From mboxrd@z Thu Jan 1 00:00:00 1970 From: Thomas Danckaert Subject: Re: Advice about GuixSD on Serveraptor? Date: Wed, 22 Mar 2017 08:36:19 +0100 (CET) Message-ID: <20170322.083619.811363928491492857.post@thomasdanckaert.be> References: <87mvcenzvw.fsf@dustycloud.org> <20170321204620.GA30143@jasmine> <20170321205335.GB30436@jasmine> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:60846) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cqap4-0003el-Hx for guix-devel@gnu.org; Wed, 22 Mar 2017 03:36:47 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cqap1-0005iw-Dq for guix-devel@gnu.org; Wed, 22 Mar 2017 03:36:46 -0400 Received: from s02.spamexperts.axc.nl ([185.182.56.112]:60599) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cqap1-0005ip-7C for guix-devel@gnu.org; Wed, 22 Mar 2017 03:36:43 -0400 In-Reply-To: <20170321205335.GB30436@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: leo@famulari.name Cc: guix-devel@gnu.org From: Leo Famulari Subject: Re: Advice about GuixSD on Serveraptor? Date: Tue, 21 Mar 2017 16:53:35 -0400 > On Tue, Mar 21, 2017 at 04:46:20PM -0400, Leo Famulari wrote: >> So what I'm doing here is trying to provide Serveraptor with a >> GuixSD >> image that they'd offer to users. >> >> People could regenerate the image themselves, but it would be >> difficult >> to verify that it matches what is offered by Serveraptor. > > And to clarify my previous question: Should this QEMU image be > created > by me, or should it be created by a Guix maintainer as part of the > Guix > release process? Hi, to add my 2 cents: I think it would be fine if you provided the image, if you are confident that it works. When GuixSD becomes widely available on various hosting providers, the Guix maintainers cannot provide all those images (or guarantee their correctness) anyway (I imagine that typically an employee of such a service would create the image?). Even now, when you provide an image to Serveraptor, you have no way to verify if Serveraptor provides the same image to their users (I think?). Once Serveraptor provides the image you created (or any other GuixSD image) to its users, the responsibility lies with them. Serveraptor's users will have to trust Serveraptor (and, if they use your image, Serveraptor has to trust you, but it sounds like they already do :-) ). Thomas