From unknown Fri Sep 05 14:42:29 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50892] [PATCH] guix-install.sh: Authorize all project build farms at once. Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 29 Sep 2021 15:44:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 50892 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 50892@debbugs.gnu.org X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16329302108208 (code B ref -1); Wed, 29 Sep 2021 15:44:02 +0000 Received: (at submit) by debbugs.gnu.org; 29 Sep 2021 15:43:30 +0000 Received: from localhost ([127.0.0.1]:49920 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVbjt-00028D-Ne for submit@debbugs.gnu.org; Wed, 29 Sep 2021 11:43:30 -0400 Received: from lists.gnu.org ([209.51.188.17]:56874) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVbjo-000281-J1 for submit@debbugs.gnu.org; Wed, 29 Sep 2021 11:43:19 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52284) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVbjo-0006zm-56 for guix-patches@gnu.org; Wed, 29 Sep 2021 11:43:16 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:60028) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVbji-00070u-5b for guix-patches@gnu.org; Wed, 29 Sep 2021 11:43:15 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=tnvk0zCzDBqQi gdHuSm/qfcGsYMWaiTeAv2OyGzYgiY=; h=date:subject:to:from; d=tobias.gr; b=p0d6clnhATo91IldyaQRr5ekFExqYC6xx69HZBLbLyKjJ7b6+t6jVBtlyiPAvm+zkyYL Wt+ubW/9akRgd3d5B8swT/mwDtrsLNPTfR3XAN01+mygftGrobgiX4VV4mPozjuGpMIc0D UEdgir5qBz9iaJasfuwRBbkDFLTtWJ6PfSSVkfYhnD7u5y4yYyfzUrK8CMUG2LxupXfGWn OJWvztiYrmiikWxtutP7dcgHU74KerZMLfeYA/4orBvZ168fmWgEXzUupEfMw31hK00s6a 22welshZmBOK52LxlzHMAWrFH+mjWFvAVFiOFywcfjRxU/mt/HZcxHNJd2DHOCYw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 6a8a506d (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO) for ; Wed, 29 Sep 2021 15:43:04 +0000 (UTC) From: Tobias Geerinckx-Rice Date: Wed, 29 Sep 2021 17:43:10 +0200 Message-Id: <20210929154310.25788-1-me@tobias.gr> X-Mailer: git-send-email 2.33.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.6 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) * etc/guix-install.sh (sys_authorize_build_farms): Iterate over all hosts. --- etc/guix-install.sh | 23 +++++++++++++++-------- 1 file changed, 15 insertions(+), 8 deletions(-) diff --git a/etc/guix-install.sh b/etc/guix-install.sh index b0d4a8b95e..e3b8485a50 100755 --- a/etc/guix-install.sh +++ b/etc/guix-install.sh @@ -1,21 +1,21 @@ #!/bin/sh # GNU Guix --- Functional package management for GNU # Copyright © 2017 sharlatan # Copyright © 2018 Ricardo Wurmus # Copyright © 2018 Efraim Flashner -# Copyright © 2019, 2020 Tobias Geerinckx-Rice +# Copyright © 2019–2021 Tobias Geerinckx-Rice # Copyright © 2020 Morgan Smith # Copyright © 2020 Simon Tournier # Copyright © 2020 Daniel Brooks # Copyright © 2021 Jakub Kądziołka # Copyright © 2021 Chris Marusich # Copyright © 2021 Maxim Cournoyer # # This file is part of GNU Guix. # # GNU Guix is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or (at # your option) any later version. # # GNU Guix is distributed in the hope that it will be useful, but @@ -476,38 +476,45 @@ sys_enable_guix_daemon() ;; esac _msg "${INF}making the guix command available to other users" [ -e "$local_bin" ] || mkdir -p "$local_bin" ln -sf "${var_guix}/bin/guix" "$local_bin" [ -e "$info_path" ] || mkdir -p "$info_path" for i in "${var_guix}"/share/info/*; do ln -sf "$i" "$info_path" done } sys_authorize_build_farms() -{ # authorize the public key of the build farm +{ # authorize the public key(s) of the build farm(s) + local hosts=( + ci.guix.gnu.org + bordeaux.guix.gnu.org + ) + if prompt_yes_no "Permit downloading pre-built package binaries from the \ -project's build farm? (yes/no)"; then - guix archive --authorize \ - < "~root/.config/guix/current/share/guix/ci.guix.gnu.org.pub" \ - && _msg "${PAS}Authorized public key for ci.guix.gnu.org" - else - _msg "${INF}Skipped authorizing build farm public keys" +project's build farms? (yes/no)"; then + for host in "${hosts[@]}"; do + guix archive --authorize \ + < "~root/.config/guix/current/share/guix/$host.pub" \ + && _msg "${PAS}Authorized public key for $host" + done + else + _msg "${INF}Skipped authorizing build farm public keys" fi } sys_create_init_profile() { # Define for better desktop integration # This will not take effect until the next shell or desktop session! [ -d "/etc/profile.d" ] || mkdir /etc/profile.d # Just in case cat <<"EOF" > /etc/profile.d/guix.sh # _GUIX_PROFILE: `guix pull` profile _GUIX_PROFILE="$HOME/.config/guix/current" export PATH="$_GUIX_PROFILE/bin${PATH:+:}$PATH" # Export INFOPATH so that the updated info pages can be found # and read by both /usr/bin/info and/or $GUIX_PROFILE/bin/info # When INFOPATH is unset, add a trailing colon so that Emacs # searches 'Info-default-directory-list'. -- 2.33.0 From unknown Fri Sep 05 14:42:29 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50892] [PATCH] guix-install.sh: Authorize all project build farms at once. Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 29 Sep 2021 16:51:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50892 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch Cc: 50892@debbugs.gnu.org X-Debbugs-Original-Cc: guix-patches@gnu.org, 50892@debbugs.gnu.org Received: via spool by submit@debbugs.gnu.org id=B.163293423132369 (code B ref -1); Wed, 29 Sep 2021 16:51:02 +0000 Received: (at submit) by debbugs.gnu.org; 29 Sep 2021 16:50:31 +0000 Received: from localhost ([127.0.0.1]:50010 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVcms-0008Q0-C5 for submit@debbugs.gnu.org; Wed, 29 Sep 2021 12:50:31 -0400 Received: from lists.gnu.org ([209.51.188.17]:50302) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVcmq-0008Pq-2V for submit@debbugs.gnu.org; Wed, 29 Sep 2021 12:50:28 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:38892) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVcmn-0003f9-E6 for guix-patches@gnu.org; Wed, 29 Sep 2021 12:50:25 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:60036) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVcmi-0003ZT-93 for guix-patches@gnu.org; Wed, 29 Sep 2021 12:50:23 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=xtDzydM3VRZm8 fOmM+rJnenhXR0OAZOq3xF7QLE4jYY=; h=in-reply-to:date:subject:cc:from: references; d=tobias.gr; b=W/Ingd+l7E7RuPjBSTCVXla/C4zRL7/uTf9gT1OVNQs 9L83oYkdKPSvig9X1QDuDfw2IofNN66KrpWa+0/xCy0Ge6ZbdjhPlqzKXb0Br6wVIoUjDp oB5FQDRh25GyBJ0NJ6SKs9DEzz/ajlDxqEwuEuYlfGZQfPyIfvCuiKKAXtGBl4WDlJ6msR JdTi+Osm/ZgNf1r140OlBqPSJR7SCaJHcyZ0zlaYPVQwFa5WQ9Qlu1MYi8JYkSYnydbI+r itC/5QXiBK3bx0QJyTIJR1Ga6p6rqCMq9SR1VcQyI1u0qOFKBPM1ry5avq/QJ+CKN3xqkb giUevbsgRqiiGYRLzMA== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id ecaf543d (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Wed, 29 Sep 2021 16:50:14 +0000 (UTC) References: <20210929154310.25788-1-me@tobias.gr> From: Tobias Geerinckx-Rice Date: Wed, 29 Sep 2021 18:49:21 +0200 In-reply-to: <20210929154310.25788-1-me@tobias.gr> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87tui31g2y.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MISSING_HEADERS=1.021, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: -0.4 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.4 (-) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Tobias Geerinckx-Rice via Guix-patches via =E5=86=99=E9=81=93=EF=BC=9A > + <=20 > "~root/.config/guix/current/share/guix/$host.pub" \ This file is missing for bordeaux in the 1.3.0 release, so this=20 would have to wait until the next one=E2=80=A6 Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCYVSZVQ0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW157tIA/0NxtSi4/HOdtPht4P1YlTT4Op2MNXxktdEnqIh5 Px2tAP9VpcX2WZLsrqN6g7CdCL9beI10dRgzWW3FpDqkI/RaAQ== =ppGb -----END PGP SIGNATURE----- --=-=-=-- From unknown Fri Sep 05 14:42:29 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50892] [PATCH] guix-install.sh: Authorize all project build farms at once. Resent-From: Maxim Cournoyer Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 29 Sep 2021 16:52:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50892 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Tobias Geerinckx-Rice Cc: 50892@debbugs.gnu.org Received: via spool by 50892-submit@debbugs.gnu.org id=B50892.163293428732498 (code B ref 50892); Wed, 29 Sep 2021 16:52:02 +0000 Received: (at 50892) by debbugs.gnu.org; 29 Sep 2021 16:51:27 +0000 Received: from localhost ([127.0.0.1]:50015 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVcnf-0008Rf-6i for submit@debbugs.gnu.org; Wed, 29 Sep 2021 12:51:27 -0400 Received: from mail-qt1-f176.google.com ([209.85.160.176]:40887) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVcna-0008RJ-5c for 50892@debbugs.gnu.org; Wed, 29 Sep 2021 12:51:17 -0400 Received: by