From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id YHJ/A9ugkWDbKAAAgWs5BA (envelope-from ) for ; Tue, 04 May 2021 21:30:35 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id qB64OtqgkWA8ewAAB5/wlQ (envelope-from ) for ; Tue, 04 May 2021 19:30:34 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8365719F56 for ; Tue, 4 May 2021 21:30:34 +0200 (CEST) Received: from localhost ([::1]:44852 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1le0kb-0007jc-IX for larch@yhetil.org; Tue, 04 May 2021 15:30:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:50142) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1le0k7-0007hw-8D for guix-devel@gnu.org; Tue, 04 May 2021 15:30:03 -0400 Received: from mira.cbaines.net ([212.71.252.8]:41952) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1le0k4-0007UK-Vu for guix-devel@gnu.org; Tue, 04 May 2021 15:30:02 -0400 Received: from localhost (unknown [IPv6:2a02:8010:68c1:0:8ac0:b4c7:f5c8:7caa]) by mira.cbaines.net (Postfix) with ESMTPSA id C83C327BC81; Tue, 4 May 2021 20:29:59 +0100 (BST) Received: from capella (localhost [127.0.0.1]) by localhost (OpenSMTPD) with ESMTP id 8675ac6b; Tue, 4 May 2021 19:29:59 +0000 (UTC) References: <878s4ye116.fsf@cbaines.net> User-agent: mu4e 1.4.15; emacs 27.1 From: Christopher Baines To: Andreas Enge Subject: Re: Bringing substitutes from the Guix Build Coordinator to users In-reply-to: Date: Tue, 04 May 2021 20:29:56 +0100 Message-ID: <87czu6cn63.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: pass client-ip=212.71.252.8; envelope-from=mail@cbaines.net; helo=mira.cbaines.net X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1620156634; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=/sAZV5tY7YjE8J9iFB/PDk67ElUj/4YS9Y9jffEz2J0=; b=d5FN3Nfv9XYsgMvJRMIfQYPk5wsVtkS75y0YkqilJ888ehoUtVbQzk1zF3FHe0nKQLI6Qe HsEqIVNMdnb64NqR9wt9RbVTq7mQB2DiPPEPtcASBdEzBe5ZxqrHLknh/jsLXsFcZl2e4u 89d/uvLtW6KDE682wm+rHEg+sTPXUJ/u3IbO6bMgyiF6S3i8rOoHIuWv/wztlTiZji4vRC yNAuWbhGCjCwHkdmkpw903wMChqBgDmjbo/nFL0KkeHiwCCaRy4dUuEs1Nib1LaebnokNY 2OZvS8OxaOJjHpQOxXBZ5qqNXmYi6gFd9p1h+s1iFXP5v7TygU1IkQ2gOLVUqw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1620156634; a=rsa-sha256; cv=none; b=UhZN9wFlo57qqVHn3vKriI8iSNaZD/w3jazQZ5UQMIm6krGOg2uQ3MQg2tnQeGoYw9qyg/ m/R80L7dEENrmtowCQmFFQxPEjnRtPe8R+4XNdtDhmH5cHdTpW4ma3EaIQvKMs2ECRq7kt lb5esm5nd2fJOQ5feIDkzps9rUocZCGUwgBdfbzPvyZd8MgV83EF5dVYFjfIa5oI6VoX/K +OHnBEu4OlWSUDBZM5kdG7ZBoj92krFqdtCJnPVN7LN0LHifs0FBRLlZ9AQEIyDXbDgAP5 wZqOLR0uR9pNqyFWh231y7pZSomW2D1Ho1Qa+s53/Imvoqc4PUUG7XRpw43uRg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -3.06 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 8365719F56 X-Spam-Score: -3.06 X-Migadu-Scanner: scn0.migadu.com X-TUID: 0sxkjdCYUo2Y --=-=-= Content-Type: text/plain Andreas Enge writes: > Hello Chris, > > Am Sat, May 01, 2021 at 07:56:05PM +0100 schrieb Christopher Baines: >> I think there are some benefits for using the Guix Build Coordinator to >> build things for substitutes, and it would be good to work out how to >> get those benefits to users of Guix generally. > > my question is a bit tangential, but how can we get the substitutes that > the build coordinator puts on bayfront? I still have bayfront.guix.info > in my list of substitute servers, but does it use the same signing key > as before? It would be nice to document what a user should do. In my > opinion, a second build farm would be a useful thing, in case one server > goes down, or needs to be updated, for instance. (And then it allows for > reproducibility checks.) So, bayfront is currently serving substitutes build through the Guix Build Coordinator, the signing key is the same as it was before. It's only been building things at pace since yesterday though, so it'll be a few days at least until it's caught up. I agree that having multiple independent substitute providers would be nice, and getting bayfront working well is a step towards that. > Relatedly, and this may already be documented: How do I know where the > packages are downloaded from? > $ guix package -u > substitute: updating substitutes from 'https://bayfront.guix.info'... 100.0% > substitute: updating substitutes from 'https://ci.guix.gnu.org'... 100.0% > imagemagick-6.9.12-4-doc 4.6MiB 1.6MiB/s 00:01 [##### ] 32.5% > Before the print format overhaul, the full URL would be printed. Maybe you can turn on more detailed output? I'm unsure. > Does the guix daemon complain when substitute URLs do not match any > authorised key? I don't think so, it'll just ignore them. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKlBAEBCgCPFiEEPonu50WOcg2XVOCyXiijOwuE9XcFAmCRoLVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcRHG1haWxAY2Jh aW5lcy5uZXQACgkQXiijOwuE9XfoKRAArWXyoqVBD5yQH+PzRJVIW2gGZCq5eTX2 HGFNLtujgptWugScYot04IeBl0uXjErWVtlqf8Nxj2VOwRyTBMAm8Js3V7SsdDjp nCtDLKA4A1G3iLyEy31b2fSc3GQ3gMDFMxjrAnIS0WWsTC2BfsoyWtD6DJkROaEu 88c9Dl8cUglC8xdnEA7ABPY7zg439i1lXqiJGWW/ZAxwhBdhwDL+FNAHwsVFy3uq Z4evjJl+1vZGXzhDVXjwC+rHPd0qMJwnWuCndQTxzLzCkU7WQvxyNCMCphQOYDUY SA1SAcTO0BHBLsCz1T7TMoLYu+RHX1C+YyKWKA/S2Mu+buweZxz5EKia+nPc2KgF 5XZqyZyhAkI1tKO/AUPCYxeyvLgmxrZEsm9DUIrlXPEkTwQLwjaQ+qrRdlNKF80S kEgITbW7rWg5Kz3ipfKD+hfLUx0ECvmxO5BBXb0cUGzXs/qrLy3hFJrDpolu3jv4 tOEoAUwDdCtZ4Htb8SxiLycZelsMBGtJiP+0yL/9oKg2aOir02bKzMKDfT2C6Lc3 q9wyBOUDUn138eAvKAShI519sCZo+SuVzyzNHjuU9kz09K8WeTyUbtDUfKNwwwSC ngt+mKuB0RBy4yvZm8qRshVWjBIxws7MaxcgvYWsv7cS8BFO0E1Xr3fVSgxv+maE PRUG19wlyBg= =HIA6 -----END PGP SIGNATURE----- --=-=-=--