From: Tobias Geerinckx-Rice via Bug reports for GNU Guix <bug-guix@gnu.org>
To: Zomb Hacker <iceknight48@gmail.com>
Cc: 55500@debbugs.gnu.org
Subject: bug#55500: guix.gnu.org is not available from Russia
Date: Wed, 18 May 2022 18:28:57 +0200 [thread overview]
Message-ID: <2c4889632b86a037eff9ed963fa81c86@tobias.gr> (raw)
In-Reply-To: <CANqtuX4iw+ua3istWnMgOf71jzd7H5ytaRm=_GYcitad61BEig@mail.gmail.com>
Hasty reply, sorry if I miss a point. [And in my hast I forgot to CC
the list, sigh. Here's another copy.]
On 2022-05-18 17:19, Zomb Hacker wrote:
> Is there any trusted mirrors?
Depends on what you mean by ‘trusted’, but yes.
For substitutes:
~~~~~~~~~~~~~~~~
- There's an independent but trusted build farm at
"https://bordeaux.guix.gnu.org". You can add this to your list of
substitute URLs, *and* authorise its signing key[0], to make Guix poll
it for substitutes instead of [or in addition to] ci.guix.gnu.org.
- There's also a Chinese mirror of ci.guix.gnu.org at
"https://mirrors.sjtug.sjtu.edu.cn/guix". This is a true mirror: it
just serves whatever ci.guix.gnu.org does.
This means that even though it's not run by the project, its
substitutes will be signed with the ‘official’ ci.guix.gnu.org key,
which your Guix trusts out of the box. You don't need to authorise
another key, and the SJTUG admins cannot modify & sign malicious
binaries.
They can of course *see* what you download. If you're worried about
that, use Tor as explained by Ludovic.
For Guix ISOs
~~~~~~~~~~~~~
…the situation is less straightforward:
- ftp.gnu.org, which can be reached from Russia, hosts only releases,
and Guix 1.3 is over a year old by this point. It's supported, but…
- I recommend you download the equivalent to
<https://guix.gnu.org/en/download/latest/> over Tor, even if that takes
a while.
I also can't tell you how to easily add alternative substitute servers
in the Guix installer itself, as I've never done so myself. Sorry.
Kind regards,
T G-R
[0]:
https://git.savannah.gnu.org/cgit/guix.git/plain/etc/substitutes/bordeaux.guix.gnu.org.pub
prev parent reply other threads:[~2022-05-18 16:31 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-05-18 14:19 bug#55500: guix.gnu.org is not available from Russia Zomb Hacker
2022-05-18 15:11 ` Pavel Shlyak
2022-05-18 15:12 ` Tobias Geerinckx-Rice via Bug reports for GNU Guix
[not found] ` <CANqtuX4iw+ua3istWnMgOf71jzd7H5ytaRm=_GYcitad61BEig@mail.gmail.com>
2022-05-18 16:28 ` Tobias Geerinckx-Rice via Bug reports for GNU Guix [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2c4889632b86a037eff9ed963fa81c86@tobias.gr \
--to=bug-guix@gnu.org \
--cc=55500@debbugs.gnu.org \
--cc=iceknight48@gmail.com \
--cc=me@tobias.gr \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).