From unknown Sun Jun 15 08:51:23 2025 X-Loop: help-debbugs@gnu.org Subject: bug#44863: Warning about importing a MELPA package Resent-From: Zhu Zihao Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 25 Nov 2020 09:58:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 44863 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 44863@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.160629825111487 (code B ref -1); Wed, 25 Nov 2020 09:58:01 +0000 Received: (at submit) by debbugs.gnu.org; 25 Nov 2020 09:57:31 +0000 Received: from localhost ([127.0.0.1]:34444 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1khrYJ-0002zC-1t for submit@debbugs.gnu.org; Wed, 25 Nov 2020 04:57:31 -0500 Received: from lists.gnu.org ([209.51.188.17]:57048) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1khrYH-0002z4-JG for submit@debbugs.gnu.org; Wed, 25 Nov 2020 04:57:29 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:39316) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1khrYH-0008M5-Av for bug-guix@gnu.org; Wed, 25 Nov 2020 04:57:29 -0500 Received: from mail-m974.mail.163.com ([123.126.97.4]:38040) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1khrY9-0007gp-AH for bug-guix@gnu.org; Wed, 25 Nov 2020 04:57:27 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com; s=s110527; h=From:Subject:Date:Message-ID:MIME-Version; bh=Vno1Q ipESn9tnNr4TVSqK59Dg4ma9frek5DCRmnC6Jw=; b=G6XrtkT+TdNuYsB9367VG eOz+oi8TmHYtB88IadDDJIfDPSFOHk6TD1/21BRRXs/T2r3pQziRWF6KG0JKCnyU VGtU0Dm6SxwEgbNsZ8zztTANKg2iOpN6wP4bUM/hEDmwrZvy2vWGCz3rlGCRkb1R A/HNsYTHdTUtO44hY0miUU= Received: from asus-laptop (unknown [27.39.89.133]) by smtp4 (Coremail) with SMTP id HNxpCgD3s1Z6Kr5fA1JtaA--.15397S2; Wed, 25 Nov 2020 17:57:15 +0800 (CST) User-agent: mu4e 1.4.13; emacs 27.1 From: Zhu Zihao Date: Wed, 25 Nov 2020 17:57:08 +0800 Message-ID: <86mtz5zrm3.fsf@163.com> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-CM-TRANSID: HNxpCgD3s1Z6Kr5fA1JtaA--.15397S2 X-Coremail-Antispam: 1Uf129KBjvdXoWrtFy3GFykJF1kuF1fJr15twb_yoWxAwb_Zr WFqr9FgrZ5JrsrCr10qF4ftrZ8Wrn5ZryYv3W5CF1DGw1xA3ZrZFn8CFy8Aay2k3Wjqr90 9r4kKw129FWY9jkaLaAFLSUrUUUUUb8apTn2vfkv8UJUUUU8Yxn0WfASr-VFAUDa7-sFnT 9fnUUvcSsGvfC2KfnxnUUI43ZEXa7IU8OzVUUUUUU== X-Originating-IP: [27.39.89.133] X-CM-SenderInfo: pdoosuxxwbztlvw6il2tof0z/1tbiKRvnr1Xlyb9mDgAAsU Received-SPF: pass client-ip=123.126.97.4; envelope-from=all_but_last@163.com; helo=mail-m974.mail.163.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.1 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable ELPA importer supports MELPA[1] currently. But MELPA is a rolling archive, which does not persist any old version tarball of package, and harmful for reproducible build. It's still useful for Guix packager to import package from MELPA to draft a sketch of Emacs package, but it's not a reliable download service. We may better warn user don't submit package which download url belongs to MELPA. Maybe emit warning while executing `guix import elpa -a melpa XXX`, or writing this rule to manual. [1]: the stable archive is "MELPA stable", I use term "MELPA" to refer to the unstable one. =2D-=20 Retrieve my PGP public key: https://meta.sr.ht/~citreu.pgp Zihao --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFIBAEBCAAzFiEE7NCVzXX6efyusptG1SOVn+xGFqYFAl++KnQVHGFsbF9idXRf bGFzdEAxNjMuY29tAAoJENUjlZ/sRhamfasH9jxauMcL6gBh7pbAYzgvcY1JgkvT MRbg7LC8qo3swIxpTmcVQqy9GcBEmnzpf9vn63E4Qpz9MmLpt2s+4IHI5Cy2RkrW 01gvjw/j8UINfZrdZ3hhhOY9uOrJTYvbSmqbNRv0f7YCTx1oQ3Im0qnGdNTOQaZQ OYW7B4B43fHfuUGGZrJzUvQdPl4txycr6zfPBWzI6YaA2OVbmv7demptw7xTzcKv 61TUuenGens7Gw44PNLDL3Rxuxyz7NE+8C1t482INztLrqy0BmRblLtptHZyb5kC 3vt+GHDnzwom98sK1S8auj5yXLWT4yhjeaaVHLBxGNb0mNawfluDFPYRiQ== =QhaM -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 15 08:51:23 2025 X-Loop: help-debbugs@gnu.org Subject: bug#44863: Warning about importing a MELPA package Resent-From: Carlo Zancanaro Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 07 Dec 2020 09:18:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 44863 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Zhu Zihao Cc: 44863@debbugs.gnu.org Received: via spool by 44863-submit@debbugs.gnu.org id=B44863.160733265517079 (code B ref 44863); Mon, 07 Dec 2020 09:18:01 +0000 Received: (at 44863) by debbugs.gnu.org; 