#76660 - Downgrade prevention triggers erroneously with 'guix pull'

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #8 received at 76660@debbugs.gnu.org (full text, mbox, reply):

Received: (at 76660) by debbugs.gnu.org; 1 Mar 2025 21:41:22 +0000
From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 01 16:41:22 2025
Received: from localhost ([127.0.0.1]:45347 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1toUaI-0005Qa-Bx
	for submit@debbugs.gnu.org; Sat, 01 Mar 2025 16:41:22 -0500
Received: from wolfsden.cz ([37.205.8.62]:51062)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <~@wolfsden.cz>) id 1toUaF-0005QB-CU
 for 76660@debbugs.gnu.org; Sat, 01 Mar 2025 16:41:21 -0500
Received: by wolfsden.cz (Postfix, from userid 104)
 id 77895354625; Sat,  1 Mar 2025 21:41:17 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail;
 t=1740865277; bh=iK6RYLtX16fIX9OEaMuOMw6x2Br+fDEVHRcmW62e1yk=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date;
 b=PDhSodhmce9DEX4gMQ6+dY4UEa7HuBFH7Uv+3spzVxk0G7aWjj3YzR9pJp1ofLYrl
 R9iAoAMbqoZ7vi3ehIrVBYp3Fbfo1gxUYoA6LuTO6+ns7P61mXHeDKAuskVbylW91i
 CmplnqRzBmh/lTFsqe5a/bjk8Se/7Wy96zDM9k69JzBiXesz1GxqBDj8yhSH29901K
 7qvO3+DFYsrLhrTyccfXXvg1CwyDxQ/JCZereaflSr99KzKCJGo4/jH5pcEC1J5WRn
 lrD/xxlLd36ni4/1yPWwfyqztW690zsKiHpBzdLsUSYhmJjV3vuSt5I3a5zGq3KTrD
 vCrmMs9RXsZ7NWKjG1FciKjmzqPwpr0ji38PwQshcPHQyHvbyo7DeexKFiONdkOXRZ
 RB+rwTBfX8zz2sdO20DyilM1wBRAm0B5MijCsXFcRTjpc/u9lq+GjEAX2c/riwdVMz
 DOGuRJ20gZbG5CLpFO65ub9dfKNL/eRMemR053MC5xa5ZByrVOMShdO83gzoS0IpDt
 MTZBDZBBl8LvqnfORTGufVCFTCgwpfF9nAYEd15QtQ0pNP53tTPnJ2gngwImPUiz2Z
 oUE6WF4LAz2gtnd5oBC1md+xZjUSEWGFPiFuyRYjPgBEXZoYhldfZuXhdt4ux0KYAT
 UjxYV0h3U32yGVPDMCUDrkOc=
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on wolfsden
X-Spam-Level: 
X-Spam-Status: No, score=-3.1 required=5.0 tests=ALL_TRUSTED,BAYES_00,
 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,URIBL_BLOCKED
 autolearn=ham autolearn_force=no version=3.4.6
Received: from localhost (unknown [128.0.188.242])
 by wolfsden.cz (Postfix) with ESMTPSA id 9FBFC353EC6;
 Sat,  1 Mar 2025 21:41:16 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail;
 t=1740865276; bh=iK6RYLtX16fIX9OEaMuOMw6x2Br+fDEVHRcmW62e1yk=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date;
 b=hNYQgYMgQSZ1t/FpCpOnjJBEHkrXihtm4x0Gb4YCeYU2UDuLCiHzWjfQzk1tfPzwb
 N8CuX5Z8WbDd0yJhXQ9J6kwneVWvTaDSPsn4J4wiZVeO3M+fBP2L9bVDqq74hk3K/4
 ah1EBZALCOiJ9vprPLCZ1K7tu/ZvqZ7R/f0pDex816wFwDZXk1yx3bFbJtsnAjakAZ
 3LpXXnk7NHVhnR2s7WrhLQj2N5tYJA9W8eLv0zjZyXmVuLUF+LZDlaeXFUUafYm9DQ
 3a+xvsDnb8wJzTB84t1NQ1/ovpLwoDJck6EitqlSwLT/lWgCBgK2TJ2bNvf16FZjNm
 1tfbL2ks2U7lLsiv+TE1TdkdbvF9wBY3x6mq0qTzl1O9DFpBHERy5uZ3iQ3glJg73f
 30DP/IlzfXyaWSdTORuCJre+iygcrvfAaKxWr9ymC/sB3WRLbKk4SlrQkFqElrFI12
 dTU9N0BkWh8fdSCw8qba0RNr3PHGAhZficvP87lIXMl7m1WGyV1Tp6zXVFSgSqNeQt
 cmWKcmwmavB4s//RLn3PT8Jd1hh6J9pMq10JoIbvsoghrCa9fN0Nik+WKmcXOc5a/F
 uOJ5SMxIGQMMVyPEwIdbL1pN70gYsLM6vyIDWGRQ+UlEYg+WGOvpljxGBA/DAMlTtw
 QVFOcRJzI+MkqjYLSyrmexSY=
From: Tomas Volf <~@wolfsden.cz>
To: Jack Hill <jackhill@jackhill.us>
Subject: Re: bug#76660: current guix pull doesn't authenticate
In-Reply-To: <alpine.DEB.2.21.2503011134420.24671@marsh.hcoop.net> (Jack
 Hill's message of "Sat, 1 Mar 2025 11:37:40 -0500 (EST)")
References: <alpine.DEB.2.21.2503011134420.24671@marsh.hcoop.net>
Date: Sat, 01 Mar 2025 22:41:16 +0100
Message-ID: <87y0xoo2df.fsf@wolfsden.cz>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 76660
Cc: 76660@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

