From mboxrd@z Thu Jan 1 00:00:00 1970 From: ng0 Subject: Re: Using IPFS to host mirrors of source packages Date: Tue, 22 Aug 2017 19:31:06 +0000 Message-ID: <20170822193106.n7l3ifkeyqetnsgl@abyayala> References: <20170811151019.GB20919@thebird.nl> <87a82sdngs.fsf@gnu.org> <20170822083832.2d2cm2wctva2rjzh@abyayala> <20170822091407.GA26942@thebird.nl> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="lvxny7lefaqhwsje" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:41961) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dkEtg-0000Gp-VN for guix-devel@gnu.org; Tue, 22 Aug 2017 15:31:34 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dkEtc-0006g1-SU for guix-devel@gnu.org; Tue, 22 Aug 2017 15:31:32 -0400 Received: from aibo.runbox.com ([91.220.196.211]:40566) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dkEtc-0006f5-La for guix-devel@gnu.org; Tue, 22 Aug 2017 15:31:28 -0400 Content-Disposition: inline In-Reply-To: <20170822091407.GA26942@thebird.nl> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Pjotr Prins Cc: guix-devel --lvxny7lefaqhwsje Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Pjotr Prins transcribed 1.1K bytes: > On Tue, Aug 22, 2017 at 08:38:32AM +0000, ng0 wrote: > > Ludovic Court=C3=A8s transcribed 0.6K bytes: > > > Hello, > > >=20 > > > Pjotr Prins skribis: > > >=20 > > > > By hosting source packages on IPFS they become content addressable = and > > > > should scale for downloads. It would also become a safe way of > > > > distributing data.=20 > > > > > > > > https://github.com/ipfs/ipfs > >=20 > > I hope that you are aware that this isn't that safe. > > As an intermediate solution it is okay. It is similar to providing > > torrents. It works, but everyone wants the easy way, the > > easy solution which works $now. >=20 > What do you mean? Gnunet has a focus on privacy (at a cost of speed). > IPFS is not really meant to be private (though you can host a private > network). For public data it is safe. You have to trust the original > party that provides the file, but that is similar to what we are doing > today fetching data from github, ftp etc. (a Guix SHA check is good > enough). >=20 > Today I was bitten again by R/bioconductor removing source files. It > would make good sense to me to mirror those files on IPFS. I think > that is a long term solution. >=20 > Pj. While I don't want to comment on everything, let me just comment this: I think IPFS is the best for now. I'll continue working on GNUnet and gnunet-fs on my side and will hope that Guix accepts it once gnunet-fs is ready for this usage. Offtopic question: What's with my request for inclusion on savannah? At least a short comment in 4 weeks would be re-assuring. I'm not sure if there are technical issues or if everyone is on vacation and otherwise busy. --=20 ng0 GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588 GnuPG: https://n0is.noblogs.org/my-keys https://www.infotropique.org https://krosos.org --lvxny7lefaqhwsje Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEqIyK3RKYKNfqwC5S4i+bv+40hYgFAlmchnoACgkQ4i+bv+40 hYgG5xAAtU3y4uIkD0Ev1Cb1G5ZcHfog8u8/aluBQJYu9ZRo2/O6rzgI3rny13uh Lw37ZdHlM1NTx0vgXgywe7us8M6yEVHT4HLHOuGT5b2tqQ4Wgd38K80+5zIgxUHt TGdmCop0i986Q8DpxEDhN+h9B7qjs8e4HUZCFnCoxKkO97PRY/gNHkUYpI+W8/Hf 1mys5bGz5YCuTv4Y17OUSZhjXzhc7Bd2LytbiiaeeOCScXtFdtDTAbWESeEyGJLL PmF+pmnmlk8bBa1/JYEm714UV39Q5Gygcvj7X6J3CVZSRH/D5sTncQQ3IwlmQ/At HevAFI+Zf8NFVWyEowMJdE5i59v+5JlOfJ/nvxGqoLq4/BBcLaQTZV4HMYxZjMVe OqyROCCktbxqooO0kTHYBjmWhg6clUdxmofiiurEj5vT1J7+Ey4A4e5mR6y0rB28 UMC8Me1AamGjirSdEsGNmDLLgEE8ut0PTLgQi28TlULiutSWmkJ5/gULJHCw47Da gUPnSN5qItKjh4Sds/0dlw6Q9ZKSI/Miqe1xMr7Ee93Om8vuD+9MkAv7Z60cwy4W Tk3C1zue3HV1zsB1qfGRgnOIxj9FRlpV/WjjMmog7wgXRAb0W5lIdaTjcPSXspjf 6WxuYBlMPkLJfCPMccYEgRYQkW+0nZOqfROEixD5y1IdZzHfTEA= =ptCV -----END PGP SIGNATURE----- --lvxny7lefaqhwsje--