From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christopher Allan Webber Subject: Re: Advice about GuixSD on Serveraptor? Date: Tue, 21 Mar 2017 15:22:43 -0500 Message-ID: <87mvcenzvw.fsf@dustycloud.org> References: <20170209183609.5rztohnqhsleifll@wasp> <20170213214717.GA11352@jasmine> <20170313003252.GA12094@jasmine> <20170321180638.GA3027@jasmine> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56175) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cqQIq-0007w3-3e for guix-devel@gnu.org; Tue, 21 Mar 2017 16:22:49 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cqQIp-00040l-6M for guix-devel@gnu.org; Tue, 21 Mar 2017 16:22:48 -0400 Received: from dustycloud.org ([2600:3c02::f03c:91ff:feae:cb51]:51168) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cqQIp-00040E-0f for guix-devel@gnu.org; Tue, 21 Mar 2017 16:22:47 -0400 In-reply-to: <20170321180638.GA3027@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari writes: > On Sun, Mar 12, 2017 at 08:32:52PM -0400, Leo Famulari wrote: >> I had wanted to use the GuixSD installer because the image format >> conversion is reproducible. So, nobody would have to trust me to provide >> the right thing. >> >> Of course, it would be a lot simpler if we made a barebones system with >> `guix system vm-image`. >> >> If we can't use the installer, how should we create and provide another >> image? > > Any advice or guidance? > > I can easily create an image to use for this, but I don't want to do it > if others think I am going beyond the level of trust placed in me by the > Guix project. So, if you provided the source scheme to generate the image, and signed the image, people would both have the option to generate the image themselves, or download your signed binary image if they trust you? Honestly, at this point the most important thing is to get things to the point where we have *a* documented process to install GuixSD on these servers; once we have that, and assuming we also have documentation / tooling where people could reproduce the whole process (even if they used the image you provided, as long as they could reproduce that step too) I think we're in a much better state than we are... and we could refine further from there. My opinion, anyway! - Chris