From unknown Fri Sep 05 14:42:32 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#50892 <50892@debbugs.gnu.org> To: bug#50892 <50892@debbugs.gnu.org> Subject: Status: [PATCH] guix-install.sh: Authorize all project build farms at once. Reply-To: bug#50892 <50892@debbugs.gnu.org> Date: Fri, 05 Sep 2025 21:42:32 +0000 retitle 50892 [PATCH] guix-install.sh: Authorize all project build farms at= once. reassign 50892 guix-patches submitter 50892 Tobias Geerinckx-Rice severity 50892 normal tag 50892 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 29 11:43:30 2021 Received: (at submit) by debbugs.gnu.org; 29 Sep 2021 15:43:30 +0000 Received: from localhost ([127.0.0.1]:49920 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVbjt-00028D-Ne for submit@debbugs.gnu.org; Wed, 29 Sep 2021 11:43:30 -0400 Received: from lists.gnu.org ([209.51.188.17]:56874) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVbjo-000281-J1 for submit@debbugs.gnu.org; Wed, 29 Sep 2021 11:43:19 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52284) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVbjo-0006zm-56 for guix-patches@gnu.org; Wed, 29 Sep 2021 11:43:16 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:60028) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVbji-00070u-5b for guix-patches@gnu.org; Wed, 29 Sep 2021 11:43:15 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=tnvk0zCzDBqQi gdHuSm/qfcGsYMWaiTeAv2OyGzYgiY=; h=date:subject:to:from; d=tobias.gr; b=p0d6clnhATo91IldyaQRr5ekFExqYC6xx69HZBLbLyKjJ7b6+t6jVBtlyiPAvm+zkyYL Wt+ubW/9akRgd3d5B8swT/mwDtrsLNPTfR3XAN01+mygftGrobgiX4VV4mPozjuGpMIc0D UEdgir5qBz9iaJasfuwRBbkDFLTtWJ6PfSSVkfYhnD7u5y4yYyfzUrK8CMUG2LxupXfGWn OJWvztiYrmiikWxtutP7dcgHU74KerZMLfeYA/4orBvZ168fmWgEXzUupEfMw31hK00s6a 22welshZmBOK52LxlzHMAWrFH+mjWFvAVFiOFywcfjRxU/mt/HZcxHNJd2DHOCYw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 6a8a506d (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO) for ; Wed, 29 Sep 2021 15:43:04 +0000 (UTC) From: Tobias Geerinckx-Rice To: guix-patches@gnu.org Subject: [PATCH] guix-install.sh: Authorize all project build farms at once. Date: Wed, 29 Sep 2021 17:43:10 +0200 Message-Id: <20210929154310.25788-1-me@tobias.gr> X-Mailer: git-send-email 2.33.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.6 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) * etc/guix-install.sh (sys_authorize_build_farms): Iterate over all hosts. --- etc/guix-install.sh | 23 +++++++++++++++-------- 1 file changed, 15 insertions(+), 8 deletions(-) diff --git a/etc/guix-install.sh b/etc/guix-install.sh index b0d4a8b95e..e3b8485a50 100755 --- a/etc/guix-install.sh +++ b/etc/guix-install.sh @@ -1,21 +1,21 @@ #!/bin/sh # GNU Guix --- Functional package management for GNU # Copyright © 2017 sharlatan # Copyright © 2018 Ricardo Wurmus # Copyright © 2018 Efraim Flashner -# Copyright © 2019, 2020 Tobias Geerinckx-Rice +# Copyright © 2019–2021 Tobias Geerinckx-Rice # Copyright © 2020 Morgan Smith # Copyright © 2020 Simon Tournier # Copyright © 2020 Daniel Brooks # Copyright © 2021 Jakub Kądziołka # Copyright © 2021 Chris Marusich # Copyright © 2021 Maxim Cournoyer # # This file is part of GNU Guix. # # GNU Guix is free software; you can redistribute it and/or modify it # under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 3 of the License, or (at # your option) any later version. # # GNU Guix is distributed in the hope that it will be useful, but @@ -476,38 +476,45 @@ sys_enable_guix_daemon() ;; esac _msg "${INF}making the guix command available to other users" [ -e "$local_bin" ] || mkdir -p "$local_bin" ln -sf "${var_guix}/bin/guix" "$local_bin" [ -e "$info_path" ] || mkdir -p "$info_path" for i in "${var_guix}"/share/info/*; do ln -sf "$i" "$info_path" done } sys_authorize_build_farms() -{ # authorize the public key of the build farm +{ # authorize the public key(s) of the build farm(s) + local hosts=( + ci.guix.gnu.org + bordeaux.guix.gnu.org + ) + if prompt_yes_no "Permit downloading pre-built package binaries from the \ -project's build farm? (yes/no)"; then - guix archive --authorize \ - < "~root/.config/guix/current/share/guix/ci.guix.gnu.org.pub" \ - && _msg "${PAS}Authorized public key for ci.guix.gnu.org" - else - _msg "${INF}Skipped authorizing build farm public keys" +project's build farms? (yes/no)"; then + for host in "${hosts[@]}"; do + guix archive --authorize \ + < "~root/.config/guix/current/share/guix/$host.pub" \ + && _msg "${PAS}Authorized public key for $host" + done + else + _msg "${INF}Skipped authorizing build farm public keys" fi } sys_create_init_profile() { # Define for better desktop integration # This will not take effect until the next shell or desktop session! [ -d "/etc/profile.d" ] || mkdir /etc/profile.d # Just in case cat <<"EOF" > /etc/profile.d/guix.sh # _GUIX_PROFILE: `guix pull` profile _GUIX_PROFILE="$HOME/.config/guix/current" export PATH="$_GUIX_PROFILE/bin${PATH:+:}$PATH" # Export INFOPATH so that the updated info pages can be found # and read by both /usr/bin/info and/or $GUIX_PROFILE/bin/info # When INFOPATH is unset, add a trailing colon so that Emacs # searches 'Info-default-directory-list'. -- 2.33.0 From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 29 12:50:31 2021 Received: (at submit) by debbugs.gnu.org; 29 Sep 2021 16:50:31 +0000 Received: from localhost ([127.0.0.1]:50010 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVcms-0008Q0-C5 for submit@debbugs.gnu.org; Wed, 29 Sep 2021 12:50:31 -0400 Received: from lists.gnu.org ([209.51.188.17]:50302) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVcmq-0008Pq-2V for submit@debbugs.gnu.org; Wed, 29 Sep 2021 12:50:28 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:38892) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVcmn-0003f9-E6 for guix-patches@gnu.org; Wed, 29 Sep 2021 12:50:25 -0400 Received: from tobias.gr ([2a02:c205:2020:6054::1]:60036) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mVcmi-0003ZT-93 for guix-patches@gnu.org; Wed, 29 Sep 2021 12:50:23 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=xtDzydM3VRZm8 fOmM+rJnenhXR0OAZOq3xF7QLE4jYY=; h=in-reply-to:date:subject:cc:from: references; d=tobias.gr; b=W/Ingd+l7E7RuPjBSTCVXla/C4zRL7/uTf9gT1OVNQs 9L83oYkdKPSvig9X1QDuDfw2IofNN66KrpWa+0/xCy0Ge6ZbdjhPlqzKXb0Br6wVIoUjDp oB5FQDRh25GyBJ0NJ6SKs9DEzz/ajlDxqEwuEuYlfGZQfPyIfvCuiKKAXtGBl4WDlJ6msR JdTi+Osm/ZgNf1r140OlBqPSJR7SCaJHcyZ0zlaYPVQwFa5WQ9Qlu1MYi8JYkSYnydbI+r itC/5QXiBK3bx0QJyTIJR1Ga6p6rqCMq9SR1VcQyI1u0qOFKBPM1ry5avq/QJ+CKN3xqkb giUevbsgRqiiGYRLzMA== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id ecaf543d (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Wed, 29 Sep 2021 16:50:14 +0000 (UTC) References: <20210929154310.25788-1-me@tobias.gr> From: Tobias Geerinckx-Rice Subject: Re: [bug#50892] [PATCH] guix-install.sh: Authorize all project build farms at once. Date: Wed, 29 Sep 2021 18:49:21 +0200 In-reply-to: <20210929154310.25788-1-me@tobias.gr> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87tui31g2y.