Is it safe to install this package from Debian site ? [Solved]

[Drito]

I use MX 23.4 and I'm interested by that package.

https://packages.debian.org/sid/godot3

I checked the dependencies versions.
My version of "libzstd1" is on 1.5.4 according to "apt show" command. The package requirement is on 1.5.5.

It is similar for two other packages. The version difference is after the second dot.
Is it safe to install that deb package ?

Here my system infos as advised by the forum.

Code: Select all

System:
  Kernel: 6.1.0-28-amd64 [6.1.119-1] arch: x86_64 bits: 64 compiler: gcc v: 12.2.0
    parameters: BOOT_IMAGE=/boot/vmlinuz-6.1.0-28-amd64 root=UUID=<filter> ro quiet splash
  Desktop: bspwm v: 0.9.10 info: xfce4-panel vt: 7 dm: LightDM v: 1.26.0 Distro: MX-23.4_x64
    Libretto October 15 2023 base: Debian GNU/Linux 12 (bookworm)
Machine:
  Type: Laptop System: LENOVO product: 20BECTO1WW v: ThinkPad T540p serial: <superuser required>
    Chassis: type: 10 serial: <superuser required>
  Mobo: LENOVO model: 20BECTO1WW v: SDK0E50512 STD serial: <superuser required>
    UEFI-[Legacy]: LENOVO v: GMET77WW (2.25 ) date: 11/23/2016
Battery:
  ID-1: BAT0 charge: 2.5 Wh (96.2%) condition: 2.6/56.2 Wh (4.7%) volts: 12.0 min: 10.8
    model: SANYO 45N1769 type: Li-ion serial: <filter> status: not charging
CPU:
  Info: model: Intel Core i5-4210M bits: 64 type: MT MCP arch: Haswell gen: core 4 level: v3
    note: check built: 2013-15 process: Intel 22nm family: 6 model-id: 0x3C (60) stepping: 3
    microcode: 0x28
  Topology: cpus: 1x cores: 2 tpc: 2 threads: 4 smt: enabled cache: L1: 128 KiB
    desc: d-2x32 KiB; i-2x32 KiB L2: 512 KiB desc: 2x256 KiB L3: 3 MiB desc: 1x3 MiB
  Speed (MHz): avg: 825 high: 898 min/max: 800/3200 scaling: driver: intel_cpufreq
    governor: ondemand cores: 1: 898 2: 800 3: 800 4: 802 bogomips: 20752
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx
  Vulnerabilities:
  Type: gather_data_sampling status: Not affected
  Type: itlb_multihit status: KVM: VMX disabled
  Type: l1tf mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable
  Type: mds mitigation: Clear CPU buffers; SMT vulnerable
  Type: meltdown mitigation: PTI
  Type: mmio_stale_data status: Unknown: No mitigations
  Type: reg_file_data_sampling status: Not affected
  Type: retbleed status: Not affected
  Type: spec_rstack_overflow status: Not affected
  Type: spec_store_bypass mitigation: Speculative Store Bypass disabled via prctl
  Type: spectre_v1 mitigation: usercopy/swapgs barriers and __user pointer sanitization
  Type: spectre_v2 mitigation: Retpolines; IBPB: conditional; IBRS_FW; STIBP: conditional; RSB
    filling; PBRSB-eIBRS: Not affected; BHI: Not affected
  Type: srbds mitigation: Microcode
  Type: tsx_async_abort status: Not affected
Graphics:
  Device-1: Intel 4th Gen Core Processor Integrated Graphics vendor: Lenovo driver: i915 v: kernel
    arch: Gen-7.5 process: Intel 22nm built: 2013 ports: active: eDP-1 empty: DP-1, DP-2, HDMI-A-1,
    HDMI-A-2, VGA-1 bus-ID: 00:02.0 chip-ID: 8086:0416 class-ID: 0300
  Display: x11 server: X.Org v: 1.21.1.7 compositor: Compton v: 1 driver: X: loaded: modesetting
    unloaded: fbdev,vesa dri: crocus gpu: i915 display-ID: :0.0 screens: 1
  Screen-1: 0 s-res: 1920x1080 s-dpi: 96 s-size: 508x285mm (20.00x11.22") s-diag: 582mm (22.93")
  Monitor-1: eDP-1 model: ChiMei InnoLux 0x15c3 built: 2013 res: 1920x1080 hz: 60 dpi: 142
    gamma: 1.2 size: 344x193mm (13.54x7.6") diag: 394mm (15.5") ratio: 16:9 modes: 1920x1080
  API: OpenGL v: 4.6 Mesa 22.3.6 renderer: Mesa Intel HD Graphics 4600 (HSW GT2)
    direct-render: Yes
Audio:
  Device-1: Intel Xeon E3-1200 v3/4th Gen Core Processor HD Audio vendor: Lenovo
