[Question] Is this still maintained?

willfindlay commented 2 years ago

I noticed the last commit was from back in 2021 and the builds have been failing for a while, although there is a PR (#146) up recently that should fix things. I was wondering if this repo is still being maintained. If not, I would be happy to open up a permanent fork and take some PRs over there.

vbrandl commented 2 years ago

@emk mentioned he'd be willing to move the repo into a organization and add new/active maintainers. Maybe that would be an alternative.

nyurik commented 2 years ago

I ran into this issue too, and it seems it is fairly straightforward to just use default packages (used in MapLibre's Martin). For my usecase I only needed the openssl, but had to install musl-dev or else it wouldn't compile:

FROM rust:alpine

RUN apk update
RUN apk add --no-cache openssl-dev musl-dev

emk commented 2 years ago

My apologies to everyone for the slow responses!

Current status of this repo:

This repo is basically unmaintained, and I would encourage interested maintainers to fork it and start a GitHub organization.
Personally, I have switched to strategy of aggressively avoiding libpq and openssl. The last I looked, this was not an option for diesel users (which is admittedly kind of a big deal). But almost all other popular Rust libraries can now be built without libpq or openssl if you experiment with the feature flags. I recommend looking at cargo cross, too.
I may very occasionally make new builds, if I need them myself to hotfix a diesel application I don't have time to port to sqlx.

Today, I took a look to verify that binaries built using this image aren't vulnerable to the forthcoming critical OpenSSL vulnerability. They shouldn't be; we use OpenSSL 1.1.x, not 3.x, which is the vulnerable version.

jcaesar commented 1 year ago

https://github.com/clux/muslrust/ might be a viable alternative.

emk / rust-musl-builder

[Question] Is this still maintained? #147