From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id uNrUC6AVRmefjwAAe85BDQ:P1 (envelope-from ) for ; Tue, 26 Nov 2024 18:38:24 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id uNrUC6AVRmefjwAAe85BDQ (envelope-from ) for ; Tue, 26 Nov 2024 19:38:24 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=kH0TwE4Q; dkim=fail ("headers rsa verify failed") header.d=cyberdimension.org header.s=dkim header.b=Duk7rMRX; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1732646304; a=rsa-sha256; cv=none; b=LNaUp4WrdE3p5zlgz+MOVkFTKzzmX6wFyQW8H7j9nAl5S1L0zNjOv0cA2dDUcihyfK+N8h uwNcAXyZUuZGHBGnDA/FdNHk+DKowQlxfK/pJtYyXcTrJaIa2fnGk3zViQ3hdDWI9stfuo YBvpM/mgiH+GSeUsrJIG8iXO5NXvvc3l1J6CidDQsGXNgzxKr17LNM14r5XIGzmjDZJ9vy KW/Oc7jVU2gSx33mwNblpKcJBScIy3uYF9EWo0A/NvDESQHlx9QhIWiqtckJDha0J4Bq4J VDE2qDgCfAOGvfciLPNNq+EPqLUbhusYogn4NoS5kTN4BUegGaXJ+ReT8hcwJA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=kH0TwE4Q; dkim=fail ("headers rsa verify failed") header.d=cyberdimension.org header.s=dkim header.b=Duk7rMRX; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1732646304; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=MvDSjgnYG86NILyAROo7MSJMKK4lRfAqlDnAVAz2v0M=; b=NMdoa022CM760/zwPPa/x42NElPjWI61Zyde6IE4karJp4pjovUn4nKbfoBba0oP8rG0/+ afCg/9f1sjnWfNxVvegYpto/bLG2K1JBhxjLxkEkPEgD5E3RfRGvNFXGUblLpaj7w5/hf9 00jXUS4toxC1TA1SIANe1e45TmSJ/VjSuVjA5s8j7A/wTnfsWsCwQP0tzXXtUrIlMf/T2R YfyzxxBZuHhiDvZhkE6tn83m7J6s+Bt5IDw6adbdp0cKNGanMG1zAGrwNk2uPi9vVcJtUC YBynFydU1f1o8LvDFoT5sSwlYu9FBFlGfB0dyuxEFHdl3X3+52iDDb64xCKvvQ== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 03CEF81D72 for ; Tue, 26 Nov 2024 19:38:22 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1tG0Rs-0002vV-26; Tue, 26 Nov 2024 13:38:08 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tG0Rm-0002tt-V2 for bug-guix@gnu.org; Tue, 26 Nov 2024 13:38:03 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tG0Rm-00060h-M9 for bug-guix@gnu.org; Tue, 26 Nov 2024 13:38:02 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:From:Date:To:In-Reply-To:References:Subject; bh=MvDSjgnYG86NILyAROo7MSJMKK4lRfAqlDnAVAz2v0M=; b=kH0TwE4QuJp+HvvNlSvgCBQScqcI/7vFw9bo+cRDgczzJxdmGfzybk/U/suG4kxgBGu543q4KN4l8/g75ZHAXCA6RXXguaJ438CViOWL6YAx7cqNG2q4GKPWhE0SpwvAIh6dLfXN1kWXFMIDmyKYRD1GalSqy5UDs51PE8EtNvllBRoj3mJHR2ABe0olZlQ2RQWOTJQJJszMBJios//4jap/E+/OtY4FtPHObpbuOuX1JaA9IcbH/LxtcA6mgb3sgZQ00ZcYrrXNq7lUE25PhvE0HQFsRX32hF1GduC6zShp1mIs9VXbJyal0ELL6ukaUzPb5AS3m3RVn5llFxq4QQ==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1tG0Rm-0001BA-G6 for bug-guix@gnu.org; Tue, 26 Nov 2024 13:38:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#66268: Guix makes invalid assumptions regarding guile-git guarantees leading to guix pull failing References: In-Reply-To: Resent-From: Denis 'GNUtoo' Carikli Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 26 Nov 2024 18:38:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 66268 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 66268@debbugs.gnu.org, Adrien 'neox' Bourmault , Jason Self Received: via spool by 66268-submit@debbugs.gnu.org id=B66268.17326462244418 (code B ref 66268); Tue, 26 Nov 2024 18:38:02 +0000 Received: (at 66268) by debbugs.gnu.org; 26 Nov 2024 18:37:04 +0000 Received: from localhost ([127.0.0.1]:52381 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tG0Qp-00019A-I2 for submit@debbugs.gnu.org; Tue, 26 Nov 2024 13:37:04 -0500 Received: from cyberdimension.org ([79.143.250.36]:49630 helo=rockpro64.cyberdimension.