From mboxrd@z Thu Jan  1 00:00:00 1970
From: ng0 <ng0@infotropique.org>
Subject: Re: Using IPFS to host mirrors of source packages
Date: Tue, 22 Aug 2017 19:31:06 +0000
Message-ID: <20170822193106.n7l3ifkeyqetnsgl@abyayala>
References: <20170811151019.GB20919@thebird.nl> <87a82sdngs.fsf@gnu.org>
	<20170822083832.2d2cm2wctva2rjzh@abyayala>
	<20170822091407.GA26942@thebird.nl>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="lvxny7lefaqhwsje"
Return-path: <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:41961)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <ng0@infotropique.org>) id 1dkEtg-0000Gp-VN
	for guix-devel@gnu.org; Tue, 22 Aug 2017 15:31:34 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <ng0@infotropique.org>) id 1dkEtc-0006g1-SU
	for guix-devel@gnu.org; Tue, 22 Aug 2017 15:31:32 -0400
Received: from aibo.runbox.com ([91.220.196.211]:40566)
	by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16)
	(Exim 4.71) (envelope-from <ng0@infotropique.org>)
	id 1dkEtc-0006f5-La
	for guix-devel@gnu.org; Tue, 22 Aug 2017 15:31:28 -0400
Content-Disposition: inline
In-Reply-To: <20170822091407.GA26942@thebird.nl>
List-Id: "Development of GNU Guix and the GNU System distribution."
	<guix-devel.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-devel>,
	<mailto:guix-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/guix-devel/>
List-Post: <mailto:guix-devel@gnu.org>
List-Help: <mailto:guix-devel-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-devel>,
	<mailto:guix-devel-request@gnu.org?subject=subscribe>
Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org
Sender: "Guix-devel" <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
To: Pjotr Prins <pjotr.public12@thebird.nl>
Cc: guix-devel <guix-devel@gnu.org>


--lvxny7lefaqhwsje
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Pjotr Prins transcribed 1.1K bytes:
> On Tue, Aug 22, 2017 at 08:38:32AM +0000, ng0 wrote:
> > Ludovic Court=C3=A8s transcribed 0.6K bytes:
> > > Hello,
> > >=20
> > > Pjotr Prins <pjotr.public12@thebird.nl> skribis:
> > >=20
> > > > By hosting source packages on IPFS they become content addressable =
and
> > > > should scale for downloads. It would also become a safe way of
> > > > distributing data.=20
> > > >
> > > > https://github.com/ipfs/ipfs
> >=20
> > I hope that you are aware that this isn't that safe.
> > As an intermediate solution it is okay. It is similar to providing
> > torrents. It works, but everyone wants the easy way, the
> > easy solution which works $now.
>=20
> What do you mean? Gnunet has a focus on privacy (at a cost of speed).
> IPFS is not really meant to be private (though you can host a private
> network). For public data it is safe. You have to trust the original
> party that provides the file, but that is similar to what we are doing
> today fetching data from github, ftp etc. (a Guix SHA check is good
> enough).
>=20
> Today I was bitten again by R/bioconductor removing source files. It
> would make good sense to me to mirror those files on IPFS. I think
> that is a long term solution.
>=20
> Pj.

While I don't want to comment on everything, let me just comment this:

I think IPFS is the best for now. I'll continue working on GNUnet and
gnunet-fs on my side and will hope that Guix accepts it once gnunet-fs is
ready for this usage.

Offtopic question: What's with my request for inclusion on savannah?
At least a short comment in 4 weeks would be re-assuring. I'm not sure
if there are technical issues or if everyone is on vacation and otherwise
busy.
--=20
ng0
GnuPG: A88C8ADD129828D7EAC02E52E22F9BBFEE348588
GnuPG: https://n0is.noblogs.org/my-keys
https://www.infotropique.org https://krosos.org

--lvxny7lefaqhwsje
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=ptCV
-----END PGP SIGNATURE-----

--lvxny7lefaqhwsje--