From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Thompson, David" Subject: bug#31284: [PATCH 0/1] guix: Add git-fetch/impure. Date: Fri, 27 Apr 2018 09:05:37 -0400 Message-ID: References: <20180427081217.28576-1-cmmarusich@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:51374) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fC34g-000481-U2 for bug-guix@gnu.org; Fri, 27 Apr 2018 09:06:10 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fC34c-0007yQ-RG for bug-guix@gnu.org; Fri, 27 Apr 2018 09:06:06 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:33124) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fC34c-0007y1-LJ for bug-guix@gnu.org; Fri, 27 Apr 2018 09:06:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1fC34c-0002QX-BN for bug-guix@gnu.org; Fri, 27 Apr 2018 09:06:02 -0400 Sender: "Debbugs-submit" Resent-Message-ID: In-Reply-To: <20180427081217.28576-1-cmmarusich@gmail.com> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Chris Marusich Cc: 31284@debbugs.gnu.org Hi Chris, On Fri, Apr 27, 2018 at 4:12 AM, Chris Marusich wrote: > Hi Guix! > > Sometimes, a Git repository may only be available via an authenticated > SSH connection. Even in the case of repositories that only contain > free software, this situation can arise for administrative or > compliance-related reasons. How can one define a package in such a > situation? > > This patch adds a new origin method, git-fetch/impure, which solves > that problem. Specifically, git-fetch/impure creates a fixed-output > derivation that fetches the Git repository outside of a derivation, in > the environment of the invoking user. In particular, this enables SSH > to communicate with the user's SSH agent, which in turn allows Git to > fetch the repository over an authenticated SSH connection. In > addition, because it is a fixed-output derivation, the output of a > successful git-fetch/impure is guaranteed to be identical to the > output of a pure git-fetch for any given commit. In general I'm opposed to including such things in Guix. When I encountered a similar situation at work I opted to use https cloning with a password token in the url. Then there was no external state (like an rsa key) needed. I understand the motivation behind asking for something like this, but I don't think Guix proper should include it. - Dave