From mboxrd@z Thu Jan 1 00:00:00 1970 From: Lasse Collin Subject: bug#21784: Old XZ tarballs Date: Mon, 2 Nov 2015 14:07:18 +0200 Message-ID: <20151102140718.4414a8d7@tukaani.org> References: <87r3kd8lpb.fsf@gnu.org> <20151030194730.4a2639ae@tukaani.org> <87si4sb02k.fsf_-_@gnu.org> <20151031202908.5548817d@tukaani.org> <87y4ei58dk.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:33620) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZtDv7-00072S-UL for bug-guix@gnu.org; Mon, 02 Nov 2015 07:09:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZtDv4-0002az-Fd for bug-guix@gnu.org; Mon, 02 Nov 2015 07:09:05 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:57856) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZtDv4-0002au-Ci for bug-guix@gnu.org; Mon, 02 Nov 2015 07:09:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1ZtDv3-0007t6-MG for bug-guix@gnu.org; Mon, 02 Nov 2015 07:09:01 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <87y4ei58dk.fsf@gnu.org> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 21784@debbugs.gnu.org On 2015-11-01 Ludovic Court=C3=A8s wrote: > Lasse Collin skribis: >=20 > > On 2015-10-30 Ludovic Court=C3=A8s wrote: >=20 > [...] >=20 > >> Guix does automatically mirror tarballs via its =E2=80=9Csubstitute=E2= =80=9D > >> mechanism. However, users can turn it off, in which case they end > >> up downloading the tarball from the upstream URL specified in the > >> package recipe. > > > > OK. :-) Why would users turn it off though? >=20 > The substitute mechanism is very generic; it=E2=80=99s not just about > mirroring tarballs: >=20 > http://www.gnu.org/software/guix/manual/html_node/Substitutes.html >=20 > Some people might prefer to build things locally rather than download > pre-built items. That makes sense, but I don't understand how it implies that the source packages will then be downloaded from upstream servers. Since you are distributing binary packages, I assume you are also distributing the matching source packages due to many packages being under the GNU (L)GPL. My understanding is that the GNU GPL requires that if you distribute the binary, you must take care of making the source code available too. Anyway, I'm sorry for the hassle and for perhaps making a mountain out of a molehill. Based on the number of xz-5.0.4.tar.gz downloads, Guix users didn't create much traffic for me. You just happened to get affected when I was trying to find out what distros where causing most of the traffic. --=20 Lasse Collin | IRC: Larhzu @ IRCnet & Freenode