7 Dec 2020 09:17:35 +0000 Received: from localhost ([127.0.0.1]:52389 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kmCeE-0004RP-Q6 for submit@debbugs.gnu.org; Mon, 07 Dec 2020 04:17:34 -0500 Received: from zancanaro.com.au ([45.76.117.151]:47644) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kmCeC-0004RF-AZ for 44863@debbugs.gnu.org; Mon, 07 Dec 2020 04:17:32 -0500 Received: by zancanaro.com.au (Postfix, from userid 116) id 4BC3F32D57; Mon, 7 Dec 2020 09:17:30 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on vultr X-Spam-Level: X-Spam-Status: No, score=-2.9 required=4.0 tests=ALL_TRUSTED,BAYES_00 autolearn=unavailable autolearn_force=no version=3.4.2 Received: from jolteon (unknown [27.96.215.68]) by zancanaro.com.au (Postfix) with ESMTPSA id D867532D54; Mon, 7 Dec 2020 09:17:27 +0000 (UTC) References: <86mtz5zrm3.fsf@163.com> User-agent: mu4e 1.4.13; emacs 27.1 From: Carlo Zancanaro In-reply-to: <86mtz5zrm3.fsf@163.com> Date: Mon, 07 Dec 2020 20:17:26 +1100 Message-ID: <87pn3mdlg9.fsf@zancanaro.id.au> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) On Wed, Nov 25 2020, Zhu Zihao wrote: > ... We may better warn user don't submit package which download > url belongs to MELPA. Maybe emit warning while executing `guix > import elpa -a melpa XXX`, or writing this rule to manual. I submitted a patch a while ago to make the MELPA importer pull the latest git commit (at the time of import) and use that as the source. The importer has to do a bit more work (eg. appropriately setting #:files in the Guix package). You can find my patch at https://issues.guix.gnu.org/issue/38769 but unfortunately it no longer applies cleanly to master. I'll take a look at fixing it up. From unknown Sun Jun 15 08:51:23 2025 X-Loop: help-debbugs@gnu.org Subject: bug#44863: Warning about importing a MELPA package Resent-From: Carlo Zancanaro Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 07 Dec 2020 09:55:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 44863 X-GNU-PR-Package: guix X-GNU-PR-Keywords: Cc: Zhu Zihao , 44863@debbugs.gnu.org Received: via spool by 44863-submit@debbugs.gnu.org id=B44863.160733489220737 (code B ref 44863); Mon, 07 Dec 2020 09:55:02 +0000 Received: (at 44863) by debbugs.gnu.org; 7 Dec 2020 09:54:52 +0000 Received: from localhost ([127.0.0.1]:52452 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kmDEK-0005OP-3j for submit@debbugs.gnu.org; Mon, 07 Dec 2020 04:54:52 -0500 Received: from zancanaro.com.au ([45.76.117.151]:40716) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kmDEI-0005OF-BF for 44863@debbugs.gnu.org; Mon, 07 Dec 2020 04:54:50 -0500 Received: by zancanaro.com.au (Postfix, from userid 116) id 2B17132D5C; Mon, 7 Dec 2020 09:54:48 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on vultr X-Spam-Level: X-Spam-Status: No, score=-1.9 required=4.0 tests=ALL_TRUSTED,BAYES_00, MISSING_HEADERS autolearn=no autolearn_force=no version=3.4.2 Received: from jolteon (unknown [27.96.215.68]) by zancanaro.com.au (Postfix) with ESMTPSA id 9899F32D59; Mon, 7 Dec 2020 09:54:47 +0000 (UTC) References: <86mtz5zrm3.fsf@163.com> <87pn3mdlg9.fsf@zancanaro.id.au> User-agent: mu4e 1.4.13; emacs 27.1 From: Carlo Zancanaro In-reply-to: <87pn3mdlg9.fsf@zancanaro.id.au> Date: Mon, 07 Dec 2020 20:54:46 +1100 Message-ID: <87mtyqdjq1.fsf@zancanaro.id.au> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Spam-Score: 1.2 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: On Mon, Dec 07 2020, Carlo Zancanaro wrote: > ... unfortunately it no longer applies cleanly to master. Actually, I think I was wrong about this. I must have done something wrong when I tried to apply the patch before sending my email. When I tried again it worked, and it seems to be fetching the git re [...] Content analysis details: (1.2 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.2 MISSING_HEADERS Missing To: header X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.2 (/) On Mon, Dec 07 2020, Carlo Zancanaro wrote: > ... unfortunately it no longer applies cleanly to master. Actually, I think I was wrong about this. I must have done something wrong when I tried to apply the patch before sending my email. When I tried again it worked, and it seems to be fetching the git references properly.