From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kai Mertens Subject: bug#37865: guix pull: error: You found a bug: Date: Wed, 23 Oct 2019 16:26:35 +0200 Message-ID: <20191023162411.3d520e24.kmx@posteo.net> References: <20191022083418.0c821e9d.kmx@posteo.net> <87sgnkwk5l.fsf@gnu.org> <20191023085503.7af886c5.kmx@posteo.net> <874kzzx023.fsf@gnu.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; boundary="Sig_/E03KEczWK4gWIy6aoWi2TOH"; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:56964) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iNHeI-0006Ww-9A for bug-guix@gnu.org; Wed, 23 Oct 2019 10:30:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iNHeG-0000cw-CU for bug-guix@gnu.org; Wed, 23 Oct 2019 10:30:06 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:54182) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1iNHeF-0000bK-6C for bug-guix@gnu.org; Wed, 23 Oct 2019 10:30:04 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1iNHeE-00014m-7i for bug-guix@gnu.org; Wed, 23 Oct 2019 10:30:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <874kzzx023.fsf@gnu.org> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 37865@debbugs.gnu.org --Sig_/E03KEczWK4gWIy6aoWi2TOH Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Wed, 23 Oct 2019 11:50:44 +0200 Ludovic Court=C3=A8s wrote: > >> Did you enable substitutes from ? > >> See . > >> =20 > > > > hmm, I did not enable substitutes explicitly in the command line, but > > as far as I remember, I allowed guix to use substitutes when I set it > > up some time ago. Is there a handy command that helps me to check the > > current configuration? Anyway, I was not using option --no-substitutes.= =20 >=20 > If you installed it long ago, it could be that you authorized > substitutes from hydra.gnu.org (the former CI server, discontinued in > June=C2=B9) but not from ci.guix.gnu.org. >=20 Yes indeed! > So you would need to check: >=20 > 1. which substitute URL guix-daemon is using; I tried the example as seen in =E2=80=9C4.3.2 Substitute Server Authorizati= on=E2=80=9D: $ guix build emacs --dry-run substitute: updating list of substitutes from 'https://mirror.hydra.gnu.org= '... 18.6%guix substitute: error: TLS error in procedure 'read_from_sessio= n_record_port': The TLS connection was non-properly terminated. guix build: error: substituter `substitute' died unexpectedly So apparently, guix is using the obsolete hydra server. >=20 > 2. which keys are authorized in /etc/guix/acl. >=20 This file shows only one key, but that one is listed four times as like: (entry=20 (public-key=20 (rsa=20 (n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e=20 #010001#) ) ) (tag=20 (guix import) ) ) > The above chapter of the manual has more info on this. >=20 > LMK how it goes! Well, I am not sure how to proceed with my old version of guix. I wonder if the listed key is as well valid for https://ci.guix.gnu.org just the same as it used to be valid for https://mirror.hydra.gnu.org. If not, where can I get the new, correct one? Once I have the keyfile, I am supposed to continue with section =E2=80=9C4.3.2 Substitute Server Authorization=E2=80=9D, right? Then I would try: # guix-daemon --substitute-urls=3Dhttps://ci.guix.gnu.org # guix archive --authorize < my/path/to/ci.guix.gnu.org.pub Is that correct? Would that remove the obsolete substitute server information in the same go? best regards Kai >=20 > =C2=B9 https://lists.gnu.org/archive/html/info-guix/2019-06/msg00001.html --=20 Kai Mertens OpenPGP Key-ID: 0x40B15AB4B05B5BF1 on keys.gnupg.net Key fingerprint =3D 7C83 0A80 01FF 679C 6E8E AFD3 40B1 5AB4 B05B 5BF1 What is that? Please check: https://emailselfdefense.fsf.org/en/ --Sig_/E03KEczWK4gWIy6aoWi2TOH Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfIMKgAH/Z5xujq/TQLFatLBbW/EFAl2wYxsACgkQQLFatLBb W/Gi7xAAmOznJl2GO1UrjWPGAgLCthVgoHGjw4MyyZcnCP8/JYyzHdCku1dNRE/j ifgZmQrDs1/Oy8PUIEoMo4kYEhVCG1KnCnJhd4W/QdnwJuVGb8lkjAaQRfL4kHm3 EtyfkLN1WYhdpem996ps7sR0MvbBbj6c35F3XML2TZ6JnIDLPhBGAtnPBD8E9REp ETbXeCfaWXmqL7yAYOIvm6pdhFqUMZOXGPWVLWaAaH+Hv57Ev0FRqRCTIFTBmDHa 4g8Tb5t2oBN7dMn7bXMI4sR6rD/zvGWdC1QLsbt3QSkt32c7UYInXS3GElqLRtB/ pi0cy4xnCs187bzzrAFO67ZlV/BSRGPZs+iXP9rCYPvVw3ybcDIHBipT1bQNj6Go hJLwRDGyLg3/iyKFEGfSf56NTV4Gs54OrYJ001dkpiFZWx4n4FKfFo+TY/ypTt9w Q0NkDP4yt01scryxk5wKjqctbvKskfhcKMigcSCooptZssKj32nEcHg1eMkIemwR 9O5tgDNGLfSy2/SXf5BG+JSzFnLsR9FQ1FlIunNBJN9za1Rk0hP5bCT11WxuqVNs rsu3Qt2uIQgPE6OQw2bLpknvxMWBa3hbdNFIh2l+sohcoHacNZJCCWLGGLkId0rh RxFFuFHtI7MXd6CRaS4Hc6ZhZfEJBjbULytrJvObSlZGTUiD10o= =g6YK -----END PGP SIGNATURE----- --Sig_/E03KEczWK4gWIy6aoWi2TOH--