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tG0Qn-00018Y-0h for 66268@debbugs.gnu.org; Tue, 26 Nov 2024 13:37:02 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=dkim; bh=kijp9KIiyVNIjrZ fT5yghVEWx916TC0g6hP/I9aeNJ4=; h=subject:to:from:date; d=cyberdimension.org; b=Duk7rMRXPyQZV/v8Cn+fZXV0WM476FJMjj4bQl/W/by1fM oLLJliT1sb17sbpoNFYLvO7SV40LxG0I+279duiM7a1U+LPpLrDf2S8CBNdfGWk9UuaUBb NQPRmikgjnZErohr/1NRCPIOWaIDk3grCzNx1qvA7ZX6p5dIGS0KY+Bx8LumY6/vyzWS98 Kiolv1alEabKAjAm8pITzXdR+bAXkTbJ2zgPfJYLIhKESRKlY1QQnDK8cdIweCCz/5du6u DP/fNTrJ7ENdliu2b3NCvi85yVI4RNMaUlI8x0IfUEo5Kc0ASHnyXHigo0FHITjJzckR7N p6WUbuvBN/Y3+07w== Received: from primary_laptop (localhost [127.0.0.1]) by rockpro64.cyberdimension.org (OpenSMTPD) with ESMTP id 60ee59d5; Tue, 26 Nov 2024 18:36:57 +0000 (UTC) Date: Tue, 26 Nov 2024 19:15:08 +0100 From: Denis 'GNUtoo' Carikli Message-ID: <20241126191508.3145f604@primary_laptop> X-Mailer: Claws Mail 4.3.0 (GTK 3.24.41; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/9e5roTwbQ3=qYDStw0=yZsk"; protocol="application/pgp-signature"; micalg=pgp-sha256 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -7.03 X-Spam-Score: -7.03 X-Migadu-Queue-Id: 03CEF81D72 X-Migadu-Scanner: mx10.migadu.com X-TUID: Wr6HVUiIV11d --Sig_/9e5roTwbQ3=qYDStw0=yZsk Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, I've found a much smaller test case: > git clone https://git.savannah.gnu.org/git/gnuboot.git > cd gnuboot > guix git authenticate \ > bf2b91df54aa71ecbfab891d32000ad2d6af6093 \ > "E23C 26A5 DEEE C5FA 9CDD D57A 57BC 26A3 6871 16F6" \ > -k origin/keyring The repository only consists of 683 commits for now. The commit that is problematic is precisely the introduction commit (bf2b91d). There are bigger commits messages in the history before that but it seems not to be an issue. A workaround I found is to substitute the commit bf2b91d ("Add .guix-authorizations file for "guix git authenticate".") with the one right after it (dde4223 Fix .guix-authorizations for Denis 'GNUtoo' Carikli.). So while this bug needs fixing, we are also looking for a workaround as once a fix lands upstream, it could take some time to reach everybody especially because we'd like to make guix git authenticate work, with the guix packages from various distributions (PureOS has Guix 1.2), without requiring to do a git pull which can probably take hours. If I understood right, the workaround explained above is not sufficient as at any time, pushing commits could break guix git authenticate, so I'm also looking for a reliable way to avoid the condition that makes guix git authenticate fail. So I see 2 approaches, one is to write code that looks at the size of commits, I've done that but then we can't easily reproduce the issues if we use the commit right after bf2b91d. I've added big commits after that.=20 I've now started to rebase https://git.sr.ht/~graywolf/guix-guile-git-repro on top of some=20 commits in another repository that adds a .guix-authorizations file but it will take between 24h and 48h to rebase on a VM on a D16 on tmpfs, so it's not very practical for the tests. Another way could be to remove the authentication setup with some code like that: > cp -f config .git/config > rm -f .git/hooks/post-merge > rm -f .git/hooks/pre-push and then run the guix git authenticate command but I'm unsure if this could have false negative and let through commit that break everything when people clone the repository and run guix git authenticate for the first time. Also did other people encounter this issue in other git repositories? This could also help with testing. Denis. --Sig_/9e5roTwbQ3=qYDStw0=yZsk Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEeC+d2+Nrp/PU3kkGX138wUF34mMFAmdGECwACgkQX138wUF3 4mPEpQ//ciLT4c2KaLDE0C3Zcna5DBE7IavU+EwyUOVIh0jAFRHuCuBKkRPDKWaT kFMSJEfR4VA0RHtVIalx0samPFgU2sgk0FZOMKn5fydmj0wOcBYvQv6XSMfwkwyx xrrsJnhBRbpYBAaKtzNtx9NcqrstvdpaVHY7QjqaZ1H79NIKZS2NFh4WMDVnKB3y YergiuyNC9cH91/EzJA+iWxB6TT+Ff/8xzHAtrOM2Wt0BvvkPftxbwrR9e4/ptJZ uLpCSdQ2rwqkxu2fClVNlc4s5m+651NgVlds/YwBRLut0+8pl8H8G0niLKEZXiih ZB6hAy1M/TsqLdoPRqn0hzaz74JRoQC+6oGHeh80Q2biu2m1ubkpyxzlms9LtE2K gC5pO1+yMFvE+xMmmMrQU8DfCuPCKvbMFupXh0WyN50elPMp1wXQYzL95KjE0uED jgjyxyGlovRvCjI2JUf935ANEgyB1oym4B3rd2gojk+vZnxOxzuxG7E+f4FCx5uf Y3iDiD2FeTAFF6+zmICikAIRjrYw3euEVV2Ski2QdnUWwjYLZBMC2bQkXUWaq18A BRR/vpLdgvy5ArkmEsvxpDy8H3aDT7QgygYo0CCvyyEx7NdqMoQHPf9aJPSjmFoG rwptD19AzRcfkt8yQdeP9ap54zyYeNNsfdytwvjfJ/iiUBXT5Gk= =F0ny -----END PGP SIGNATURE----- --Sig_/9e5roTwbQ3=qYDStw0=yZsk--