From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id oAVsES8ljmA7KQAAgWs5BA (envelope-from ) for ; Sun, 02 May 2021 06:06:07 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id 8PIADS8ljmCxJgAAbx9fmQ (envelope-from ) for ; Sun, 02 May 2021 04:06:07 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id DA1D727A9E for ; Sun, 2 May 2021 06:06:06 +0200 (CEST) Received: from localhost ([::1]:54570 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ld3Mr-0001bW-GH for larch@yhetil.org; Sun, 02 May 2021 00:06:05 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:57510) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ld3Mc-0001bM-IJ for guix-devel@gnu.org; Sun, 02 May 2021 00:05:50 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:35433) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ld3MY-000684-39 for guix-devel@gnu.org; Sun, 02 May 2021 00:05:50 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id 302565C0092; Sun, 2 May 2021 00:05:45 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sun, 02 May 2021 00:05:45 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-transfer-encoding:in-reply-to; s=mesmtp; bh=hppqT5P/HCmK5QdqLU5DR8f5sQG9SKU3cHA1EkLgZEc=; b=CR8aChvopsA5 lJq0nZw4W94mL1Smut006Ze7gYhsWh40YnSovRGVN9aUOyl0B15mxaeAbnZKYMyu RetKxD9IUWXQDOQ3Vf27Wsk3oiIuze82biSnpZqZpz0FOMMMhniLXA7QlWyyUDEv J1zz+WJ1mQcb39B5z5s+MLZYAQ6G+kw= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; bh=hppqT5P/HCmK5QdqLU5DR8f5sQG9SKU3cHA1EkLgZ Ec=; b=jblxWeIK6ndVF47/AUqbrSZjCAzy9P3RCLmkhptdBb2qGqEx3JdRUCtH1 LMzikj/6ITj9Xqzjb6BgXXYsW42uf/FRnLq/9Vzc1nBDLAfP7KqHEnqbXi1UBeE9 ZnmkRuJntzhvntXsLpVYjshfi5BGrvB15yyBtOTeIRh4qlpoqwykkMxCnlCW9PA9 GN5qWHg9A+T+uEJMCkpBlUcePBUAJ/uBfP2tp6DvV+OGOVoVK7XeAUybZvMzwDr2 X0mxOBJx/pOcRjxcgcBHYeNvekDuQKcqgrCXdZi/rKXJ2v0ixAk4AxCvkD0VSWzF tpk91O0DGUj4TA/ECpkHiwrtnU2+A== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrvdeftddgudehgecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpeffhffvuffkfhggtggugfgjsehmkeerredttdejnecuhfhrohhmpefnvgho ucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrg htthgvrhhnpeelhfejiedtueffheethedtleeiheeftdfhhfefjedtveeiudeuvdeufeej hfehgeenucffohhmrghinhepghhnuhdrohhrghenucfkphepudeivddrvddujedrfeefrd duuddvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhep lhgvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: from localhost (d-162-217-33-112.ct.cpe.atlanticbb.net [162.217.33.112]) by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 2 May 2021 00:05:44 -0400 (EDT) Date: Sun, 2 May 2021 00:05:42 -0400 From: Leo Famulari To: Maxim Cournoyer Subject: Re: GNU Guix 1.3.0rc1 available for testing! Message-ID: References: <877dkjovl6.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="IQ7tZjv6VECTQPXk" Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: Received-SPF: pass client-ip=66.111.4.25; envelope-from=leo@famulari.name; helo=out1-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1619928367; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=hppqT5P/HCmK5QdqLU5DR8f5sQG9SKU3cHA1EkLgZEc=; b=rSF2t+jpdaWAgDhR77LltNTMEjUl2DVcw7gE0UgKaSz6EpkFFjye94GsSg+N0B6OuCfLns 1oHvrJpzTnJbxmfPn8SHd97eTKSm3VO2ajs+0R5RPex0YnODg9OnwnZkU0LrkN9ZUX9TvN RrxypisrcsYAKlWwZrH27OTgmvfc9vQEgbNkWGfWgpddt1MWGJsckUSYCvRfOBkze5Vx/e O3+Atnsp0xOF7Fq0opaeuzCQl071+szRHBt34UVzpB+ak4Pp4Uep/N09uBWHjUfs78bBLq