From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id uPvAA1M+LGCwdAAA0tVLHw (envelope-from ) for ; Tue, 16 Feb 2021 21:51:15 +0000 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id IPUOO1I+LGBFUAAAbx9fmQ (envelope-from ) for ; Tue, 16 Feb 2021 21:51:14 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 41DCA10AC4 for ; Tue, 16 Feb 2021 22:51:14 +0100 (CET) Received: from localhost ([::1]:50964 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lC8FV-0007Qi-Ct for larch@yhetil.org; Tue, 16 Feb 2021 16:51:13 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:56950) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lC8FL-0007PK-6k for bug-guix@gnu.org; Tue, 16 Feb 2021 16:51:03 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:58551) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lC8FK-000711-IY for bug-guix@gnu.org; Tue, 16 Feb 2021 16:51:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lC8FK-0007be-FU for bug-guix@gnu.org; Tue, 16 Feb 2021 16:51:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#44559: Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 16 Feb 2021 21:51:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 44559 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Carl Dong Received: via spool by 44559-submit@debbugs.gnu.org id=B44559.161351220829159 (code B ref 44559); Tue, 16 Feb 2021 21:51:02 +0000 Received: (at 44559) by debbugs.gnu.org; 16 Feb 2021 21:50:08 +0000 Received: from localhost ([127.0.0.1]:41864 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lC8ER-0007aF-Tc for submit@debbugs.gnu.org; Tue, 16 Feb 2021 16:50:08 -0500 Received: from out4-smtp.messagingengine.com ([66.111.4.28]:42269) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lC8EQ-0007Zl-IX for 44559@debbugs.gnu.org; Tue, 16 Feb 2021 16:50:06 -0500 Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id 4FC945C0176; Tue, 16 Feb 2021 16:50:01 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute1.internal (MEProxy); Tue, 16 Feb 2021 16:50:01 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-transfer-encoding:in-reply-to; s=mesmtp; bh=TE9JugytokDNedNudZjaKA2h1ydIzalUoU8YOSSy3Ds=; b=l7Z111hlzwkG ZqPtUUoCqOTYtftuzio09ZcKMGXlxgpjAGTWhj6RLlsVp1PtcDiwWnoWxe/YofBT Vtzc0Oqk4QxfvseqC1kID6U73Lm/zQuJqu2FZkmCcsZhzqRVmaJr9yLIJi3c9Y0D 5jbXU7Clunt2QX8zRPjlZchazEDHizA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm2; bh=TE9JugytokDNedNudZjaKA2h1ydIzalUoU8YOSSy3 Ds=; b=IZufyosEv/eNt2Bvr8rSzBzDgV+lRhlCiMbNBKvOnQsQ6Wo/aVsPGAfVd aL+ltzCwcpUmzbLHETc8xq3lOwogyk2Elm/KYED5MbV4okqZIyA++mLKRrnBLOc4 jabWosZL7o/z1jWxyDMwRkp8EuFpDR1mPZW/oNHUCHuwka9s7AU2GhILVIUKHEsW RBZqbJYie08FjD8VaWhAIX486LNyWjD7/aJ9kv3yEyhHBnLTvJSyGNYBPatJ3jYz chM9JZdO+sPR7G9xZefHCKc3I8ygQ2XixPckcZMQHGJbPCPUbmG0+8XUmOTzxWH0 l+SV+urOsG+19tZQT8SOcAu9jM2DA== X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrjedtgdduheegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkfhggtggugfgjsehtke ertddttdejnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhl rghrihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpeegjeeggeehtddugfffuddtvdfffe ffjeekffffveffheegvddvuedtffekjeejjeenucfkphepuddttddruddurdduieelrddu udeknecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheplh gvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net [100.11.169.118]) by mail.messagingengine.com (Postfix) with ESMTPA id B0CA7108005C; Tue, 16 Feb 2021 16:50:00 -0500 (EST) Date: Tue, 16 Feb 2021 16:49:58 -0500 From: Leo Famulari Message-ID: References: <87d00los2d.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: 44559@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -0.86 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b=l7Z111hl; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=IZufyosE; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 41DCA10AC4 X-Spam-Score: -0.86 X-Migadu-Scanner: scn0.migadu.com X-TUID: KAr5DZD/cEm/ On Tue, Feb 16, 2021 at 04:00:11PM -0500, Carl Dong wrote: > Hi all, > > As bitcoin core begins the planning to officially transition to Guix-based releases, I've had many community members build guix v1.2.0 from source and afterward attempt `--bootstrap --no-substitutes` builds. As you may imagine, they are getting stuck on this gnutls problem and cannot proceed further. > > I'm wondering: > > 1. Is there a workaround that does not involve changing the system time? We have attempted several flags: > 1. --with-graft=gnutls=gnutls@3.6.14 > 2. --without-tests=gnutls > 3. --with-input=gnutls=gnutls@3.6.14 > These attempts all failed to work around this bug, and I’m curious as to why that would be. My guess would be that when we do `--bootstrap`, Guix bootstraps itself first without taking into account these flags? > > 2. Since bootstrappability is one of the core tenets of Guix, might it be appropriate to cut a v1.2.1 release with this problem (and any other potential bootstrap problems) fixed? (Happy to discuss in separate thread if more appropriate) You should see what the Guix maintainers say about this. My personal opinion is that you should fork Guix your use case. If you are building from the bootstrap, there is little added cost to making minor adjustments like disabling this test. You can periodically re-sync your fork with GNU Guix as convenient. And it's probably more in tune with your threat model. [0] This problem of "expiring software" has occurred several times in Guix's history and I'm sure it will happen again. In general, users are expected to use substitutes to work around it. They are no worse off than with traditional binary distros in that case. [0] Savannah is great but lacking the resources to devote to security.