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MISSING_HEADERS=1.021, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: -0.4 (/) X-Debbugs-Envelope-To: submit Cc: guix-patches@gnu.org, 50892@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.4 (-) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Tobias Geerinckx-Rice via Guix-patches via =E5=86=99=E9=81=93=EF=BC=9A > + <=20 > "~root/.config/guix/current/share/guix/$host.pub" \ This file is missing for bordeaux in the 1.3.0 release, so this=20 would have to wait until the next one=E2=80=A6 Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCYVSZVQ0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW157tIA/0NxtSi4/HOdtPht4P1YlTT4Op2MNXxktdEnqIh5 Px2tAP9VpcX2WZLsrqN6g7CdCL9beI10dRgzWW3FpDqkI/RaAQ== =ppGb -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 29 12:51:27 2021 Received: (at 50892) by debbugs.gnu.org; 29 Sep 2021 16:51:27 +0000 Received: from localhost ([127.0.0.1]:50015 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVcnf-0008Rf-6i for submit@debbugs.gnu.org; Wed, 29 Sep 2021 12:51:27 -0400 Received: from mail-qt1-f176.google.com ([209.85.160.176]:40887) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mVcna-0008RJ-5c for 50892@debbugs.gnu.org; Wed, 29 Sep 2021 12:51:17 -0400 Received: by mail-qt1-f176.google.com with SMTP id b16so2920720qtt.7 for <50892@debbugs.gnu.org>; Wed, 29 Sep 2021 09:51:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=kqgz05eoW2Y8MfUiN9hHLGwvNvXAfWQSyqqycdx7jOI=; b=RtVNjOa0FSG2HmOD+mB4JgmOHQo4R8fEprdJ0MO5VJlHnJDdp9728b5XQhLnJkuMO5 m2LOMji6A4rI6899SE5vYPg8K5coNOhaNIrItbaqCPRG8sZME64CfGAXPXb74cwdaqlS 3ydju1tzdWNK0Bvmn6ydlowwkXgAxop0AJZnXnQugZWR++N0VTKpBotJOYeDy//6j3nc U8p5fO6cwnD3LJWH1Y36M7D4GNTHIu/9/2/vNhpvm2MCLvmHaoBQQ2FQuaGAhkgW3uLU ev5tIQ/ENT+ZJB1MAbbYPQn/jxnfDVpR6eux+NtFz/nVDAgr3TAEdrsnUyGVD60U/TbK b0tQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=kqgz05eoW2Y8MfUiN9hHLGwvNvXAfWQSyqqycdx7jOI=; b=eiH0iLhZ2keHQ7TAfYA/V2OJAPdICMoaXKAFDPFNtASs+Ck9SSxgozwh7WXuoOHSRQ aamwkQKsDItIwmBnECBOmNMoLipNSbiy1Oljp7z3um1FtEvJFYtROhZLyH0OXtNswMOE ArjF0e23SiCndSh9gbCAFPjbtPaOv9bTSsFGEG1/mYDCj1Z0dphI4EDNWxxncJpMSBG9 VhOCF9eNpnWzvW+484d1qHQAq7QmnjuWMkhFpfarAWUM9jKa24EjZ+iBDxh1Ok1zQx4J 8fv/DD1WH+JifZ9DMM8I9jTmiU/xZTEVdCcuQi5GC7tCk+V+O7HNNQ8BwbnVvhQNl6lh /q7A== X-Gm-Message-State: AOAM532pZ4ZVVn4ZWI4fZ4hHSUPeBwJJM58obbCxs35M7c/7EE+8t3hD dxNp+fJc43IjsLjpwfGgJ9GUlUDRK8w= X-Google-Smtp-Source: ABdhPJxu+SWluloaItmv7ZmVB4fIIvyxngIFENMsEJTGXywgMnOiW1tjw5Ml6gnnPSbjFmRDthhX7Q== X-Received: by 2002:ac8:56f9:: with SMTP id 25mr1072727qtu.374.1632934268434; Wed, 29 Sep 2021 09:51:08 -0700 (PDT) Received: from hurd ([207.35.95.110]) by smtp.gmail.com with ESMTPSA id a3sm239851qta.48.2021.09.29.09.51.07 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 29 Sep 2021 09:51:08 -0700 (PDT) From: Maxim Cournoyer To: Tobias Geerinckx-Rice Subject: Re: bug#50892: [PATCH] guix-install.sh: Authorize all project build farms at once. References: <20210929154310.25788-1-me@tobias.gr> Date: Wed, 29 Sep 2021 12:51:07 -0400 In-Reply-To: <20210929154310.25788-1-me@tobias.gr> (Tobias Geerinckx-Rice's message of "Wed, 29 Sep 2021 17:43:10 +0200") Message-ID: <87r1d71g1w.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 50892 Cc: 50892@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Tobias Geerinckx-Rice writes: > * etc/guix-install.sh (sys_authorize_build_farms): > Iterate over all hosts. > --- > etc/guix-install.sh | 23 +++++++++++++++-------- > 1 file changed, 15 insertions(+), 8 deletions(-) > > diff --git a/etc/guix-install.sh b/etc/guix-install.sh > index b0d4a8b95e..e3b8485a50 100755 > --- a/etc/guix-install.sh > +++ b/etc/guix-install.sh > @@ -1,21 +1,21 @@ > #!