    driver: snd_hda_intel v: kernel bus-ID: 00:03.0 chip-ID: 8086:0c0c class-ID: 0403
  Device-2: Intel 8 Series/C220 Series High Definition Audio vendor: Lenovo 8
    driver: snd_hda_intel v: kernel bus-ID: 00:1b.0 chip-ID: 8086:8c20 class-ID: 0403
  API: ALSA v: k6.1.0-28-amd64 status: kernel-api tools: alsamixer,amixer
  Server-1: JACK v: 1.9.21 status: off tools: jack_control,qjackctl
  Server-2: PipeWire v: 1.0.0 status: active with: 1: pipewire-pulse status: active
    2: wireplumber status: active 3: pipewire-alsa type: plugin 4: pw-jack type: plugin
    tools: pactl,pw-cat,pw-cli,wpctl
Network:
  Device-1: Intel Ethernet I217-LM vendor: Lenovo driver: e1000e v: kernel port: 4080
    bus-ID: 00:19.0 chip-ID: 8086:153a class-ID: 0200
  IF: eth0 state: down mac: <filter>
  Device-2: Intel Wireless 7260 driver: iwlwifi v: kernel modules: wl pcie: gen: 1
    speed: 2.5 GT/s lanes: 1 bus-ID: 04:00.0 chip-ID: 8086:08b2 class-ID: 0280
  IF: wlan0 state: up mac: <filter>
  IF-ID-1: virbr0 state: down mac: <filter>
Bluetooth:
  Device-1: Intel Bluetooth wireless interface type: USB driver: btusb v: 0.8 bus-ID: 2-11:2
    chip-ID: 8087:07dc class-ID: e001
  Report: hciconfig ID: hci0 rfk-id: 4 state: up address: <filter> bt-v: 2.1 lmp-v: 4.0
    sub-v: e00 hci-v: 4.0 rev: e00
  Info: acl-mtu: 1021:5 sco-mtu: 96:6 link-policy: rswitch hold sniff
    link-mode: peripheral accept service-classes: rendering, capturing, object transfer, audio,
    telephony
Drives:
  Local Storage: total: 465.76 GiB used: 308.69 GiB (66.3%)
  SMART Message: Unable to run smartctl. Root privileges required.
  ID-1: /dev/sda maj-min: 8:0 vendor: Seagate model: ST500LM000-SSHD-8GB size: 465.76 GiB
    block-size: physical: 4096 B logical: 512 B speed: 6.0 Gb/s type: HDD rpm: 5400 serial: <filter>
    rev: LIV9 scheme: MBR
Partition:
  ID-1: / raw-size: 65.21 GiB size: 63.63 GiB (97.58%) used: 22.13 GiB (34.8%) fs: ext4
    dev: /dev/sda1 maj-min: 8:1
  ID-2: /home raw-size: 400.55 GiB size: 393.19 GiB (98.16%) used: 286.56 GiB (72.9%) fs: ext4
    dev: /dev/sda2 maj-min: 8:2
Swap:
  Kernel: swappiness: 15 (default 60) cache-pressure: 100 (default)
  ID-1: swap-1 type: file size: 3 GiB used: 3.3 MiB (0.1%) priority: -2 file: /swap/swap
Sensors:
  System Temperatures: cpu: 52.0 C mobo: N/A
  Fan Speeds (RPM): fan-1: 2313
Repos:
  Packages: 3181 pm: dpkg pkgs: 3169 libs: 1544 tools: apt,apt-get,aptitude,nala,synaptic pm: rpm
    pkgs: 0 pm: flatpak pkgs: 12
  No active apt repos in: /etc/apt/sources.list
  Active apt repos in: /etc/apt/sources.list.d/debian-stable-updates.list
    1: deb http://deb.debian.org/debian bookworm-updates main contrib non-free non-free-firmware
  Active apt repos in: /etc/apt/sources.list.d/debian.list
    1: deb http://deb.debian.org/debian bookworm main contrib non-free non-free-firmware
    2: deb http://security.debian.org/debian-security bookworm-security main contrib non-free non-free-firmware
    3: deb http://deb.debian.org/debian bookworm-backports main contrib non-free non-free-firmware
  Active apt repos in: /etc/apt/sources.list.d/mx.list
    1: deb http://ftp.lip6.fr/pub/linux/distributions/mxlinux/packages/mx/repo/ bookworm main non-free
  Active apt repos in: /etc/apt/sources.list.d/extrepo_librewolf.sources
    1: deb [arch=amd64 arm64] https://repo.librewolf.net librewolf main
Info:
  Processes: 244 Uptime: 13h 58m wakeups: 7 Memory: 7.43 GiB used: 5.23 GiB (70.3%) Init: SysVinit
  v: 3.06 runlevel: 5 default: graphical tool: systemctl Compilers: gcc: 12.2.0 alt: 12
  Client: shell wrapper v: 5.2.15-release inxi: 3.3.26
Boot Mode: BIOS (legacy, CSM, MBR)