az0aVfOjY8PInr4XmrjE8oDnZuFceq5znbHbbYSZhg2kgKLaGLHTlDOWvoEbvA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1619928367; a=rsa-sha256; cv=none; b=FCxpBmjwE3egA4161WZixNDjpHzHwse8ZBsM9+QMp8VFtReQGigbp7lMq8p58ksaeGkWNm SGAnCMXqQyn21oKt7QMA3T498uqFibF7b0pui5FApVOMlg1Zm+6m8tw3GwpftQxiDWMRER fKp8CTzyc2VMpt0dg5eHsNPiAlSzR814EhgsrKyGV+87WtIieZOROgne8owg9XIxwVT9tX 3k0o9siPgrb5bgyQCfgI40cw8Dw9cviJM4LNen4sc8RA23ec2ITivVZ1fd0Z2Y3Blqly3T waEb5rNbKv/CDxeIN3skQOOaRDQQj8Fr4qlhSHiRWaMFp2dIaR3JShZYHVXE6A== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=CR8aChvo; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=jblxWeIK; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -1.66 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=CR8aChvo; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=jblxWeIK; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: DA1D727A9E X-Spam-Score: -1.66 X-Migadu-Scanner: scn0.migadu.com X-TUID: 9f5cM4aFEaOa --IQ7tZjv6VECTQPXk Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit On Sat, May 01, 2021 at 05:25:45PM -0400, Leo Famulari wrote: > Maybe we should update the manual to mention "1.3.0rc1" and the correct > key. I've attached a patch. > > 1. Testing the binary tarball on the distro of your choice. You can > > download . Uncomment the > > ‘GNU_URL’ variable assignment that refers to alpha.gnu.org and it > > should pick up 1.3.0rc1 automatically. > > The install.sh script also recommends installing Ludo's key, but of > course fails to verify the signature with it. After installing Ludo's > key, the installer does suggest the correct key — Maxim's. I looked at 'guix-install.sh' and see that it recommends both Ludo's and Maxim's keys. It's not great that it fails, recommends users to download Ludo's key, and then fails again. I tried re-sorting the array so that Maxim's key is first but, no matter what, it still requires every key in the GPG_SIGNING_KEY array, and the user will have to try the script three times before it can succeed. If the next release is signed by someone besides Ludo or Maxim, then the script will require four runs, etc. It's annoying but hard to work around because the script is distributed via that unversioned URL show above. Ideas? --IQ7tZjv6VECTQPXk Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename="0001-doc-Update-the-release-signing-key-for-1.3.0rc1.patch" >From 205c786b985bd7cb2754aadf3adf91e1401b9d1b Mon Sep 17 00:00:00 2001 From: Leo Famulari Date: Sat, 1 May 2021 23:54:03 -0400 Subject: [PATCH] doc: Update the release signing key for 1.3.0rc1. * doc/guix.texi (OPENPGP-SIGNING-KEY-ID): Use Maxim Cournoyer's key. (OPENPGP-SIGNING-KEY-URL): Adjust accordingly. --- doc/guix.texi | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/guix.texi b/doc/guix.texi index dbea5cadcb..3ca681a48b 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -10,8 +10,8 @@ @include version.texi @c Identifier of the OpenPGP key used to sign tarballs and such. -@set OPENPGP-SIGNING-KEY-ID 3CE464558A84FDC69DB40CFB090B11993D9AEBB5 -@set OPENPGP-SIGNING-KEY-URL https://sv.gnu.org/people/viewgpg.php?user_id=15145 +@set OPENPGP-SIGNING-KEY-ID 27D586A4F8900854329FF09F1260E46482E63562 +@set OPENPGP-SIGNING-KEY-URL https://sv.gnu.org/people/viewgpg.php?user_id=127547 @c Base URL for downloads. @set BASE-URL https://ftp.gnu.org/gnu/guix -- 2.31.1 --IQ7tZjv6VECTQPXk--