/bin/sh > # GNU Guix --- Functional package management for GNU > # Copyright =C2=A9 2017 sharlatan > # Copyright =C2=A9 2018 Ricardo Wurmus > # Copyright =C2=A9 2018 Efraim Flashner > -# Copyright =C2=A9 2019, 2020 Tobias Geerinckx-Rice > +# Copyright =C2=A9 2019=E2=80=932021 Tobias Geerinckx-Rice > # Copyright =C2=A9 2020 Morgan Smith > # Copyright =C2=A9 2020 Simon Tournier > # Copyright =C2=A9 2020 Daniel Brooks > # Copyright =C2=A9 2021 Jakub K=C4=85dzio=C5=82ka > # Copyright =C2=A9 2021 Chris Marusich > # Copyright =C2=A9 2021 Maxim Cournoyer > # > # This file is part of GNU Guix. > # > # GNU Guix is free software; you can redistribute it and/or modify it > # under the terms of the GNU General Public License as published by > # the Free Software Foundation; either version 3 of the License, or (at > # your option) any later version. > # > # GNU Guix is distributed in the hope that it will be useful, but > @@ -476,38 +476,45 @@ sys_enable_guix_daemon() > ;; > esac >=20=20 > _msg "${INF}making the guix command available to other users" >=20=20 > [ -e "$local_bin" ] || mkdir -p "$local_bin" > ln -sf "${var_guix}/bin/guix" "$local_bin" >=20=20 > [ -e "$info_path" ] || mkdir -p "$info_path" > for i in "${var_guix}"/share/info/*; do > ln -sf "$i" "$info_path" > done > } >=20=20 > sys_authorize_build_farms() > -{ # authorize the public key of the build farm > +{ # authorize the public key(s) of the build farm(s) > + local hosts=3D( > + ci.guix.gnu.org > + bordeaux.guix.gnu.org > + ) > + > if prompt_yes_no "Permit downloading pre-built package binaries from= the \ > -project's build farm? (yes/no)"; then > - guix archive --authorize \ > - < "~root/.config/guix/current/share/guix/ci.guix.gnu.org.pu= b" \ > - && _msg "${PAS}Authorized public key for ci.guix.gnu.org" > - else > - _msg "${INF}Skipped authorizing build farm public keys" > +project's build farms? (yes/no)"; then > + for host in "${hosts[@]}"; do > + guix archive --authorize \ > + < "~root/.config/guix/current/share/guix/$host.pub" \ > + && _msg "${PAS}Authorized public key for $host" > + done > + else > + _msg "${INF}Skipped authorizing build farm public keys" > fi > } >=20=20 > sys_create_init_profile() > { # Define for better desktop integration > # This will not take effect until the next shell or desktop session! > [ -d "/etc/profile.d" ] || mkdir /etc/profile.d # Just in case > cat <<"EOF" > /etc/profile.d/guix.sh > # _GUIX_PROFILE: `guix pull` profile > _GUIX_PROFILE=3D"$HOME/.config/guix/current" > export PATH=3D"$_GUIX_PROFILE/bin${PATH:+:}$PATH" > # Export INFOPATH so that the updated info pages can be found > # and read by both /usr/bin/info and/or $GUIX_PROFILE/bin/info > # When INFOPATH is unset, add a trailing colon so that Emacs > # searches 'Info-default-directory-list'. Tested on a VM: ./guix-install.sh: line 500: ~root/.config/guix/current/share/guix/bordeaux= .guix.gnu.org.pub: No such file or directory root@ubuntu:~# echo $? 1 I think we should fetch the keys from our online repo, so we can ensure 1. they are available 2. they are up to date. Thanks! Maxim From debbugs-submit-bounces@debbugs.gnu.org Thu Dec 08 06:34:43 2022 Received: (at 50892) by debbugs.gnu.org; 8 Dec 2022 11:34:43 +0000 Received: from localhost ([127.0.0.1]:56218 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3FAl-0003BB-Fy for submit@debbugs.gnu.org; Thu, 08 Dec 2022 06:34:43 -0500 Received: from eggs.gnu.org ([209.51.188.92]:52984) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3FAc-0003Af-H1; Thu, 08 Dec 2022 06:34:34 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3FAV-0003Ia-06; Thu, 08 Dec 2022 06:34:23 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=1RDEVAbV9XL4cY2UG3g72pmeRWCnNFfFux7NriA35ew=; b=nEaOQM6Owh1KB42boGtk