* On 2023-03-24 at 16:28 GMT, oskar%fessel.org@localhost wrote:Hej,
am I holding it wrong?
# make package
=> Bootstrap dependency digest>=20211023: found digest-20220214
WARNING: [license.mk] Every package should define a LICENSE.
===> Checking for vulnerabilities in gd-2.3.3nb6
Package gd-2.3.3nb6 has a denial-of-service vulnerability, see https://nvd.nist.gov/vuln/detail/CVE-2021-38115
===> Creating toolchain wrappers for gd-2.3.3nb6
ERROR: bzip2>=1.0.1 is not installed; can't buildlink files.
*** Error code 1
...
Or is that an undesireable side-effect of „PREFER_PKGSRC=yes“?
If you set PREFER_PKGSRC=yes after building some packages then yes, you're holding it wrong. If you change PREFER_* or anything else that changes the dependency tree then you need to clean out and rebuild any affected packages.
You mean „remove all packages from the system and start anew“? But then this system was set up fresh and also the pkgsrc tree was pristine. As time permits, i will try a complete new build during the next days and see if that persists.
The "can't buildlink files" error effectively always means "mismatch between what a binary package is reporting and what the user has selected“.
Fair enough.