GNU bug report logs - #28749
guix build --subsitute-urls does not override guix-daemon run with --no-subsitutes

Previous Next

Package: guix;

Reported by: Drashne <drashne <at> protonmail.com>

Date: Sun, 8 Oct 2017 17:15:01 UTC

Severity: normal

Done: Leo Famulari <leo <at> famulari.name>

Bug is archived. No further changes may be made.

Full log

View this message in rfc822 format

From: Leo Famulari <leo <at> famulari.name>
To: Ricardo Wurmus <rekado <at> elephly.net>
Cc: drashne <at> protonmail.com, Maxim Cournoyer <maxim.cournoyer <at> gmail.com>, 28749 <at> debbugs.gnu.org
Subject: bug#28749: guix build --subsitute-urls does not override guix-daemon run with --no-subsitutes
Date: Sat, 14 Oct 2017 12:41:56 -0400

[Message part 1 (text/plain, inline)]
On Sat, Oct 14, 2017 at 03:23:45PM +0200, Ricardo Wurmus wrote:
> I don’t know.  Substitute sources have to authorized before downloaded
> substitutes are accepted by the daemon.  This authorization happens as
> the root user, as it constitutes a system-wide change.

I was thinking of situations where the subsitute signing key is
authorized, but substitutes are disabled system-wide.

I don't have a use case for this configuration but, to me, it doesn't
seem far-fetched for multi-user systems. Maybe the administrator is
willing to let users trust substitutes, but doesn't want to do it for
the privileged Guix installation.

[signature.asc (application/pgp-signature, inline)]
This bug report was last modified 7 years and 219 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.