unofficial mirror of bug-guix@gnu.org 
 help / color / mirror / code / Atom feed
* bug#42971: When following instructions in the "Building from Git" manual node, 'git verify-commit...' fails. File got moved?
@ 2020-08-21 15:43 tchrzcz--- via Bug reports for GNU Guix
  2020-08-21 18:17 ` Julien Lepiller
  0 siblings, 1 reply; 2+ messages in thread
From: tchrzcz--- via Bug reports for GNU Guix @ 2020-08-21 15:43 UTC (permalink / raw)
  To: 42971

Hello,

https://guix.gnu.org/manual/en/html_node/Building-from-Git.html#Building-from-Git says:

"How do you ensure that you obtained a genuine copy of the repository? Guix itself provides a tool to authenticate your checkout, but you must first make sure this tool is genuine in order to “bootstrap” the trust chain. To do that, run:

git verify-commit `git log --format=%H build-aux/git-authenticate.scm`"

1. When I run the command, I get the following error:

"fatal: ambiguous argument 'build-aux/git-authenticate.scm': unknown revision or path not in the working tree.
Use '--' to separate paths from revisions, like this:
'git <command> [<revision>...] -- [<file>...]'
usage: git verify-commit [-v | --verbose] <commit>...

    -v, --verbose         print commit contents
    --raw                 print raw gpg status output"


2. So I looked for "git-authenticate.scm" with 'find' and got two results:
./tests/git-authenticate.scm
./guix/git-authenticate.scm

3. These two are different files, sizes don't match, 'diff' outputs a lot of stuff.

4. I searched for "git-authenticate" in NEWS, HACKING and README and didn't find anything.

5. Then I figured I'd look in Git commits and found these two:

https://git.savannah.gnu.org/cgit/guix.git/commit/?id=41f443c90af57f9537eccb1a1a45c6e11b377a32 "Add (guix git-authenticate)."
https://git.savannah.gnu.org/cgit/guix.git/commit/?id=96bf434c70c4346c6402658d3ec57ef64a8e521e "maint: Remove 'build-aux/git-authenticate.scm'."

I'm not fluent in Git, GPG, nor Guile. Do I just run the command with "guix/git-authenticate.scm" instead of "build-aux/git-authenticate.scm"?

Regards,
tchrzcz




^ permalink raw reply	[flat|nested] 2+ messages in thread

* bug#42971: When following instructions in the "Building from Git" manual node, 'git verify-commit...' fails. File got moved?
  2020-08-21 15:43 bug#42971: When following instructions in the "Building from Git" manual node, 'git verify-commit...' fails. File got moved? tchrzcz--- via Bug reports for GNU Guix
@ 2020-08-21 18:17 ` Julien Lepiller
  0 siblings, 0 replies; 2+ messages in thread
From: Julien Lepiller @ 2020-08-21 18:17 UTC (permalink / raw)
  To: tchrzcz, 42971

[-- Attachment #1: Type: text/plain, Size: 2124 bytes --]

The mecanism has changed since last release, see https://guix.gnu.org/manual/devel/en/html_node/Building-from-Git.html#Building-from-Git

(Note "devel" in the URL, it corresponds to the latest master). We now use "guix git authenticate" to authenticate the repository.

On 2020年8月21日 11:43:54 GMT-04:00, tchrzcz--- via Bug reports for GNU Guix <bug-guix@gnu.org> wrote:
>Hello,
>
>https://guix.gnu.org/manual/en/html_node/Building-from-Git.html#Building-from-Git
>says:
>
>"How do you ensure that you obtained a genuine copy of the repository?
>Guix itself provides a tool to authenticate your checkout, but you must
>first make sure this tool is genuine in order to “bootstrap” the trust
>chain. To do that, run:
>
>git verify-commit `git log --format=%H build-aux/git-authenticate.scm`"
>
>1. When I run the command, I get the following error:
>
>"fatal: ambiguous argument 'build-aux/git-authenticate.scm': unknown
>revision or path not in the working tree.
>Use '--' to separate paths from revisions, like this:
>'git <command> [<revision>...] -- [<file>...]'
>usage: git verify-commit [-v | --verbose] <commit>...
>
>    -v, --verbose         print commit contents
>    --raw                 print raw gpg status output"
>
>
>2. So I looked for "git-authenticate.scm" with 'find' and got two
>results:
>./tests/git-authenticate.scm
>./guix/git-authenticate.scm
>
>3. These two are different files, sizes don't match, 'diff' outputs a
>lot of stuff.
>
>4. I searched for "git-authenticate" in NEWS, HACKING and README and
>didn't find anything.
>
>5. Then I figured I'd look in Git commits and found these two:
>
>https://git.savannah.gnu.org/cgit/guix.git/commit/?id=41f443c90af57f9537eccb1a1a45c6e11b377a32
>"Add (guix git-authenticate)."
>https://git.savannah.gnu.org/cgit/guix.git/commit/?id=96bf434c70c4346c6402658d3ec57ef64a8e521e
>"maint: Remove 'build-aux/git-authenticate.scm'."
>
>I'm not fluent in Git, GPG, nor Guile. Do I just run the command with
>"guix/git-authenticate.scm" instead of
>"build-aux/git-authenticate.scm"?
>
>Regards,
>tchrzcz

[-- Attachment #2: Type: text/html, Size: 2840 bytes --]

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2020-08-21 18:19 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-08-21 15:43 bug#42971: When following instructions in the "Building from Git" manual node, 'git verify-commit...' fails. File got moved? tchrzcz--- via Bug reports for GNU Guix
2020-08-21 18:17 ` Julien Lepiller

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).