From unknown Wed Sep 10 17:01:41 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#46849 <46849@debbugs.gnu.org> To: bug#46849 <46849@debbugs.gnu.org> Subject: Status: ELPA packages are fetched from unstable url -> not reproducible Reply-To: bug#46849 <46849@debbugs.gnu.org> Date: Thu, 11 Sep 2025 00:01:41 +0000 retitle 46849 ELPA packages are fetched from unstable url -> not reproducib= le reassign 46849 guix submitter 46849 Johannes Rosenberger severity 46849 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Mon Mar 01 10:11:52 2021 Received: (at submit) by debbugs.gnu.org; 1 Mar 2021 15:11:52 +0000 Received: from localhost ([127.0.0.1]:50318 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lGkD9-0004Mq-IZ for submit@debbugs.gnu.org; Mon, 01 Mar 2021 10:11:52 -0500 Received: from lists.gnu.org ([209.51.188.17]:49936) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lGiOz-0008Oe-5o for submit@debbugs.gnu.org; Mon, 01 Mar 2021 08:15:58 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:52886) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lGiOz-0002mM-0m for bug-guix@gnu.org; Mon, 01 Mar 2021 08:15:57 -0500 Received: from daphnis.uberspace.de ([185.26.156.151]:43180) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lGiOt-0001LA-Bp for bug-guix@gnu.org; Mon, 01 Mar 2021 08:15:56 -0500 Received: (qmail 29423 invoked from network); 1 Mar 2021 13:15:42 -0000 Received: from localhost (HELO localhost) (127.0.0.1) by daphnis.uberspace.de with SMTP; 1 Mar 2021 13:15:42 -0000 Date: Mon, 01 Mar 2021 14:15:38 +0100 From: Johannes Rosenberger Subject: ELPA packages are fetched from unstable url -> not reproducible To: bug-guix@gnu.org MIME-Version: 1.0 User-Agent: 007 Message-Id: <1614603812.pcr83awkcn.jorsn@jorsn.eu> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=185.26.156.151; envelope-from=johannes@jorsn.eu; helo=daphnis.uberspace.de X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Mon, 01 Mar 2021 10:11:50 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hey Guixers, i think guix makes the same mistake Nixpkgs make (at least when I looked up= =20 what guix is doing around two weeks ago): They fetch the uncompressed tars built by ELPA. These are only available for the newest version of a package. ELPA keeps compressed archives only of around 20 hand-selected versions.=20 All package versions are kept in their git repo, which is a complete archiv= e, but there you must somehow extract the commit hash of a version. Details are here: - https://github.com/ttuegel/emacs2nix/issues/55 - https://github.com/NixOS/nixpkgs/issues/110796 - https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D46441 I proposed possible solutions in the Nixpkgs issue. Best, Johannes From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 20 18:41:05 2021 Received: (at 46849) by debbugs.gnu.org; 20 Mar 2021 22:41:05 +0000 Received: from localhost ([127.0.0.1]:53286 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkHJ-0006a5-0I for submit@debbugs.gnu.org; Sat, 20 Mar 2021 18:41:05 -0400 Received: from mail-wm1-f43.google.com ([209.85.128.43]:40743) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkHG-0006ZK-Ra for 46849@debbugs.gnu.org; Sat, 20 Mar 2021 18:41:03 -0400 Received: by mail-wm1-f43.google.com with SMTP id y124-20020a1c32820000b029010c93864955so9230753wmy.5 for <46849@debbugs.gnu.org>; Sat, 20 Mar 2021 15:41:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:references:date:message-id:mime-version :content-transfer-encoding; bh=WA07zZIudlTCnMmrwvKN2jN0w4CHviGRe/cCr6dXIVo=; b=fbnw1p3on9AJrzi05hFrePhngaCptyW5ghOmeIzntBqgem2NX1i9Cz7WswVulKIJMu Sl/47z70krT1pficYBFxLDyt50v3D8O2shn9qqVzZFd9BaJ3Mmq+BqO+jbJWo69OXI5S crrIQpPGNKjYtlw0qqlLqPq3jzbNljnvXIto0HHOyJXrsoRrY4dONEkqurvqbUdDEWub iFd/NqQi39LCBVSHWwKoWw1GqO5z4uvpsEH1yCFNEADsmG+BQnyhi9DBGlVa6aMxB/bG ul8KF1vOcp7qYDMTfG6G6Z+YQ+2daN62UbIpuxOYtd42lAczyIIiwlA75gX9t2TZfHAT faIg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:references:date:message-id :mime-version:content-transfer-encoding; bh=WA07zZIudlTCnMmrwvKN2jN0w4CHviGRe/cCr6dXIVo=; b=Awf6TLftyUrpmStqjFsqvBMLsFDI6+W+7oJkwPt8LiDTLveAnRJk6oZw5LfOW26iL+ L4aZA3Vt7rJdGmxHzx/L9bY1+dPUuIpzPTgk+GiD6oafAX8Jj80htvlWjpQWG0LB4clf BRVzn5S1LL3utWnZJNlwydgW9rBzD5MYql8eTE1ReVZZq0/+YxdsMz6xyKecKh6J6lRU om9Hg2+P8dvkRJS6CQMly2a63i8eqZDFt4da67s64BCbWL9b0L3rLtRRqUxvPHTr4vUa sLvmNq+zFYqzv66nBH2d18FxjkIXGBAoXcjZuqa55/PBX2Jzt/Wdf9oq8r612zc2Fygz Om+Q== X-Gm-Message-State: AOAM533KJ67aBn8Yi97KhC9P+R9wgBjgeLVujeeT4nzjWKqln/sFVcZd 38DU0cfomWa+jFImWPWauukVDIkFhuA= X-Google-Smtp-Source: ABdhPJzDoFwdmdKLOrAhKaf6wN188DSlz9yCjwy96bmNRiuRD7PUClXkqdBeXdlwoxhWw7ciYPireQ== X-Received: by 2002:a1c:20ce:: with SMTP id g197mr9219440wmg.129.1616280057037; Sat, 20 Mar 2021 15:40:57 -0700 (PDT) Received: from lili ([2a01:e0a:925:4d20:1002:72b2:7492:ea32]) by smtp.gmail.com with ESMTPSA id u9sm11645646wmc.38.2021.03.20.15.40.56 for <46849@debbugs.gnu.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 Mar 2021 15:40:56 -0700 (PDT) From: zimoun To: 46849@debbugs.gnu.org Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible References: <86o8fy75d0.fsf@gmail.com> Date: Sat, 20 Mar 2021 23:33:31 +0100 Message-ID: <86h7l5wj44.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 46849 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, I did a mistake and the bug report had not been CC. Cheers, simon -------------------- Start of forwarded message -------------------- From: zimoun To: Johannes Rosenberger Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible Date: Fri, 05 Mar 2021 02:32:11 +0100 Hi, Thanks for the notification. On Mon, 01 Mar 2021 at 14:15, Johannes Rosenberger wrot= e: > These are only available for the newest version of a package. > ELPA keeps compressed archives only of around 20 hand-selected versions.= =20 > All package versions are kept in their git repo, which is a complete arch= ive, > but there you must somehow extract the commit hash of a version. So it would break the =E2=80=9Cguix time-machine=E2=80=9D, right? There is 2 solutions: 1- trust the future Tarball Heritage [1] 2- switch to git-fetch all the ELPA packages. > - https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D46441 About #2, I am confused by this quote: If you can work from the elpa.git instead, then you'll avoid those problems (but the content is slightly different, so it might be less convenient). 