u8FG4N1E/lWGCa2lpEpZdCp/2ppRtC3dSdusrb8RWHf55oB1HpM1csguzvbWah7ZN4BhheiMoV2nB WYDbk6gUbUyVBvT7FMrkGsIpS0aWfjbDBaoS+Dgug5hfnbyjGkVOQlqAleMO/6BIdGg4Y0GY0FG6b 2E42zkOAhaPPNd/dwM11USf8Dvj04+dACFvUBdip2eb6r6FQzcloOBxzVAVU2TUcLbbc8sLOZhPBN GKF904eDD8S0xMIlwElmlARqhBCx6AxC66EAkiWHRTx6AeHIrU1savVF3ev95nsvXZlJVVRZ5m2Zl aDb3hOwqjTNr1w==; Received: from 91-160-117-201.subs.proxad.net ([91.160.117.201] helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3FAU-0000PS-JX; Thu, 08 Dec 2022 06:34:22 -0500 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Tobias Geerinckx-Rice Subject: Re: bug#50892: [PATCH] guix-install.sh: Authorize all project build farms at once. References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> Date: Thu, 08 Dec 2022 12:34:20 +0100 In-Reply-To: <87tui31g2y.fsf@nckx> (Tobias Geerinckx-Rice's message of "Wed, 29 Sep 2021 18:49:21 +0200") Message-ID: <87edtaf7sz.fsf_-_@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 50892 Cc: 59781@debbugs.gnu.org, "pelzflorian \(Florian Pelz\)" , 50892@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, Tobias Geerinckx-Rice skribis: > Tobias Geerinckx-Rice via Guix-patches via =E5=86=99=E9=81=93=EF=BC=9A >> + < >> "~root/.config/guix/current/share/guix/$host.pub" \ > > This file is missing for bordeaux in the 1.3.0 release, so this would > have to wait until the next one=E2=80=A6 If there are no objections I=E2=80=99d like to push to =E2=80=98master=E2= =80=99 and =E2=80=98version-1.4.0=E2=80=99 this modified version of your patch. Thanks, Ludo=E2=80=99. --=-=-= Content-Type: text/x-patch; charset=utf-8 Content-Disposition: inline; filename=0001-guix-install.sh-Authorize-all-project-build-farms-at.patch Content-Transfer-Encoding: quoted-printable Content-Description: the patch >From f13e03d57ae9784a349bfa2eab0285e2c5b58eb7 Mon Sep 17 00:00:00 2001 From: Tobias Geerinckx-Rice Date: Wed, 29 Sep 2021 17:43:10 +0200 Subject: [PATCH] guix-install.sh: Authorize all project build farms at once. MIME-Version: 1.0 Content-Type: text/plain; charset=3DUTF-8 Content-Transfer-Encoding: 8bit * etc/guix-install.sh (sys_authorize_build_farms): Iterate over all hosts. Co-authored-by: Ludovic Court=C3=A8s --- etc/guix-install.sh | 22 +++++++++++++++------- 1 file changed, 15 insertions(+), 7 deletions(-) diff --git a/etc/guix-install.sh b/etc/guix-install.sh index 6bef21bb7e..fb9006b3e2 100755 --- a/etc/guix-install.sh +++ b/etc/guix-install.sh @@ -492,14 +492,22 @@ sys_enable_guix_daemon() } =20 sys_authorize_build_farms() -{ # authorize the public key of the build farm +{ # authorize the public key(s) of the build farm(s) + local hosts=3D( + ci.guix.gnu.org + bordeaux.guix.gnu.org + ) + if prompt_yes_no "Permit downloading pre-built package binaries from t= he \ -project's build farm?"; then - guix archive --authorize \ - < ~root/.config/guix/current/share/guix/ci.guix.gnu.org.pub \ - && _msg "${PAS}Authorized public key for ci.guix.gnu.org" - else - _msg "${INF}Skipped authorizing build farm public keys" +project's build farms?"; then + for host in "${hosts[@]}"; do + local key=3D~root/.config/guix/current/share/guix/$host.pub + [ -f "$key" ] \ + && guix archive --authorize < "$key" \ + && _msg "${PAS}Authorized public key for $host" + done + else + _msg "${INF}Skipped authorizing build farm public keys" fi } =20 --=20 2.38.1 --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Thu Dec 08 16:27:33 2022 Received: (at 50892) by debbugs.gnu.org; 8 Dec 2022 21:27:33 +0000 Received: from localhost ([127.0.0.1]:59213 