[Message part 1 (text/plain, inline)]

Jack Hill <jackhill@jackhill.us> writes:

> jackhill@lissome ~$ guix describe
> Generation 159  Feb 27 2025 22:08:27    (current)
>   guix f13f076
>     repository URL: https://git.savannah.gnu.org/git/guix.git
>     branch: master
>     commit: f13f0769688493271f43f31a016957355dbecb30
> jackhill@lissome ~$ guix pull
> Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.org/git/guix.git'...
> guix pull: error: aborting update of channel 'guix' to commit 6ca7b07a251739dfaefa639e74c01e3013c9454c, which is not a descendant of f13f0769688493271f43f31a016957355dbecb30
> hint: This could indicate that the channel has been tampered with and is trying to force a
> roll-back, preventing you from getting the latest updates.  If you think this is not the
> case, explicitly allow non-forward updates.
>
> I don't have reason to believe the channel needs to be rolled back, I assume
> something is wrong with the savannah copy of the repo, but don't know. Can
> someone confirm?

Can confirm.

--8<---------------cut here---------------start------------->8---
/tmp/test$ /tmp/test/profile/bin/guix describe
Generation 1	Mar 01 2025 21:04:08	(current)
  guix f13f076
    repository URL: https://git.savannah.gnu.org/git/guix.git
    commit: f13f0769688493271f43f31a016957355dbecb30
/tmp/test$ /tmp/test/profile/bin/guix pull -q --commit=6ca7b07a251739dfaefa639e74c01e3013c9454c --profile=/tmp/test/profile
Updating channel 'guix' from Git repository at 'https://git.savannah.gnu.org/git/guix.git'...
guix pull: error: aborting update of channel 'guix' to commit 6ca7b07a251739dfaefa639e74c01e3013c9454c, which is not a descendant of f13f0769688493271f43f31a016957355dbecb30
hint: Use `--allow-downgrades' to force this downgrade.

--8<---------------cut here---------------end--------------->8---

There is nothing wrong with the repository, and the commit is a
descendant:

--8<---------------cut here---------------start------------->8---
$ git merge-base --is-ancestor f13f0769688493271f43f31a016957355dbecb30 6ca7b07a251739dfaefa639e74c01e3013c9454c
$ echo $?
0
--8<---------------cut here---------------end--------------->8---

Given that f13f0769688493271f43f31a016957355dbecb30 has fairly large
commit message, maybe the known bugs in how we are using guile-git
finally caught up with us.

I guess you can use the --allow-downgrades to by-pass the check after
you manually verify in the git repository the relation of the commits.
Sucks, but should allow you to pull.

Have a nice day,
Tomas
-- 
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.

[signature.asc (application/pgp-signature, inline)]

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Sep 7 11:59:32 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#76660 Downgrade prevention triggers erroneously with 'guix pull'