From mboxrd@z Thu Jan 1 00:00:00 1970 From: Efraim Flashner Subject: Re: Cook source disappeared Date: Sun, 24 Jul 2016 21:10:46 +0300 Message-ID: <20160724181046.GM4905@debian-netbook> References: <20160723184656.GA8123@solar> <20160723192335.GB9761@jasmine> <20160724015830.GA32375@jocasta.intra> <20160724131207.GK4905@debian-netbook> <20160724162513.GA17850@jocasta.intra> <20160724164557.GB2527@jasmine> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="AA9g+nFNFPYNJKiL" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:52375) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bRNrf-00036T-Vu for guix-devel@gnu.org; Sun, 24 Jul 2016 14:11:01 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bRNrb-0008Mp-MH for guix-devel@gnu.org; Sun, 24 Jul 2016 14:10:58 -0400 Received: from flashner.co.il ([178.62.234.194]:60351) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bRNrb-0008ME-El for guix-devel@gnu.org; Sun, 24 Jul 2016 14:10:55 -0400 Content-Disposition: inline In-Reply-To: <20160724164557.GB2527@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org --AA9g+nFNFPYNJKiL Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Jul 24, 2016 at 12:45:57PM -0400, Leo Famulari wrote: > On Sun, Jul 24, 2016 at 06:25:14PM +0200, John Darrington wrote: > > https://www.gnu.org/software/guix/packages/issues.html > > =20 > > But if I understand correctly, that is not going to do anything if hydr= a's internal > > cache is good. From what Andraes says, we only noticed this because we= happened to > > loose the cache. >=20 > No, it checks the URLs without consulting Hydra's cache. It does not > check the content itself (the hashes). >=20 > From that page, I noticed the issues with Cook and Aegis last year but = =E2=80=94 > considering the situation, and not knowing that Hydra's cache was not > backed up =E2=80=94 I decided to work on other things. The cache would ne= ver > have deleted the source code as long as the packages remained in our > tree. >=20 > This project is trying to address the problem: > https://www.softwareheritage.org/ >=20 > I wonder if Guix can use that archive as a last resort? There's also fossies --=20 Efraim Flashner =D7=90=D7=A4=D7=A8=D7=99=D7=9D = =D7=A4=D7=9C=D7=A9=D7=A0=D7=A8 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --AA9g+nFNFPYNJKiL Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJXlQSiAAoJEPTB05F+rO6T7tUP/3exZudd7JMo5xXF/8ZTZnw8 UEZ0iGKcwmB15dfkN7A4xmQC1yeyKBYOrW6YQWfqQtaYCo/Yjgj14fCq48IBxMnb TwVLmPoZNiq/YoPOZQdTdRug7pWijkkZ2x9RCT+/HchSUB7ZEBYBXA2uqQUmasTv lDbSR/e1jD6EdtXuLUFM5uRwi4zeUN2Sw55fj1ewGB7SrWw5wBcU7l/7d4IrRw6q hUjOy+KDHmcuM70W+hJaKfkT0UHvDiy+EAmFsNIn3H8mAg+Lv6vNRFOSL8H7kQYk u4acBeMGP8zi345Yq4IMPgw5fin88rwACrM3ArcV8N/EyR5gEgeCvHWD9LOJuqe2 +niy6ixfxpLurtfxcg6Nt6ri+HfnLPHxdrSnbvW19mbUJu5aZqEpI0v6vhw7c101 DG6Tr6FxLxOZafeKg5V1ABX5NsTOVA3ltDJHx7Xe9nXm3A2OvK80rlMwY9xON3Cd 7B5L5uY6TQ9ShZfNvi1SGpvXwI4BGLnMSAMIqavYQ8ZBLu0x97Y3yFfiRTtxpXpI 7ENp3i4ihQJ1PvQN2uIO/yoreAzXGOhU7Jh/dvsp724PDcSzEYLywNWCfgXn6bUa TqitJQ6Ybag/eqBUyU3CuJ5A05OBYzh7XJZyZfBuJXpPkX8Qtmn9Oxdi6vqjW3F0 1o9bpAomJY6915x/PntX =H9WO -----END PGP SIGNATURE----- --AA9g+nFNFPYNJKiL--