From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id iKFGIUUfhWJQFwEAbAwnHQ (envelope-from ) for ; Wed, 18 May 2022 18:31:01 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id uD9VIUUfhWIqNgEA9RJhRA (envelope-from ) for ; Wed, 18 May 2022 18:31:01 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 0CE8F3C35F for ; Wed, 18 May 2022 18:31:01 +0200 (CEST) Received: from localhost ([::1]:51058 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nrMZg-0003vR-8N for larch@yhetil.org; Wed, 18 May 2022 12:31:00 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:50596) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nrMYl-0003to-DG for bug-guix@gnu.org; Wed, 18 May 2022 12:30:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:39450) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nrMYl-000632-3O for bug-guix@gnu.org; Wed, 18 May 2022 12:30:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1nrMYk-0003cg-TO for bug-guix@gnu.org; Wed, 18 May 2022 12:30:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#55500: guix.gnu.org is not available from Russia Resent-From: Tobias Geerinckx-Rice Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 18 May 2022 16:30:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 55500 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Zomb Hacker Cc: 55500@debbugs.gnu.org Received: via spool by 55500-submit@debbugs.gnu.org id=B55500.165289134713831 (code B ref 55500); Wed, 18 May 2022 16:30:02 +0000 Received: (at 55500) by debbugs.gnu.org; 18 May 2022 16:29:07 +0000 Received: from localhost ([127.0.0.1]:33347 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nrMXr-0003b1-5L for submit@debbugs.gnu.org; Wed, 18 May 2022 12:29:07 -0400 Received: from tobias.gr ([80.241.217.52]:43536) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nrMXo-0003ar-59 for 55500@debbugs.gnu.org; Wed, 18 May 2022 12:29:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=dUK2qNtdC9E3v ZOz1omSMgmm6KF6mnNOmcL6L3fVLRo=; h=references:in-reply-to:subject:cc: to:from:date; d=tobias.gr; b=pii4WSVOo1pZE9j/Cb6ZmeDemikNGjDk1iIigAhhp sEZg1f8J7RMBOE9Wnm19/jDPDFzNxmVlnt917q+dqeo7kFUTOLAX2yzNZLGTRipfqTEQ4k F5NZCgWJNWc/qOHPr2zACy4fMyVodzyV9JLawI+TdPbgbkHFdm62e8uqQmyAxw6IQNmx/J +Vp2Mxqddir/rOvJps52y8O1H+1YZk8kVzRmH4HN5bYJDv4lwzWtH/HlKIC7j3BRErbrJo ITf4A6ze37WeJewGceBA8JTQbA8+7qGbEtyNLkaba/F7NuxktgIDveE2hMBYekQd1Dd8uK FCokNSE5DOTz3L5rIHlBA== Received: by submission.tobias.gr (OpenSMTPD) with ESMTP id ad202642; Wed, 18 May 2022 16:28:57 +0000 (UTC) MIME-Version: 1.0 Date: Wed, 18 May 2022 18:28:57 +0200 In-Reply-To: References: Message-ID: <2c4889632b86a037eff9ed963fa81c86@tobias.gr> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" Reply-to: Tobias Geerinckx-Rice From: Tobias Geerinckx-Rice via Bug reports for GNU Guix X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1652891461; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=dUK2qNtdC9E3vZOz1omSMgmm6KF6mnNOmcL6L3fVLRo=; b=LvCuW6DabJxIL6HUVUBGlhCiJ9eKST7X9cNXnjAx5oZoPS3PXJvzW9wdGA8z/fmXmGMEvm CzWJQeFGmVkjM0uu0BycjXceZ3FluB1eCreugmB9Tf4ioxbKReK0Ebxf5kQNrwZI4mhUZ6 ZKaejMfZ56yNYEvtZYLfDJqEduiRhunjrR3ShEeMcTNuxrsc4I0qrSzQc1KHOBPIb6toaH a3eKi7ZEi/5NM39vS32qA+z/eo0mbOSh1CHvQyNhrqxsDMIJLhZ4Y8qe8+EWJvKtpimNPH 7kS8gJ3/NLx5pnepH/NWEjggb+s7ywts7/x2mEAAxdIJbN3zygMPIvK9/Z2YEQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1652891461; a=rsa-sha256; cv=none; b=StEYEz5N5fZ3LdoMldmKCqZiXgzlChHqSsHzTekOsAZ4GQrd3Gm3bO+RuVnaIvxWb173DF 66Q7kY7X3Qlm+EIN1/GXtWy9dHbmL+OeNTj5RLjzuyBhzsOiD/YGy6PrHAQAwiU0l9fupF NygqwIIlWO9MP08ntb5XmMYRiEZVWay1g9RdEIe0OuA9qC0DVkfWgUzLAqOdAVB/rGeUKf 6xCPfe7LyM0XAgLUL1cpe/W7wnQ8Qn876iG8+NC16Pg3ef6IBLlC5d+N3PTQ92wmPm1rTm ziqX47CEH/CAshlub6LcNXZpuxyngFvZkIQDeSxfvWvyWYVSdI7vHxA0XzHH5g== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=tobias.gr header.s=2018 header.b=pii4WSVO; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -4.15 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=tobias.gr header.s=2018 header.b=pii4WSVO; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 0CE8F3C35F X-Spam-Score: -4.15 X-Migadu-Scanner: scn0.migadu.com X-TUID: bVTrPRKa361f Hasty reply, sorry if I miss a point. [And in my hast I forgot to CC the list, sigh. Here's another copy.] On 2022-05-18 17:19, Zomb Hacker wrote: > Is there any trusted mirrors? Depends on what you mean by ‘trusted’, but yes. For substitutes: ~~~~~~~~~~~~~~~~ - There's an independent but trusted build farm at "https://bordeaux.guix.gnu.org". You can add this to your list of substitute URLs, *and* authorise its signing key[0], to make Guix poll it for substitutes instead of [or in addition to] ci.guix.gnu.org. - There's also a Chinese mirror of ci.guix.gnu.org at "https://mirrors.sjtug.sjtu.edu.cn/guix". This is a true mirror: it just serves whatever ci.guix.gnu.org does. This means that even though it's not run by the project, its substitutes will be signed with the ‘official’ ci.guix.gnu.org key, which your Guix trusts out of the box. You don't need to authorise another key, and the SJTUG admins cannot modify & sign malicious binaries. They can of course *see* what you download. If you're worried about that, use Tor as explained by Ludovic. For Guix ISOs ~~~~~~~~~~~~~ …the situation is less straightforward: - ftp.gnu.org, which can be reached from Russia, hosts only releases, and Guix 1.3 is over a year old by this point. It's supported, but… - I recommend you download the equivalent to over Tor, even if that takes a while. I also can't tell you how to easily add alternative substitute servers in the Guix installer itself, as I've never done so myself. Sorry. Kind regards, T G-R [0]: https://git.savannah.gnu.org/cgit/guix.git/plain/etc/substitutes/bordeaux.guix.gnu.org.pub