Who owns guix-mirror?

Who owns guix-mirror?

[Philip Beadling]

[-- Attachment #1: Type: text/plain, Size: 258 bytes --]

Hi all,

http://github.com/guix-mirror is a mirror for the Guix source code.

I was wondering who owns the mirror as there is no public ownership declared on github.com?

Is it owned by Guix or is it run by a trusted third party,  etc?

Thanks!



[-- Attachment #2: Type: text/html, Size: 1555 bytes --]

Re: Who owns guix-mirror?

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 605 bytes --]

Hi Philip,

Philip Beadling 写道：
> I was wondering who owns the mirror as there is no public 
> ownership declared on github.com?
>
> Is it owned by Guix or is it run by a trusted third party,  etc? 

It's Marius Bakke (mbakke) and me (nckx).  It probably wouldn't 
hurt to make that list public.  Marius, what say you?

So trusted, and not even third, parties.  You're also trusting 
GitHub, and the mirror *is* completely unofficial.  There's no 
guarantee that the synchronisation won't break just when an 
important security update is pushed to Savannah.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 247 bytes --]

Re: Who owns guix-mirror?

[Maxime Devos]

[-- Attachment #1.1.1.1: Type: text/plain, Size: 455 bytes --]


On 16-08-2022 14:59, Philip Beadling wrote:
> Hi all,
>
> http://github.com/guix-mirror is a mirror for the Guix source code.
>
> I was wondering who owns the mirror as there is no public ownership 
> declared on github.com?
>
> Is it owned by Guix or is it run by a trusted third party, etc?

It's unknown who runs it, but it's not Guix, see  
<https://github.com/guix-mirror/guix/pull/1#issuecomment-552224937>.

Greetings,
Maxime.


[-- Attachment #1.1.1.2: Type: text/html, Size: 2098 bytes --]

[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 929 bytes --]

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 236 bytes --]

Re: Who owns guix-mirror?

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 212 bytes --]

Oh,

Maxime Devos 写道：
> <https://github.com/guix-mirror/guix/pull/1#issuecomment-552224937>.

That's not some weird role-play — I wasn't part of the org when I 
wrote it.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 247 bytes --]

Re: Who owns guix-mirror?

[John Kehayias]

Good to know the owners, and thanks for the mirror! I find a combination of the official repo, GH mirror, and a local copy gives me the right combination of easy searches that work well on each. So I almost always find what I need to copy :)

John

Re: Who owns guix-mirror?

[Phil]

Hi Tobias,

Tobias Geerinckx-Rice writes:

> It's Marius Bakke (mbakke) and me (nckx).  It probably wouldn't hurt
> to make that list public.  Marius, what say you?

That would be great if you guys are happy making it public.

>
> So trusted, and not even third, parties.  You're also trusting GitHub,
> and the mirror *is* completely unofficial.  There's no guarantee that
> the synchronisation won't break just when an important security update
> is pushed to Savannah.

All understood - thanks for confirming!

Re: Who owns guix-mirror?

[Marius Bakke]

[-- Attachment #1: Type: text/plain, Size: 582 bytes --]

Tobias Geerinckx-Rice <me@tobias.gr> skriver:

> Hi Philip,
>
> Philip Beadling 写道：
>> I was wondering who owns the mirror as there is no public 
>> ownership declared on github.com?
>>
>> Is it owned by Guix or is it run by a trusted third party,  etc? 
>
> It's Marius Bakke (mbakke) and me (nckx).  It probably wouldn't 
> hurt to make that list public.  Marius, what say you?

Agreed, I've just stepped out of the darkness by navigating to this
page (took me a while to find it):

  https://github.com/orgs/guix-mirror/people

Awesome logo, by the way!

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 247 bytes --]

Re: Who owns guix-mirror?

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 278 bytes --]

Hi Marius,

Marius Bakke 写道：
> (took me a while to find it):

Indeed.  Thanks for saving me that trouble.  I've now done the 
same.

> Awesome logo, by the way!

Thanks :-)  Keeps the PRs away, or at least you can't prove 
otherwise.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 247 bytes --]

Re: Who owns guix-mirror?

[Lars-Dominik Braun]

Hi,

> Thanks :-)  Keeps the PRs away, or at least you can't prove 
> otherwise.
you could also enable “temporary interaction limits”[1] in your org
account, which applies to all of its repositories. It’s only valid up
to 6 months, but maybe better than nothing…?

Cheers,
Lars

[1] https://github.com/settings/interaction_limits

Re: Who owns guix-mirror?

[Tobias Geerinckx-Rice]

[-- Attachment #1: Type: text/plain, Size: 389 bytes --]

Hi Lars-Dominik,

Lars-Dominik Braun 写道：
> you could also enable “temporary interaction limits”[1] in your 
> org
> account, which applies to all of its repositories. It’s only 
> valid up
> to 6 months, but maybe better than nothing…?

It is!  Thank you.

I've set it to ‘collaborators’ and added a calendar reminder in 6 
months.

Kind regards,

T G-R

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 247 bytes --]