From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id CEwcOkk0S2JgnAAAgWs5BA (envelope-from ) for ; Mon, 04 Apr 2022 20:09:13 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id yCvGNkk0S2IcPAEAauVa8A (envelope-from ) for ; Mon, 04 Apr 2022 20:09:13 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 78F062907D for ; Mon, 4 Apr 2022 20:09:13 +0200 (CEST) Received: from localhost ([::1]:44884 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nbR8a-0001Ha-Bv for larch@yhetil.org; Mon, 04 Apr 2022 14:09:12 -0400 Received: from eggs.gnu.org ([209.51.188.92]:44140) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nbR8Q-0001H9-KG for bug-guix@gnu.org; Mon, 04 Apr 2022 14:09:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:58990) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nbR8Q-0005UL-Be for bug-guix@gnu.org; Mon, 04 Apr 2022 14:09:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1nbR8Q-00008s-4G for bug-guix@gnu.org; Mon, 04 Apr 2022 14:09:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#54711: Bad Documentation Series: 6.1 Specifying Additional Channels Resent-From: Maxime Devos Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 04 Apr 2022 18:09:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 54711 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Marek =?UTF-8?Q?Pa=C5=9Bnikowski?= , 54711@debbugs.gnu.org Received: via spool by 54711-submit@debbugs.gnu.org id=B54711.1649095731515 (code B ref 54711); Mon, 04 Apr 2022 18:09:02 +0000 Received: (at 54711) by debbugs.gnu.org; 4 Apr 2022 18:08:51 +0000 Received: from localhost ([127.0.0.1]:52887 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nbR8E-00008F-PV for submit@debbugs.gnu.org; Mon, 04 Apr 2022 14:08:50 -0400 Received: from albert.telenet-ops.be ([195.130.137.90]:54566) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nbR8D-000085-9s for 54711@debbugs.gnu.org; Mon, 04 Apr 2022 14:08:49 -0400 Received: from [172.20.10.5] ([188.188.236.140]) by albert.telenet-ops.be with bizsmtp id Ei8n2700332RwxY06i8nfD; Mon, 04 Apr 2022 20:08:48 +0200 Message-ID: <6cd9ef48a3e204b7ad7fe57f56847ee3df0d68d2.camel@telenet.be> From: Maxime Devos Date: Mon, 04 Apr 2022 20:08:46 +0200 In-Reply-To: <47274732e10dfe517a608d869117cb0253e2623b.camel@marekpasnikowski.name> References: <47274732e10dfe517a608d869117cb0253e2623b.camel@marekpasnikowski.name> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-JCoT6udNkA5esoxO8nNZ" User-Agent: Evolution 3.38.3-1 MIME-Version: 1.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r22; t=1649095728; bh=H1m/sCCuUQWvYMNl3s1/bhosOjD6y5dyr1jfwpX2kNI=; h=Subject:From:To:Date:In-Reply-To:References; b=alyF1xPntVwVI0MdZCr4RnEGu615+HiQXpUc+/6aqX9SuuDKeBOkd0TqWQmFgZ0Nm 5/CEw+CLrsEtHJl2NkJjabW7uVL1qhs0t4M8Ho628e4WcDmCIU0bQNEpkXJluzXH40 Wn+NapvkGQ3qi5VWKqSKsdTr+f9i1/lg/WvxK/UYdQQWiFJsdoY+k41BaRJjjX7S0z C1BHKjrvsdGvNYizewfcRlRAPVFsvdrXMNxFxBps47+aH2NaJQz237/z1juT5v2580 3pyiorht8w+85+fIms2fA7AwvkpDwKUwN0o4BiNZoavcjdw8zGZ7JNDiRZXIHtRXpa HPX3DZhDf681g== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1649095753; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=H1m/sCCuUQWvYMNl3s1/bhosOjD6y5dyr1jfwpX2kNI=; b=Y/XcK5h5ISx2FAx4knFfo6FqZaCCh7US9rJ+ATsIFWT9/GwjqKrJdIQo4OsMqSpyYglEU1 