From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: Yet another Hydra mirror: hydra-mirror.marusich.info Date: Wed, 09 Mar 2016 13:37:47 +0100 Message-ID: <87twkfesis.fsf@gnu.org> References: <87a8m9jx0z.fsf@gmail.com> <87oaap49y6.fsf@igalia.com> <20160308095733.GA15199@solar> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:36033) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1addNC-0003zs-SP for guix-devel@gnu.org; Wed, 09 Mar 2016 07:37:56 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1addN8-0005NJ-Hy for guix-devel@gnu.org; Wed, 09 Mar 2016 07:37:54 -0500 In-Reply-To: <20160308095733.GA15199@solar> (Andreas Enge's message of "Tue, 8 Mar 2016 10:57:33 +0100") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Andreas Enge Cc: guix-devel@gnu.org Andreas Enge skribis: > On Tue, Mar 08, 2016 at 10:04:33AM +0100, Andy Wingo wrote: >> Right now hydra.gnu.org is in this weird situation where people who use >> it have to trust it, modulo "guix challenge" of course. But really all >> we have to trust is the mapping from the derivation (like the "foo" >> package) to a hash of the build results; the actual build result could >> be transferred from anywhere with no trust issues at all, provided that >> we verify the hash. (Do I understand the situation correctly?) > > Yes, if I understand you correctly :-) I think you both understand correctly. :-) That is, hydra.gnu.org serves narinfos like: http://hydra.gnu.org/n0rgvy9c0cwv453k5bczwscp6iwqa4fc.narinfo They contain all the meta-data for the corresponding store item, including a hash of its content, and said meta-data is signed. See (guix pki) and for details This is why we can mirror things as-is and have users benefit from it without having to trust any additional party. Mirrors are nice because they=E2=80=99re easy to set up, completely transpa= rent for users, and allow our infrastructure to scale quickly. Now, another thing that would be great is to have independent build farms (running =E2=80=98guix publish=E2=80=99) so there is no single point of trust. Ludo=E2=80=99.