mail-qt1-f176.google.com with SMTP id b16so2920720qtt.7 for <50892@debbugs.gnu.org>; Wed, 29 Sep 2021 09:51:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=kqgz05eoW2Y8MfUiN9hHLGwvNvXAfWQSyqqycdx7jOI=; b=RtVNjOa0FSG2HmOD+mB4JgmOHQo4R8fEprdJ0MO5VJlHnJDdp9728b5XQhLnJkuMO5 m2LOMji6A4rI6899SE5vYPg8K5coNOhaNIrItbaqCPRG8sZME64CfGAXPXb74cwdaqlS 3ydju1tzdWNK0Bvmn6ydlowwkXgAxop0AJZnXnQugZWR++N0VTKpBotJOYeDy//6j3nc U8p5fO6cwnD3LJWH1Y36M7D4GNTHIu/9/2/vNhpvm2MCLvmHaoBQQ2FQuaGAhkgW3uLU ev5tIQ/ENT+ZJB1MAbbYPQn/jxnfDVpR6eux+NtFz/nVDAgr3TAEdrsnUyGVD60U/TbK b0tQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=kqgz05eoW2Y8MfUiN9hHLGwvNvXAfWQSyqqycdx7jOI=; b=eiH0iLhZ2keHQ7TAfYA/V2OJAPdICMoaXKAFDPFNtASs+Ck9SSxgozwh7WXuoOHSRQ aamwkQKsDItIwmBnECBOmNMoLipNSbiy1Oljp7z3um1FtEvJFYtROhZLyH0OXtNswMOE ArjF0e23SiCndSh9gbCAFPjbtPaOv9bTSsFGEG1/mYDCj1Z0dphI4EDNWxxncJpMSBG9 VhOCF9eNpnWzvW+484d1qHQAq7QmnjuWMkhFpfarAWUM9jKa24EjZ+iBDxh1Ok1zQx4J 8fv/DD1WH+JifZ9DMM8I9jTmiU/xZTEVdCcuQi5GC7tCk+V+O7HNNQ8BwbnVvhQNl6lh /q7A== X-Gm-Message-State: AOAM532pZ4ZVVn4ZWI4fZ4hHSUPeBwJJM58obbCxs35M7c/7EE+8t3hD dxNp+fJc43IjsLjpwfGgJ9GUlUDRK8w= X-Google-Smtp-Source: ABdhPJxu+SWluloaItmv7ZmVB4fIIvyxngIFENMsEJTGXywgMnOiW1tjw5Ml6gnnPSbjFmRDthhX7Q== X-Received: by 2002:ac8:56f9:: with SMTP id 25mr1072727qtu.374.1632934268434; Wed, 29 Sep 2021 09:51:08 -0700 (PDT) Received: from hurd ([207.35.95.110]) by smtp.gmail.com with ESMTPSA id a3sm239851qta.48.2021.09.29.09.51.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 29 Sep 2021 09:51:08 -0700 (PDT) From: Maxim Cournoyer References: <20210929154310.25788-1-me@tobias.gr> Date: Wed, 29 Sep 2021 12:51:07 -0400 In-Reply-To: <20210929154310.25788-1-me@tobias.gr> (Tobias Geerinckx-Rice's message of "Wed, 29 Sep 2021 17:43:10 +0200") Message-ID: <87r1d71g1w.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Tobias Geerinckx-Rice writes: > * etc/guix-install.sh (sys_authorize_build_farms): > Iterate over all hosts. > --- > etc/guix-install.sh | 23 +++++++++++++++-------- > 1 file changed, 15 insertions(+), 8 deletions(-) > > diff --git a/etc/guix-install.sh b/etc/guix-install.sh > index b0d4a8b95e..e3b8485a50 100755 > --- a/etc/guix-install.sh > +++ b/etc/guix-install.sh > @@ -1,21 +1,21 @@ > #!/bin/sh > # GNU Guix --- Functional package management for GNU > # Copyright =C2=A9 2017 sharlatan > # Copyright =C2=A9 2018 Ricardo Wurmus > # Copyright =C2=A9 2018 Efraim Flashner > -# Copyright =C2=A9 2019, 2020 Tobias Geerinckx-Rice > +# Copyright =C2=A9 2019=E2=80=932021 Tobias Geerinckx-Rice > # Copyright =C2=A9 2020 Morgan Smith > # Copyright =C2=A9 2020 Simon Tournier > # Copyright =C2=A9 2020 Daniel Brooks > # Copyright =C2=A9 2021 Jakub K=C4=85dzio=C5=82ka > # Copyright =C2=A9 2021 Chris Marusich > # Copyright =C2=A9 2021 Maxim Cournoyer > # > # This file is part of GNU Guix. > # > # GNU Guix is free software; you can redistribute it and/or modify it > # under the terms of the GNU General Public License as published by > # the Free Software Foundation; either version 3 of the License, or (at > # your option) any later version. > # > # GNU Guix is distributed in the hope that it will be useful, but > @@ -476,38 +476,45 @@ sys_enable_guix_daemon() > ;; > esac >=20=20 > _msg "${INF}making the guix command available to other users" >=20=20 > [ -e "$local_bin" ] || mkdir -p "$local_bin" > ln -sf "${var_guix}/bin/guix" "$local_bin" >=20=20 > [ -e "$info_path" ] || mkdir -p "$info_path" > for i in "${var_guix}"/share/info/*; do > ln -sf "$i" "$info_path" > done > } >=20=20 > sys_authorize_build_farms() > -{ # authorize the public key of the build farm > +{ # authorize the public key(s) of the build farm(s) > + local hosts=3D( > + ci.guix.gnu.org > + bordeaux.guix.gnu.org > + ) > + > if prompt_yes_no "Permit downloading pre-built package binaries from= the \ > -project's build farm? (yes/no)"; then > - guix archive --authorize \ > - < "~root/.config/guix/current/share/guix/ci.guix.gnu.org.pu= b" \ > - && _msg "${PAS}Authorized public key for ci.guix.gnu.org" > - else > - _msg "${INF}Skipped authorizing build farm public keys" > +project's build farms? (yes/no)"; then > + for host in "${hosts[@]}"; do > + guix archive --authorize \ > + < "~root/.config/guix/current/share/guix/$host.pub" \ > + && _msg "${PAS}Authorized public key for $host" > + done > + else > + _msg "${INF}Skipped authorizing build farm public keys" > fi > } >=20=20 > sys_create_init_profile() > { # Define