GNU bug report logs

#22883 Trustable "guix pull"

PackageSource(s)Maintainer(s)
guix PTS Buildd Popcon
Full log

Message #150 received at 22883@debbugs.gnu.org (full text, mbox, reply):

Received: (at 22883) by debbugs.gnu.org; 21 Dec 2019 01:33:32 +0000
From debbugs-submit-bounces@debbugs.gnu.org Fri Dec 20 20:33:32 2019
Received: from localhost ([127.0.0.1]:47476 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1iiTe7-0006UM-W4
	for submit@debbugs.gnu.org; Fri, 20 Dec 2019 20:33:32 -0500
Received: from mail-qt1-f178.google.com ([209.85.160.178]:36853)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <zimon.toutoune@gmail.com>) id 1iiTe7-0006UA-5C
 for 22883@debbugs.gnu.org; Fri, 20 Dec 2019 20:33:31 -0500
Received: by mail-qt1-f178.google.com with SMTP id q20so9883483qtp.3
 for <22883@debbugs.gnu.org>; Fri, 20 Dec 2019 17:33:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=mime-version:references:in-reply-to:from:date:message-id:subject:to
 :cc; bh=N57Oq1EiNz5xuH2lBjQ+D/t1Nc3aa6L+egqWMOwTKnI=;
 b=RyfIYP/3td2xFHRV/K9iUWK//FCCLo+nfv7sbTolgFJPkdLFAszl3n08pGIqmxT1KQ
 pqjVpqgFz0O5eJemw1kBu8Hp+HbJvjr+QUvsr+YoMOakfqebfHO9blVbqHI3cE/9ABo+
 MOIlt0Ya/WYMBfuJHXMHFivjOpfr8DRxTAgHNetPZ4sZ51bd1T8ac99IJZIJL51YO73r
 sGgEXFVYL8cEXa1mW/HsIXWeOk31URst35JxsR7OiIRvmerwBGS3OwYkDO/WoEbgtWrT
 Hqk/InvTx6ztMgZK7mWVRTB7H5NsSmxoKkw4O2egdpxyhawemBCEhb9JHMW45ZaVdY5l
 eaxg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:references:in-reply-to:from:date
 :message-id:subject:to:cc;
 bh=N57Oq1EiNz5xuH2lBjQ+D/t1Nc3aa6L+egqWMOwTKnI=;
 b=ZkTOU1mEmLdo+8utVltQUcF3Nzzl1EVIrxELi170cqLUB9y0dP629XzhaKRWQNvv4S
 kVq8z2/E1kYTyKgIihpK7cwyn6mqZCFXJJTXHA8e0jbN1j9Zxv3n1oOYJ9WU5iMfc+Bs
 xHrRKa98UsWpmZ+FBXSs6OfgTEltiio7h+ES/Y4OQYjcqBx8LmfSKIswyIJYanpQVSOD
 kql98WVQmPHHRO+TObnG2TfEe39O9O9pEo3p7KnNiJKfGoNLcsVZEIK8bahJFB2C8GlE
 DliVCB0p7dBuzPZs8aZ3HMFjlsI0CCv0YxVycZPxW8Q03TtKrUuLUJQneREv+cLB3F/e
 7G7Q==
X-Gm-Message-State: APjAAAWerKeyZqziWt2iWLnlAY32rl2wkJuJhuJR91sjZ1d9L3SbZ9MI
 rIF4jr68pSl/q6d0SM+9++Y39yhRNku4a9CuSJ0=
X-Google-Smtp-Source: APXvYqwSLehLnBuVfXqMzInwu5YP7Gsq9S4iiW6nK3Vng0j+OSgIEhZCHUouSL1s74uApbH8Bx9U74KMFfXKfm4pXwA=
X-Received: by 2002:aed:2786:: with SMTP id a6mr14446773qtd.354.1576892005662; 
 Fri, 20 Dec 2019 17:33:25 -0800 (PST)
MIME-Version: 1.0
References: <87io14sqoa.fsf@dustycloud.org> <87tvnemfjh.fsf@aikidev.net>
 <871sab7ull.fsf@gnu.org> <87zhwz6ct4.fsf@aikidev.net> <877ek364u5.fsf@gnu.org>
 <87mubmodfb.fsf_-_@gnu.org>
In-Reply-To: <87mubmodfb.fsf_-_@gnu.org>
From: zimoun <zimon.toutoune@gmail.com>
Date: Sat, 21 Dec 2019 02:33:14 +0100
Message-ID: <CAJ3okZ1pLw3gEnDMcJUQ2wywVhc6XqDoHeCRqhPm488J6aM5og@mail.gmail.com>
Subject: Re: Authenticating Git checkouts: step #1
To: Ludovic Courtès <ludo@gnu.org>
Content-Type: text/plain; charset="UTF-8"
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 22883
Cc: 22883@debbugs.gnu.org, Guix-devel <Guix-devel@gnu.org>
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)
Hi Ludo,

To be honest, I do not clearly understand what the issue is concretely
about. So I am probably out-of-scope and/or irrelevant.

One milestone could be to have Git tags and "guix pull" would 'jump'
between these tags. For an end-user like me, tags ease:
 a. the commit range specification (#1)
 b. memorize what I have already verified (#6)

Moreover, it would feed a variant of OPAM path or Qubes path as you
summarized here [1] or mitigate attacks if I understand the answers
there [2] or [3].

[1] https://issues.guix.info/issue/22883#12
[2] https://issues.guix.info/issue/22883#15
[3] https://issues.guix.info/issue/22883#26


Thank you for all this work.

All the best,
simon




Send a report that this bug log contains spam.


debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 01:33:19 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.