[Guix packaging] The Veins of the Earth #555

New issue

Open

opened 2026-08-24 17:34:34 +00:00 by htayj · 1 comment

htayj commented

2026-08-24 17:34:34 +00:00

(Migrated from github.com)

Candidate

Project: The Veins of the Earth
Candidate upstream/homepage: https://github.com/Zireael07/The-Veins-of-the-Earth
Discovery evidence: RogueBasin
Reported license: NOASSERTION
License status: needs authoritative upstream verification before packaging

Scope

Package the independently playable roguelike from source. The canonical repository, latest stable release, source hash, complete dependency closure, and relationship to parent games or sibling forks must be established before implementation. Do not substitute an opaque prebuilt binary.

Research checklist

Identify the canonical maintained source repository and immutable release/commit.
Verify the exact FOSS license for code and every installed font, tile, sound, map, documentation, and bundled dependency.
Check GNU Guix and the channel audit set for an equivalent same-upstream package.
Determine the offline build system and source closure, including submodules or language registries.
Identify updater, telemetry, runtime download, mutable-state, and network behavior that needs Guix integration.

Acceptance checks

guix lint -L . <package> has no package-specific findings.
guix build -L . --no-grafts <package> succeeds without network access or opaque binaries.
Upstream tests run where available, and guix build -L . --no-grafts --check <package> verifies reproducibility.
A fresh HOME/XDG smoke test starts a real local game, exercises meaningful gameplay or save/load behavior, and proves no store writes.
Installed license and third-party notices cover the shipped closure and assets.

Imported from GitHub issue/PR. Originally posted by htayj on 2026-08-24T17:34:34Z.

## Candidate - Project: The Veins of the Earth - Candidate upstream/homepage: https://github.com/Zireael07/The-Veins-of-the-Earth - Discovery evidence: [RogueBasin](https://www.roguebasin.com/index.php/Category:Open_source) - Reported license: NOASSERTION - License status: needs authoritative upstream verification before packaging ## Scope Package the independently playable roguelike from source. The canonical repository, latest stable release, source hash, complete dependency closure, and relationship to parent games or sibling forks must be established before implementation. Do not substitute an opaque prebuilt binary. ## Research checklist - Identify the canonical maintained source repository and immutable release/commit. - Verify the exact FOSS license for code and every installed font, tile, sound, map, documentation, and bundled dependency. - Check GNU Guix and the channel audit set for an equivalent same-upstream package. - Determine the offline build system and source closure, including submodules or language registries. - Identify updater, telemetry, runtime download, mutable-state, and network behavior that needs Guix integration. ## Acceptance checks - `guix lint -L . <package>` has no package-specific findings. - `guix build -L . --no-grafts <package>` succeeds without network access or opaque binaries. - Upstream tests run where available, and `guix build -L . --no-grafts --check <package>` verifies reproducibility. - A fresh HOME/XDG smoke test starts a real local game, exercises meaningful gameplay or save/load behavior, and proves no store writes. - Installed license and third-party notices cover the shipped closure and assets. --- Imported from [GitHub issue/PR](https://github.com/htayj/guix-channel/issues/555). Originally posted by [htayj](https://github.com/htayj) on 2026-08-24T17:34:34Z.

tay commented

2026-09-17 23:17:36 +00:00

Owner

Goocastle recorded disposition: blocked.

Blocked by unresolved redistribution grants in the fixed upstream origin. The local channel contains no package matching upstream Zireael07/The-Veins-of-the-Earth or 'The Veins of the Earth'. The canonical repository is https://github.com/Zireael07/The-Veins-of-the-Earth.git; its default HEAD and latest tag v.0.35.0-standalone resolve to the same immutable revision 7a01cab5f287784713ee7f7f5f3d81aedbfc887c (2016-08-29). At that revision, Lua sources carry GPL-3.0-or-later notices, init.lua declares T-Engine (te4) 1.4.8 and starter mod.load, and README says the module requires T-Engine 1.4.0; there is no module Makefile. The module also enables allow_userchat=true, so packaging must disable online chat and other mutable profile behavior with a local, HOME/XDG-directed wrapper. The blocker is bundled asset provenance. Fonts at data/font include: Dumbledor (conditions 2 and 3 prohibit inclusion in a compilation/product without prior permission and require the original zip to remain intact); Immortal (freeware-use notice with no redistribution grant and no license identified); Saint-Andrews Queen (explicitly free only for personal use); and monofonto/Larabie fonts (freeware EULA whose full terms are not established as FOSS). data/gfx/default/tiles/license.txt says /UT tiles were taken from UT32 with contributions by multiple parties but provides no redistribution grant for UT32 or those contributions, while /new tiles lack a clear grant. These are separate origins/assets; the module GPL header and OGL text do not prove their licenses. This is a legal blocker, not merely a packaging defect. To unblock, the upstream tree at revision 7a01cab5f287784713ee7f7f5f3d81aedbfc887c must either remove every nonredistributable/incomplete-provenance font and tile or replace them with FOSS equivalents carrying explicit redistribution grants, and provide per-origin license notices. A source-build and runtime proof remain impossible to deliver safely until then. The Guix daemon was unavailable, so no build or game smoke proof was attempted or claimed.

Goocastle recorded disposition: blocked. Blocked by unresolved redistribution grants in the fixed upstream origin. The local channel contains no package matching upstream Zireael07/The-Veins-of-the-Earth or 'The Veins of the Earth'. The canonical repository is https://github.com/Zireael07/The-Veins-of-the-Earth.git; its default HEAD and latest tag v.0.35.0-standalone resolve to the same immutable revision 7a01cab5f287784713ee7f7f5f3d81aedbfc887c (2016-08-29). At that revision, Lua sources carry GPL-3.0-or-later notices, init.lua declares T-Engine (te4) 1.4.8 and starter mod.load, and README says the module requires T-Engine 1.4.0; there is no module Makefile. The module also enables allow_userchat=true, so packaging must disable online chat and other mutable profile behavior with a local, HOME/XDG-directed wrapper. The blocker is bundled asset provenance. Fonts at data/font include: Dumbledor (conditions 2 and 3 prohibit inclusion in a compilation/product without prior permission and require the original zip to remain intact); Immortal (freeware-use notice with no redistribution grant and no license identified); Saint-Andrews Queen (explicitly free only for personal use); and monofonto/Larabie fonts (freeware EULA whose full terms are not established as FOSS). data/gfx/default/tiles/license.txt says /UT tiles were taken from UT32 with contributions by multiple parties but provides no redistribution grant for UT32 or those contributions, while /new tiles lack a clear grant. These are separate origins/assets; the module GPL header and OGL text do not prove their licenses. This is a legal blocker, not merely a packaging defect. To unblock, the upstream tree at revision 7a01cab5f287784713ee7f7f5f3d81aedbfc887c must either remove every nonredistributable/incomplete-provenance font and tile or replace them with FOSS equivalents carrying explicit redistribution grants, and provide per-origin license notices. A source-build and runtime proof remain impossible to deliver safely until then. The Guix daemon was unavailable, so no build or game smoke proof was attempted or claimed.

tay added the

state:blocked

label

2026-09-17 23:17:36 +00:00