for better desktop integration > # This will not take effect until the next shell or desktop session! > [ -d "/etc/profile.d" ] || mkdir /etc/profile.d # Just in case > cat <<"EOF" > /etc/profile.d/guix.sh > # _GUIX_PROFILE: `guix pull` profile > _GUIX_PROFILE=3D"$HOME/.config/guix/current" > export PATH=3D"$_GUIX_PROFILE/bin${PATH:+:}$PATH" > # Export INFOPATH so that the updated info pages can be found > # and read by both /usr/bin/info and/or $GUIX_PROFILE/bin/info > # When INFOPATH is unset, add a trailing colon so that Emacs > # searches 'Info-default-directory-list'. Tested on a VM: ./guix-install.sh: line 500: ~root/.config/guix/current/share/guix/bordeaux= .guix.gnu.org.pub: No such file or directory root@ubuntu:~# echo $? 1 I think we should fetch the keys from our online repo, so we can ensure 1. they are available 2. they are up to date. Thanks! Maxim From unknown Fri Sep 05 14:42:29 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50892] [PATCH] guix-install.sh: Authorize all project build farms at once. Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 08 Dec 2022 11:35:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50892 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Tobias Geerinckx-Rice Cc: 59781@debbugs.gnu.org, "pelzflorian \(Florian Pelz\)" , 50892@debbugs.gnu.org Received: via spool by 50892-submit@debbugs.gnu.org id=B50892.167049928312234 (code B ref 50892); Thu, 08 Dec 2022 11:35:01 +0000 Received: (at 50892) by debbugs.gnu.org; 8 Dec 2022 11:34:43 +0000 Received: from localhost ([127.0.0.1]:56218 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3FAl-0003BB-Fy for submit@debbugs.gnu.org; Thu, 08 Dec 2022 06:34:43 -0500 Received: from eggs.gnu.org ([209.51.188.92]:52984) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3FAc-0003Af-H1; Thu, 08 Dec 2022 06:34:34 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3FAV-0003Ia-06; Thu, 08 Dec 2022 06:34:23 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=1RDEVAbV9XL4cY2UG3g72pmeRWCnNFfFux7NriA35ew=; b=nEaOQM6Owh1KB42boGtk u8FG4N1E/lWGCa2lpEpZdCp/2ppRtC3dSdusrb8RWHf55oB1HpM1csguzvbWah7ZN4BhheiMoV2nB WYDbk6gUbUyVBvT7FMrkGsIpS0aWfjbDBaoS+Dgug5hfnbyjGkVOQlqAleMO/6BIdGg4Y0GY0FG6b 2E42zkOAhaPPNd/dwM11USf8Dvj04+dACFvUBdip2eb6r6FQzcloOBxzVAVU2TUcLbbc8sLOZhPBN GKF904eDD8S0xMIlwElmlARqhBCx6AxC66EAkiWHRTx6AeHIrU1savVF3ev95nsvXZlJVVRZ5m2Zl aDb3hOwqjTNr1w==; Received: from 91-160-117-201.subs.proxad.net ([91.160.117.201] helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3FAU-0000PS-JX; Thu, 08 Dec 2022 06:34:22 -0500 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> Date: Thu, 08 Dec 2022 12:34:20 +0100 In-Reply-To: <87tui31g2y.fsf@nckx> (Tobias Geerinckx-Rice's message of "Wed, 29 Sep 2021 18:49:21 +0200") Message-ID: <87edtaf7sz.fsf_-_@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, Tobias Geerinckx-Rice skribis: > Tobias Geerinckx-Rice via Guix-patches via =E5=86=99=E9=81=93=EF=BC=9A >> + < >> "~root/.config/guix/current/share/guix/$host.pub" \ > > This file is missing for bordeaux in the 1.3.0 release, so this would > have to wait until the next one=E2=80=A6 If there are no objections I=E2=80=99d like to push to =E2=80=98master=E2= =80=99 and =E2=80=98version-1.4.0=E2=80=99 this modified version of your patch. Thanks, Ludo=E2=80=99. --=-=-= Content-Type: text/x-patch; charset=utf-8 Content-Disposition: inline; filename=0001-guix-install.sh-Authorize-all-project-build-farms-at.patch Content-Transfer-Encoding: quoted-printable Content-Description: the patch >From f13e03d57ae9784a349bfa2eab0285e2c5b58eb7 Mon Sep 17 00:00:00 2001 From: Tobias Geerinckx-Rice Date: Wed, 29 Sep 2021 17:43:10 +0200 Subject: [PATCH] guix-install.sh: Authorize all project build farms at once. MIME-Version: 1.0 Content-Type: text/plain; charset=3DUTF-8 Content-Transfer-Encoding: 8bit * etc/guix-install.sh (sys_authorize_build_farms): Iterate over all hosts. Co-authored-by: Ludovic Court=C3=A8s --- etc/guix-install.sh | 22 +++++++++++++++------- 1 file changed, 15 insertions(+), 7 deletions(-) diff --git a/etc/guix-install.sh b/etc/guix-install.sh index 6bef21bb7e..fb9006b3e2 100755 --- a/etc/guix-install.sh +++ b/etc/guix-install.sh @@ -492,14 +492,22 @@ sys_enable_guix_daemon() } =20 sys_authorize_build_farms() -{ # authorize the public key of the build farm +{ # authorize the public key(s) of the build farm(s) + local hosts=3D( + ci.guix.gnu.org + bordeaux.guix.gnu.org + ) + if