o5fb4STtvp053NyTXw2l15k9VK48jyElHnzXVxSoZ2DyfAlnfDtIoBYN11vwSvLgc+Iqhs xxOmMCSztrJmi8h+NjmyW99FsgChewx9zUdutcdXGw8PFz78htyUF0kCa2Dv+1g0E1l4si uGWb2zE1lEAkGGbnydX/PTjCf5GRVRbQU4KfQ8E7djagLpnt9DqnhjEN0pnQgYeuaWQV+L WyQYD+0X8462CU+kfiaWc+b6WOTHV9CrwIxALEDwurLPk/s7md580EnbFjprrQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1649095753; a=rsa-sha256; cv=none; b=kHBygn7dhzq0+y+rTZsMkhK4dlgX/f6Cn185AkmUT/N6F1ITDD/XosNJxOIYIjK9dnV87l G+k8UitwLbZsVSWFtP9Ctk9mk/r4AQLoA0UAS6ZsFIIeUocCvTlBQuiD9eKn/x1cM5QOqh OILjIk2ippy3tSxvTxxLvfmxxD91mqb+1T1eCQCM2j/mnMY17LebrZ6Bwa1iKX5QvVeV3t yVI/xs9y5es9YvuqqRhHGW8Z1rsh4PTKFIJFgTXYjNTjI469jQ4Y+yrM/nNk6pqiSCoKkc Qgj67lvsua14sZBIHRUR6R4LbXkiKGvHXrJYaoNBMX7jevsW7l5nUu6rnRR5FQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r22 header.b=alyF1xPn; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 3.22 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r22 header.b=alyF1xPn; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 78F062907D X-Spam-Score: 3.22 X-Migadu-Scanner: scn0.migadu.com X-TUID: IW0SnJzIxRKA --=-JCoT6udNkA5esoxO8nNZ Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Marek Pa=C5=9Bnikowski schreef op ma 04-04-2022 om 18:21 [+0200]: > 2. What =3D=3Dis=3D=3D the channel introduction? =46rom (guix)Channel Authentication: As a user, you must provide a =E2=80=9Cchannel introduction=E2=80=9D in = your channels file so that Guix knows how to authenticate its first commit. A channel specification, including its introduction, looks something along these lines: (channel (name 'some-channel) (url "https://example.org/some-channel.git") (introduction (make-channel-introduction "6f0d8cc0d88abb59c324b2990bfee2876016bb86" (openpgp-fingerprint "CABB A931 C0FF EEC6 900D 0CFB 090B 1199 3D9A EBB5")))) It's the (make-channel-introduction [...]) thing. It's just a bunch of information that Guix can use to authenticate the first commit of the channel. Also see ... > Which commit am I supposed to use? The first commit that adds (or in your case, modifies) the .guix- authorization file. From (guix)Specifying Channel Authorizations: This authentication rule creates a chicken-and-egg issue: how do we authenticate the first commit? Related to that: how do we deal with channels whose repository history contains unsigned commits and lack =E2=80=98.guix-authorizations=E2=80=99? And how do we fork existing channe= ls? Channel introductions answer these questions by describing the first commit of a channel that should be authenticated. The first time a channel is fetched with =E2=80=98guix pull=E2=80=99 or =E2=80=98guix time-m= achine=E2=80=99, the command looks up the introductory commit and verifies that it is signed by the specified OpenPGP key. From then on, it authenticates commits according to the rule above. Authentication fails if the target commit is neither a descendant nor an ancestor of the introductory commit. Greetings, Maxime. --=-JCoT6udNkA5esoxO8nNZ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iI0EABYKADUWIQTB8z7iDFKP233XAR9J4+4iGRcl7gUCYks0LhccbWF4aW1lZGV2 b3NAdGVsZW5ldC5iZQAKCRBJ4+4iGRcl7sBtAQDD4DZb11QoKxOZNCyoLLM+cRMv NhHdw8cxMPxgxCeExQEAvzElsNEsijUMMGQdgp+Km3k4e/A1eZviqEs51ui77w8= =IMip -----END PGP SIGNATURE----- --=-JCoT6udNkA5esoxO8nNZ--