From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 2Mn9LUtiu2H/QQEAgWs5BA (envelope-from ) for ; Thu, 16 Dec 2021 16:59:07 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id gHzKKUtiu2EaQwAA1q6Kng (envelope-from ) for ; Thu, 16 Dec 2021 15:59:07 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 35F05B66F for ; Thu, 16 Dec 2021 16:59:07 +0100 (CET) Received: from localhost ([::1]:40432 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mxt9t-0007ww-Qt for larch@yhetil.org; Thu, 16 Dec 2021 10:59:05 -0500 Received: from eggs.gnu.org ([209.51.188.92]:50432) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mxt9j-0007vO-VG for help-guix@gnu.org; Thu, 16 Dec 2021 10:58:55 -0500 Received: from [2a02:c205:2020:6054::1] (port=35046 helo=tobias.gr) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mxt9h-0006G9-RZ for help-guix@gnu.org; Thu, 16 Dec 2021 10:58:55 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=2018; bh=GdgH9Wj8kp0W6 mrzNvH81XNPbPe1CbWs8q/KydIoaHE=; h=in-reply-to:date:subject:cc:to: from:references; d=tobias.gr; b=TFKsB7w2/9q2fn6fXF0G0beoRyXkreu86yEjbU /hpMHSydjAJufx4g+Y8SwECk4qq2niVc2lg+PJk5dnOkB4pm6f9C9jvllLLb0UqWyhqAHA SsLTg+qGdZwjeqontSosOAhiGEs8klTFwKm6U89wRcOSf8/C6uGBkZNbLtJaZPd7qRZjJF sTLjpa5QXvV1JDTgYDsIRmm8X07+to+EC5IgHmPdTApHN0xgm3YKZc5SfRUn22JPzuzc48 170aS7ckWrVi04jfrLEjx4ymwscXBXGWGkmbH4L7gvXRBYSTMmvnPhivi8JLODcLFH1VKg xiXU7njKalGBo9yyc1OKdamw== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id 3daa100a (TLSv1.3:AEAD-AES256-GCM-SHA384:256:NO); Thu, 16 Dec 2021 15:58:48 +0000 (UTC) References: From: Tobias Geerinckx-Rice To: phodina Cc: help-guix@gnu.org Subject: Re: Providing/Submitting substitutes Date: Thu, 16 Dec 2021 16:42:35 +0100 In-reply-to: BIMI-Selector: v=BIMI1; s=default; Message-ID: <87o85ga6cv.fsf@nckx> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Host-Lookup-Failed: Reverse DNS lookup failed for 2a02:c205:2020:6054::1 (failed) Received-SPF: pass client-ip=2a02:c205:2020:6054::1; envelope-from=me@tobias.gr; helo=tobias.gr X-Spam_score_int: -12 X-Spam_score: -1.3 X-Spam_bar: - X-Spam_report: (-1.3 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1639670347; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=GdgH9Wj8kp0W6mrzNvH81XNPbPe1CbWs8q/KydIoaHE=; b=cWnCNI5TyoNutb/Pxmg+pk9riByn5+iaoLsuYyixwi+VyZ3+987gvEv3p4oLOIy8Hai5LK TlYGjnCilV15/B0NWXN+HO53NCbRgSELsj1LsA2XoUbtkQ4tEFsxC1qmGpYnAnBFMAvHez VXMskzOfrIOMgm9dFLcnvQBZvWdlfqySU5c4oS7eY2cK+T6l5oIrdKLO152E+jkB/NaEs5 73kQaUEkFIrAbdWFQOLcpwootYA0PqEg18Dp+AxuOr0zECECacT8AIKrF8mN/6DmP1T3KD ZZ8Sk7ehKhh8+XQtqWjfyD9Ijtg5SL+HInBKh9nDoW+sOfjueCqg9emMcpG4Vg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1639670347; a=rsa-sha256; cv=none; b=Rye1F7x4O2e7ze6AjwjnnTMHuAZvKvd24jIXsVO28mmV2XkqX1TtcbfsPoJqJw3TiGRN13 KN+64S/4KOLlXDvNAeIhkD/C3lTecD4Al7NnNIw/gXK540tqaGqQnkjkBNAdcsPeispFxz dy7+73Qp528ll6ufRs4pZtEULazp7SS4EoO7zNWl6G8xvtqSOV5mrIxVcoX4NONbBQkL3v 1phdpKVf21/Dr7QUEzV03rmEXLmUUCRuIWt/XzpyRVD2T0N289oOEkYL2RSg1bgPEHWIgh A1EqYXEmaawWJ3Clz3B342hGu0DM++cf2hF+VsWP1K6uIZ0OpJDq1M2fmAQXkQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=tobias.gr header.s=2018 header.b=TFKsB7w2; dmarc=pass (policy=reject) header.from=tobias.gr; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -6.89 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=tobias.gr header.s=2018 header.b=TFKsB7w2; dmarc=pass (policy=reject) header.from=tobias.gr; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 35F05B66F X-Spam-Score: -6.89 X-Migadu-Scanner: scn0.migadu.com X-TUID: RrdPZy76KXFd --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Petr, phodina via =E5=86=99=E9=81=93=EF=BC=9A > However, since I already built the browser and it took several=20 > hours > I'd like to provide it also to other people. That's very considerate of you. Thank you! > Is there a way to submit the outputs of derivation to the=20 > official > substitution server or the only way would be to make public my > substitution server? I'm afraid so (the latter). As you mention, this would require=20 trusting the other party but to an unreasonably degree: the=20 ability to redistribute arbitrary binaries, signed by the project,=20 to all Guix users. That said, if your substitution server has decent uptime, traffic,=20 and a public IP, nothing's stopping you from putting up a=20 disclaimer page (like guix.tobias.gr=E2=80=A6 or better) and serving your=20 substitutes to others. Adding the guix publish service is trivial, about as much work as=20 typing =E2=80=98guix archive --export=E2=80=99 once, and is a one-time effo= rt! > Correct me if I'm wrong but can't this be solved be verified by > using guix challenge? In this case, I don't see how. Guix challenge is a valuable tool=20 but to use it in this way requires a fundamentally trusted party=20 (e.g., you, or say, bordeaux.guix.gnu.org) to be distributing=20 their own independently-built copy. If that were the case you wouldn't have had to build it yourself.=20 So it could be used after the fact, or for general =E2=80=98hm, this is=20 interesting=E2=80=99 flagging for further research, and that's not good=20 enough here. Copies would have been distributed by then. Challenges between 2 supposedly independent unofficial substitute=20 providers would be quite vulnerable to various kinds of=20 subversion. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCYbtiUA0cbWVAdG9iaWFz LmdyAAoJEA2w/4hPVW15LFMA/i++vb/ixeRHF9LTUQYVtQpGQG7DXOdzLVDYZkhL osyNAQDdHefCnVhpo5Ogs3QCeXhgZR10bku1S/MAjtvZS9uGDg== =GTu1 -----END PGP SIGNATURE----- --=-=-=--