From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id kAknAzjgqGEZUAAAgWs5BA (envelope-from ) for ; Thu, 02 Dec 2021 16:03:20 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id QAKIOjfgqGF/BgAAB5/wlQ (envelope-from ) for ; Thu, 02 Dec 2021 15:03:19 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id C177221E91 for ; Thu, 2 Dec 2021 16:03:19 +0100 (CET) Received: from localhost ([::1]:38060 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1msncE-0003zl-Uz for larch@yhetil.org; Thu, 02 Dec 2021 10:03:18 -0500 Received: from eggs.gnu.org ([209.51.188.92]:53946) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1msnbs-0003zW-0U; Thu, 02 Dec 2021 10:02:56 -0500 Received: from mail3-relais-sop.national.inria.fr ([192.134.164.104]:30763) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1msnbp-0002Wn-JF; Thu, 02 Dec 2021 10:02:55 -0500 IronPort-HdrOrdr: =?us-ascii?q?A9a23=3AGZnAkq5W2G+gunp74APXwM/XdLJyesId70hD?= =?us-ascii?q?6qm+c3Bom62j5qKTdZsgviMc5Ax6ZJhko7690cq7MBDhHPxOjrX5VI3KNDUO+l?= =?us-ascii?q?HIEGgI1+vfKkjbakvDH5lmpMBdmsZFZeEYdWIK6foStzPIduod/A=3D=3D?= X-IronPort-AV: E=Sophos;i="5.84,326,1620684000"; d="scan'208";a="400309584" Received: from unknown (HELO ribbon) ([193.50.110.120]) by mail3-relais-sop.national.inria.fr with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Dec 2021 16:02:50 +0100 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: zimoun Cc: Timothy Sample , Guix Devel , guix-science@gnu.org Subject: Re: Software Heritage fifth anniversary event References: <87sfvc4q8j.fsf@inria.fr> <87tufsgq1p.fsf@ngyro.com> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 12 Frimaire an 230 de la =?utf-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Thu, 02 Dec 2021 16:02:49 +0100 In-Reply-To: (zimoun's message of "Thu, 2 Dec 2021 14:17:39 +0100") Message-ID: <87lf13vyli.fsf@inria.fr> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=192.134.164.104; envelope-from=ludovic.courtes@inria.fr; helo=mail3-relais-sop.national.inria.fr X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-science@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-science-bounces+larch=yhetil.org@gnu.org Sender: "Guix-Science" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1638457399; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=okH3uIvYzdPmKVEiYUkLmG+Dv/LAdJPHiVtnIY4/Mfo=; b=FRJU166+SIygg5MqFczSEGPN+QcMHLvQEmtAwOCXtQWBTDkf8msCDnA323lmkactnNP2li hu+Afp46PAq8ozX2193jf273npYub+xi9+DXSV2PqbNVBQqkLlZyRJskRo7FpfndXtW5dQ iqF8xa7YxzPBJiesey+Y1W36sDtk5oh8x6uIIbTQe7RHlrS9kYC3cksw7lN4N37FVqK7KT tMe7kKRpFNI2hHMDIHL61mmh1pxcXfLOMirldpGP0zrx0ttPlXYQu+T3lj7AA0kUKiYGa+ mZ8GlSaXYjiEWf0W0TPyAgtJlKYaVOMA5DcefpSjDnwEpU81VGMFhNcVZ9qD/g== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1638457399; a=rsa-sha256; cv=none; b=emkljoYcYC5UHL1jb/WacrFF5hnQWReNEj0q39HRvG4Dp+zk0PcZdYlOYKV7eQ/xEwEBqK AIlEV90kiZbCPI9JY3rXTyBNZRQryNowMusmrzKpfvRLjNcFD9e823KxR6VXEEf6RhWyn+ z3/P6hed46kNO6xz2/+G+Ma445OyaDkSuFxn0453y3IF2nKSAj9oXhLzJKHIJmlnmxepTO 6xPlxv6CdclZYfTW64TrPBPBIfUQBnFBCxp2X+h6FPed4dK0oA4vrE4GAz8DL9M89sw3ug sguVRDsU997CUKkMsfpFbJ4CwO/fCtk+YCrz3wpmhiHW9Gn/+8kb2ihYtYQU/Q== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-science-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-science-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -1.62 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-science-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-science-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: C177221E91 X-Spam-Score: -1.62 X-Migadu-Scanner: scn0.migadu.com X-TUID: VhkbWLbU/0pg Hello! zimoun skribis: >> > =E2=80=A2 bit-for-bit archival: there=E2=80=99s a tension between ma= king SWH a >> > =E2=80=9Ccanonical=E2=80=9D representation of VCS repos and making= it a faithful, >> > bit-for-bit identical copy of the original, and there are different >> > opinions in the team here; our use case pretty much requires >> > bit-for-bit copies, and fortunately this is what SWH is giving us = in >> > practice for Git repos, so checkout authentication (for example) >> > should work even when fetching Guix from SWH. > > The main issue is the lookup. Non bit-for-bit archival implies that > people store a SWH lookup key (swhid I guess) at ingestion time, > otherwise it becomes nearly impossible to find back. To me, the > tension is in the meaning of preservation of source code, i.e., > between archiving for reading or archiving for compiling. Exactly, I guess that=E2=80=99s the big difference. Also: allowing archived content to be authenticated by third parties vs. having to trust SWH. > In the case of compilation, all the lookup must be automated and so > non bit-for-bit archival means: make swhid THE standard for > serialization; somehow replacing all the other checksums. Yes, but even if that eventually happens, it=E2=80=99s going to take time. Ludo=E2=80=99.