all messages for Guix-related lists mirrored at yhetil.org
 help / color / mirror / code / Atom feed
From: Marius Bakke <marius@gnu.org>
To: David Philipe Gil <davidpgil@protonmail.com>,
	David Philipe Gil <davidpgil@protonmail.com>,
	zimoun <zimon.toutoune@gmail.com>
Cc: 41603-done@debbugs.gnu.org
Subject: bug#41603: How To Resolve "guile: warning: failed to install locale"
Date: Sat, 30 May 2020 10:03:08 +0200	[thread overview]
Message-ID: <87r1v13l4z.fsf@gnu.org> (raw)
In-Reply-To: <a9a69a81-124d-a739-b462-85c8bf88b6c0@protonmail.com>

[-- Attachment #1: Type: text/plain, Size: 1357 bytes --]

David Philipe Gil via Bug reports for GNU Guix <bug-guix@gnu.org>
writes:

> Interesting -- ive never heard of guix challenge...
>
> I ran it and here is my result:
>
> '''
>
> 8,427 store items were analyzed:
>   - 3,480 (41.3%) were identical
>   - 147 (1.7%) differed
>   - 4,800 (57.0%) were inconclusive
>
> '''
>
> So, does this mean that some of the binaries that are being hosted may
> be malicious?

It means that 147 out of 3627 items that could be found on the remote
server were not reproducible.  Or about 4%.  There are some known
offenders such as debug outputs: you can use 'guix challenge
--diff=diffoscope' to get detailed information about the differences.

96% is close to Debian's number: <https://isdebianreproducibleyet.com/>.

It would be good to file bugs about those 4% and bring the number
closer to zero.  :-)

"inconclusive" just means that the remote did not have those store items
available, so Guix was unable to challenge them.

> I am only somewhat "techie" if i built my own binaries is it "easy" to
> publish my binaries?

Yes: simply running 'guix publish' starts a web server that can be used
with --substitute-urls.  You'll also need to generate a signing key and
authorize it on all clients.

There is a service available for 'guix publish', also on foreign
distributions.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

  reply	other threads:[~2020-05-30  8:04 UTC|newest]

Thread overview: 17+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-05-29 15:19 bug#41603: How To Resolve "guile: warning: failed to install locale" David Philipe Gil via Bug reports for GNU Guix
2020-05-29 15:31 ` zimoun
2020-05-29 20:29   ` David Philipe Gil via Bug reports for GNU Guix
2020-05-29 21:15     ` Marius Bakke
2020-05-29 22:10       ` zimoun
2020-05-29 22:13       ` David Philipe Gil via Bug reports for GNU Guix
2020-05-29 22:12     ` Ricardo Wurmus
2020-05-29 22:14       ` David Philipe Gil via Bug reports for GNU Guix
2020-05-29 21:10   ` David Philipe Gil via Bug reports for GNU Guix
2020-05-29 22:03     ` zimoun
2020-05-29 22:07       ` David Philipe Gil via Bug reports for GNU Guix
2020-05-29 22:14         ` zimoun
2020-05-29 22:16           ` David Philipe Gil via Bug reports for GNU Guix
2020-05-29 22:27             ` zimoun
2020-05-29 23:14               ` David Philipe Gil via Bug reports for GNU Guix
2020-05-30  8:03                 ` Marius Bakke [this message]
     [not found] <CAEtmmexWur4pfWPcGb6uztwdxwGALDPphffUNQep2Oi=X+_2ig@mail.gmail.com>
2022-01-20 15:50 ` Rostislav Svoboda

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=87r1v13l4z.fsf@gnu.org \
    --to=marius@gnu.org \
    --cc=41603-done@debbugs.gnu.org \
    --cc=davidpgil@protonmail.com \
    --cc=zimon.toutoune@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this external index

	https://git.savannah.gnu.org/cgit/guix.git

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.