#76660 - Downgrade prevention triggers erroneously with 'guix pull'

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #17 received at 76660@debbugs.gnu.org (full text, mbox, reply):

Received: (at 76660) by debbugs.gnu.org; 2 Mar 2025 19:08:58 +0000
From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 02 14:08:58 2025
Received: from localhost ([127.0.0.1]:35516 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1toogM-0000hO-6u
	for submit@debbugs.gnu.org; Sun, 02 Mar 2025 14:08:58 -0500
Received: from wolfsden.cz ([37.205.8.62]:42008)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <~@wolfsden.cz>) id 1toogH-0000gy-FM
 for 76660@debbugs.gnu.org; Sun, 02 Mar 2025 14:08:55 -0500
Received: by wolfsden.cz (Postfix, from userid 104)
 id 5374735AD95; Sun,  2 Mar 2025 19:08:51 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail;
 t=1740942531; bh=PLgW9Wsk0xNCA3eRu/KHwowjYTdCfkgVdelado3UCXk=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date;
 b=sCybl4jwydmP/tPp3n68qRRP4v7abd1c1mb9N+i933Ww8JhO7GFFiFXp6iCLhTuj2
 WPiEt/S6NhJAbKVxLpeS8GePXKWFWBXGg0pMRDFDNWQvjm4THXIVpJSIuWHstjhQC3
 V+a16a+DwlYe6F9a5efR0XRrZ+4tJQTqp+i3BMGHOWdVScBfnNpRA1muegoqeW3eP0
 Q8iODImrJ24uCXQX5dp4SMn/jGRpicQBN/0YepPUCqNqRGWP/50caB9OUPtnLGj1sT
 P9l32D0wpvvsggj7/CfodfSRpcWO+MKfk3oHbAsCAkMdpEYpgBxG12XxNvA0asHl1p
 W4cBe7XNq+89RR+o7O9GcB7RjO3r6hF6svGRuDZrHwTR2d/bW8qosj+35f0d3dyruF
 4QsVRl1bK+Yd65aM3zwuKnWZi0EIKfDvV8BGyvnTSxpKdXZ0lL9SssQPYmbeRmxTH3
 cmUKkSKepsgm+xxRuul9fReDUC5O+K5DoxRo0D3PkVsDc0FnQBm4QDRVNosJIXpWVF
 0r3jAtV1NAL1oPnDWf9uvPnPfFkHmmJCT7C0an2ukst88WEozjGRurFVP3/nI+hlWg
 hUWz7Oui17KIjU5uiL0c8xlavmDViiQ5P9gS3G/ZHc/sU+HhVZipjwAPZSXWSImVpZ
 yoxoX3Uz56cZ8pP83/BSdNPI=
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on wolfsden
X-Spam-Level: 
X-Spam-Status: No, score=-3.1 required=5.0 tests=ALL_TRUSTED,BAYES_00,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,URIBL_BLOCKED
 autolearn=ham autolearn_force=no version=3.4.6
Received: from localhost (unknown [128.0.188.242])
 by wolfsden.cz (Postfix) with ESMTPSA id 7E98835A07F;
 Sun,  2 Mar 2025 19:08:50 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail;
 t=1740942530; bh=PLgW9Wsk0xNCA3eRu/KHwowjYTdCfkgVdelado3UCXk=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date;
 b=yfydJVTX5FtX9jGkTyFaRvUFp3ETjWPkEc/O4/qVbrlsZ5Tqrjh0kwEBqwYBXBzGs
 xcBlrnQ0mYDY6hh+w0zuJhL5lPdzgTt7g2IvyTJx1CYHHuCPcmnDQXM85s6Rthh828
 eTIeSbxYRUAF/2aH/+KnCN+4RCT8avCB5tB7RRBVU6D7G8OCVcwcnFCmu1RcsrARXG
 1mtm6/lckVyjspFSg79efPSA7hy0Ue1CZCmViYXAFtdHn8UrBn31iv0KXVuBPp4tnQ
 +tHO6N1sTupsdMrapRqvy20tQVBnU71MC/00V3hpILX+A/P884woqDbARh0C/cL0rw
 gHPW7ElMRTHouBIkzhAVEbSuqaLu4MbXOxOBzOZWPrmSeWzRNppJu3D/jO/BBwksAH
 Lyyf04sDRopiV1R1GBtcVg1Jqh/9p/cebncBpPupDszX5Xz4ElkDY3xt+HhhsqgRyN
 cV8Ja3Y1F2iNN38vBguWDpzrogmArCxWMJqXz2jrsIQxWWVmJyw5e8FIj6VuoKrAIS
 miZ8WhEoXO/vOMroIu9ofuj36YrWfyX9GR6lQ0V6QFdBcc93Rp8RLotBXDI7uE43qv
 2LCTJEzb1qJ6DcJtI9YjPcY/fyp7vTJYqFmWRXO0BdacMDsyRw99+VUDFgVQTXIq8d
 dX8/Lv70bPjI5k8WwDOd3B4s=
From: Tomas Volf <~@wolfsden.cz>
To: Leo Famulari <leo@famulari.name>
Subject: Re: bug#76660: current guix pull doesn't authenticate
In-Reply-To: <Z8Sog2wmaP2rT0IT@jasmine.lan> (Leo Famulari's message of "Sun, 2
 Mar 2025 13:50:43 -0500")
References: <alpine.DEB.2.21.2503011134420.24671@marsh.hcoop.net>
 <Z8Sog2wmaP2rT0IT@jasmine.lan>
Date: Sun, 02 Mar 2025 20:08:50 +0100
Message-ID: <87mse3jlml.fsf@wolfsden.cz>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 76660
Cc: Jack Hill <jackhill@jackhill.us>, 76660@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

