This file is indexed.

/usr/share/doc/botch/wiki/Heuristics.html is in botch-doc 0.16-2ubuntu2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
<h1>Breaking dependency cycles</h1>

<p>Depending on build dependency there exist multiple ways to make that build dependency optional for bootstrapping.</p>

<ol>
<li>Introduce <a href="https://wiki.debian.org/BuildProfileSpec">build profiles</a></li>
<li>Move dependencies from Build-Depends to Build-Depends-Indep</li>
<li>Choose different installation sets for not-strong dependencies</li>
<li>Split the source package (so that the part that creates the cycle can be built separately) or join the source packages forming the cycle (so that the cycle can be broken in <code>debian/rules</code>)</li>
<li>Cross compile the appropriate set of source packages</li>
</ol>

<p>While (1) is probably the most obvious solution, it cannot be implemented until the Debian archive accepts source packages with the build profile syntax. Depending on the type of build dependency, (2) can already be implemented right now for build dependencies on documentation generating packages and the like. Point (3) requires a deeper insight into the overall dependency situation and should be left to an actual bootstrapper instead of a package maintainer. This is because of the required inside knowledge and the fact that strong dependencies might change rapidly over time. Point (4) is most likely undesirable in most situations. The last point (5) is again up to the bootstrapper but cross buildability is a welcome feature in any source package.</p>

<h1>Self-Cycles</h1>

<p>Self-cycles are dependency cycles of source packages with themselves. There exist three types of self cycles. For Debian to be bootstrappable, all self-cycles must be breakable. Self-cycles have a special status compared to cycles of larger sizes because they only leave one option to break them. This makes them a hard heuristic as they are not-optional and have to be worked on by package maintainers.</p>

<h2>Type 1 Self-Cycles</h2>

<p>These are the most obvious self-cycles and mostly consist of compilers which need themselves to be built. Cycles of this type can easily be found by checking whether a source package builds a binary package it also build depends on. On the other hand, the solution to these cycles is often hard because it requires to make the compiler able to bootstrap itself. Upstream often does not provide this functionality.</p>

<h2>Type 2 Self-Cycles</h2>

<p>These self-cycles are of the same size as the former ones but are not anymore as obvious. They consist of a source package A builld depending on a binary package B which strongly depends on another binary package C which in turn is built from source package A. Since only build dependencies can be modified, the only way to break this cycle is to not have the source package A build depend on binary package B anymore. Binary package B might be completely unrelated to source package A as it is only connected to C via a long dependency chain but nevertheless this is the only way to break these cycles.</p>

<h2>Type 3 Self-Cycles</h2>

<p>These are like type 2 self-cycles except that the dependency relationship between B and C is not strong anymore. This means that this cyclic dependency might be solvable using other means.</p>

<h1>Degree based heuristics</h1>

<p>Degree based heuristics are those which take no other input than the connectivity of single vertices in the dependency graph with their neighbors.</p>

<h2>Amount of Missing Build Dependencies</h2>

<p>This heuristic maps source packages to the amount of their build dependencies which are not available. This is not equal to the amount of build dependencies but less because some of the build dependencies might already be available.</p>

<h2>Only Weak Build Dependencies Missing</h2>

<p>This heuristic maps source packages to the amount of their build dependencies which have been classified as "weak". This classification is a soft one and mostly considers binary packages which are in most cases used for documentation generation. Often, these "weak" build dependencies can be dealt with by moving them into <code>Build-Depends-Indep</code></p>

<h2>Ratio Binary Heuristic</h2>

<p>Find binary packages A that are only needed by few source package B but need many other source packages C to be built to satisfy the runtime dependencies of A. Maybe the source packages B that needs the binary packages A can be built without them?</p>

<h2>Ratio Source Heuristic</h2>

<p>Find source packages A that build-depend on many others but are only needed by few binary packages B which are in turn only needed buy a few source packages C. Maybe the source packages C that need those few binary packages B can be built without them and thus not require all the source packages A?</p>

<h1>Cycle based heuristics</h1>

<p>Cycle based heuristics are those which take no other input than a list of cycles in the dependency graph. Since the total amount of cycles goes in the millions, only cycles up to a small length are considered.</p>

<h2>Amount of Cycles through Edges</h2>

<p>This heuristics finds build dependencies of source packages on binary packages which are part of many dependency cycles in the graph. If such a build dependency can be broken, then this means that all those dependency cycles are immediately broken as well.</p>

<h2>Cycles</h2>

<p>This heuristic lists the found cycles. For small cycles it might be possible to immediately identify and easy way to break them.</p>

<h1>Feedback Arc Set</h1>

<p>A feedback arc set is a set of edges which, if removed from the graph, make the graph acyclic. The heuristic used produces a very small feedback arc set. If a build dependency is listed as being part of a calculated feedback arc set, then making it removable would greatly simplify the cyclic dependency situation.</p>

<h1>Strong bridges and articulation points</h1>

<p>Strong bridges and strong articulation points are the edges and vertices respectively that, if removed from the graph, split it into more strongly connected components than before.</p>

<h2>Strong Articulation Points</h2>

<p>If a source package is listed as a strong articulation point of the dependency graph, then its removal will break the graph into multiple strongly connected components. If the amount of resulting strongly connected components the dependency graph will be split into is high, then it might be worthwhile to make the source package available, for example by cross compilation.</p>

<h2>Strong Bridges</h2>

<p>If a build dependency is listed as a strong bridge of the dependency graph, then its removal will break the graph into multiple strongly connected components. If the amount of resulting strongly connected compoents the dependency graph will be split into is high, then it might be worthwhile to make this build dependency droppable.</p>