[j2mcgreg]

You should put in a package request here:
viewforum.php?f=150
Be sure to include the link to the Debian package. Our developers will report whether it can be built for MX 23.

[Nokkaelaein]

The official self-contained Godot engine releases work great in MX: https://godotengine.org/download/linux/ (the actually current Godot version is 4.3 already)

[DukeComposed]

I use MX 23.4 and I'm interested by that package.

https://packages.debian.org/sid/godot3

Is it safe to install that deb package ?

It is not safe to install that package.

This is the right way to get that software on MX:

You should put in a package request here:
viewforum.php?f=150
Be sure to include the link to the Debian package. Our developers will report whether it can be built for MX 23.

Submitting a package request is safest because it will let the MX Linux developers look at the package and figure out how to get it working on MX-23.

You did the right thing by asking first before installing the package and hoping for the best. You get a gold star for being cautious and asking before making potentially harmful changes to your machine.

The reason why it's not safe to install that package is because that package comes from "sid", which is the Debian Unstable branch. It's the cutting edge of Debian development, which is actively working on making the next, new version of Debian called "Trixie". Trixie uses new software, with new libraries, and new dependencies, like libzstd, which aren't available in the previous version of Debian.

That previous version of Debian is the basis of MX Linux. So if you had tried to install a Debian sid package on an MX-23 machine you'd get conflicts as you've seen. And while it may at times be possible to correct those conflicts, it isn't always easy, so it's best to leave it to the devs to investigate the issue and do the heavy lifting so you don't end up with a broken machine.

[Drito]

The official self-contained Godot engine releases work great in MX: https://godotengine.org/download/linux/ (the actually current Godot version is 4.3 already)

Godot 4 is a huge change. My project can't be opened by this branch.

[Drito]

After some thinking, I wonder if the link to the Debian package is about a stable version of Godot 3.6, the naming convention is mysterious for me.

Thank you for your answers. I will ask on the package request forum section.

[Nokkaelaein]

Godot 4 is a huge change. My project can't be opened by this branch.

Ah, got it. Note that Godot does have official self-contained releases for the version 3 strain as well: https://godotengine.org/download/3.x/linux/ (the download link points to their github and is a self-contained binary). Just mentioning this if you have work to do on your project right now. Nice to have stuff like this in the actual MX repos, of course. The thing about packaging something like Godot for Debian/MX is, do they package the version you need (i.e. if a project uses C#, it needs to be that version of Godot. In the above download link, both the "traditional" and C# ones are available.)