From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id sB+mIJWjGWSiWAEASxT56A (envelope-from ) for ; Tue, 21 Mar 2023 13:31:17 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id INKnH5WjGWQVRgAAG6o9tA (envelope-from ) for ; Tue, 21 Mar 2023 13:31:17 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D067EA415 for ; Tue, 21 Mar 2023 13:31:16 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1peb8s-000205-N8; Tue, 21 Mar 2023 08:31:06 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1peb8p-0001zq-At for guix-patches@gnu.org; Tue, 21 Mar 2023 08:31:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1peb8o-0007TL-T9 for guix-patches@gnu.org; Tue, 21 Mar 2023 08:31:03 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1peb8o-0002qZ-9z for guix-patches@gnu.org; Tue, 21 Mar 2023 08:31:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#62274] [PATCH] home: 'home-environment-with-provenance' uses the HE location info. Resent-From: Sergey Trofimov Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 21 Mar 2023 12:31:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 62274 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Andrew Tropin Cc: 62274@debbugs.gnu.org, paren@disroot.org, Ludovic =?UTF-8?Q?Court=C3=A8s?= Received: via spool by 62274-submit@debbugs.gnu.org id=B62274.167940181810890 (code B ref 62274); Tue, 21 Mar 2023 12:31:02 +0000 Received: (at 62274) by debbugs.gnu.org; 21 Mar 2023 12:30:18 +0000 Received: from localhost ([127.0.0.1]:57821 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1peb85-0002pZ-N1 for submit@debbugs.gnu.org; Tue, 21 Mar 2023 08:30:18 -0400 Received: from mail-ed1-f50.google.com ([209.85.208.50]:42970) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1peb83-0002pM-Nd for 62274@debbugs.gnu.org; Tue, 21 Mar 2023 08:30:16 -0400 Received: by mail-ed1-f50.google.com with SMTP id o12so58953329edb.9 for <62274@debbugs.gnu.org>; Tue, 21 Mar 2023 05:30:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sarg.org.ru; s=google; t=1679401809; h=mime-version:message-id:in-reply-to:date:subject:cc:to:from :user-agent:references:from:to:cc:subject:date:message-id:reply-to; bh=Gy3hGbr7QMhC6PE/1kDN1LigXNSsrTDK19XJDqSL20A=; b=cXowQ0CQX9kzK7GYKWHDpn5Ya/TmXuShXoAoZL7RMGenfb+PMOyx0NXu3iqUyRfuVC VlpqrK2/DACimKBV7PdSVTwyMhxNgfGXXWqMyZXb6KRhAYIzK3KanAtZz0IoTrktKFuX BwDwNWad1UCU8HgcWBGy0SHAeYw0OsLWuli2U= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; t=1679401809; h=mime-version:message-id:in-reply-to:date:subject:cc:to:from :user-agent:references:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Gy3hGbr7QMhC6PE/1kDN1LigXNSsrTDK19XJDqSL20A=; b=0IRQGaxpxsDhbwtpcs8HcR+rEmYUKSm5+oRHkNajBuUAekp/9fkzIDsf2QcpIOKOIF S/y007QVOMw3ILRNgH2qWgvVPTpwPblBLcCKQEuo+zZLzsCsL6Z9v9pmJcSMXWRzlKun u0PkCeMBL7QDWzsdCI6UwQULZvFqiy7XRvC+dt8UUY1ncx/8sXhXxsDPh9zFZqbfl+pE peUAzQyeQWBRIifnaXZBgaIHl3SduA3147AvuIszrGd1DHXQo5PtAInglufe/6Sji6GH +AaQSkEP7SwLV30hK5oDRaYYxNywRJfG33KtlZK95tQYQnwTk1d18HYn4hc/Cjr1qA53 v2OQ== X-Gm-Message-State: AO0yUKVpE62sPNblnCUjno7wVJcPGxAeNKSRfUOEzv1SZR5xCxInfUE+ Rc4ztpSYvFT9onFiDsXz8mOr4A== X-Google-Smtp-Source: AK7set8/2v0g/cPvTuWOjZDjPm6Pee3c45QiUXTe8lF57Fb7+WG1T5VDiqFmtbaoY5Oy0xaJaMu1kQ== X-Received: by 2002:aa7:d858:0:b0:500:50f6:dd27 with SMTP id f24-20020aa7d858000000b0050050f6dd27mr2832678eds.26.1679401809692; Tue, 