1: All the best, simon -------------------- End of forwarded message -------------------- From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 20 18:41:05 2021 Received: (at 46849) by debbugs.gnu.org; 20 Mar 2021 22:41:05 +0000 Received: from localhost ([127.0.0.1]:53288 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkHJ-0006a7-8U for submit@debbugs.gnu.org; Sat, 20 Mar 2021 18:41:05 -0400 Received: from mail-wm1-f46.google.com ([209.85.128.46]:52221) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkHH-0006ZM-PT for 46849@debbugs.gnu.org; Sat, 20 Mar 2021 18:41:04 -0400 Received: by mail-wm1-f46.google.com with SMTP id p19so7368945wmq.1 for <46849@debbugs.gnu.org>; Sat, 20 Mar 2021 15:41:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:references:reply-to:date:message-id:mime-version :content-transfer-encoding; bh=3j3FdtjaxfzyTIN76nX4DlbPH31YpEMLtiA8ZWpGZ2M=; b=ADRay0fHA1GELAI4Cr5kEl3BC52EFXat2buyf4zER+N1uvDB1IpvO0cIhRD/c2fhIR +4N3HVLZBgOgGC57B/kC4YFrXMYpo6XVA7+LAJCBzsU8dN1Vz43Bkg001Ihcxaqzdhk4 aPFgXm2NnrKBKnavncV3EVaQb9B3VHo8f8buqumUDhLfJAMOb8Ca94J7yBd3KfKsCBGf 1QMbBsXfcNMPY0X6oksDgLxRudYZUdos1NAmg54gXCKrU06G54Crd9DKwpnvhH5zP7bE PH+Vh2A4VtQ2OKj0FeYmT2gS2b6DJnDgG0ncGgdfkxKGwE/bJAysIy5GJzvuEX5N56bc 86fg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:references:reply-to:date :message-id:mime-version:content-transfer-encoding; bh=3j3FdtjaxfzyTIN76nX4DlbPH31YpEMLtiA8ZWpGZ2M=; b=dnZ4dqT1mTeE1WKj8U+jDKVnNZdYgvlMlNB4zd3w8x+UAL8imlYihRmTbM7iuLSqb+ SuNm/maGloEeGGTbwC9wv2K5xfX9nIwfLkbY9W1ArW39TnY9JxZfDYd/l+rpXMjVv4J8 TFxce85KQvQcYJ+7NaA2FMiCXx4ZzFnVXKNiljwaeLrcJRkCbw0VLgRcTG7Pnu8EnwoW BBN33e1llqZEFMm/HawSxUxoAHfUBmN4IOmYiH3xRIekmGHVLNURB9USdX3MmbTC6d3P dDtr8JNCGrhIKodZ9HGiv8hGi8dkrQDBHmZA+8m0VeN8juFYiSGmMCptuBRPKT9DhqPT lqGg== X-Gm-Message-State: AOAM5314LIGNetyG3yacDnzICbahUhD4GVGvuBK37hIDhM3Ify0SzqDi DUp80NTvZk6Se/KBzmwDkGG+HYEm3nk= X-Google-Smtp-Source: ABdhPJzqxndeMCtW59BPyiu9uv13JnpLrAZfeNKGUuGQkW8jhZL6bELGXEop+w2PNGuA0ChNaKzvAA== X-Received: by 2002:a1c:7715:: with SMTP id t21mr9263968wmi.132.1616280058223; Sat, 20 Mar 2021 15:40:58 -0700 (PDT) Received: from lili ([2a01:e0a:925:4d20:1002:72b2:7492:ea32]) by smtp.gmail.com with ESMTPSA id a14sm15594061wrg.84.2021.03.20.15.40.57 for <46849@debbugs.gnu.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 Mar 2021 15:40:57 -0700 (PDT) From: zimoun To: 46849@debbugs.gnu.org Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible References: <1614944586.o4nfnu43ci.jorsn@jorsn.eu> Date: Sat, 20 Mar 2021 23:35:34 +0100 Message-ID: <86eeg9wj0p.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: 46849 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: 86h7l5wj44.fsf@gmail.com Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Follow-up. -------------------- Start of forwarded message -------------------- Date: Fri, 05 Mar 2021 12:56:27 +0100 From: Johannes Rosenberger Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible To: zimoun Hi Simon, Excerpts from zimoun's message of March 5, 2021 2:32 am: > On Mon, 01 Mar 2021 at 14:15, Johannes Rosenberger wr= ote: >=20 >> These are only available for the newest version of a package. >> ELPA keeps compressed archives only of around 20 hand-selected versions.