From mboxrd@z Thu Jan 1 00:00:00 1970 From: myglc2 Subject: Re: =?utf-8?Q?It=E2=80=99s?= building! Date: Tue, 31 Jan 2017 21:47:47 -0500 Message-ID: <8660kud3u4.fsf@gmail.com> References: <8737goz2ba.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:60849) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cYkxg-0007UQ-Ep for guix-devel@gnu.org; Tue, 31 Jan 2017 21:47:57 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cYkxd-0006dE-D7 for guix-devel@gnu.org; Tue, 31 Jan 2017 21:47:56 -0500 Received: from mail-wm0-x22d.google.com ([2a00:1450:400c:c09::22d]:37015) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cYkxd-0006bl-6B for guix-devel@gnu.org; Tue, 31 Jan 2017 21:47:53 -0500 Received: by mail-wm0-x22d.google.com with SMTP id v77so17124636wmv.0 for ; Tue, 31 Jan 2017 18:47:52 -0800 (PST) Received: from g1 (c-73-167-118-254.hsd1.ma.comcast.net. [73.167.118.254]) by smtp.gmail.com with ESMTPSA id o81sm26841758wmb.14.2017.01.31.18.47.48 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Tue, 31 Jan 2017 18:47:50 -0800 (PST) In-Reply-To: <8737goz2ba.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Thu, 12 Jan 2017 17:10:49 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org On 01/12/2017 at 17:10 Ludovic Court=C3=A8s writes: > Hello Guix! > > Good news: the new machine, bayfront.guixsd.org, is building Guix master > for x86_64/i686 with Cuirass=E2=81=B0! > > You can get substitutes from https://bayfront.guixsd.org; just authorize > its key (with =E2=80=98guix archive --authorize=E2=80=99), which is: > > (public-key=20 > (ecc=20 > (curve Ed25519) > (q #8D156F295D24B0D9A86FA5741A840FF2D24F60F7B6C4134814AD55625971B394#= ))) Hi Ludo, I have a couple questions. I autorized bayfront like so ... g1@g1 ~/src$ cat bayfront.guixsd.org.pub (public-key=20 (ecc=20 (curve Ed25519) (q #8D156F295D24B0D9A86FA5741A840FF2D24F60F7B6C4134814AD55625971B394#))) g1@g1 ~/src$ sudo guix archive --authorize < bayfront.guixsd.org.pub ... and I read this ... 3.7 Invoking =E2=80=98guix archive=E2=80=99 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D [...] The list of authorized keys is kept in the human-editable file =E2=80=98/etc/guix/acl=E2=80=99. The file contains =E2=80=9Cadvanced-= format s-expressions=E2=80=9D (http://people.csail.mit.edu/rivest/Sexp.txt) and is structured as an access-control list in the Simple Public-Key Infrastructure (SPKI) (http://theworld.com/~cme/spki.txt). ... so I expected to find the bayfront key here ... g1@g1 ~/src$ sudo cat /etc/guix/acl (acl=20 (entry=20 (public-key=20 (rsa=20 (n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e #010001#) ) ) (tag=20 (guix import) ) ) ) ... but no. Where did it go? Also you recommended ... > guix challenge gdk-pixbuf \ > --substitute-urls=3D"https://mirror.hydra.gnu.org https://bayfront.gu= ixsd.org" ... which I tried _before_ I had authorized bayfront. I was surprised that = it worked before authorization. Should it? TIA - George