prompt_yes_no "Permit downloading pre-built package binaries from t= he \ -project's build farm?"; then - guix archive --authorize \ - < ~root/.config/guix/current/share/guix/ci.guix.gnu.org.pub \ - && _msg "${PAS}Authorized public key for ci.guix.gnu.org" - else - _msg "${INF}Skipped authorizing build farm public keys" +project's build farms?"; then + for host in "${hosts[@]}"; do + local key=3D~root/.config/guix/current/share/guix/$host.pub + [ -f "$key" ] \ + && guix archive --authorize < "$key" \ + && _msg "${PAS}Authorized public key for $host" + done + else + _msg "${INF}Skipped authorizing build farm public keys" fi } =20 --=20 2.38.1 --=-=-=-- From unknown Fri Sep 05 14:42:29 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50892] [PATCH] guix-install.sh: Authorize all project build farms at once. Resent-From: "pelzflorian (Florian Pelz)" Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 08 Dec 2022 21:28:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50892 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 59781@debbugs.gnu.org, Tobias Geerinckx-Rice , 50892@debbugs.gnu.org Received: via spool by 50892-submit@debbugs.gnu.org id=B50892.167053485314947 (code B ref 50892); Thu, 08 Dec 2022 21:28:01 +0000 Received: (at 50892) by debbugs.gnu.org; 8 Dec 2022 21:27:33 +0000 Received: from localhost ([127.0.0.1]:59213 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3OQW-0003t0-SB for submit@debbugs.gnu.org; Thu, 08 Dec 2022 16:27:33 -0500 Received: from relay.yourmailgateway.de ([188.68.63.98]:34971) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3OQU-0003sp-IK; Thu, 08 Dec 2022 16:27:31 -0500 Received: from mors-relay-2501.netcup.net (localhost [127.0.0.1]) by mors-relay-2501.netcup.net (Postfix) with ESMTPS id 4NSnL91cQkz63dR; Thu, 8 Dec 2022 22:27:29 +0100 (CET) Authentication-Results: mors-relay-2501.netcup.net; dkim=permerror (bad message/signature format) Received: from policy01-mors.netcup.net (unknown [46.38.225.35]) by mors-relay-2501.netcup.net (Postfix) with ESMTPS id 4NSnL90pVRz51C0; Thu, 8 Dec 2022 22:27:29 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at policy01-mors.netcup.net X-Spam-Flag: NO X-Spam-Score: -0.999 X-Spam-Level: X-Spam-Status: No, score=-0.999 required=6.31 tests=[ALL_TRUSTED=-1, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mxe217.netcup.net (unknown [10.243.12.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by policy01-mors.netcup.net (Postfix) with ESMTPS id 4NSnL81RQ6z8sbn; Thu, 8 Dec 2022 22:27:27 +0100 (CET) Received: from florianrock64 (ip5b40a50f.dynamic.kabel-deutschland.de [91.64.165.15]) by mxe217.netcup.net (Postfix) with ESMTPSA id 41C9C9EF32; Thu, 8 Dec 2022 22:27:18 +0100 (CET) From: "pelzflorian (Florian Pelz)" References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> <87edtaf7sz.fsf_-_@gnu.org> Date: Thu, 08 Dec 2022 22:27:16 +0100 In-Reply-To: <87edtaf7sz.fsf_-_@gnu.org> ("Ludovic =?UTF-8?Q?Court=C3=A8s?="'s message of "Thu, 08 Dec 2022 12:34:20 +0100") Message-ID: <87359pmvrf.fsf@pelzflorian.de> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 41C9C9EF32 X-Spamd-Result: default: False [-0.10 / 15.00]; MIME_GOOD(-0.10)[text/plain]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ZERO(0.00)[0]; ASN(0.00)[asn:3209, ipnet:91.64.0.0/14, country:DE]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: rspamd-worker-8404 X-NC-CID: FxLdwI6mnO2AEpIHJwcT+OBC3tpOg4lreNz5g3I52r3xXOjrvE8LMRRN X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Ludovic Court=C3=A8s writes: > If there are no objections I=E2=80=99d like to push to =E2=80=98master=E2= =80=99 and > =E2=80=98version-1.4.0=E2=80=99 this modified version of your patch. Thank you two, this patch works (on 1.3.0 only ci.guix.gnu.org, on 1.4.0rc1 also bordeaux, except when I decline authorization). Regards, Florian From unknown Fri Sep 05 14:42:29 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50892] [PATCH] guix-install.sh: Authorize all project build farms at once. Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Thu, 08 Dec 2022 21:47:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50892 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 59781@debbugs.gnu.org, 50892@debbugs.gnu.org Received: via spool by 50892-submit@debbugs.gnu.org id=B50892.167053598124499 (code B ref 50892); Thu, 08 Dec 2022 21:47:02 +0000 Received: (at 50892) by debbugs.gnu.org; 8 Dec 2022 21:46:21 +0000 Received: from localhost ([127.0.0.1]:59313 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3Oij-0006N4-8e for submit@debbugs.gnu.org; Thu, 08 Dec 2022 16:46:21 -0500 Received: from tobias.gr ([80.241.217.52]:33810) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3Oif-0006Mo-1i; Thu, 08 Dec 2022 16:46:20 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=TLFiPaM7LzmCE QZ52dS6ZRc66TLhIB8j7aJXIehTCt4=; h=in-reply-to:date:subject:cc:to: from:references; d=tobias.gr; b=QBel7t/MOjJWm7SBzjKonLqw6j5T/tcN2Z1UUA ss4OEDdvHanomxYuOT8DcGjClVLgkhGJpGeWotzZkkK4ypp6untkEqwsfOQzp39U9awc2x v4WvtF6NdNuvmjcBw/uv0ZIG31vv9lOenZ2W+wJLqAF5Vo7x1+HfRh2viFNZ7eL+NbC0dz R7OqHrVeFQIAXKo4BCF9AaZUm02nUJyrpyfY1uS8XHMKqgMVOIqk5frRt7VnTuysDGkeFa HGL9qo8QzI1Z2mJ82IPawpW56Wz7Pi6Ks94+xua5cOTXQMjXO+95uG3PLNFMH3ReDwPAwU fyq5Hmhq1T9xz59Zcp73rq5w== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 955cb23a (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Thu, 8 Dec 2022 21:46:12 +0000 (UTC) References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> <87edtaf7sz.fsf_-_@gnu.org> From: Tobias Geerinckx-Rice Date: Thu, 08 Dec 2022 22:42:59 +0100 In-reply-to: <87edtaf7sz.fsf_-_@gnu.org> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87ililzhx8.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s =E5=86=99=E9=81=93=EF=BC=9A > If there are no objections I=E2=80=99d like to push to =E2=80=98master=E2= =80=99 and > =E2=80=98version-1.4.0=E2=80=99 this modified version of your patch. No objections, thanks! (Ugh, this patch is so ugly, all to work around that triplication=20 in ~/.config/guix/current/share/guix/*.pub=E2=80=A6 Would it be OK for=20 =E2=80=98guix archive --authorize=E2=80=99 to silently ignore duplicate key= s?) Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCY5Jbgw0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15qq0BAPuEaVab9jBVCCRILsRar48RcdT01EUyN0Rf9Qrz ILCDAP9JcNYNsx7DVf7NFUP/gyBV4M+jfGfyx6e9KT4FPGsTAw== =YW1a -----END PGP SIGNATURE----- --=-=-=-- From unknown Fri Sep 05 14:42:29 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Tobias Geerinckx-Rice Subject: bug#50892: closed (Re: bug#59781: [version 1.4.0rc1] install.sh script should authorize bordeaux) Message-ID: References: <877cz1ar2r.fsf_-_@gnu.org> <20210929154310.25788-1-me@tobias.gr> X-Gnu-PR-Message: they-closed 50892 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 50892@debbugs.gnu.org Date: Fri, 09 Dec 2022 09:02:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1670576522-18880-1" This is a multi-part message in MIME format... ------------=_1670576522-18880-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #50892: [PATCH] guix-install.sh: Authorize all project build farms at once. which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 50892@debbugs.gnu.org. --=20 50892: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D50892 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1670576522-18880-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 50892-done) by debbugs.gnu.org; 9 Dec 2022 09:01:46 +0000 Received: from localhost ([127.0.0.1]:34695 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3ZGL-0004uC-SE for submit@debbugs.gnu.org; Fri, 09 Dec 2022 04:01:46 -0500 Received: from eggs.gnu.org ([209.51.188.92]:59228) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3ZGH-0004u3-IS; Fri, 09 Dec 2022 04:01:45 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3ZGB-00012d-Kx; Fri, 09 Dec 2022 04:01:35 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=lQQ0SVlmNro3I3xOlWaw8YpyXv/A8I56L1qGZgYKvZ8=; b=X5e1W/FEYtVFxmjB/mLC GdW0j4Hmvuvmw/lX+4NXUWasH2+MDrt/SLTXKp+zI+p+xvTc81JnN9VZ8o9Xd/mFhf8tEiR6Ilpc5 Zr06jdXjtYjnTBsaTlgVmB92ZZEH9ak0eR+gOfkfz+skmZDB48CkERUAFPfJucReI4PB7eDyLSdVo vuCEQ2wMapZg4U3RTYbdTmbDfWlspIY/iQc1gnyN/1FQe1t/fTOeEr4CAd9Sb4XOtos/j5pbsP7cJ GtumcKLWQCygNwHnLNinRUh8pzmf8mCttUycQZx5LnsuxXToNZf1e3Cq2vKmi63siCv3cHr8Jz4Dy 1ZYCnMOyf++JuQ==; Received: from [193.50.110.137] (helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3ZGB-0006uU-6b; Fri, 09 Dec 2022 04:01:35 -0500 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: "pelzflorian (Florian Pelz)" Subject: Re: bug#59781: [version 1.4.0rc1] install.sh script should authorize bordeaux References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> <87edtaf7sz.fsf_-_@gnu.org> <87359pmvrf.fsf@pelzflorian.de> Date: Fri, 09 Dec 2022 10:01:32 +0100 In-Reply-To: <87359pmvrf.fsf@pelzflorian.de> (pelzflorian@pelzflorian.de's