= =20 >> All package versions are kept in their git repo, which is a complete arc= hive, >> but there you must somehow extract the commit hash of a version. >=20 > So it would break the =E2=80=9Cguix time-machine=E2=80=9D, right? Not only this. In Nixpkgs it broke the release of auctex in the=20 stable branch, because this wasn't at the newest version. The old version was still available lz-compressed, but there is no=20 guarantee for this. > There is 2 solutions: >=20 > 1- trust the future Tarball Heritage [1] > 2- switch to git-fetch all the ELPA packages. I documented (2) there: https://github.com/NixOS/nixpkgs/issues/110796#issuecomment-779297144 There is one third solution: 3- trust archive.org In Nixpkgs we also add archive.org urls as secondary source urls for=20 proprietary printer drivers. >> - https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D46441 >=20 > About #2, I am confused by this quote: >=20 > If you can work from the elpa.git instead, then you'll avoid > those problems (but the content is slightly different, so it > might be less convenient). I don't understand this sentence either, because the file http://git.savannah.gnu.org/cgit/emacs/elpa.git/tree/elpa-admin.el?h=3Delpa= -admin seems to create the packages, so every package in the elpa built from=20 the git should be the same. One could check whether all packages on ELPA=20 are also in the git and vice versa. Also, some packages might not be=20 `external` in the language of ELPA, so not residing in an `external/*`=20 branch. Best, Johannes -------------------- End of forwarded message -------------------- From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 20 18:42:10 2021 Received: (at 46849) by debbugs.gnu.org; 20 Mar 2021 22:42:10 +0000 Received: from localhost ([127.0.0.1]:53294 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkIL-0006c9-Ni for submit@debbugs.gnu.org; Sat, 20 Mar 2021 18:42:09 -0400 Received: from mail-wr1-f44.google.com ([209.85.221.44]:36621) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkIJ-0006bg-Si for 46849@debbugs.gnu.org; Sat, 20 Mar 2021 18:42:08 -0400 Received: by mail-wr1-f44.google.com with SMTP id k8so12752808wrc.3 for <46849@debbugs.gnu.org>; Sat, 20 Mar 2021 15:42:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:in-reply-to:references:date:message-id:mime-version; bh=NE1Dj0woZKV8URww+yC8GMYb/ON/aG8T0bSB2Pu2RDo=; b=o1Uu4v/LRAg7tPAbpvRSsR277Hu8qxDxFEp+1KbB3SLrgxKLy1rbVyfRB374aN0mC0 +SlEe1N5lXDkMKeQwrulDfuXP5RiYjC+jLMFAq1wK4cjcT8axpvdYDjkySXH4byl+qzp JpyDD9rLRUdzvmJe0reX7WtIEC59xcFM6K6HWymQEfs06bqk9K75k3ypWp3uK7WPp8HG Q7hYB/ivezDoM6lOT3bFvJrHpEvN+DS5v/YvNuO+6S+AzGr0tVnO/qLB0rCkfCSzR4KK er+cyNDZ9CHfB9fqPikbs0/VTIfxnMzFNzQOaHiW+MHpk+/FI2F0eL1Nr9YgqmrkmotX JMIg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:in-reply-to:references:date :message-id:mime-version; bh=NE1Dj0woZKV8URww+yC8GMYb/ON/aG8T0bSB2Pu2RDo=; b=LuxSmXmVt5BQigLDsFc7yELXfCsR8ZFdNt3nSSWn1e99bj6W6YXcqwnzWs+lO7vsry Fnp9aFEFWO76EH5wDwmpFeAULewe6a6z4AVvAXGfoOBdFUBphvERunh+LDWu0aU6qbll 5CL4DTFzha2uKd278RrsN/evgrlxQhZsNy6gX2tWpOa0KQM1KjZDfp3kYsGanWAGNpzQ X5s8YZzY8IfqwVi68Wa6ciQdUDgJi4natrKLGf+m46hDQm7tMwLb+Jm6W4CUAWt0zOmU FBmudU800haHaEnWsNVrKj5fGY67+gPRB/1y4N36x8SkUEgVftaDKcDLBO+HxCmgI6vK 3iLg== X-Gm-Message-State: AOAM5304N4Fd7QgY6Ooj/zWQ1gz9nLSrIGhywGLml4cm72WfZSRw2kpc v/dPeGn/u+Q6GwXRFghWcY+0UShfX48= X-Google-Smtp-Source: ABdhPJymLuwaPOOoX46TIA8ox/PDnqiQs2Z6vQG0TcNBvIC+SG31tLOAqzg5PA4dNCBPGp9/Vq3Ddg== X-Received: by 2002:adf:fb8a:: with SMTP id a10mr10795684wrr.365.1616280122197; Sat, 20 Mar 2021 15:42:02 -0700 (PDT) Received: from lili ([2a01:e0a:925:4d20:1002:72b2:7492:ea32]) by smtp.gmail.com with ESMTPSA id b65sm12258100wmh.4.2021.03.20.15.42.01 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 Mar 2021 15:42:01 -0700 (PDT) From: zimoun To: 86h7l5wj44.fsf@gmail.com, 46849@debbugs.gnu.org Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible In-Reply-To: <86eeg9wj0p.fsf@gmail.com> References: <1614944586.o4nfnu43ci.jorsn@jorsn.eu> <86eeg9wj0p.fsf@gmail.com> Date: Sat, 20 Mar 2021 23:41:00 +0100 Message-ID: <868s6hwirn.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 46849 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Follow up 2. -------------------- Start of forwarded message -------------------- Date: Fri, 05 Mar 2021 13:08:05 +0100 From: Johannes Rosenberger Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible To: zimoun Excerpts from Johannes Rosenberger's message of March 5, 2021 12:56 pm: > Excerpts from zimoun's message of March 5, 2021 2:32 am: > >> There is 2 solutions: >> >> 1- trust the future Tarball Heritage [1] >> 2- switch to git-fetch all the ELPA packages. > 3- trust archive.org and maybe a fourth one: 4- https://www.softwareheritage.org/ (Blog entry about Nix & this by Tweag: https://www.softwareheritage.org/) Best, Johannes -------------------- End of forwarded message -------------------- From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 20 18:42:17 2021 Received: (at 46849) by debbugs.gnu.org; 20 Mar 2021 22:42:17 +0000 Received: from localhost ([127.0.0.1]:53296 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkIP-0006cM-0q for submit@debbugs.gnu.org; Sat, 20 Mar 2021 18:42:17 -0400 Received: from mail-wr1-f49.google.com ([209.85.221.49]:43909) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkIL-0006bs-7r for 46849@debbugs.gnu.org; Sat, 20 Mar 2021 18:42:09 -0400 Received: by mail-wr1-f49.google.com with SMTP id e9so12761072wrw.10 for <46849@debbugs.gnu.org>; Sat, 20 Mar 2021 15:42:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:in-reply-to:references:date:message-id:mime-version :content-transfer-encoding; bh=VfZUZg495l0h4V7/dFDUqZeOuy85SHDgmlfEv4PM6Hc=; b=cd/2E1xpSeKMIJUrXw393MuXrbV2Dy8lPN/4/g/NQPugLNLwqndClR5sctXISxYqgp FRoEPyxcf+1t9YW2sOVNbC1tPUQ5IVBQnill7Af+ImjWV88lTA59WjJW4Tg9nxPRolnP dK0Mj59lGlAHZomgmvLUpIwsNDqwFCV3NMjdkiw85qZ+l/1QtjNqAS53XV0qNeFAZw0J