From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id cOOtHP0Ak2OITQEAbAwnHQ (envelope-from ) for ; Fri, 09 Dec 2022 10:33:49 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id wO6iHP0Ak2M4LgAAauVa8A (envelope-from ) for ; Fri, 09 Dec 2022 10:33:49 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 313C71B5EB for ; Fri, 9 Dec 2022 10:33:49 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1p3Zku-0003VH-8S; Fri, 09 Dec 2022 04:33:21 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3Zks-0003Uo-0s for guix-devel@gnu.org; Fri, 09 Dec 2022 04:33:18 -0500 Received: from mailout.easymail.ca ([64.68.200.34]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1p3Zkp-0001fH-Ms for guix-devel@gnu.org; Fri, 09 Dec 2022 04:33:17 -0500 Received: from localhost (localhost [127.0.0.1]) by mailout.easymail.ca (Postfix) with ESMTP id 71E54672F5; Fri, 9 Dec 2022 09:33:11 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=bokr.com; s=easymail; t=1670578391; bh=cWcfti8RT/g0rn4eu1AcI7JH5YNULHUACqwfLnAvog0=; h=From:Date:To:Cc:Subject:References:In-Reply-To:From; b=hEmJtp7mitoAPjlhNOxSz5+DHLmi/ClrUbJUM6jSqVYaOdb/sDmED9pNF0owqyA4Y CBRgyA3Sd7zxg8cOM9BwRodoKnRF8Z1fy9TJAUwf6/RFg4sjXRfdT4E6cJPri++vTR 6VCfD8xGKVF9sKWMzAgDgusZOlzXIqCJPlPuEG2mllLEjcP1LTAU1NXr9AysU3hcZr 0GEqaxHXVmRe6baTmY8DEJE7w6kB8L71jR3re7nqGa1UwfHPk+nuDNZXiPVLyrQ3gI rqGGpAJAs3TjjQlGwuvP3ACD1Wwc9bZLZ0NbZrWu5CwziuqocAOY26yWDLtsBhLMb1 Ez20KGIzxB0WQ== X-Virus-Scanned: Debian amavisd-new at emo07-pco.easydns.vpn Received: from mailout.easymail.ca ([127.0.0.1]) by localhost (emo07-pco.easydns.vpn [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IstCtYu4fIF2; Fri, 9 Dec 2022 09:33:11 +0000 (UTC) Received: from localhost (m83-185-36-180.cust.tele2.se [83.185.36.180]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mailout.easymail.ca (Postfix) with ESMTPSA id B63EB672B6; Fri, 9 Dec 2022 09:33:10 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=bokr.com; s=easymail; t=1670578391; bh=cWcfti8RT/g0rn4eu1AcI7JH5YNULHUACqwfLnAvog0=; h=From:Date:To:Cc:Subject:References:In-Reply-To:From; b=hEmJtp7mitoAPjlhNOxSz5+DHLmi/ClrUbJUM6jSqVYaOdb/sDmED9pNF0owqyA4Y CBRgyA3Sd7zxg8cOM9BwRodoKnRF8Z1fy9TJAUwf6/RFg4sjXRfdT4E6cJPri++vTR 6VCfD8xGKVF9sKWMzAgDgusZOlzXIqCJPlPuEG2mllLEjcP1LTAU1NXr9AysU3hcZr 0GEqaxHXVmRe6baTmY8DEJE7w6kB8L71jR3re7nqGa1UwfHPk+nuDNZXiPVLyrQ3gI rqGGpAJAs3TjjQlGwuvP3ACD1Wwc9bZLZ0NbZrWu5CwziuqocAOY26yWDLtsBhLMb1 Ez20KGIzxB0WQ== From: bokr@bokr.com Date: Fri, 9 Dec 2022 10:32:50 +0100 To: "(" Cc: =?utf-8?B?5a6L5paH5q2m?= , guix-devel@gnu.org Subject: Re: Dissecting Guix -- blog post series Message-ID: <20221209093250.GA5724@LionPure> References: <87v8ml823k.fsf@envs.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) Received-SPF: pass client-ip=64.68.200.34; envelope-from=bokr@bokr.com; helo=mailout.easymail.ca X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1670578429; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=95pSR3CrR3sTVclg5buV3y8VdO+KdVS/UTl2jvtvtoQ=; b=X+HRppx+PrEIb8U96uqqcId9vfV2zKCgfuBTboUMxDG4xGxlh7mBffBx5wh6THYiCfGY1U NTdqrjPQXRjHUjDMuhBIdqp9nvMorW1oZ9h0Ej0+YyIqbJhdGBcnbNpPymAi4Uia6sbNid sM/8ZeuLeCWvss/ShCDpUnLybn/v3leHaOxZ4DXpRA1auHU125A/dBRenmLNuI9jiWRphd d6mv+FK/AkP4mYnepkno9c4q/131YOFHqG2bfFwuXSyZQ3M2XofOkf5vsOpkQxZ2zF0dY4 xmtHzxQpJ4AEA+R3FAAvRy5SisSpV7In0eaFBJSTcm0QJvG77iY3VsPeFUV0MQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1670578429; a=rsa-sha256; cv=none; b=EQq5W6zqsmvqYd1/7mWDn8+zPSM3iBUa2XpDKZisiLTS6qru0GUk/UnlpLuoCRTwUaq0Vf jPX64q70xtAVLYy2bGyGD/WAfhKJzNXxQvStmTJiOtgoxWJnwjXBn3fSb4bXrrQ2GC0pC9 80tzDmZgJwPwhFK9XJ2LRbDqkMxak+p53kO7z6oiK8lNN9SXmQdSBGV/CFc/LiLYEr0FpJ HPkTQIK6l5dmu1HhzfqIQMCOBqsZh0lDHRvjiMSmPShKbm1UIK/iDERxnwkY3JsaS5fPnU EPX0KDfPFZWKNlqbw2OOvKurz+LV+ktuBMQ5XhcmZ/0ikQKba8SBicFQZuYiMQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=bokr.com header.s=easymail header.b=hEmJtp7m; dkim=fail ("headers rsa verify failed") header.d=bokr.com header.s=easymail header.b=hEmJtp7m; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 3.05 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=bokr.com header.s=easymail header.b=hEmJtp7m; dkim=fail ("headers rsa verify failed") header.d=bokr.com header.s=easymail header.b=hEmJtp7m; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 313C71B5EB X-Spam-Score: 3.05 X-Migadu-Scanner: scn1.migadu.com X-TUID: vsSg3wJyNkDk Hi, On +2022-12-09 07:33:16 +0000, ( wrote: > On Fri Dec 9, 2022 at 7:31 AM GMT, 宋文武 wrote: > > I think it's missing what "build-derivations" do, or "Part 0: Store". > > Hmm, do you mean adding an example of building a derivation in Scheme with > ``build-derivations''? I'll definitiely add that :) > > -- ( Where is a "What can I trust?" section? I.e., when some well-meaning enthusiast says, --8<---------------cut here---------------start------------->8--- "Can we package the "warm-fuzzy-floss-name" package that they have at http://www.lesser-known-but-nice-sounding-distro.org/fantabulous/" --8<---------------cut here---------------end--------------->8--- How does a gullible noob like me know what the dangers might be, (e.g. http:) and how to avoid (most of) them by finding a guix version that has been gone through with a fine-tooth comb by trusted guix devs and has been re-hosted at gitlab or gnu.org, etc ... for added security? -- Regards, Bengt Richter