From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id EO6ANVZelGCVWwEAgWs5BA (envelope-from ) for ; Thu, 06 May 2021 23:23:34 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id gF4iMVZelGCxBgAAB5/wlQ (envelope-from ) for ; Thu, 06 May 2021 21:23:34 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6488B27E2D for ; Thu, 6 May 2021 23:23:34 +0200 (CEST) Received: from localhost ([::1]:57510 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lelT3-0003HJ-GC for larch@yhetil.org; Thu, 06 May 2021 17:23:33 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42812) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lelSi-0003GK-M0 for guix-devel@gnu.org; Thu, 06 May 2021 17:23:12 -0400 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:47085) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lelSg-0003VV-UU for guix-devel@gnu.org; Thu, 06 May 2021 17:23:12 -0400 Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id 2072C5C0121; Thu, 6 May 2021 17:23:10 -0400 (EDT) Received: from mailfrontend2 ([10.202.2.163]) by compute1.internal (MEProxy); Thu, 06 May 2021 17:23:10 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=jJwIFZC48LvpmaV9fgPe6Xjq wwOWpVBWh7fjlhYqxsk=; b=09qCmElpNGgrVf8SArKbY7t26UQYPqM7yVRMBLMj ocj0q4IIp1zNPCfdu2GWxu6qfHpR+3AFFkvVYP3rcRUWDIKa7uf0zDYCPkvRdCCY 9SX5yVmdcrsAynmEQh+LXMgkzcUyitewkDuh3zSi7ypk1iJ0hXU/32t6be/4cTjz y5o= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=jJwIFZ C48LvpmaV9fgPe6XjqwwOWpVBWh7fjlhYqxsk=; b=R3AFgh5QoRWRPfW2XUGlmC oARlJJylH8Avx2XKZgIkjcILevDrIU0ZfkeLkPlZjc1Q899RwfUta3wjoT43Wz2u Y/jgvpIG5pkmbw/sJsjMrC+ZI/2Ymd5xwsmkQN0c4i0GTmmMbGYedw8l5Oqe7EYd tU0ATt0uVK6JdNGBfY9Jj+yUZ5qgvbeICxpib3IQSgAxfdFIZvpF5qiE1rPKgUeJ nVU3OOZM+psd77VTFrdSEbfIy2XQKuPExj3y2tCckQbzd2wWJYO2DOvYGDU3ESLz /A/ghnh5Znaz6txIvdE3gzdHNmZDGSvU04n10wUNxRolszIQp7NsuqwGbzMG+qBg == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrvdegtddgudeiudcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpeffhffvuffkfhggtggujgesthdtredttddtvdenucfhrhhomhepnfgvohcu hfgrmhhulhgrrhhiuceolhgvohesfhgrmhhulhgrrhhirdhnrghmvgeqnecuggftrfgrth htvghrnhepueekkedtffdvtddugeejgedtvefhueefiedvjeeitdeigedtveejvdejheff vefgnecukfhppedutddtrdduuddrudeiledruddukeenucevlhhushhtvghrufhiiigvpe dtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net [100.11.169.118]) by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 6 May 2021 17:23:09 -0400 (EDT) Date: Thu, 6 May 2021 17:23:07 -0400 From: Leo Famulari To: Alexandre Oliva Subject: Re: linux-libre source tarballs Message-ID: References: <87lf8xvrgj.fsf@yucca> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Received-SPF: pass client-ip=66.111.4.27; envelope-from=leo@famulari.name; helo=out3-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Vagrant Cascadian , guix-devel Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1620336214; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=jJwIFZC48LvpmaV9fgPe6XjqwwOWpVBWh7fjlhYqxsk=; b=H2LzVe7Bjw6cPybNgUDMG397MA2KtzZueBZjfdk3Sl26nRqNI3xZT8VoRoZ2Wcsdnafriv 8aNfCOG0aCosqc/ydY31zrbC4g7md9Ssz7ndJSVkAHsWppkEAifmXObZeqdFg5GTzRmggP R0ImqOz2mGNYfVBpAtjJlgZPUHR8ErHSgDe7WFWy+K001vn7msn340gObKF/PZh07oeHjL N4qVk4EejV2ck9IlJi8r8Z58cN99Jv+YAXYfiA2TTgFqPBuxoSCbT3RYvR7dwHvtOh1KPE n4Vk4svgL8HXY1gviRJx+yzyo4Wzldu9iBDRklgOc8TZYY/DEFMYEBLnpf0kSg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1620336214; a=rsa-sha256; cv=none; b=ePy0wMdGAacYEb3QUpgWij0wbr11e5bRnPSlevc3XbvxitvNx5bHsvskmi/eitGwT35myR /MTwCsu3W7LGBJad9kq6wQhCw3D7ZV9TIw/EoX0Eu0hJeHFsdJ1Jj+wnwP5B5DcQ+p5KUG s/k37xI2sK/8FDd+BbxlUHMBTjwrwCZ7PBeSbP6s0dKTGUjOXelygQITZAC8p7EEMXEvAs nxPSYgFCLNDlZE6EZl+hMlnRQvstjg83Wl91G1GxvXaYAGx/YmVJpKAZw9NmcxQAI4XShT OikEXbYnIIP0XUb8x9Ngx/Icb4gKvGQCHrQEdisfn9N15Hm75esNNEObuFoRdw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=09qCmElp; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=R3AFgh5Q; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -1.16 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=09qCmElp; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=R3AFgh5Q; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 6488B27E2D X-Spam-Score: -1.16 X-Migadu-Scanner: scn0.migadu.com X-TUID: SRP1HJE1/mzk On Thu, May 06, 2021 at 01:10:45AM -0300, Alexandre Oliva wrote: > I have heard about early format changes, but since Linux itself has used > git archive to generate tarballs on the fly, and published digital > signatures based on archives generated this way, I presume an > expectation that changes to the format won't be made without a very > compelling reason. I asked because, historically, the linux-libre project has chosen not to store tarballs of its generated linux-libre source trees. Linux, on the other hand, does store their tarballs in perpetuity, even if they are created with `git archive`. Do you know for sure that Linux generates tarballs "on the fly" and does not simply preserve the signed tarballs forever? Otherwise, the PGP signatures could go "stale" at some point, and that would be unprecedented and unacceptable.