message of "Thu, 08 Dec 2022 22:27:16 +0100") Message-ID: <877cz1ar2r.fsf_-_@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 50892-done Cc: 50892-done@debbugs.gnu.org, Tobias Geerinckx-Rice , 59781-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, "pelzflorian (Florian Pelz)" skribis: > Ludovic Court=C3=A8s writes: >> If there are no objections I=E2=80=99d like to push to =E2=80=98master= =E2=80=99 and >> =E2=80=98version-1.4.0=E2=80=99 this modified version of your patch. > > Thank you two, this patch works (on 1.3.0 only ci.guix.gnu.org, on > 1.4.0rc1 also bordeaux, except when I decline authorization). Pushed to both branches. Thanks to the two of you! Ludo=E2=80=99. ------------=_1670576522-18880-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 29 Sep 2021 15:43:30 +0000 Received: from localhost ([127.0.0.1]:49920 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVbjt-00028D-Ne for submit@debbugs.gnu.org; Wed, 29 Sep 2021 11:43:30 -0400 Received: from lists.gnu.org ([209.51.188.17]:56874) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVbjo-000281-J1 for submit@debbugs.gnu.org; Wed, 29 Sep 2021 11:43:19 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52284) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVbjo-0006zm-56 for guix-patches@gnu.org; Wed, 29 Sep 2021 11:43:16 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:60028) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVbji-00070u-5b for guix-patches@gnu.org; Wed, 29 Sep 2021 11:43:15 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=tnvk0zCzDBqQi gdHuSm/qfcGsYMWaiTeAv2OyGzYgiY=; h=date:subject:to:from; d=tobias.gr; b=p0d6clnhATo91IldyaQRr5ekFExqYC6xx69HZBLbLyKjJ7b6+t6jVBtlyiPAvm+zkyYL Wt+ubW/9akRgd3d5B8swT/mwDtrsLNPTfR3XAN01+mygftGrobgiX4VV4mPozjuGpMIc0D UEdgir5qBz9iaJasfuwRBbkDFLTtWJ6PfSSVkfYhnD7u5y4yYyfzUrK8CMUG2LxupXfGWn OJWvztiYrmiikWxtutP7dcgHU74KerZMLfeYA/4orBvZ168fmWgEXzUupEfMw31hK00s6a 22welshZmBOK52LxlzHMAWrFH+mjWFvAVFiOFywcfjRxU/mt/HZcxHNJd2DHOCYw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 6a8a506d (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO) for ; Wed, 29 Sep 2021 15:43:04 +0000 (UTC) From: Tobias Geerinckx-Rice To: guix-patches@gnu.org Subject: [PATCH] guix-install.sh: Authorize all project build farms at once. Date: Wed, 29 Sep 2021 17:43:10 +0200 Message-Id: <20210929154310.25788-1-me@tobias.gr> X-Mailer: git-send-email 2.33.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.6 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) * etc/guix-install.sh (sys_authorize_build_farms): Iterate over all hosts. --- etc/guix-install.sh | 23 +++++++++++++++-------- 1 file changed, 15 insertions(+), 8 deletions(-) diff --git a/etc/guix-install.sh b/etc/guix-install.sh index b0d4a8b95e..e3b8485a50 100755 --- a/etc/guix-install.sh +++ b/etc/guix-install.sh @@ -1,21 +1,21 @@ #!/bin/sh # GNU Guix --- Functional package management for GNU # Copyright © 2017 sharlatan # Copyright © 2018 Ricardo Wurmus # Copyright © 2018 Efraim Flashner -# Copyright © 2019, 2020 Tobias Geerinckx-Rice +# Copyright © 2019–2021 Tobias Geerinckx-Rice # Copyright © 2020 Morgan Smith # Copyright © 2020 Simon Tournier # Copyright © 2020 Daniel Brooks # Copyright © 2021 Jakub Kądziołka # Copyright © 2021 Chris Marusich # Copyright © 2021 Maxim Cournoyer # # This file is part of GNU Guix. # # GNU Guix is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or (at # your option) any later version. # # GNU Guix is distributed in the hope that it will be useful, but @@ -476,38 +476,45 @@ sys_enable_guix_daemon() ;; esac _msg "${INF}making the guix command available to other users" [ -e "$local_bin" ] || mkdir -p "$local_bin" ln -sf "${var_guix}/bin/guix" "$local_bin" [ -e "$info_path" ] || mkdir -p "$info_path" for i in "${var_guix}"/share/info/*; do ln -sf "$i" "$info_path" done } sys_authorize_build_farms() -{ # authorize the public key of the build farm +{ # authorize the public key(s) of the build farm(s) + local hosts=( + ci.guix.gnu.org + bordeaux.guix.gnu.org + ) + if prompt_yes_no "Permit downloading pre-built package binaries from the \ -project's build farm? (yes/no)"; then - guix archive --authorize \ - < "~root/.config/guix/current/share/guix/ci.guix.gnu.org.pub" \ - && _msg "${PAS}Authorized public key for ci.guix.gnu.org" - else - _msg "${INF}Skipped authorizing build farm public keys" +project's build farms? (yes/no)"; then + for host in "${hosts[@]}"; do + guix archive --authorize \ + < "~root/.config/guix/current/share/guix/$host.pub" \ + && _msg "${PAS}Authorized public key for $host" + done + else + _msg "${INF}Skipped authorizing build farm public keys" fi } sys_create_init_profile() { # Define for better desktop integration # This will not take effect until the next shell or desktop session! [ -d "/etc/profile.d" ] || mkdir /etc/profile.d # Just in case cat <<"EOF" > /etc/profile.d/guix.sh # _GUIX_PROFILE: `guix pull` profile _GUIX_PROFILE="$HOME/.config/guix/current" export PATH="$_GUIX_PROFILE/bin${PATH:+:}$PATH" # Export INFOPATH so that the updated info pages can be found # and read by both /usr/bin/info and/or $GUIX_PROFILE/bin/info # When INFOPATH is unset, add a trailing colon so that Emacs # searches 'Info-default-directory-list'. -- 2.33.0 ------------=_1670576522-18880-1-- From unknown Fri Sep 05 14:42:29 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#50892] bug#59781: [version 1.4.0rc1] install.sh script should authorize bordeaux Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Fri, 09 Dec 2022 09:11:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 50892 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Tobias Geerinckx-Rice Cc: 59781@debbugs.gnu.org, 50892@debbugs.gnu.org Received: via spool by 50892-submit@debbugs.gnu.org id=B50892.167057701019250 (code B ref 50892); Fri, 09 Dec 2022 09:11:01 +0000 Received: (at 50892) by debbugs.gnu.org; 9 Dec 2022 09:10:10 +0000 Received: from localhost ([127.0.0.1]:34741 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3ZOT-00050P-JM for submit@debbugs.gnu.org; Fri, 09 Dec 2022 04:10:09 -0500 Received: from eggs.gnu.org ([209.51.188.92]:49402) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3ZOR-00050C-DH; Fri, 09 Dec 2022 04:10:08 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3ZOL-0003xG-L2; Fri, 09 Dec 2022 04:10:01 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=vvuBnpnSHgR5ZpYUu1FMVBOSNVxZC8Kpo1OUhoDQwCI=; b=SiPNqyqx4iaWLmhpIlhW hXxDAhq+rbPdYqbtGN1Fdld79IgL/JCZAgq4JNlcy6cpp73fqNpGVmn1RL8VZQvIMIY7fu+XMIhNG wToFFJUEAB9eG4BIvj9hVAy55GyGphnncEzK1psDvNXsAuIi0NUTru2tEeRTC4NEKiLfLMXyw/mai +Lri/t3gg761KhelAMIV6BhYZkVCqt6UX+evhZs8pYyGHJuNH2UEZhS8NswiRYJnFVhgmE+8ff4/6 7DtG11wP8DBX8uLoOxi+0X9lpW9iYxSfae1FOJDZRq8SkEdQqz+fusuZ7S/jqpf9C4zb3S+MUec5Y Lmwf6ldf0E56gw==; Received: from [193.50.110.137] (helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3ZOL-0005Tg-6q; Fri, 09 Dec 2022 04:10:01 -0500 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> <87edtaf7sz.fsf_-_@gnu.org> <87ililzhx8.fsf@nckx> Date: Fri, 09 Dec 2022 10:09:58 +0100 In-Reply-To: <87ililzhx8.fsf@nckx> (Tobias Geerinckx-Rice's message of "Thu, 08 Dec 2022 22:42:59 +0100") Message-ID: <87359paqop.fsf_-_@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, Tobias Geerinckx-Rice skribis: > (Ugh, this patch is so ugly, all to work around that triplication in > ~/.config/guix/current/share/guix/*.pub=E2=80=A6 Would it be OK for =E2= =80=98guix > archive --authorize=E2=80=99 to silently ignore duplicate keys?) Oh, good point. I guess we could change =E2=80=98public-keys->acl=E2=80=99= to deduplicate entries. Maybe something along these lines: --=-=-= Content-Type: text/x-patch; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable diff --git a/guix/pki.scm b/guix/pki.scm index 6326e065e9..c5b2fb9634 100644 --- a/guix/pki.scm +++ b/guix/pki.scm @@ -1,5 +1,5 @@ ;;; GNU Guix --- Functional package management for GNU -;;; Copyright =C2=A9 2013, 2014, 2016 Ludovic Court=C3=A8s +;;; Copyright =C2=A9 2013, 2014, 2016, 2022 Ludovic Court=C3=A8s ;;; ;;; This file is part of GNU Guix. ;;; @@ -21,6 +21,7 @@ (define-module (guix pki) #:use-module (gcrypt pk-crypto) #:use-module ((guix utils) #:select (with-atomic-file-output)) #:use-module ((guix build utils) #:select (mkdir-p)) + #:autoload (srfi srfi-1) (delete-duplicates) #:use-module (ice-9 match) #:use-module (ice-9 rdelim) #:use-module (ice-9 binary-ports) @@ -61,9 +62,10 @@ (define (public-keys->acl keys) ;; want to have name certificates and to use subject names instead of ;; complete keys. `(acl ,@(map (lambda (key) - `(entry ,(canonical-sexp->sexp key) + `(entry ,key (tag (guix import)))) - keys))) + (delete-duplicates + (map canonical-sexp->sexp keys))))) =20 (define %acl-file (string-append %config-directory "/acl")) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 DQpXRFlUPw0KDQpMdWRv4oCZLg0K --=-=-=--