From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) Subject: bug#29814: impossible to pass spaces in GUIX_BUILD_OPTIONS Date: Sat, 23 Dec 2017 15:14:40 +0100 Message-ID: <877etd5y5r.fsf@gnu.org> References: <87a7ya79s3.fsf@gnu.org> <87fu82m7xu.fsf@netris.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:41328) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1eSkZv-0005dq-Dv for bug-guix@gnu.org; Sat, 23 Dec 2017 09:15:08 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1eSkZr-0000xu-08 for bug-guix@gnu.org; Sat, 23 Dec 2017 09:15:07 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:40148) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1eSkZq-0000xT-SW for bug-guix@gnu.org; Sat, 23 Dec 2017 09:15:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1eSkZq-0001Zr-D7 for bug-guix@gnu.org; Sat, 23 Dec 2017 09:15:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <87fu82m7xu.fsf@netris.org> (Mark H. Weaver's message of "Fri, 22 Dec 2017 22:36:45 -0500") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Mark H Weaver Cc: 29814@debbugs.gnu.org Mark H Weaver skribis: > ludo@gnu.org (Ludovic Court=C3=A8s) writes: [...] >> Yes, this is annoying. I think --substitute-urls (plural) was >> misguided. Instead we should instead have --substitute-url (singular), >> which could be repeated several times. That would solve the troubles >> with spaces. >> >> During a transition period we could keep accepting --substitute-urls. > > I require a way to clear the list of substitute urls, because last I > checked --no-substitutes doesn't fully inhibit use of the substitute > servers. For example, I found that when grafting, substitute servers > were queried even when --no-substitutes is passed to the daemon. I > guess that's to determine the set of references found in the build > outputs, to optimize the grafting process. However, a compromised > substitute server (or a man-in-the-middle in possession of our signing > key) could send me the wrong set of references, and thus cause my system > to perform incomplete grafts, with some dependencies omitted from the > list of rewrites. AFAIK when =E2=80=98guix-daemon --no-substitutes=E2=80=99 is running what y= ou describe is impossible. If the impossible happens, could you report a bug? > My current method to avoid trusting the substitute servers is to pass > both --no-substitutes and --substitute-urls "" to the daemon. If we > deprecate the use of --substitute-urls, how will I clear the list? Normally, both for the daemon and for clients, --no-substitutes should achieve what you want. If not, we should really fix it. Thanks, Ludo=E2=80=99.