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3OQW-0003t0-SB for submit@debbugs.gnu.org; Thu, 08 Dec 2022 16:27:33 -0500 Received: from relay.yourmailgateway.de ([188.68.63.98]:34971) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3OQU-0003sp-IK; Thu, 08 Dec 2022 16:27:31 -0500 Received: from mors-relay-2501.netcup.net (localhost [127.0.0.1]) by mors-relay-2501.netcup.net (Postfix) with ESMTPS id 4NSnL91cQkz63dR; Thu, 8 Dec 2022 22:27:29 +0100 (CET) Authentication-Results: mors-relay-2501.netcup.net; dkim=permerror (bad message/signature format) Received: from policy01-mors.netcup.net (unknown [46.38.225.35]) by mors-relay-2501.netcup.net (Postfix) with ESMTPS id 4NSnL90pVRz51C0; Thu, 8 Dec 2022 22:27:29 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at policy01-mors.netcup.net X-Spam-Flag: NO X-Spam-Score: -0.999 X-Spam-Level: X-Spam-Status: No, score=-0.999 required=6.31 tests=[ALL_TRUSTED=-1, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mxe217.netcup.net (unknown [10.243.12.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by policy01-mors.netcup.net (Postfix) with ESMTPS id 4NSnL81RQ6z8sbn; Thu, 8 Dec 2022 22:27:27 +0100 (CET) Received: from florianrock64 (ip5b40a50f.dynamic.kabel-deutschland.de [91.64.165.15]) by mxe217.netcup.net (Postfix) with ESMTPSA id 41C9C9EF32; Thu, 8 Dec 2022 22:27:18 +0100 (CET) From: "pelzflorian (Florian Pelz)" To: Ludovic =?utf-8?Q?Court=C3=A8s?= Subject: Re: bug#50892: [PATCH] guix-install.sh: Authorize all project build farms at once. References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> <87edtaf7sz.fsf_-_@gnu.org> Date: Thu, 08 Dec 2022 22:27:16 +0100 In-Reply-To: <87edtaf7sz.fsf_-_@gnu.org> ("Ludovic =?utf-8?Q?Court=C3=A8s?= =?utf-8?Q?=22's?= message of "Thu, 08 Dec 2022 12:34:20 +0100") Message-ID: <87359pmvrf.fsf@pelzflorian.de> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Rspamd-Queue-Id: 41C9C9EF32 X-Spamd-Result: default: False [-0.10 / 15.00]; MIME_GOOD(-0.10)[text/plain]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_ZERO(0.00)[0]; ASN(0.00)[asn:3209, ipnet:91.64.0.0/14, country:DE]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: rspamd-worker-8404 X-NC-CID: FxLdwI6mnO2AEpIHJwcT+OBC3tpOg4lreNz5g3I52r3xXOjrvE8LMRRN X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 50892 Cc: 59781@debbugs.gnu.org, Tobias Geerinckx-Rice , 50892@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Ludovic Court=C3=A8s writes: > If there are no objections I=E2=80=99d like to push to =E2=80=98master=E2= =80=99 and > =E2=80=98version-1.4.0=E2=80=99 this modified version of your patch. Thank you two, this patch works (on 1.3.0 only ci.guix.gnu.org, on 1.4.0rc1 also bordeaux, except when I decline authorization). Regards, Florian From debbugs-submit-bounces@debbugs.gnu.org Thu Dec 08 16:46:21 2022 Received: (at 50892) by debbugs.gnu.org; 8 Dec 2022 21:46:21 +0000 Received: from localhost ([127.0.0.1]:59313 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3Oij-0006N4-8e for submit@debbugs.gnu.org; Thu, 08 Dec 2022 16:46:21 -0500 Received: from tobias.gr ([80.241.217.52]:33810) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3Oif-0006Mo-1i; Thu, 08 Dec 2022 16:46:20 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=TLFiPaM7LzmCE QZ52dS6ZRc66TLhIB8j7aJXIehTCt4=; h=in-reply-to:date:subject:cc:to: from:references; d=tobias.gr; b=QBel7t/MOjJWm7SBzjKonLqw6j5T/tcN2Z1UUA ss4OEDdvHanomxYuOT8DcGjClVLgkhGJpGeWotzZkkK4ypp6untkEqwsfOQzp39U9awc2x v4WvtF6NdNuvmjcBw/uv0ZIG31vv9lOenZ2W+wJLqAF5Vo7x1+HfRh2viFNZ7eL+NbC0dz R7OqHrVeFQIAXKo4BCF9AaZUm02nUJyrpyfY1uS8XHMKqgMVOIqk5frRt7VnTuysDGkeFa HGL9qo8QzI1Z2mJ82IPawpW56Wz7Pi6Ks94+xua5cOTXQMjXO+95uG3PLNFMH3ReDwPAwU fyq5Hmhq1T9xz59Zcp73rq5w== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 955cb23a (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Thu, 8 Dec 2022 21:46:12 +0000 (UTC) References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> <87edtaf7sz.fsf_-_@gnu.org> From: Tobias Geerinckx-Rice To: Ludovic =?utf-8?Q?Court=C3=A8s?