From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christopher Baines Subject: Re: Making local development easy Date: Wed, 25 May 2016 17:48:55 +0200 Message-ID: <5745C967.1030307@cbaines.net> References: <57449CA9.3040502@cbaines.net> <87h9dmtukn.fsf@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="1lrVB5aPPFhS1kXckvQimScWcR8pP1BJS" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43182) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b5b3Q-0002MV-WB for guix-devel@gnu.org; Wed, 25 May 2016 11:49:05 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1b5b3M-0005cS-2l for guix-devel@gnu.org; Wed, 25 May 2016 11:49:04 -0400 Received: from li622-129.members.linode.com ([212.71.249.129]:55773 helo=mira.cbaines.net) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1b5b3L-0005bM-U3 for guix-devel@gnu.org; Wed, 25 May 2016 11:49:00 -0400 Received: from [172.26.243.96] (unknown [46.25.84.26]) by mira.cbaines.net (Postfix) with ESMTPSA id 99CEC13D232 for ; Wed, 25 May 2016 16:48:56 +0100 (BST) In-Reply-To: <87h9dmtukn.fsf@gmail.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --1lrVB5aPPFhS1kXckvQimScWcR8pP1BJS Content-Type: multipart/mixed; boundary="5rfWldHlWP8lDfGpNXabEDhkxAohpSkRM" From: Christopher Baines To: guix-devel@gnu.org Message-ID: <5745C967.1030307@cbaines.net> Subject: Re: Making local development easy References: <57449CA9.3040502@cbaines.net> <87h9dmtukn.fsf@gmail.com> In-Reply-To: <87h9dmtukn.fsf@gmail.com> --5rfWldHlWP8lDfGpNXabEDhkxAohpSkRM Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 25/05/16 10:23, Alex Sassmannshausen wrote: >> The first, is that the hash is required, which I only had to compute >> once, but if I wanted to change the package, I would have to update >> this, which is prohibitive to local development. As an improvement to >> this, could the hash be optional, and if it does not exist, be >> calculated when the build is performed? >=20 > From my perspective, I think silently calculating a hash on the fly if > it is not provided would be problematic: it might lead to laziness in > completing the hash, which would undermine the security model of Guix > (if I understand correctly). >=20 > But maybe an explicit flag setting the declaration to "dev-mode", might= > be useful? In the use case I described, where you are packaging a local resource, I don't think this is relevant, as you implicitly trust your own machine. If you don't for some reason, you can just specify the hash. --5rfWldHlWP8lDfGpNXabEDhkxAohpSkRM-- --1lrVB5aPPFhS1kXckvQimScWcR8pP1BJS Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJXRclnXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzRTg5RUVFNzQ1OEU3MjBEOTc1NEUwQjI1 RTI4QTMzQjBCODRGNTc3AAoJEF4oozsLhPV3vzkQAJBHIIKLC8n23IW1jk6BhWTw ICtslOI/noSAhyUqNupy8kQDg6ksx2cG5KH2PCeyPR1B1YK5bMRni6aWt+g6NnTW lc84c7MCa6Nl45pzQ5m4l48KANuMaCyjOgto0T8UpZeO2dQIQhg20zzTiYlKNoQl Jz9bU3ZB9Hvgo8kMNt4zYEOzAjmXkkTZ2zPDFOdEc+9Z/qXKV4oPGP5v20rkufkX 6vA+eQSUpCoM3oHudmyE7lBxruFKw2C7WkpObYR+kYz8mVy1gZBud07bRMbM/5O2 rfzWe0Hwc0OM8Z79wlaoZzjU4++co7PokZRQKycu3j1T4xk8eVRxNaX234IpGXnk UGrVP5h94+XkR1iF7Dw+7efXnyKCrDfCH9KyD/JolCJBcBHNIpmhonMKTuN+v3x5 YyvwBsC0bZ+ayuhucOB5t3WoYeEiH/yQHvogJohenZl/Hr732Zd0oXCYuIbY4ONM dEH9CCJppwuAq1fUzymih3q8PY7JGYdUN+EEtuDug/+VtIZZrCRpeMtZHfgNOU+9 60IDvas3mJ2nA8Kh46rtxtrnQ6W1uftJ19E1E0S+tVzm6yo1cWWd38EhIMCnXnYD whjtoGfpyC+evSxTapNz5CqRlQ1Uxn32gT2Kb+GuQ4/pZ3ejsmHLy7L9K74kl6FB N4roTKQAIyHB4SXq49bO =Srw1 -----END PGP SIGNATURE----- --1lrVB5aPPFhS1kXckvQimScWcR8pP1BJS--