Proxy authentication

Proxy authentication

[Jorge]

Hi.  I am trying to use Guix at my workplace, where we have mandatory
proxy.  In my foreign distribution (Debian 9), I have configured Gnome
for automatic proxy configuration (PAC file) and, for applications that
do not integrate with Gnome’s proxy configuration (such as Emacs), I
have set up ntlmaps (localhost:5865).  I have tried to make Guix use
ntlmaps, but guix pull fails with hash mismatches.  For example:
--8<---------------cut here---------------start------------->8---
Starting download of /gnu/store/zdahqsfvra1r2ic61x1blh3i3p7xsax6-libpng-1.6.29.tar.xz
From http://downloads.sourceforge.net/project/libpng/libpng16/1.6.29/libpng-1.6.29.tar.xz...
following redirection to `https://sourceforge.net/projects/libpng/files/'...
warning: 'https_proxy' is ignored
 ....29.tar.xz  226KiB                243KiB/s 00:01 [##################] 100.0%
sha256 hash mismatch for output path `/gnu/store/zdahqsfvra1r2ic61x1blh3i3p7xsax6-libpng-1.6.29.tar.xz'
  expected: 0fgjqp7x6jynacmqh6dj72cn6nnf6yxjfqqqfsxrx0pyx22bcia2
  actual:   1kwj40d23c25r9q67vk9giqrq7vp4zsrxvrzxm45zpy01nbhnxpa
--8<---------------cut here---------------end--------------->8---

Now I want to make Guix talk to the corporate proxy server directly (not
mediated by ntlmaps) but then it needs to authenticate.  I could
temporarily put my login and password in the proxy URL in
/etc/systemd/system/guix-daemon.service.d/override.conf, and erase it
after using Guix.  I am afraid, though, that these environment variables
could be logged.  So, is it secure to temporarily put proxy login and
password in override.conf, or could they be inadvertently logged?

Regards

- I am Brazilian.  I hope my English is correct and I welcome feedback
- Please adopt free formats like PDF, ODF, Org, LaTeX, Opus, WebM and 7z
- Free (as in free speech) software for Android: https://f-droid.org/

Re: Proxy authentication

[Konrad Hinsen]

On 23/01/2018 21:40, Jorge wrote:

> Now I want to make Guix talk to the corporate proxy server directly (not
> mediated by ntlmaps) but then it needs to authenticate.  I could

I had the same problem not so long ago. See this thread on guix-devel 
for the solution:

   http://lists.gnu.org/archive/html/guix-devel/2017-11/msg00070.html

Konrad.

Re: Proxy authentication

[Jorge]

January 24, 2018 6:38 AM, "Konrad Hinsen" <konrad.hinsen@fastmail.net> wrote:

> I had the same problem not so long ago. See this thread on guix-devel for the solution:
> 
> http://lists.gnu.org/archive/html/guix-devel/2017-11/msg00070.html

Sorry for having taken so long to reply.  I have postponed the setup of
Guix.  It seems my workplace blocks FTP, which is used by Guix.
Besides, I have since migrated from Debian 9 stretch (stable) to 10
buster (testing), which has more recent packages.  I intended to use
Guix to provide newer packages on top of Debian stable, and with Debian
testing this is not necessary.  I think that at some point after Debian
buster freezes in preparation for release, when its packages become old
but I have not yet migrated to Debian 11 bullseye, I will try Guix
again.  That time I will first make sure I have access to all network
protocols Guix needs.

Regards