= Subject: Re: bug#50892: [PATCH] guix-install.sh: Authorize all project build farms at once. Date: Thu, 08 Dec 2022 22:42:59 +0100 In-reply-to: <87edtaf7sz.fsf_-_@gnu.org> BIMI-Selector: v=BIMI1; s=default; Message-ID: <87ililzhx8.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 50892 Cc: 59781@debbugs.gnu.org, 50892@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Ludovic Court=C3=A8s =E5=86=99=E9=81=93=EF=BC=9A > If there are no objections I=E2=80=99d like to push to =E2=80=98master=E2= =80=99 and > =E2=80=98version-1.4.0=E2=80=99 this modified version of your patch. No objections, thanks! (Ugh, this patch is so ugly, all to work around that triplication=20 in ~/.config/guix/current/share/guix/*.pub=E2=80=A6 Would it be OK for=20 =E2=80=98guix archive --authorize=E2=80=99 to silently ignore duplicate key= s?) Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCY5Jbgw0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15qq0BAPuEaVab9jBVCCRILsRar48RcdT01EUyN0Rf9Qrz ILCDAP9JcNYNsx7DVf7NFUP/gyBV4M+jfGfyx6e9KT4FPGsTAw== =YW1a -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Fri Dec 09 04:01:46 2022 Received: (at 50892-done) by debbugs.gnu.org; 9 Dec 2022 09:01:46 +0000 Received: from localhost ([127.0.0.1]:34695 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3ZGL-0004uC-SE for submit@debbugs.gnu.org; Fri, 09 Dec 2022 04:01:46 -0500 Received: from eggs.gnu.org ([209.51.188.92]:59228) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3ZGH-0004u3-IS; Fri, 09 Dec 2022 04:01:45 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3ZGB-00012d-Kx; Fri, 09 Dec 2022 04:01:35 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=lQQ0SVlmNro3I3xOlWaw8YpyXv/A8I56L1qGZgYKvZ8=; b=X5e1W/FEYtVFxmjB/mLC GdW0j4Hmvuvmw/lX+4NXUWasH2+MDrt/SLTXKp+zI+p+xvTc81JnN9VZ8o9Xd/mFhf8tEiR6Ilpc5 Zr06jdXjtYjnTBsaTlgVmB92ZZEH9ak0eR+gOfkfz+skmZDB48CkERUAFPfJucReI4PB7eDyLSdVo vuCEQ2wMapZg4U3RTYbdTmbDfWlspIY/iQc1gnyN/1FQe1t/fTOeEr4CAd9Sb4XOtos/j5pbsP7cJ GtumcKLWQCygNwHnLNinRUh8pzmf8mCttUycQZx5LnsuxXToNZf1e3Cq2vKmi63siCv3cHr8Jz4Dy 1ZYCnMOyf++JuQ==; Received: from [193.50.110.137] (helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3ZGB-0006uU-6b; Fri, 09 Dec 2022 04:01:35 -0500 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: "pelzflorian (Florian Pelz)" Subject: Re: bug#59781: [version 1.4.0rc1] install.sh script should authorize bordeaux References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> <87edtaf7sz.fsf_-_@gnu.org> <87359pmvrf.fsf@pelzflorian.de> Date: Fri, 09 Dec 2022 10:01:32 +0100 In-Reply-To: <87359pmvrf.fsf@pelzflorian.de> (pelzflorian@pelzflorian.de's message of "Thu, 08 Dec 2022 22:27:16 +0100") Message-ID: <877cz1ar2r.fsf_-_@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 50892-done Cc: 50892-done@debbugs.gnu.org, Tobias Geerinckx-Rice , 59781-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, "pelzflorian (Florian Pelz)" skribis: > Ludovic Court=C3=A8s writes: >> If there are no objections I=E2=80=99d like to push to =E2=80=98master= =E2=80=99 and >> =E2=80=98version-1.4.0=E2=80=99 this modified version of your patch. > > Thank you two, this patch works (on 1.3.0 only ci.guix.gnu.org, on > 1.4.0rc1 also bordeaux, except when I decline authorization). Pushed to both branches. Thanks to the two of you! Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Fri Dec 09 04:10:09 2022 Received: (at 50892) by debbugs.gnu.org; 9 Dec 2022 09:10:10 +0000 Received: from localhost ([127.0.0.1]:34741 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3ZOT-00050P-JM for submit@debbugs.gnu.org; Fri, 09 Dec 2022 04:10:09 -0500 Received: from eggs.gnu.org ([209.51.188.92]:49402) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1p3ZOR-00050C-DH; Fri, 09 Dec 2022 04:10:08 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3ZOL-0003xG-L2; Fri, 09 Dec 2022 04:10:01 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=vvuBnpnSHgR5ZpYUu1FMVBOSNVxZC8Kpo1OUhoDQwCI=; b=SiPNqyqx4iaWLmhpIlhW hXxDAhq+rbPdYqbtGN1Fdld79IgL/JCZAgq4JNlcy6cpp73fqNpGVmn1RL8VZQvIMIY7fu+XMIhNG wToFFJUEAB9eG4BIvj9hVAy55GyGphnncEzK1psDvNXsAuIi0NUTru2tEeRTC4NEKiLfLMXyw/mai +Lri/t3gg761KhelAMIV6BhYZkVCqt6UX+evhZs8pYyGHJuNH2UEZhS8NswiRYJnFVhgmE+8ff4/6 7DtG11wP8DBX8uLoOxi+0X9lpW9iYxSfae1FOJDZRq8SkEdQqz+fusuZ7S/jqpf9C4zb3S+MUec5Y Lmwf6ldf0E56gw==; Received: from [193.50.110.137] (helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3ZOL-0005Tg-6q; Fri, 09 Dec 2022 04:10:01 -0500 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Tobias Geerinckx-Rice Subject: Re: bug#59781: [version 1.4.0rc1] install.sh script should authorize bordeaux References: <20210929154310.25788-1-me@tobias.gr> <87tui31g2y.fsf@nckx> <87edtaf7sz.fsf_-_@gnu.org> <87ililzhx8.fsf@nckx> Date: Fri, 09 Dec 2022 10:09:58 +0100 In-Reply-To: <87ililzhx8.fsf@nckx> (Tobias Geerinckx-Rice's message of "Thu, 08 Dec 2022 22:42:59 +0100") Message-ID: <87359paqop.fsf_-_@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 50892 Cc: 59781@debbugs.gnu.org, 50892@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, Tobias Geerinckx-Rice skribis: > (Ugh, this patch is so ugly, all to work around that triplication in > ~/.config/guix/current/share/guix/*.pub=E2=80=A6 Would it be OK for =E2= =80=98guix > archive --authorize=E2=80=99 to silently ignore duplicate keys?) Oh, good point. I guess we could change =E2=80=98public-keys->acl=E2=80=99= to deduplicate entries. Maybe something along these lines: --=-=-= Content-Type: text/x-patch; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable diff --git a/guix/pki.scm b/guix/pki.scm index 6326e065e9..c5b2fb9634 100644 --- a/guix/pki.scm +++ b/guix/pki.scm @@ -1,5 +1,5 @@ ;;; GNU Guix --- Functional package management for GNU -;;; Copyright =C2=A9 2013, 2014, 2016 Ludovic Court=C3=A8s +;;; Copyright =C2=A9 2013, 2014, 2016, 2022 Ludovic Court=C3=A8s ;;; ;;; This file is part of GNU Guix. ;;; @@ -21,6 +21,7 @@ (define-module (guix pki) #:use-module (gcrypt pk-crypto) #:use-module ((guix utils) #:select (with-atomic-file-output)) #:use-module ((guix build utils) #:select (mkdir-p)) + #:autoload (srfi srfi-1) (delete-duplicates) #:use-module (ice-9 match) #:use-module (ice-9 rdelim) #:use-module (ice-9 binary-ports) @@ -61,9 +62,10 @@ (define (public-keys->acl keys) ;; want to have name certificates and to use subject names instead of ;; complete keys. `(acl ,@(map (lambda (key) - `(entry ,(canonical-sexp->sexp key) + `(entry ,key (tag (guix import)))) - keys))) + (delete-duplicates + (map canonical-sexp->sexp keys))))) =20 (define %acl-file (string-append %config-directory "/acl")) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 DQpXRFlUPw0KDQpMdWRv4oCZLg0K --=-=-=-- From unknown Fri Sep 05 14:42:32 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 06 Jan 2023 12:24:11 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator