GNU bug report logs - #39575
guix time-machine fails when a tarball was modified in-place

Previous Next

Package: guix;

Reported by: Jan Nieuwenhuizen <janneke <at> gnu.org>

Date: Wed, 12 Feb 2020 13:41:02 UTC

Severity: normal

Full log


View this message in rfc822 format

From: Ludovic Courtès <ludo <at> gnu.org>
To: zimoun <zimon.toutoune <at> gmail.com>
Cc: 39575 <at> debbugs.gnu.org, 28659 <at> debbugs.gnu.org, Jan Nieuwenhuizen <janneke <at> gnu.org>
Subject: bug#39575: guix time-machine fails when a tarball was modified in-place
Date: Sun, 16 Feb 2020 11:59:01 +0100
Hi!

zimoun <zimon.toutoune <at> gmail.com> skribis:

> On Fri, 14 Feb 2020 at 22:34, Ludovic Courtès <ludo <at> gnu.org> wrote:
>
>> Also, one could argue that we’d steer users towards downloading from our
>> server, which could be a privacy concern (probably not a strong argument
>> since one can easily change the substitute URLs.)
>
> I am not following the privacy concern.
> What do you mean?

I mean that by default, someone who’s disabled substitutes (presumably
out of security or privacy concerns) would find themself downloading
source code from ci.guix.gnu.org instead of various upstream sites.

Ludo’.





This bug report was last modified 5 years and 114 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.