#76660 - Downgrade prevention triggers erroneously with 'guix pull'

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #11 received at 76660@debbugs.gnu.org (full text, mbox, reply):

Received: (at 76660) by debbugs.gnu.org; 2 Mar 2025 06:25:20 +0000
From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 02 01:25:20 2025
Received: from localhost ([127.0.0.1]:51404 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1toclK-0002Cp-9a
	for submit@debbugs.gnu.org; Sun, 02 Mar 2025 01:25:19 -0500
Received: from mail-pl1-x641.google.com ([2607:f8b0:4864:20::641]:49186)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.84_2) (envelope-from <45mg.writes@gmail.com>)
 id 1toclH-0002A2-95
 for 76660@debbugs.gnu.org; Sun, 02 Mar 2025 01:25:16 -0500
Received: by mail-pl1-x641.google.com with SMTP id
 d9443c01a7336-22113560c57so65736185ad.2
 for <76660@debbugs.gnu.org>; Sat, 01 Mar 2025 22:25:15 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1740896709; x=1741501509; darn=debbugs.gnu.org;
 h=mime-version:message-id:date:references:in-reply-to:subject:cc:to
 :from:from:to:cc:subject:date:message-id:reply-to;
 bh=zRqyvN2JrAQ+tlZgdaTBBbaTc6jHjDoeFBLBRA0glvI=;
 b=hUiEXgvJe+FIf8zyk5HQx+J1QtdFhXlAOXP2X/0mVv0LaX71keEsl9MQ/0ZFKXG7ZF
 ch+YZ7kEbXrIypOhxJDKPWCmKMh8ZskeRyUNOOjgat/ylxNSNPFNYAkw/am+uuU5/N1+
 Vyw1bJ6h/0zab8pofmnATQwjiAFJbkAmS9kjWKmsJWBXKdbPcvMsRn8nSZjSTwk9ozST
 Pl8gDB3AvK9yCUkCk/6o5QFoggo2UcfJH1/f3uFU2lnsuP3g7ryP7dwuMTDWaBUANQ0W
 WJVrJaPyb8IvbvofWS3m7TW9wNVAQ1CaXy1v05YaXNIrUtrt0V0ta+Ljz0kdDwq3XadF
 unew==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1740896709; x=1741501509;
 h=mime-version:message-id:date:references:in-reply-to:subject:cc:to
 :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
 bh=zRqyvN2JrAQ+tlZgdaTBBbaTc6jHjDoeFBLBRA0glvI=;
 b=h9OZnYPW7Jw87pjO0v5V9YJYFB0f2SVX7Xqz+EPfOuzsNCY6XLvHJEQgQUPaNgE3w0
 rnPmOF9CMN3DFsMObqt9+DyuLBZIqNpEqcuc465TFhyzhk1U726FEZGRzEwQKvid8gWe
 8E7D09trrTlmZr6DAZvKjlH8iY51nhDrvE+6UPeTFRzAPNs4iCmiHSxFFzC2mGLk35ce
 21SPcLGoiFivGVy6ttQwmA63hCwMSQmoMe0Y1V8dpoC9f7aPbPGLn+QB4m342FlSSKWv
 GB23MKdTEV325DMqclaSsXqzui2312hZXYE5j7Hsn44vQTDRNQ2RYywc+zStDs+Kj9NP
 FgbQ==
X-Gm-Message-State: AOJu0YwjpoCgwCA4pGr+93J3N597fW1o50xNeTG7uk75oACqSVZwoxcQ
 5VyI6Csz+mzM2rPRYkOzXfJhSp/XsQnMg+jor1Atr2JApMwEl2AhLMxyt2bD
X-Gm-Gg: ASbGncu07VeBhNsAVyQloinMmsmK7PTXj8ALr14lsJeDUGeX9Qqo5xJpzBn7vX07LUM
 3CeT2tTDxzOvUrok+K5bHTQnqPccEWSACWy1PKVmhYomQTs5h+mozH6ZVJdGYgbO1vdKNwb4h/V
 VRjWRdX3iw3kV/FFzg1p77cO3TZiizOUZ2+D/r9FECMRHXsZ2cYmopFsEMAHrIoiyujupL4aZaS
 zeu7A+loO0WryT4ofNtEzyX3P7/WCyylWn2X5fliIuzKvj0DLx7EADtbOh7dDOv1gQDUg2L7toi
 EYJZQdVR5H4KQyd5RzfJDEXFYgYDsILoDbvDxDiE8uFeqw==
X-Google-Smtp-Source: AGHT+IEczcOKek+Qf9O4JViCNGy6QpNqZw9lYEnnfUIxRd2Mw6KGTvqJ+0bABA/1BFx1lhdcW+9l9w==
X-Received: by 2002:a17:902:d546:b0:223:42ca:10f1 with SMTP id
 d9443c01a7336-223692922demr131026075ad.52.1740896708867; 
 Sat, 01 Mar 2025 22:25:08 -0800 (PST)
Received: from guix1 (utm3.nitt.edu. [14.139.162.2])
 by smtp.gmail.com with ESMTPSA id
 98e67ed59e1d1-2fea69909adsm6444305a91.49.2025.03.01.22.25.06
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Sat, 01 Mar 2025 22:25:08 -0800 (PST)
From: 45mg <45mg.writes@gmail.com>
To: Tomas Volf <~@wolfsden.cz>, Jack Hill <jackhill@jackhill.us>
Subject: Re: bug#76660: current guix pull doesn't authenticate
In-Reply-To: <87y0xoo2df.fsf@wolfsden.cz>
References: <alpine.DEB.2.21.2503011134420.24671@marsh.hcoop.net>
 <87y0xoo2df.fsf@wolfsden.cz>
Date: Sun, 02 Mar 2025 06:24:55 +0000
Message-ID: <877c58q79k.fsf@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 76660
Cc: 76660@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Tomas Volf <~@wolfsden.cz> writes:

> Jack Hill <jackhill@jackhill.us> writes:
[...]
>> jackhill@lissome ~$ guix pull
>> Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.org/git/guix.git'...
>> guix pull: error: aborting update of channel 'guix' to commit 6ca7b07a251739dfaefa639e74c01e3013c9454c, which is not a descendant of f13f0769688493271f43f31a016957355dbecb30
>> hint: This could indicate that the channel has been tampered with and is trying to force a
>> roll-back, preventing you from getting the latest updates.  If you think this is not the
>> case, explicitly allow non-forward updates.
>>
>> I don't have reason to believe the channel needs to be rolled back, I assume
>> something is wrong with the savannah copy of the repo, but don't know. Can
>> someone confirm?
>
> Can confirm.
[...]
> Given that f13f0769688493271f43f31a016957355dbecb30 has fairly large
> commit message, maybe the known bugs in how we are using guile-git
> finally caught up with us.

I just re-authenticated my existing checkout of Guix from scratch (`rm
-r ~/.cache/guix/authentication/* && guix git authenticate`), and the
authentication was successful. (The checkout is up-to-date, as both
6ca7b07a251739dfaefa639e74c01e3013c9454c and
f13f0769688493271f43f31a016957355dbecb30 can be found in `git log`.)

However, I have not yet pulled 6ca7b07a251739dfaefa639e74c01e3013c9454c.
I'm currently on b9063be5a73114c1bfb23121b7c9b612835d014d [1].

So, I think you're right - it's probably an issue in `guix pull` or the
authentication mechanism, not the Guix repository (assuming that others
can also reproduce this).


[1] ...well, technically, I'm pulling from a personal authenticated fork
    where upstream commits are rebased onto the branch I pull from; so
    the hashes are all different even though the commit contents are all
    the same. So I'm not actually on
    b9063be5a73114c1bfb23121b7c9b612835d014d; rather, that's the last
    commit that I rebased onto my fork branch.

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Sep 7 11:41:40 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#76660 Downgrade prevention triggers erroneously with 'guix pull'