On Thu, Oct 25, 2018 at 06:41:26PM -0400, Luther Thompson wrote:
> How do we do that? I followed the link, but I can't find the info to
> pass to `guix archive --authorize` anywhere.

The signing keys can be found in the Guix package itself, at
'share/guix/berlin.guixsd.org.pub'. For example:

$ guix build guix
/gnu/store/zz3b7j4iv6v143v7cqyr77k83zc5n3zw-guix-0.15.0-6.f9a8fce
$ guix archive --authorize < /gnu/store/guix-0.15.0-6.f9a8fce/share/guix/berlin.guixsd.org.pub

It is described in the manual section Substitute Server Authorization,
although the use of 'prefix' in this context is a little obscure:

https://www.gnu.org/software/guix/manual/en/html_node/Substitute-Server-Authorization.html

The keys can also be found in the Guix source code, which may be more
convenient:

https://git.savannah.gnu.org/cgit/guix.git/tree/berlin.guixsd.org.pub