From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: [PATCH] gnu: mpop: Update to 1.2.6. Date: Thu, 17 Nov 2016 16:09:09 -0500 Message-ID: <20161117210909.GB5556@jasmine> References: <87eg2acawl.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> <8737ipdec1.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="yNb1oOkm5a9FJOVX" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:50943) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1c7Tvn-0000zS-Qa for guix-devel@gnu.org; Thu, 17 Nov 2016 16:09:16 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1c7Tvk-0007mQ-F5 for guix-devel@gnu.org; Thu, 17 Nov 2016 16:09:15 -0500 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:39647) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1c7Tvk-0007ll-8o for guix-devel@gnu.org; Thu, 17 Nov 2016 16:09:12 -0500 Content-Disposition: inline In-Reply-To: <8737ipdec1.fsf@kirby.i-did-not-set--mail-host-address--so-tickle-me> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Marius Bakke Cc: guix-devel --yNb1oOkm5a9FJOVX Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Thu, Nov 17, 2016 at 09:46:38PM +0100, Marius Bakke wrote: > Arun Isaac writes: > > Marius Bakke writes: > > > >> Thanks for this. I'm unable to download the new version with > >> `./pre-inst-env guix build mpop`; > > > > Not sure what the problem is. I was able to build mpop successfully on > > my system. But, I did download manually with `guix download' > > first. Perhaps the build used that downloaded source tarball. I fixed the URL and made it use our SourceForge mirror in commit 5837e6993. > Yes, if the hash already exists in the store, it will be used instead of > downloading. This has caused some confusion before :-) As Marius hints at, using `guix download` to get source code while writing a package masks errors in the package's URL. You should always download the source code "out of band" with wget, curl, a web browser, etc, and then use `guix hash` to calculate the hash. That way, you can be sure the package works. Also, you don't leak information (via `guix download`'s network signature) to potentially hostile servers that you are packaging software for Guix. --yNb1oOkm5a9FJOVX Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJYLhx1AAoJECZG+jC6yn8IQ68QAJNMcAY0UJW7QJeZoiBpguau bvgiddvi6g8CzRfVj/YxBZIL3vkHYrSqnW+anjD9DsD4dSP04l/jhpkeDk5DIWBE jGkOBpTgCY9pVsdvHUwvB6yNNHyoz77K3jD+r077SYakuQgCqeDKj38ULt9MZysA jgC1I7CJLbAQSToAR61ABZ5ZHui8NE3rG13R93ZnZaKl0uqDMXVXrojTubfhFau4 taR90lj/k98ODE0ggFqoTatl/jdp596c7WayBt2+4PcNMyChp/Q3rOsjebdceUZd EthFTdOrU4XqIXu+oL0IBbj3icttuhoWJLTps+5ryzH9C16SrnQNvg52ZWUrDpnv rU5TcuIesDU28c9RURkg7Rbs9xStWjjj05qHs5p6N063oUd0aAsVwi6N3fV4Zb9/ 3vVfOHeE+SadImb9LJDouF27l5xm3tAewINcW8KyV2yp6cvrjgwYVPcXtLwHn5VR y7gNcAXvyrdYWS+LEcZQtRlCRT5T0HsN8OBVsiquThoLr2It36iDQnnQdmQ3oIeL KpkHZ3SpWKDA2FwMcJHrpgnyad0rhkstGyAxnlMGjxcQbZ7Y71LWRm8QbozuDR5P 3dCN3WUc7sjD/wyvNnI77HIeA8w9VERonBk1l8xiQnDTU/QdffZt2grOPk7sagji BkXegvhwkmcGufTcJS1i =bX4h -----END PGP SIGNATURE----- --yNb1oOkm5a9FJOVX--