GNU bug report logs - #53901
[PATCH] publish: Sign only normative narinfo fields.

Previous Next

Package: guix-patches;

Reported by: Ludovic Courtès <ludo <at> gnu.org>

Date: Wed, 9 Feb 2022 17:53:02 UTC

Severity: normal

Tags: patch

Done: Ludovic Courtès <ludo <at> gnu.org>

Bug is archived. No further changes may be made.

Full log


Message #11 received at 53901 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: Christopher Baines <mail <at> cbaines.net>
Cc: 53901 <at> debbugs.gnu.org
Subject: Re: bug#53901: [PATCH] publish: Sign only normative narinfo fields.
Date: Wed, 09 Feb 2022 22:49:44 +0100
Hi Chris,

Christopher Baines <mail <at> cbaines.net> skribis:

> This sounds good to me.

Coolio.

> Going back to talk of enabling zstd substitutes on
> bordeaux.guix.gnu.org, this approach will be really helpful, as it means
> it's something the nar-herder can do, without needing the signing key.

Yes, it’s much better this way.  (And I think it’s important to provide
zstd substitutes for a good user experience.)

> Also, at some point, it would be good to move narinfo-string out to
> (guix narinfo), which would allow for the build coordinator to use it,
> rather than it's own implementation.

So if it uses its own implementation, it won’t benefit from this patch
right directly, right?

Anyhow I agree, we should move ‘narinfo-string’ to (guix narinfo).  I’ll
take a look if you don’t beat me at it!  :-)

Thanks,
Ludo’.




This bug report was last modified 3 years and 151 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.