[Message part 1 (text/plain, inline)]

Leo Famulari <leo@famulari.name> writes:

> On Sat, Mar 01, 2025 at 11:37:40AM -0500, Jack Hill wrote:
>> guix pull: error: aborting update of channel 'guix' to commit 6ca7b07a251739dfaefa639e74c01e3013c9454c, which is not a descendant of f13f0769688493271f43f31a016957355dbecb30
>> hint: This could indicate that the channel has been tampered with and is trying to force a
>> roll-back, preventing you from getting the latest updates.  If you think this is not the
>> case, explicitly allow non-forward updates.
>
> I successfully pulled from the latest commit on the 'master' branch:

Can you pull *any* commit from 6ca7b07a251739dfaefa639e74c01e3013c9454c?
I have just tried:

--8<---------------cut here---------------start------------->8---
$ /tmp/test/profile/bin/guix describe
Generation 1	Mar 01 2025 21:04:08	(current)
  guix f13f076
    repository URL: https://git.savannah.gnu.org/git/guix.git
    commit: f13f0769688493271f43f31a016957355dbecb30
$ /tmp/test/profile/bin/guix pull -q --profile=/tmp/test/profile
Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.org/git/guix.git'...
guix pull: error: aborting update of channel 'guix' to commit 56a374aa79fd93a90373417b9a33b27dda633449, which is not a descendant of f13f0769688493271f43f31a016957355dbecb30
hint: This could indicate that the channel has been tampered with and is trying to force a roll-back, preventing you from getting the latest updates.  If you think this is not the case,
explicitly allow non-forward updates.
--8<---------------cut here---------------end--------------->8---

So it does not work for 56a374aa79fd93a90373417b9a33b27dda633449
(current master) on my machine.  Out of curiosity, can you try to pull
current master, but from 6ca7b07a251739dfaefa639e74c01e3013c9454c?

>
> ------
> $ guix package -p ~/.config/guix/current -l
> [...]
> Generation 242	Mar 02 2025 13:45:23	(current)
>  + nonguix	45bde19	out	/gnu/store/ahqhr9qbhq9w83fl3yif8qy5vfkhay7c-nonguix
>  + guix   	56a374a	out	/gnu/store/lfwph6c7099c0f5dzfpffg1qm93va5iv-guix-56a374aa7
>  - nonguix	87c5b72	out	/gnu/store/1kbmg93s0sc3ic01pql1jic6nr8mzkhi-nonguix
>  - guix   	55a5181	out	/gnu/store/vc2sn17c6g7ww4akd7p9dcfby6zykr81-guix-55a5181e7
> ------
>
> This commit is a descendant of both of the commits from your error
> message.
>
> And `guix git authenticate` succeeds from 56a374a as well.
>
> So what's going on?

Possible explanation would be that there is a bug in the descendancy
detection when your current Guix is on specific commits (my guesstimate
would be the trigger is having large commit message, I have reported
this issue before).

Have a nice day,
Tomas

-- 
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.

[signature.asc (application/pgp-signature, inline)]

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Sep 7 11:44:00 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#76660 Downgrade prevention triggers erroneously with 'guix pull'