From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: Fetching patches as origins instead of copying them into the Guix Git repo Date: Sat, 02 Sep 2017 22:55:44 +0200 Message-ID: <877exgx1kf.fsf@gnu.org> References: <87inh5uqpd.fsf@gmail.com> <87inh4lw7y.fsf@fastmail.com> <87y3q0ow9h.fsf@gmail.com> <87k21jjyzy.fsf@fastmail.com> <20170831213806.GA22308@jasmine.lan> <87shg7l812.fsf@fastmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46678) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1doFSL-0000gx-Vu for guix-devel@gnu.org; Sat, 02 Sep 2017 16:55:58 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1doFSH-0000wu-81 for guix-devel@gnu.org; Sat, 02 Sep 2017 16:55:54 -0400 In-Reply-To: <87shg7l812.fsf@fastmail.com> (Marius Bakke's message of "Thu, 31 Aug 2017 23:52:25 +0200") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Marius Bakke Cc: guix-devel@gnu.org Hello, Marius Bakke skribis: > Leo Famulari writes: > >> On Thu, Aug 31, 2017 at 09:52:49PM +0200, Marius Bakke wrote: >>> Side note: I think we should start adding patches as origins instead of >>> copying them wholesale, to try and keep the git repository slim. [...] > No, I mean adding patches like this: > > (define %CVE-1970-0001.patch > (origin > (method url-fetch) > (uri "https://example.com/CVE-2017-0001.patch") > (sha256 > (base32 > "12c60iwxyc3rj6ih06a1g80vmkf8khvhm44xr9va4h21b74v8f5k")))) > > (package > (... > (patches (list (search-patch "guix-specific-stuff.patch") > %CVE-1970-0001.patch))) > > That only requires the built-in guix downloader. I agree, I did that a few times for this reason. Once I did that for Coreutils, fetching the patch via a Cgit URL at Savannah, and somehow that URL went broken at some later point, which was annoying. But in general, it shouldn=E2=80=99t be worse than source UR= Ls that go 404. Ludo=E2=80=99.