Make lukko flag default to off.

[a-02]

Based on discussions from haskell/cabal#10724, which was spurred by the comment here: haskellari/lukko#39 (comment)

[Mikolaj]

I was thinking we could start by flipping the flag in cabal, as the main user of hackage-security. However, this PR is a sensible second step. Or am I missing something?

[andreasabel]

Note that so far we have a commented-out line turning off lukko in the project file:

hackage-security/cabal.project

Line 15 in d160ca4

-- constraints: hackage-security -lukko

This PR should also touch this line. Probably it makes sense to just delete it.

[a-02]

I think I just misunderstood the ask from the dev meeting on Thursday. I can make the PR to set the lukko flag to off in cabal and get that done first before this.

[Bodigrim]

I was thinking we could start by flipping the flag in cabal, as the main user of hackage-security.

You can flip it in cabal.project of Cabal, but it would not meaningfully help anyone who relies on Hackage source distribution. E. g., Stackage will still be in trouble if lukko is not updated in time.

However, this PR is a sensible second step.

One possibility is to keep default: True but set manual: False. In which case the solver will keep using lukko if available in current configuration but will flip the flag automatically and switch to base otherwise.

[Mikolaj]

@Bodigrim: see haskell/cabal#10724 (comment)