From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id yAEDLqjl/F5WMQAA0tVLHw (envelope-from ) for ; Wed, 01 Jul 2020 19:36:08 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id IEnqKajl/F5nHwAAbx9fmQ (envelope-from ) for ; Wed, 01 Jul 2020 19:36:08 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 11C31940607 for ; Wed, 1 Jul 2020 19:36:08 +0000 (UTC) Received: from localhost ([::1]:40470 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jqiWb-0000rH-GB for larch@yhetil.org; Wed, 01 Jul 2020 15:36:05 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:39026) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jqiWY-0000r6-7O for guix-patches@gnu.org; Wed, 01 Jul 2020 15:36:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:42212) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jqiWX-0008HL-To for guix-patches@gnu.org; Wed, 01 Jul 2020 15:36:01 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jqiWX-0002B7-Pl for guix-patches@gnu.org; Wed, 01 Jul 2020 15:36:01 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#42019] [PATCH 1/1] website: Add integrity to JSON sources. Resent-From: Christopher Baines Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 01 Jul 2020 19:36:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42019 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: zimoun Cc: Ludovic =?UTF-8?Q?Court=C3=A8s?= , 42019@debbugs.gnu.org Received: via spool by 42019-submit@debbugs.gnu.org id=B42019.15936321328329 (code B ref 42019); Wed, 01 Jul 2020 19:36:01 +0000 Received: (at 42019) by debbugs.gnu.org; 1 Jul 2020 19:35:32 +0000 Received: from localhost ([127.0.0.1]:53758 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jqiW3-0002AH-OM for submit@debbugs.gnu.org; Wed, 01 Jul 2020 15:35:31 -0400 Received: from mira.cbaines.net ([212.71.252.8]:52008) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jqiW1-0002A9-Vx for 42019@debbugs.gnu.org; Wed, 01 Jul 2020 15:35:30 -0400 Received: from localhost (unknown [46.237.173.5]) by mira.cbaines.net (Postfix) with ESMTPSA id C018F27BBE1; Wed, 1 Jul 2020 20:35:28 +0100 (BST) Received: from localhost (localhost [local]) by localhost (OpenSMTPD) with ESMTPA id 6a477919; Wed, 1 Jul 2020 19:35:26 +0000 (UTC) References: <20200623151323.29639-1-zimon.toutoune@gmail.com> <20200623152139.512-1-zimon.toutoune@gmail.com> <87zh8ol9qp.fsf@gnu.org> <86y2o8be3c.fsf@gmail.com> <87v9j9a9ko.fsf@gnu.org> <864kqtbgeq.fsf@gmail.com> User-agent: mu4e 1.4.10; emacs 26.3 From: Christopher Baines In-reply-to: <864kqtbgeq.fsf@gmail.com> Date: Wed, 01 Jul 2020 20:35:24 +0100 Message-ID: <87d05f2flv.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Spam-Score: -1.0 (-) X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Spam-Score: -1.61 X-TUID: a3FojD3pnJm1 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable zimoun writes: > Hi Chris, > > On Mon, 29 Jun 2020 at 22:41, Ludovic Court=C3=A8s wrote: >> zimoun skribis: >> >>> BTW, in the SWH picture and after a chat video with lewo, I do not >>> think that the website is the right place. Instead, it should go to >>> ci.guix.gnu.org or data.guix.gnu.org. Or maybe integrated with "guix >>> publish". Well, the next step is to have a collection of sources.json >>> -- that the point of "revision". WDYT? >> >> The Guix Data Service would be a natural place for =E2=80=98sources.json= =E2=80=99 IMO. >> Thoughts, Chris? > > If it goes to the GDS, then first let point me where to start. :-) I think this does sound like a good use of the Guix Data Service. Unfortunately, the sources of packages aren't currently stored in the Guix Data Service database, so I'm guessing this will require storing some new data, then working out how to present it. A question maybe for you Simon, what would be the perfect data for this particular use case? I gather it's something about the (source ...) field in packages, probably for all the exported (plus maybe not-exported packages). > And second, it could be nice in the "near" future to have at least 2 > sources.json: one for the last commit refreshed every X minutes (or > hours) and another one containing the concatenation of all the sources > of Guix (at least the one reachable by guix time-machine i.e. after the > big overhaul of Inferiors). I will go on #swh-devel or reach lewo to > know how "near" it is on SWH side. Once you can get the data for an individual revision in the Guix Data Service, it should be reasonably easy to just get the data for multiple revisions, say all for the last week. Chris --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEPonu50WOcg2XVOCyXiijOwuE9XcFAl785XxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDNF ODlFRUU3NDU4RTcyMEQ5NzU0RTBCMjVFMjhBMzNCMEI4NEY1NzcACgkQXiijOwuE 9XdWAg/+JwSny86BDKVjs5kSTrfUZb5tGePYgVqHZCYwDsx0AuEOdsx2IcHsuXQe wJAc4TS47LS4SzkFI3IVrNK9COYTuKoYBX5H81+g0zJTyNWKd01sMDS+4XVsPAAq B3yEmuA3z9j0STR0J7dI1vhP/nToe11ktOzY3/WlaQkbJan51ORrK16FjsDqCiwF SD/E3I1ilZcWyHWiwDzEAfPODNjZZ/UURr96qkSERbQtmuIoLCsbIzTPzC/hQgqC OgXFYwPG09LdtXYdTW9yqq16NNMt3YkywpTCVnbjs+m831C4GrmNzgFDJ3pqP5rc G/033lNXumPixWzUY48cRCxvG/2krVXamz7TmjFAhDF9rz6E055YM0nGUxVCh6tA zh2un5Wvcd/MH1N/AeuwU9F5pdSKMJRxNHXdv/udQmc+0pWNxfK0rjU3CPAMss1i uJxJ5StBklrfdaOHkT+JTaJ4h5dnNFWAaIBgu1mGfGo4Soo2AFxmH/dkcLJg6jbL Yh/aL95jqBbFleEn11HUuyiwZ3ouP48Gv9ZcwxNPdeSjiFjHDJk2bjKwv5UWrwwk mTQrWhhVTgzbYwoWRCffa7DySU9j5gfBphUSaqAPXmrWoAHPEHoN03MZJdxEpe88 IlvlHSNZUDg0GK1OxRtg+0eF2gE/yA7Fs9ZDSL705grvDAGek5g= =qnpz -----END PGP SIGNATURE----- --=-=-=--