From mboxrd@z Thu Jan 1 00:00:00 1970 From: zimoun Subject: bug#22883: Authenticating Git checkouts: step #1 Date: Sat, 21 Dec 2019 02:33:14 +0100 Message-ID: References: <87io14sqoa.fsf@dustycloud.org> <87tvnemfjh.fsf@aikidev.net> <871sab7ull.fsf@gnu.org> <87zhwz6ct4.fsf@aikidev.net> <877ek364u5.fsf@gnu.org> <87mubmodfb.fsf_-_@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:49740) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iiTee-0007RV-VO for bug-guix@gnu.org; Fri, 20 Dec 2019 20:34:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iiTed-0006h7-1b for bug-guix@gnu.org; Fri, 20 Dec 2019 20:34:04 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:41503) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1iiTeb-0006gb-QN for bug-guix@gnu.org; Fri, 20 Dec 2019 20:34:02 -0500 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <87mubmodfb.fsf_-_@gnu.org> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 22883@debbugs.gnu.org, Guix-devel Hi Ludo, To be honest, I do not clearly understand what the issue is concretely about. So I am probably out-of-scope and/or irrelevant. One milestone could be to have Git tags and "guix pull" would 'jump' between these tags. For an end-user like me, tags ease: a. the commit range specification (#1) b. memorize what I have already verified (#6) Moreover, it would feed a variant of OPAM path or Qubes path as you summarized here [1] or mitigate attacks if I understand the answers there [2] or [3]. [1] https://issues.guix.info/issue/22883#12 [2] https://issues.guix.info/issue/22883#15 [3] https://issues.guix.info/issue/22883#26 Thank you for all this work. All the best, simon