From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pjotr Prins Subject: Re: plz is there a roadmap for a more resilient substitutes infrastructure? Date: Fri, 2 Nov 2018 22:04:51 +0100 Message-ID: <20181102210451.htzxk6ox7uldr2fr@thebird.nl> References: <87wopv7jzw.fsf@roquette.mug.biscuolo.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55415) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gIgcn-0008GT-Qk for guix-devel@gnu.org; Fri, 02 Nov 2018 17:05:02 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gIgci-0001kJ-Ld for guix-devel@gnu.org; Fri, 02 Nov 2018 17:05:01 -0400 Received: from mail.thebird.nl ([94.142.245.5]:35122) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gIgci-0001gF-AA for guix-devel@gnu.org; Fri, 02 Nov 2018 17:04:56 -0400 Content-Disposition: inline In-Reply-To: <87wopv7jzw.fsf@roquette.mug.biscuolo.net> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Giovanni Biscuolo Cc: guix-devel@gnu.org On Fri, Nov 02, 2018 at 01:16:03PM +0100, Giovanni Biscuolo wrote: > please is there a roadmap in GNU and/or Guix devel team to address this > problems? I think it would be a good idea to create a more distributed approach for creating and finding substitutes. A simple name service would help. We could even use IPFS or something to fetch nar files - IPFS comes with a name service. That way anyone building a substitute could push it to IPFS and expose it to the rest of the world. Since IPFS is content-addressable we can prevent injections. Any change to the file would change its location. So the address + NAR hash is safe. And no key setting required. Does away with the dependency on just a few machines. Maintaining machines is a pain. Why not distribute the effort? I am happy to build some stuff and put it out there - in fact I already run my own substitute server, but it has only the substitutes I need. If we all do that we can bundle resources together. Guix can easily support that. If someone wants to think this through and can write a prototype it would make a great talk at FOSDEM. We can also discuss it at Guix days. Pj.