21 Mar 2023 05:30:09 -0700 (PDT) Received: from localhost ([95.168.147.255]) by smtp.gmail.com with ESMTPSA id y43-20020a50bb2e000000b004f9ca99cf5csm6143467ede.92.2023.03.21.05.30.09 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 21 Mar 2023 05:30:09 -0700 (PDT) References: <20230319154537.30463-1-sarg@sarg.org.ru> <87bkknl443.fsf@gnu.org> <871qljs0ju.fsf@sarg.org.ru> <87edpiz831.fsf@trop.in> User-agent: mu4e 1.8.13; emacs 29.0.60 From: Sergey Trofimov Date: Tue, 21 Mar 2023 13:22:14 +0100 In-reply-to: <87edpiz831.fsf@trop.in> Message-ID: <871qliffrs.fsf@sarg.org.ru> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN ARC-Seal: i=1; s=key1; d=yhetil.org; t=1679401877; a=rsa-sha256; cv=none; b=W0V//ofOuD9BGCvqd8JkbQKrKlAsmRFRFP2kwy5zLXq5955oAAHqGCu15ZT/5j9me9d02l sR2ZMquP2umdvj9s+FsqyRY2FTAE71cBWfRhf9nruSUcObbI0xSRxmtbsI/T2cKkek/iuX yM5yd6lNXjPBhhM4b7f0efA8146dqZHj7+ij9FQSTnewRaQmQZpoau1cxxuAwInSsFgjpZ /8P0RX3i5gVTDCKWIa/UBYscdUQpm51yo0F1/1/+xm4mkamxZ1SoxRW8y0Ncl/WgJMIslf GtvRfaf6gnHMiOB3PQpVI6cLbFt6jfjKs1yQYepQjSFHTK7gfIcVH5dqbMX1NA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=sarg.org.ru header.s=google header.b=cXowQ0CQ; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1679401877; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=Gy3hGbr7QMhC6PE/1kDN1LigXNSsrTDK19XJDqSL20A=; b=P0S6NarBnCF6eFBuVQr2VEE+GsutItZ1Xb7cbLJXqZcvNXSca9I3Z5VPnQnL5J5HY8TRij ejvC0moI7B20NAhfVz+xF31NnkANPjTgR6w0nkuI+qpW1YnMSvxAngc0fawIMicT2Oe7EC N8xF7ElSUZT+mu7xKckw94k7wj0409X+7XsOQythIuaroeOBHR0fd2izpICXK86lRCL1SJ L8L3/tWWtRfQbsJ7Yz/bRzM9Iz5JkzAP7r6XM3T+H6E4K2y0b11PGRyiQ3wwcasYE8mxXK 8lXmQGDMghX2+TtJmre/SbwdLs6JRlyqR2QeOUT8jfpu8GblpjP3OQwZyZ+WkA== X-Migadu-Spam-Score: 0.75 X-Spam-Score: 0.75 X-Migadu-Queue-Id: D067EA415 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=sarg.org.ru header.s=google header.b=cXowQ0CQ; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org" X-Migadu-Scanner: scn1.migadu.com X-TUID: qvMXMsyjnRHt Hi Andrew, Andrew Tropin writes: > [[PGP Signed Part:Undecided]] > On 2023-03-20 20:03, Sergey Trofimov wrote: > >> >> You're right, the new signature is not used anywhere yet. >> Though >> I'm working on a patch to embed home profiles in disk images >> produced with `guix system image`. That's where this method >> comes >> handy, see example usage: >> > > Also, take a look at this thread: > https://yhetil.org/63960cf762aec1ed2c4182f49cac66bc37fce2aa.camel@rdmp.org > > and this prototype: > https://git.sr.ht/~abcdw/rde/tree/044de83e980b7038b87d27a090aef24229df85eb/src/gnu/services/home.scm#L1 > > It can be related to what you want to achieve, whithout > modifying > image-related code. Brilliant! That's it. It didn't come to me that `home-environment` could be a dependency of `operating-system` and not of the image itself. And you also made the service to activate it, so no manual step is required. That's exactly what I have envisioned. What prevents you to mainline it? It seems you have already battle-tested it. The only concern is that I'd rather include `guix-home-service-type` only in the first generation of the system. I think that this tie between user envs and the operating system makes sense only on the first boot. Later on the users should be responsible (and able to) to maintain their environments independently.