From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: bug#28749: guix build --subsitute-urls does not override guix-daemon run with --no-subsitutes Date: Sat, 14 Oct 2017 15:23:45 +0200 Message-ID: <871sm5uala.fsf@elephly.net> References: <20171009192034.GB16949@jasmine.lan> <87tvz3f8sp.fsf@gmail.com> <20171013215430.GA1951@jasmine.lan> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:60893) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1e3MR8-0001uF-M3 for bug-guix@gnu.org; Sat, 14 Oct 2017 09:25:07 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e3MR4-0003cu-L7 for bug-guix@gnu.org; Sat, 14 Oct 2017 09:25:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:58489) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1e3MR4-0003cX-Dv for bug-guix@gnu.org; Sat, 14 Oct 2017 09:25:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1e3MR4-0005D3-6D for bug-guix@gnu.org; Sat, 14 Oct 2017 09:25:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-reply-to: <20171013215430.GA1951@jasmine.lan> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Leo Famulari Cc: drashne@protonmail.com, Maxim Cournoyer , 28749@debbugs.gnu.org Leo Famulari writes: > On Fri, Oct 13, 2017 at 09:59:18AM -0400, Maxim Cournoyer wrote: >> Although, I would argue that the current behavior is >> non-intuitive. While true that the manual skim about how one can achieve >> this, the reference to "The Store" is not helpful; it doesn't even >> mention the "set-build-options" procedure. Also, leaving the command >> line to plug directly into Guix's API from Guile is inconvenient at best. >> >> It seems to me that the current behavior of other options that affect >> the guix-daemon operation are that user options override the >> corresponding guix-daemon defaults; maybe that's what lead me and others >> to think that --substitute-urls should attempt to do what the user >> desires? > > Yeah, maybe it should be changed to be consistent with the behavior of > the other options. I don’t know. Substitute sources have to authorized before downloaded substitutes are accepted by the daemon. This authorization happens as the root user, as it constitutes a system-wide change. When the daemon is run by the root user to disable substitutes system-wide, maybe we should not let users override that decision, just like we don’t let them override from what server binaries are to be accepted. I’m not convinced by the reasoning above, but I’d like to offer this thought for consideration anyway. >> Otherwise, we could at least give advice on the output of a Guix command >> when the user passed --substitute-urls when the guix-daemon substitutes >> were disabled to make this clear(er). > > Agreed, we should at least do that. Yes, this is a good idea. -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net