From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id gBzQAdK75F7gdQAA0tVLHw (envelope-from ) for ; Sat, 13 Jun 2020 11:43:14 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id 0DcZOdG75F7BJQAAbx9fmQ (envelope-from ) for ; Sat, 13 Jun 2020 11:43:13 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8A6E69408E9 for ; Sat, 13 Jun 2020 11:43:13 +0000 (UTC) Received: from localhost ([::1]:46394 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jk4Z6-0008Dh-IU for larch@yhetil.org; Sat, 13 Jun 2020 07:43:12 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:41296) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jk4Yw-0008DX-C5 for guix-patches@gnu.org; Sat, 13 Jun 2020 07:43:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:57669) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jk4Yw-0000Pu-36 for guix-patches@gnu.org; Sat, 13 Jun 2020 07:43:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jk4Yw-0006nL-1h for guix-patches@gnu.org; Sat, 13 Jun 2020 07:43:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#41767] [PATCH 0/9] Authenticate channels Resent-From: zimoun Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 13 Jun 2020 11:43:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 41767 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 41767@debbugs.gnu.org Received: via spool by 41767-submit@debbugs.gnu.org id=B41767.159204853526055 (code B ref 41767); Sat, 13 Jun 2020 11:43:01 +0000 Received: (at 41767) by debbugs.gnu.org; 13 Jun 2020 11:42:15 +0000 Received: from localhost ([127.0.0.1]:40982 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jk4YB-0006mA-B0 for submit@debbugs.gnu.org; Sat, 13 Jun 2020 07:42:15 -0400 Received: from mail-wm1-f66.google.com ([209.85.128.66]:37146) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jk4Y9-0006lv-Qe for 41767@debbugs.gnu.org; Sat, 13 Jun 2020 07:42:14 -0400 Received: by mail-wm1-f66.google.com with SMTP id y20so10300813wmi.2 for <41767@debbugs.gnu.org>; Sat, 13 Jun 2020 04:42:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version:content-transfer-encoding; bh=S6hvLv4p3XUOPsayGwet1KTHQfQFcjQdeaFjDSt1P5o=; b=ob0y500uhaLRYPCZ92bTwVbEfoDCeM6dU6HRbDAFhtmkgHmyWk4KOOImhb+vNN/Tt8 AYm4//ZHuASo9fAE9TJ2RvDpvJV+JAoVyygXcA5/lauDVaJLnFiykwiebkYOG0t4Wr5O fnTe6ZarA8HG4Bmq5fLXuknt9JbxShhBwITbUKbCFnj1x4vD5K8Bx7ug0CdGMwRZb49Q QwKwhUL5dKone3vmP7TH7NX/1G15U3pZFAK+5Jczqbt7gEX9xFpQoK3myErOJ8yAdo2w zVfNUUziQAXhFaG8qT35tOwuMN9YS5y1ynSHlIs6eTuXSsGg6Zn0sPgAqgNC4IXmNQOU f0lA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version:content-transfer-encoding; bh=S6hvLv4p3XUOPsayGwet1KTHQfQFcjQdeaFjDSt1P5o=; b=LnrRAZy/SitVjnI/uFOTISCPfiKDxbVGdu5OEvV6hQdF8ZIxR1NCppwQYUbu3HB3Nt 7cBJVRdMHo1Bb+iAOSbVoiloKI5drSFqHv+IRhGXmURXIbsTfuIIYvGXTRYhBy0A/LL/ 9BOx8ivyWgJYhg4+MtjFS1pztk/bi5priMCM3PxilmRM+3rkeSz8CSXF/9BUSdzLKOFP 0cZa9vlEgrIPUW4WPjD07ZWXkE5wQMggs5ctcxhLcXODkvfQ1yJioS3ApBlCv28nvowt ubh8Ky5/uyx6VEIDTUUicR+Hh6XSTgH65Dl1sEjMKUYyTZWUbAiWuob8pJO6dLWirBts npRg== X-Gm-Message-State: AOAM531ieVSM3wIaHiGGRICAYN8KPd4HwiPmC6OqUH+VEIB0956UNWQS SJev2zhQJ40abSsEeWJAPR2frfb/N5A= X-Google-Smtp-Source: ABdhPJzzF0IW15Bah042ypMfOfZQN8CxGhX7Xc0itKKq+pv97DKFyCSgBamv+k9iIYpeprBRwH7upg== X-Received: by 2002:a1c:e40a:: with SMTP id b10mr3499436wmh.41.1592048527534; Sat, 13 Jun 2020 04:42:07 -0700 (PDT) Received: from lili (57.246.195.77.rev.sfr.net. [77.195.246.57]) by smtp.gmail.com with ESMTPSA id i8sm13796198wru.30.2020.06.13.04.42.06 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 13 Jun 2020 04:42:07 -0700 (PDT) From: zimoun References: <20200608215224.2672-1-ludo@gnu.org> <875zc0jpdp.fsf@gnu.org> Date: Sat, 13 Jun 2020 13:42:05 +0200 In-Reply-To: <875zc0jpdp.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Tue, 09 Jun 2020 16:16:34 +0200") Message-ID: <86ftaznqeq.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Spam-Score: -1.0 (-) X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=fail (rsa verify failed) header.d=gmail.com header.s=20161025 header.b=ob0y500u; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Spam-Score: 0.09 X-TUID: f66grPqAbEmy Hi Ludo, Thank you for explaining. All is clear. :-) >> git clone https://git.savannah.gnu.org/git/guix.git >> git worktree add -b foo wk/foo >> cd wk/foo >> # add my unready stuff >> ./pre-inst-env guix pull --branch=3Dfoo --url=3D$PWS -p /tmp/foo >> /tmp/foo/bin/guix install unready-stuff >> >> In this case, do I have to use the option '--disable-authentication'? > > Yes, you can always use it. "Qui peut le plus peut le moins." ;-) The question is: is it mandatory? > Note that this patch set changes nothing for third-party channels. > (Attentive readers will find out how to make an authenticated channel, > but it=E2=80=99s undocumented and inconvenient to use.) > > In the future, I think =E2=80=98guix pull=E2=80=99 will merely print a wa= rning when > using an unauthenticated channel. That=E2=80=99s something we=E2=80=99ll= have to > discuss. > > If you want to fork an =E2=80=9Cauthenticated channel=E2=80=9D, you don= =E2=80=99t have to keep > it authenticated. In essence, something who writes: > > (channel (name 'zimoun) (url "https://zimoun.example.org")) > > states that they want to fetch code from your channel, but that no > authentication will take place because there=E2=80=99s no =E2=80=98introd= uction=E2=80=99 field. The root of my question is answered. :-) And I do not know if I am an attentive reader but my concerns were about this future discussion. So let discuss that in the future. ;-) Thank you for this nice piece of work! All the best, simon ps: Sorry for the delay, I changed how I process emails and this message "disappeared". And I am not sure this answer will be correctly delivered. Sorry in advance if I mess something.