#76660 - Downgrade prevention triggers erroneously with 'guix pull'

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #32 received at 76660@debbugs.gnu.org (full text, mbox, reply):

Received: (at 76660) by debbugs.gnu.org; 9 Mar 2025 09:33:52 +0000
From debbugs-submit-bounces@debbugs.gnu.org Sun Mar 09 05:33:52 2025
Received: from localhost ([127.0.0.1]:58302 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1trD2d-0004gv-PJ
	for submit@debbugs.gnu.org; Sun, 09 Mar 2025 05:33:52 -0400
Received: from wolfsden.cz ([37.205.8.62]:56992)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <~@wolfsden.cz>) id 1trD2a-0004gi-Bm
 for 76660@debbugs.gnu.org; Sun, 09 Mar 2025 05:33:49 -0400
Received: by wolfsden.cz (Postfix, from userid 104)
 id 4E43D371A15; Sun,  9 Mar 2025 09:33:46 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail;
 t=1741512826; bh=4W/T2eO5o3sOIihJ0jfPVmUbh8NMluYpB5TYTIT9Rpk=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date;
 b=gp798nuGgEtkhjrN51feXHNVRc84Qe71a6rAWd5fM5EZb2KzcF3mdpR2/un496fj4
 6H7yKUTQZBrm9BBUo5iersiamWPA6TYd6CLjTioRPVHgQHvsOoXXw7LYCENWnXpVMm
 zORxs84VtT3g/gv3lSZ/ZbH6FOIk/TLml/ZqF2MN+B4icFWeQx52CKu1hHJFvnyFLZ
 OkI0RgBsfwsgCuM7UDAoc1dWiTZjoZBoNKOWnr2fHiW4xshP4q8/Uy8w/iLzCA7L/0
 3K6rfgHsGSJWFlnjJgqhPGl5t0psoEjP+yuEWvFxNoYybOil6WV619/pAqn6L4OT9o
 Nomw4joZKmiQYYlt+M/uCuxUVmUVI+CYEAjdo+LyDkgWWilnY/prDf52Vy5e3wo0I5
 w6eVN6RQjz/DPwzXMBqlTTBOql/3UQpdzE+Va8DLSDMJHCBxAiS4lnYpEgeYBWDFU4
 eu4EuIkUM6WujNhbKi55IMtQg9fbVaQf/iqdjb9Za9pS+hPP1onM+xzPGOjKA3b9Ty
 wUFPVkaOavPEH7rhc+zoeYylUDKNVvOM5Yv3zdxUqC6C6gYBSJm1C4x2Nz96xDxonQ
 zopm5NLVJZNWx8LNZBjVa4iuaygoaKQfsWa3/f2wkvcj9I49rqlHc9RFZ52h499Je+
 4NEpg6npc/RPaKe6jZErXe+A=
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on wolfsden
X-Spam-Level: 
X-Spam-Status: No, score=-3.1 required=5.0 tests=ALL_TRUSTED,BAYES_00,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,URIBL_BLOCKED
 autolearn=ham autolearn_force=no version=3.4.6
Received: from localhost (unknown [128.0.188.242])
 by wolfsden.cz (Postfix) with ESMTPSA id 776C73712D1;
 Sun,  9 Mar 2025 09:33:45 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail;
 t=1741512825; bh=4W/T2eO5o3sOIihJ0jfPVmUbh8NMluYpB5TYTIT9Rpk=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date;
 b=knpCOS9W8PF3q1Uih1MndrwlEfN1S8mbxblypfZgpsjw4R24FUUjm7blvSTXw1gvl
 0SyCDgMqRCilIFmZs/z5aHi/9lSVqX+XjtPalHsvbyaapTkbnQYUBXIQa7ImY1dPgJ
 rJIaDR21PLuhS9BcRSfstROlnmExySkac+iItiukHxGWicFjSKVFaU0aJ5jxR4A7wl
 0f4fuU0SYqg3MUsRCfnmlEKBC8lcqz6gKOfAYXssAnH9AEZ8jy3iLKRdYTfCIgKZRN
 UuTrI66qGeuuiUVR9/f18fJvGUwyoUAGOyNNBc4ZyvdCG0Ry8xe0xbl8NipECWcmCR
 yAGB7i34/1hoKH5GsqM++LWtqkxYCZCufsAWIyF4wv8I8YYBW8hss7ElfWGsQllUoS
 e2A7DaD9lho57CQH5/5ctOg4y5GhUYNvts8Yppf5HclEAGJDMV4T8nxhdzPR3Ces2n
 sanaiagXRR2dLWCnROlyc3kq13CL6rp5CitUefCKBMGNeIgQCxLbJ46NgDVcEHN/RG
 tRWlvKHZjo42WpGPOEXy6q+EhRrMHbVcKRSnhEEMXjLcBAm1HxYL1nOn8zIhpCOgc/
 opwFBN1I35Bu0aRLFlKeFCP2nOvBqODwnMo9E5uiFxbscS/WA6ZqgNIfN4iYjxa1Yf
 DKTmaJ78DtLBTqgn1hd85iYc=
From: Tomas Volf <~@wolfsden.cz>
To: Jack Hill <jackhill@jackhill.us>
Subject: Re: bug#76660: current guix pull doesn't authenticate
In-Reply-To: <alpine.DEB.2.21.2503072212540.24671@marsh.hcoop.net> (Jack
 Hill's message of "Fri, 7 Mar 2025 22:16:07 -0500 (EST)")
References: <alpine.DEB.2.21.2503011134420.24671@marsh.hcoop.net>
 <Z8Sog2wmaP2rT0IT@jasmine.lan> <87mse3jlml.fsf@wolfsden.cz>
 <Z8TgDzBDgv5UPBUJ@jasmine.lan> <875xkrj8vg.fsf@wolfsden.cz>
 <alpine.DEB.2.21.2503072212540.24671@marsh.hcoop.net>
Date: Sun, 09 Mar 2025 10:33:45 +0100
Message-ID: <87ldtezgxy.fsf@wolfsden.cz>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 76660
Cc: 76660@debbugs.gnu.org, Leo Famulari <leo@famulari.name>
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Jack Hill <jackhill@jackhill.us> writes:

> Assuming I understand correctly that there's no way to get this commit to
> verify: what are the next steps?
>
> Future looking, we should apply the patch so that we don't get non-verifiable
> commits in the future, but that won't help me, since I'll have to verify it with
> my current guix.
>
> How can I reset my state and move forward in a safe way? I assume it involves
> some manually verifying of commits?

I see few options:

1. Revert to previous good state using `guix pull --roll-back', and try
   pulling again.  Maybe it will help.

2. Checkout the Guix repository, switch to the last commit known to you
   to be safe, patch the guix/git.scm file ([0] should now apply
   clearly), build the modified Guix locally and pull using it.

3. Take someones word that some specific new commit is safe, and just
   pull while disabling protections.  Statistically, if few people
   independently confirm the commit on IRC, if should be pretty safe.

Number 1 is probably quickest to just try. :)

>
> I'm afraid I don't understand why only some people run into this
> problem.

I think it could be influenced by the commit you are currently on, and
the commit you are pulling as latest.  So depending on time of previous
and current pull, it might work or it might not work.  I assume that
limits the amount of affected people.

>
> Thanks!
> Jack
>

0: https://git.wolfsden.cz/guix/tree/etc/0001-git-Fix-usage-of-guile-git.patch

-- 
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Sep 7 15:44:29 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#76660 Downgrade prevention triggers erroneously with 'guix pull'