From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Jorge" Subject: Proxy authentication Date: Tue, 23 Jan 2018 20:40:02 +0000 Message-ID: <6c14c2e2c7ddb3a0154fe2ede120e26c@disroot.org> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:59072) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ee5N6-0007sS-Mg for Help-Guix@gnu.org; Tue, 23 Jan 2018 15:40:45 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ee5N2-00037C-LI for Help-Guix@gnu.org; Tue, 23 Jan 2018 15:40:44 -0500 Received: from bs-one.disroot.org ([178.21.23.139]:52924 helo=disroot.org) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ee5N2-000369-2G for Help-Guix@gnu.org; Tue, 23 Jan 2018 15:40:40 -0500 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 038E02B2AF for ; Tue, 23 Jan 2018 21:40:27 +0100 (CET) Received: from disroot.org ([127.0.0.1]) by localhost (mail01.disroot.lan [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sTephsuiW9gu for ; Tue, 23 Jan 2018 21:40:10 +0100 (CET) List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Help-Guix@gnu.org Hi. I am trying to use Guix at my workplace, where we have mandatory=0Ap= roxy. In my foreign distribution (Debian 9), I have configured Gnome=0Af= or automatic proxy configuration (PAC file) and, for applications that=0A= do not integrate with Gnome=E2=80=99s proxy configuration (such as Emacs)= , I=0Ahave set up ntlmaps (localhost:5865). I have tried to make Guix us= e=0Antlmaps, but guix pull fails with hash mismatches. For example:=0A--= 8<---------------cut here---------------start------------->8---=0AStartin= g download of /gnu/store/zdahqsfvra1r2ic61x1blh3i3p7xsax6-libpng-1.6.29.t= ar.xz=0AFrom http://downloads.sourceforge.net/project/libpng/libpng16/1.6= .29/libpng-1.6.29.tar.xz...=0Afollowing redirection to `https://sourcefor= ge.net/projects/libpng/files/'...=0Awarning: 'https_proxy' is ignored=0A = ....29.tar.xz 226KiB 243KiB/s 00:01 [##################] = 100.0%=0Asha256 hash mismatch for output path `/gnu/store/zdahqsfvra1r2ic= 61x1blh3i3p7xsax6-libpng-1.6.29.tar.xz'=0A expected: 0fgjqp7x6jynacmqh6d= j72cn6nnf6yxjfqqqfsxrx0pyx22bcia2=0A actual: 1kwj40d23c25r9q67vk9giqrq= 7vp4zsrxvrzxm45zpy01nbhnxpa=0A--8<---------------cut here---------------e= nd--------------->8---=0A=0ANow I want to make Guix talk to the corporate= proxy server directly (not=0Amediated by ntlmaps) but then it needs to a= uthenticate. I could=0Atemporarily put my login and password in the prox= y URL in=0A/etc/systemd/system/guix-daemon.service.d/override.conf, and e= rase it=0Aafter using Guix. I am afraid, though, that these environment = variables=0Acould be logged. So, is it secure to temporarily put proxy l= ogin and=0Apassword in override.conf, or could they be inadvertently logg= ed?=0A=0ARegards=0A=0A- I am Brazilian. I hope my English is correct and= I welcome feedback=0A- Please adopt free formats like PDF, ODF, Org, LaT= eX, Opus, WebM and 7z=0A- Free (as in free speech) software for Android: = https://f-droid.org/