline build system and source closure, including submodules or language registries. - Identify updater, telemetry, runtime download, mutable-state, and network behavior that needs Guix integration. ## Acceptance checks - `guix lint -L . <package>` has no package-specific findings. - `guix build -L . --no-grafts <package>` succeeds without network access or opaque binaries. - Upstream tests run where available, and `guix build -L . --no-grafts --check <package>` verifies reproducibility. - A fresh HOME/XDG smoke test starts a real local game, exercises meaningful gameplay or save/load behavior, and proves no store writes. - Installed license and third-party notices cover the shipped closure and assets. --- Imported from [GitHub issue/PR](https://github.com/htayj/guix-channel/issues/528). Originally posted by [htayj](https://github.com/htayj) on 2026-08-24T17:33:55Z.

htayj commented

2026-09-12 23:18:10 +00:00

(Migrated from github.com)

Goocastle recorded disposition: blocked.

Blocked. The issue's candidate URL https://github.com/NickMcConnell/Steamband is unavailable (GitHub API returned 404; Nick McConnell's public repository listing does not contain Steamband). The best discoverable source is https://github.com/myshkin/steamband at fixed commit b0093459dc7f84e8cd8337b78e649869fa79b52c (commit message/date: Steamband 0.2.2, 2003-03-10; codeload archive SHA256 17579ab30204685e3a9212e45036c55492d03c139a0f4d55e46c2c12d3c13f2d). It is a six-commit release archive, not an established maintained canonical source; its README identifies 0.2.2 while RogueBasin records a later 0.4.1 release. The archive top level has only lib, src, and readmes, with no license file; the exact source header at https://raw.githubusercontent.com/myshkin/steamband/b0093459dc7f84e8cd8337b78e649869fa79b52c/src/main-gcu.c permits copying/distribution only for educational, research, and not-for-profit purposes. That is not a clear FOSS redistribution grant for Guix, and does not cover the complete source/lib asset closure. The README/Makefile.std describe an old hand-maintained C build using curses/X11 modules and mutable lib data/save state, but provide no safe deterministic noninteractive gameplay invocation or wrapper contract. GNU Guix's games.scm contains the parent angband package but no Steamband definition; the local channel/audit set likewise has no Steamband reference, so no same-upstream duplicate disposition applies. Exact prerequisites to unblock: maintainer/copyright-holder confirmation of a clear redistributable FOSS license for myshkin/steamband@b0093459dc and every installed lib asset/Angband-derived component; a canonical maintained repository or authoritative current release with fixed revision and source hash; and documented or wrapper-defined deterministic headless gameplay/save-load smoke behavior. Then re-audit Guix/nonguix and validate the source closure in an authorized Guix build phase. The research host has no Guix daemon, so no build proof was attempted.

Imported from GitHub comment. Originally posted by htayj on 2026-09-12T23:18:10Z.

Goocastle recorded disposition: blocked. Blocked. The issue's candidate URL https://github.com/NickMcConnell/Steamband is unavailable (GitHub API returned 404; Nick McConnell's public repository listing does not contain Steamband). The best discoverable source is https://github.com/myshkin/steamband at fixed commit b0093459dc7f84e8cd8337b78e649869fa79b52c (commit message/date: Steamband 0.2.2, 2003-03-10; codeload archive SHA256 17579ab30204685e3a9212e45036c55492d03c139a0f4d55e46c2c12d3c13f2d). It is a six-commit release archive, not an established maintained canonical source; its README identifies 0.2.2 while RogueBasin records a later 0.4.1 release. The archive top level has only lib, src, and readmes, with no license file; the exact source header at https://raw.githubusercontent.com/myshkin/steamband/b0093459dc7f84e8cd8337b78e649869fa79b52c/src/main-gcu.c permits copying/distribution only for educational, research, and not-for-profit purposes. That is not a clear FOSS redistribution grant for Guix, and does not cover the complete source/lib asset closure. The README/Makefile.std describe an old hand-maintained C build using curses/X11 modules and mutable lib data/save state, but provide no safe deterministic noninteractive gameplay invocation or wrapper contract. GNU Guix's games.scm contains the parent angband package but no Steamband definition; the local channel/audit set likewise has no Steamband reference, so no same-upstream duplicate disposition applies. Exact prerequisites to unblock: maintainer/copyright-holder confirmation of a clear redistributable FOSS license for myshkin/steamband@b0093459dc7f84e8cd8337b78e649869fa79b52c and every installed lib asset/Angband-derived component; a canonical maintained repository or authoritative current release with fixed revision and source hash; and documented or wrapper-defined deterministic headless gameplay/save-load smoke behavior. Then re-audit Guix/nonguix and validate the source closure in an authorized Guix build phase. The research host has no Guix daemon, so no build proof was attempted. --- Imported from [GitHub comment](https://github.com/htayj/guix-channel/issues/528#issuecomment-5649348114). Originally posted by [htayj](https://github.com/htayj) on 2026-09-12T23:18:10Z.