From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id 4I2GKdFVE2Q8OgAASxT56A (envelope-from ) for ; Thu, 16 Mar 2023 18:45:53 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id yGJ5KdFVE2TR2wAAauVa8A (envelope-from ) for ; Thu, 16 Mar 2023 18:45:53 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 7EFDCCD16 for ; Thu, 16 Mar 2023 18:45:53 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gnu.org header.s=fencepost-gnu-org header.b=IVbdXR1C; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1678988753; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=OC8g1Qn9WCWq/3L5+EdabMyV34J+2kMfxezQXh9pjZE=; b=TIeosp630XU8qLWwSM6L/KNPtqCK/udaVeC1vR9Pvq7FU1tnJxUhLTegvzxmVuR+oPaL/O T3NAr1XUQXKyGE1oNWyNRMOEE6YCDR+BeQ6WJFkh8wKWSytbmCVMqdT5sE0FtQRKX2m8bL 0K2rXt9RLe2ycw6nL/Xm+bmAki+UVOUSXa5tg+1Ak0TgAKFxxFVdiK3QtcPfMYxKGFSeVJ Vdjuw9wg4kjeqELLpfaKuiw8OFWsFGqO9xy1enn4f2NNuCkOrhpOahXm3cTLj79rvwB8Op k8OI7exBzC7U21mISEt1WZoQ/YEV5JkgE6l/ZZkIQD2DsyBdLvHYOj/uYoF+xg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gnu.org header.s=fencepost-gnu-org header.b=IVbdXR1C; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1678988753; a=rsa-sha256; cv=none; b=RcgXZIeYuMNS3o7J5KFnDTSEL1yIKz+SlGDCTd9sQK9RTEdhfIDF2wbDlsskVKXmvsfaqv ky/Uk+l/2K2zUKjsQdLhRSz9SsuewNu33VVwzHyiWBdnqJFZfueNkjCp50A2giPG/le3LT HSMkxjj9RcY6Rh8omZboffXetjNDi2y8i5b4iQrHopNomSfLCnH4UL7+SeWTTPMp9U203J /XCC8dMkxVui7XGE6SAoykRX9m8jZuM7HdYZke0G7DPY8gTKU77DvVit5QyDsTcW75RyKZ RFrgJ7ZTB3nA8tDJxMmmrx67JHOXrXk/tf+ReqpJeGYmClZzygLy/DpIKc16rw== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1pcrfG-0002KK-3G; Thu, 16 Mar 2023 13:45:22 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pcrfD-0002IP-P1 for guix-devel@gnu.org; Thu, 16 Mar 2023 13:45:19 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pcrfD-0002z8-Cv; Thu, 16 Mar 2023 13:45:19 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:In-Reply-To:Date:References:Subject:To: From; bh=OC8g1Qn9WCWq/3L5+EdabMyV34J+2kMfxezQXh9pjZE=; b=IVbdXR1C0L2OenbsXz6y vyco9taBHUBAHyg34uqaTkaAOzxw3R1ct/OXfGTezNZ/zPIUkqG/YD6jKP8krUl2BkbJrYqDNvRuv q+1ldnqyYCfRFzdhJS/0DJyKjmJdpaqONkZ+nhMIympe47M7t3p5IUmvNmJobLnoRY4llZXG/hlfv Y+Q6IrvBd9SQOXakRhCjBsRW+cdeYxT1Z/kE2n3uoIbBfprAtX7ECLdRRIvC/PyOlOhgHzJmcvbsH cpn5CLmDp++xxDBuhulpA/eqmsYa4YnPo9OSmiVcDNgOKXIL+fsZhVg+d+TYkBXuh6GCNOjyEbHkt XWjbwC4+p+iDuw==; Received: from 91-160-117-201.subs.proxad.net ([91.160.117.201] helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pcrfC-000579-Ui; Thu, 16 Mar 2023 13:45:19 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Simon Tournier Cc: Guix Devel Subject: Re: intrinsic vs extrinsic identifier: toward more robustness? References: <87jzzxd7z8.fsf@gmail.com> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: Sextidi 26 =?utf-8?Q?Vent=C3=B4se?= an 231 de la =?utf-8?Q?R=C3=A9volution=2C?= jour du Pissenlit X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Thu, 16 Mar 2023 18:45:16 +0100 In-Reply-To: <87jzzxd7z8.fsf@gmail.com> (Simon Tournier's message of "Fri, 03 Mar 2023 19:07:23 +0100") Message-ID: <87a60cbnf7.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: X-Migadu-Queue-Id: 7EFDCCD16 X-Spam-Score: -7.07 X-Migadu-Spam-Score: -7.07 X-Migadu-Scanner: scn0.migadu.com List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-TUID: 20ltiK/IIAQc Hi! Thanks for starting this discussion! Simon Tournier skribis: > For sure, we have to fix the holes and bugs. :-) However, I am asking > what we could add for having more robustness on the long term. > > It is not affordable, neither wanted, to switch from the current > extrinsic identification to a complete intrinsic one. Although it would > fix many issues. ;-) Sources (fixed-output derivations) are already content-addressed, by definition (I prefer =E2=80=9Ccontent addressing=E2=80=9D over =E2=80=9Cint= rinsic identification=E2=80=9D because that=E2=80=99s a more widely recognized ter= m). In a way, like Maxime way saying, the URL/URI is just a hint; what matters it the content hash that appears in the origin. So it seems to me that the basics are already in place. What=E2=80=99s missing, both in SWH and in Guix, is the ability to store multiple hashes. SWH could certainly store several hashes, computed using different serialization and hash algorithm combinations. This is what you suggested at ; it was also discussed in the thread at . It would be awesome if SWH would store Nar hashes; that would solve all our problems, as you explained. The other option=E2=80=94storing multiple hashes for each origin in Guix=E2= =80=94doesn=E2=80=99t sound practical: I can=E2=80=99t imagine packages storing and updating more= than one content hash per package. That doesn=E2=80=99t sound reasonable. Plus= it would be a long-term solution and wouldn=E2=80=99t help today. Thoughts? Ludo=E2=80=99.