JP+J0yu3EJFTBW+3vT1u13GZ8EofTvb0ZNYJuNj1TbmcqwmZpsnreuArrrOP1BlRLogA 1/FA0K5haYFoFAgm+kcr2GXqP/kD/rllFAHlWcnXP4OJPlD5gVymDcnVVLIuMR1on9h3 Lafg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=VfZUZg495l0h4V7/dFDUqZeOuy85SHDgmlfEv4PM6Hc=; b=Ez2QqHZCTQ7msfAkcbGtQcYK4O2fjCvI/4IK6PAl1PC92QchDAGfRNhOa8Y39HYZCS 5xrM0dzcfFxeZSTRZpHVTz1TDVW/t7A+iKSqjcsM6mlg07ucOgM1ag7gR+sKpK4rSHvk UYKdKzYsK5JNB6dCH2m8TQSGGooKbLPXYPOA9fMWqdolx3ftHKnKgcXHdlqsi/hbpUhg mREy5HVF59lAoQwGBWNVMIuNMOs829U0OudXT5UhN8hVpbinygnYpzdic/qHEHmGbQeu 7XwgseWmEPUBY9CwAK6HBDV9omFhkcl0yU1LJbhIlX3KmIEHYZMRUMB5fV6PozeUEoRL fKuQ== X-Gm-Message-State: AOAM532OZ11hLeJV535Gl7xS3jHcpPe3q3VcJcrVbbrHXRhW2bz9DOZv Wctl87IZ5cA+5gIfGgygIJLWtrN43yo= X-Google-Smtp-Source: ABdhPJya3wHTaDpiFezCJigFPUOf9c0QYPbXIPVlcg4jHSjgYQINFhvQFdxMjjdNY8wOAYkfdX3bDg== X-Received: by 2002:adf:dd47:: with SMTP id u7mr11086795wrm.13.1616280123691; Sat, 20 Mar 2021 15:42:03 -0700 (PDT) Received: from lili ([2a01:e0a:925:4d20:1002:72b2:7492:ea32]) by smtp.gmail.com with ESMTPSA id v13sm16607214wrt.45.2021.03.20.15.42.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 Mar 2021 15:42:03 -0700 (PDT) From: zimoun To: 86h7l5wj44.fsf@gmail.com, 46849@debbugs.gnu.org Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible In-Reply-To: <868s6hwirn.fsf@gmail.com> References: <1614944586.o4nfnu43ci.jorsn@jorsn.eu> <86eeg9wj0p.fsf@gmail.com> <868s6hwirn.fsf@gmail.com> Date: Sat, 20 Mar 2021 23:41:48 +0100 Message-ID: <864kh5wiqb.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 46849 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Follow up 3. -------------------- Start of forwarded message -------------------- From: zimoun To: Johannes Rosenberger Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible Date: Fri, 05 Mar 2021 13:31:09 +0100 Hi Johannes, On Fri, 05 Mar 2021 at 13:08, Johannes Rosenberger wrot= e: >>> There is 2 solutions: >>> >>> 1- trust the future Tarball Heritage [1] >>> 2- switch to git-fetch all the ELPA packages. >> 3- trust archive.org About archive.org, I do not know. Currently, there is no fallback in Guix to it that I am aware, and nothing planned AFAIK. > and maybe a fourth one: > > 4- https://www.softwareheritage.org/ > (Blog entry about Nix & this by Tweag: https://www.softwareheritag= e.org/) Yeah, this is what I called #1. :-) Currently, via the =E2=80=99nixguix=E2= =80=99 SWH loader [1], packages using url-fetch are archived via the file [2]. However, work remains to have a full robust end-to-end solution: a) not all the extensions of =E2=80=99url-fetch=E2=80=99 are archived (an= d I do not remember the status about the .el) b) the fallback is not robust because of inconsistent addresses between SWH (swh-id) and the-rest-of-the-world (checksum hashes)=E2=80=93to= say it quickly. The aim of the disarchive=E2=80=99s project [3] is to address b) by creatin= g a bridge, i.e., stores in a separate database [4] the structure of the metadata and then rebuild the archive from a checksum using the files addressed by swh-id. 1: 2: 3: 4: Cheers, simon -------------------- End of forwarded message --------------------