GNU bug report logs - #26608
Provide --only-substitutes flag to "guix package --upgrade"

Previous Next

Package: guix;

Reported by: Christopher Allan Webber <cwebber <at> dustycloud.org>

Date: Sat, 22 Apr 2017 16:04:02 UTC

Severity: important

Full log


Message #28 received at 26608 <at> debbugs.gnu.org (full text, mbox):

From: Ricardo Wurmus <rekado <at> elephly.net>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 26608 <at> debbugs.gnu.org, 22629 <at> debbugs.gnu.org,
 Alex Sassmannshausen <alex <at> pompo.co>, 32022 <at> debbugs.gnu.org
Subject: Re: bug#32022: bug#22629: “Stable” branch
Date: Fri, 31 Aug 2018 13:45:29 +0200
Ludovic Courtès <ludo <at> gnu.org> writes:

> I just had a bright idea (yes!): this can be addressed by writing
> something like this in ~/.config/guix/channels.scm:
>
>   (map latest-commit-with-substitutes-available
>        %default-channels)
>
> The hypothetical ‘latest-commit-with-substitutes-available’ would use
> (git) and (guix ci) to find the latest commit for which substitutes of
> interest are available, and would return:
>
>   (channel
>     ;; …
>     (commit "cabbag3"))   ;the ideal commit
>
> This has to be done with great care to prevent a downgrade attack and to
> make sure the user doesn’t miss out on security updates, but maybe we
> could provide a procedure that makes reasonable choices.

This is a great idea.  Any kind of fetch policy could be implemented
with this, including one that considers the contents of a manifest.

This is another of these instances where having a general purpose
programming language underpinning it all really pays off.

--
Ricardo





This bug report was last modified 3 years and 298 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.