From: "Jorge" <jorge+list@disroot.org>
To: Help-Guix@gnu.org
Subject: Proxy authentication
Date: Tue, 23 Jan 2018 20:40:02 +0000 [thread overview]
Message-ID: <6c14c2e2c7ddb3a0154fe2ede120e26c@disroot.org> (raw)
Hi. I am trying to use Guix at my workplace, where we have mandatory
proxy. In my foreign distribution (Debian 9), I have configured Gnome
for automatic proxy configuration (PAC file) and, for applications that
do not integrate with Gnome’s proxy configuration (such as Emacs), I
have set up ntlmaps (localhost:5865). I have tried to make Guix use
ntlmaps, but guix pull fails with hash mismatches. For example:
--8<---------------cut here---------------start------------->8---
Starting download of /gnu/store/zdahqsfvra1r2ic61x1blh3i3p7xsax6-libpng-1.6.29.tar.xz
From http://downloads.sourceforge.net/project/libpng/libpng16/1.6.29/libpng-1.6.29.tar.xz...
following redirection to `https://sourceforge.net/projects/libpng/files/'...
warning: 'https_proxy' is ignored
....29.tar.xz 226KiB 243KiB/s 00:01 [##################] 100.0%
sha256 hash mismatch for output path `/gnu/store/zdahqsfvra1r2ic61x1blh3i3p7xsax6-libpng-1.6.29.tar.xz'
expected: 0fgjqp7x6jynacmqh6dj72cn6nnf6yxjfqqqfsxrx0pyx22bcia2
actual: 1kwj40d23c25r9q67vk9giqrq7vp4zsrxvrzxm45zpy01nbhnxpa
--8<---------------cut here---------------end--------------->8---
Now I want to make Guix talk to the corporate proxy server directly (not
mediated by ntlmaps) but then it needs to authenticate. I could
temporarily put my login and password in the proxy URL in
/etc/systemd/system/guix-daemon.service.d/override.conf, and erase it
after using Guix. I am afraid, though, that these environment variables
could be logged. So, is it secure to temporarily put proxy login and
password in override.conf, or could they be inadvertently logged?
Regards
- I am Brazilian. I hope my English is correct and I welcome feedback
- Please adopt free formats like PDF, ODF, Org, LaTeX, Opus, WebM and 7z
- Free (as in free speech) software for Android: https://f-droid.org/
next reply other threads:[~2018-01-23 20:40 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-01-23 20:40 Jorge [this message]
2018-01-24 8:31 ` Proxy authentication Konrad Hinsen
2018-01-31 14:58 ` Jorge
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6c14c2e2c7ddb3a0154fe2ede120e26c@disroot.org \
--to=jorge+list@disroot.org \
--cc=Help-Guix@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).