From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id OLx6Jw6B+F6fLwAA0tVLHw (envelope-from ) for ; Sun, 28 Jun 2020 11:37:50 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id gNMkIw6B+F56ZAAAbx9fmQ (envelope-from ) for ; Sun, 28 Jun 2020 11:37:50 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 5C9479404D7 for ; Sun, 28 Jun 2020 11:37:50 +0000 (UTC) Received: from localhost ([::1]:50714 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jpVd7-000609-As for larch@yhetil.org; Sun, 28 Jun 2020 07:37:49 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:37304) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jpVcy-0005zm-O3; Sun, 28 Jun 2020 07:37:40 -0400 Received: from relay11.mail.gandi.net ([217.70.178.231]:51205) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jpVcw-0007wW-F8; Sun, 28 Jun 2020 07:37:40 -0400 Received: from webmail.gandi.net (webmail19.sd4.0x35.net [10.200.201.19]) (Authenticated sender: brice@waegenei.re) by relay11.mail.gandi.net (Postfix) with ESMTPA id 84306100002; Sun, 28 Jun 2020 11:37:32 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Sun, 28 Jun 2020 11:37:32 +0000 From: Brice Waegeneire To: =?UTF-8?Q?Andr=C3=A9_Batista?= Subject: Re: [PATCH] doc: cookbook: Update entry about getting substitutes through Tor. In-Reply-To: <20200618140611.GA2613@andel> References: <87blmmkx87.fsf@gnu.org> <20200603191249.29382-1-brice@waegenei.re> <87367baua7.fsf@gnu.org> <5b7e576318d73e89ba5a9cafb6861061@waegenei.re> <20200617021951.GA14644@andel> <20200618140611.GA2613@andel> Message-ID: <62389fabcbf7f40b03cca0d85446a704@waegenei.re> X-Sender: brice@waegenei.re User-Agent: Roundcube Webmail/1.3.8 Received-SPF: pass client-ip=217.70.178.231; envelope-from=brice@waegenei.re; helo=relay11.mail.gandi.net X-detected-operating-system: by eggs.gnu.org: First seen = 2020/06/28 07:37:33 X-ACL-Warn: Detected OS = Linux 3.11 and newer X-Spam_score_int: -35 X-Spam_score: -3.6 X-Spam_bar: --- X-Spam_report: (-3.6 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org, Guix-devel Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Spam-Score: -1.01 X-TUID: 9aY1LNolYu1y Hello André, On 2020-06-18 14:06, André Batista wrote: [...] > qua 17 jun 2020 às 08:37:59 (1592393879), brice@waegenei.re enviou: >> I would like to keep the warnings at the beginning of the section >> to be sure that readers don't miss it when skimming trough it. >> Any rewording of that part to make the scope of the section or >> the warnings more clear is welcome. > > It follows attached a new version of the previous patch which > changes the comment to the warning quote. I had previously thought > that it would be worse to inflate the warning with this comment even > more so as the section's title already mentions it's related to > substitutes. I tought I already had applied your patch, but I forgot to do it. It's now applied as f8945734a5abff69644284231cc47fb67456657b, sorry for the delay. [...] >> On a wider front I would prefer to have a foolproof configuration >> that route *all* guix related traffic through Tor, instead of that >> half-way setup. Providing a way to 'torify' any service with >> something like 'make-forkexec-constructor/trosocks', as >> 'make-forkexec-constructor/container' does for containerizing a >> service, would be great[0]. A less engaged option would be to >> make 'guix-daemon' compatible with 'torsocks' since doing it so >> makes guix unusable[1]. > > I too would prefer it, but a half-way setup is what we have for now. > So a three-quarters-way would be an improvement though not the fix > we're in need. I'll dig deeper and will come back to you if I make > any progress. I would love to know when you manage to advance on that front. Have a good day, - Brice