From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id kF7BIkRHWGLyEwEAgWs5BA (envelope-from ) for ; Thu, 14 Apr 2022 18:09:40 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id AHdBH0RHWGJxrAAAauVa8A (envelope-from ) for ; Thu, 14 Apr 2022 18:09:40 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id DB1C92D3E8 for ; Thu, 14 Apr 2022 18:09:39 +0200 (CEST) Received: from localhost ([::1]:49436 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nf22M-0000n3-IY for larch@yhetil.org; Thu, 14 Apr 2022 12:09:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:45760) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nf1yV-0005nB-As for help-guix@gnu.org; Thu, 14 Apr 2022 12:05:40 -0400 Received: from cascadia.aikidev.net ([2600:3c01:e000:267:0:a171:de7:c]:47930) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nf1yS-0002CT-DT for help-guix@gnu.org; Thu, 14 Apr 2022 12:05:38 -0400 Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:20]) (Authenticated sender: vagrant@cascadia.debian.net) by cascadia.aikidev.net (Postfix) with ESMTPSA id 574AE1AC62; Thu, 14 Apr 2022 09:05:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=debian.org; s=1.vagrant.user; t=1649952334; bh=GD9SltVto8Ib+IymQMqkN5Ww4kC2/6b4rLp1c+nPQZk=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=GxjsUhyH3RV+sDJPvZSgd4fSKmFjlVV6Tu8kAJGZKAvBdpBMyiYLe+6KHobkh5h4/ TBx2Obq5MKpmTparZLDZ4sN5NFDG8b4sZJuCOTpJc9xLsX2q1xv+xwhLW4WeyJHPWx yjw6r1Qy+pfWavnrx+vdcBCcWC8vDn0Rne0b2YW0mub/ENyHU0/mNHE7B2heZPXj1B GBA+Z0+svDJKPtL1sTehY+ZoGrF9hKhQpaeJzA1hgCKgA/Bzg1E9e1DuIGrTKgA1QZ WqV4kvkAJpTSRShzCZywS3coK0+RlYVFoEOfwAnhKlfQGkTNlKI2X9DXIZ+HgCp72A eOPRjKLVLqd+w== From: Vagrant Cascadian To: jgart , Feng Shu Subject: Re: was I hacked? In-Reply-To: <20220414011701.GB3320@gac.attlocal.net> References: <20220412212844.GB7246@gac.attlocal.net> <877d7tzh67.fsf@kolabnow.com> <20220413174156.GB13771@gac.attlocal.net> <87lew8echs.fsf@163.com> <20220414011701.GB3320@gac.attlocal.net> Date: Thu, 14 Apr 2022 09:05:29 -0700 Message-ID: <877d7rveeu.fsf@contorta> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: none client-ip=2600:3c01:e000:267:0:a171:de7:c; envelope-from=vagrant@debian.org; helo=cascadia.aikidev.net X-Spam_score_int: -21 X-Spam_score: -2.2 X-Spam_bar: -- X-Spam_report: (-2.2 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.082, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix@gnu.org Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1649952580; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=1WVYTs1DkOAmOFzSoA7lOxfw/LCxwFwCkOphLQXW3t0=; b=SrCD1OU8suWzkAkMylscNZPd0btRqHrpgNiEg2k3k8KLjkDgbR2yTsvpCmMN/k+Q8vkBZc 2sK0SR35z+5lOTcKRblV8Rin3xbtmjsuuGZB8WAQGntbNKnBGiDlKD5R9frnOVGIEi5DrY ZJumpjqVH/W6LyJIihG4/R4qumGszH+8ATwhyTM/iepzd57c4RQcALJcMHHJ1JNfNizGRk cWAU0QLJGu+7YFIkxIIq8uOxElypkgORP2PktpsTm1A04mVwSXTycM7n65JltrHSKg5OA8 aOueRADQ68/YCbgH53FtRvz63Juydb8stOgzudd2EGVsyRlVpgVxcJbbxTXAKQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1649952580; a=rsa-sha256; cv=none; b=THIxu2GYTRf/JLEMloaS3O7bGm0lL7mirDEwfs2V/0xP9XAXOhF1Wy0OEzF0RADOrqRWmV 3JqkqhAXXFjcOEppzkGz5TQcsumnZt0Q0ikN3XFVpHW0UaM9CmEkAY3Vw0POIEg0kO5x1K gFHeWU8TsXrUfwaMNn16eRDkEhrP91q8BDC16TTDhXI1DLpi5WiRRB1qSZCL4s0BJAGKDa PjeP9FAQ+CkpdYm2MvkCl4BNKwYQvzWojGJANY+1lieiCPTVCxq5JUfZdsvMwy1/v3/5Cs WTeg11kDKqu0j03Ohv4inq7EPYuIyeuJdk5smD+cbQqbuD7pdmefJqBz3v+TZQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debian.org header.s=1.vagrant.user header.b=GxjsUhyH; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -0.75 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debian.org header.s=1.vagrant.user header.b=GxjsUhyH; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: DB1C92D3E8 X-Spam-Score: -0.75 X-Migadu-Scanner: scn0.migadu.com X-TUID: qD+rg83OFAgV --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 2022-04-14, jgart wrote: > On Thu, 14 Apr 2022 08:26:39 +0800 Feng Shu wrote: >> jgart writes: >>=20 >> > On Wed, 13 Apr 2022 02:25:11 -0300 Thiago Jung Bauermann wrote: >> >> I don't understand why Guix thinks that. IIUC 950f3e=E2=80=A6 is a di= rect >> >> descendant of 42679e=E2=80=A6 >> > >> > As of today now the has changed: >> > >> > ``` >> > =CE=BB guix pull >> > Updating channel 'guixrus' from Git repository at 'https://git.sr.ht/~= whereiseveryone/guixrus'...Updating channel 'nonguix' from Git repository a= t 'https://gitlab.com/nonguix/nonguix'...Updating channel 'guix' from Git r= epository at 'https://git.savannah.gnu.org/git/guix.git'...guix pull: error= : aborting update of channel 'guix' to commit 5743d505834a8b13778da2c969ea4= e15bb7a3a75, which is not a descendant of 42679e3f81a0fa61e225b1f6aa0e80e39= 625372f >> > hint: This could indicate that the channel has been tampered with and = is trying to force a roll-back, preventing you from getting the latest >> > updates. If you think this is not the case, explicitly allow non-forw= ard updates. >> > ``` >> > >> > I haven't allowed downgrades yet. >> > >> > Waiting to see if I get an answer first on why it's happening. >>=20 >> Why not roll-back to an older guix, then try guix pull again?=20 > > Hi Feng, > > Thanks! that worked!!! > > I rolled back one generation and ran `guix pull`. That still does leave me wonder what the deal was... Was the repository tampered with? Rolling back to an older generation and then moving forward basically would be a successfull (hopefully just accidental) attack changing the commit history! Rolling back to an older generation isn't much different than just blindly allowing to move forward to a different branch... Is it possible that one of your channels actually had the exact same commit in it, but then forked off in different directions? It is rather unsettling to not know what happened... live well, vagrant --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCYlhGSgAKCRDcUY/If5cW qiJWAP9UWpdslVnsw8g04pLqx2trU9vSMGMn9vl6NcbckV8aUgD8C5ykasgQjKfi 0+Q8F9NAc8cTGY7iL/dwGoJlZh2g7wc= =ixNm -----END PGP SIGNATURE----- --=-=-=--