From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 8LtHG14qjmBuLwAAgWs5BA (envelope-from ) for ; Sun, 02 May 2021 06:28:14 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id oLsAF14qjmAqfwAA1q6Kng (envelope-from ) for ; Sun, 02 May 2021 04:28:14 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id BC20827ED1 for ; Sun, 2 May 2021 06:28:13 +0200 (CEST) Received: from localhost ([::1]:33032 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ld3iG-0005YW-TQ for larch@yhetil.org; Sun, 02 May 2021 00:28:12 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:59714) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ld3hx-0005YI-Po for guix-devel@gnu.org; Sun, 02 May 2021 00:27:53 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:42711) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ld3hu-00055w-L7 for guix-devel@gnu.org; Sun, 02 May 2021 00:27:53 -0400 Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id C79A65C00A1; Sun, 2 May 2021 00:27:49 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute5.internal (MEProxy); Sun, 02 May 2021 00:27:49 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=7KT5IwjV5Db+/HUe5jZGwsQJ aim7Vc5dHPwWZT2zRDE=; b=y5eYAmtUlDJoGImgRk9ki2umTeKe/98tdVfJZRmj HI6T4li07N9LP7R9cD8U1+EUbTyeetw2PYU+2B8Q1KLmL7rZIOr03oDin5BGrdCh alhhWJ/Ezt4rGSwcnoF3lCAa7QcdFQFESk0p4d15OofRAWRWrvzoiJMDyaxMUe02 AT0= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=7KT5Iw jV5Db+/HUe5jZGwsQJaim7Vc5dHPwWZT2zRDE=; b=WX63WVvu4QCtT/WlmDNArk 4XyTy24hTQ+QE2cfUZrqAh7/Ha82EtPVfoELZjk3aB7mRUVikmiYH1VSiJfiGEPO SXntMOiVyUZgjht5thZ8ByQKPBEOqk3zdzSD31kaBG2IL02F5Jrx8LIGmvhiNGdh vV5q+i6tUV9ulmWrTKjb5NqTWEInW5KNujDpf37jCjDxqnfO/f0UZBl+WgrL7hbi kYhHqLOG00UmAdpxDcallgE3yEIeL9uDKOihs8JdIqJZBAL0wiIWpqnBK5c94NEY e6h5XVpmT6l443TdbNvrpOozKUscSxvwn/RjntDl+358xrKVw815JVzUEcy80qDw == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrvdefuddgtdegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffukfhfgggtuggjsehttdertddttddvnecuhfhrohhmpefnvghoucfh rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtth gvrhhnpedvvddugefffeeitddthfefvdeuhffgkeeikeegkeevteeghfeftefggeeuudff ieenucffohhmrghinhepghhnuhdrohhrghenucfkphepudeivddrvddujedrfeefrdduud dvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomheplhgv ohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: from localhost (d-162-217-33-112.ct.cpe.atlanticbb.net [162.217.33.112]) by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 2 May 2021 00:27:49 -0400 (EDT) Date: Sun, 2 May 2021 00:27:44 -0400 From: Leo Famulari To: Maxim Cournoyer Subject: Re: GNU Guix 1.3.0rc1 available for testing! Message-ID: References: <877dkjovl6.fsf@gmail.com> <87tunlonj1.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <87tunlonj1.fsf@gmail.com> Received-SPF: pass client-ip=66.111.4.25; envelope-from=leo@famulari.name; helo=out1-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1619929694; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=7KT5IwjV5Db+/HUe5jZGwsQJaim7Vc5dHPwWZT2zRDE=; b=g/yIbjFoNNUEn3LHNOjrtYNo4JvoJ7ZNMwwpjdMP0KtN/tuiNOW4V5Npf4mEvOmeS2wVSB OcMqFDdM9bElWCSwpyl6Ag9Jwg87L1ukA6G6FoU79UOOuvk4SemQ+b9SuqCEGLLtawLWvv ym+oUyRDWetEJP8pvcoeHY9WEeAX6BWaQu8WGZT2ZQKT9+vj9nBjs3HMxUnhbBukB+kbZ7 TvL9DKJsU5UOMaN8rZ/rmrPUURWd+xsctmOW1xLgBZj1ZJcmVoZrHsOZ0HxNvkPm0JyEz8 +xvkOBEYvSWt0e/vQPqxljfDKs4Hcuv3OZrD6uhFMUJw0S5GcRuVTvRBPUBwuw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1619929694; a=rsa-sha256; cv=none; b=k+/Xjfd7KRnl95uc45y0Ml+scNJVl3j/Vsbw8TWH6nhxklDxLJkazmtWldZjnweS/cXLJP YObHyTE4WBqpzadZt4v+NsfxQuTBbJkC5AhybLReiVybi1TCqpFPUKu+ToKXZYRSikAZQV k9laHhGNTQf2633dsehnKJ94uuWuXRlRYVlAl14HZH9sJATEQ0n0W4zIcoHrpaE6VbmxRL oCjkjCNcv+Y/lWPFXIypSO71JLvH+00KADTewl0EO1QoUECepw+QBUQ+blWZk5XkD/we0Z N4VLlrxf+BKpHhWBti0LXUZZSfF5o/ZM7EdUOEaUzG1rp37Ca3oGOlUmLgcexQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=y5eYAmtU; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=WX63WVvu; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -2.66 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=y5eYAmtU; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=WX63WVvu; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: BC20827ED1 X-Spam-Score: -2.66 X-Migadu-Scanner: scn0.migadu.com X-TUID: tnW6C3P2XqxQ On Sat, May 01, 2021 at 10:52:18PM -0400, Maxim Cournoyer wrote: > > https://guix.gnu.org/manual/en/ > > https://guix.gnu.org/manual/devel/en/ > > Thank you for pointing that issue; I caught the problem with > guix-install.sh before posting, but overlooked that one. As you > pointed, that won't be reflected on our website, but I agree that having > the new key covered in the devel manual (master branch) is already an > improvement. The attached patch augments the manual to cover for the > new key. Let me know if it looks good to you. If it does, I will push > it to the master branch (IIUC we can't push this change to the > version-1.3.0 branch as that would break the string freeze there). The "devel" manual on the website reflects the master branch. So, there will be a web-based location where users can find these instructions documented immediately. The non-"devel" website manual is tied to the release tag. So, we have no choice but to make these changes on the version-1.3.0 branch, right? Or else the "1.3.0" manual will mention the wrong signing key? Your patch looks good except that the instructions about 'mykeyring.kbx' are a no-op: The created keyring contains no keys afterwards. This is with GnuPG 2.2.27 from current Guix. We should just remove these instructions since "--recv-keys" almost never works these days, since the keyserver network collapsed. For example: ------ $ gpg --no-default-keyring --keyring mykeyring.kbx --recv-keys 27D586A4F8900854329FF09F1260E46482E63562 gpg: keybox '/home/leo/.gnupg/mykeyring.kbx' created gpg: WARNING: server 'dirmngr' is older than us (2.2.12 < 2.2.27) gpg: Note: Outdated servers may lack important security fixes. gpg: Note: Use the command "gpgconf --kill all" to restart them. gpg: key 1260E46482E63562: no user ID gpg: Total number processed: 1 $ gpg --no-default-keyring --keyring mykeyring.kbx --recv-keys 3CE464558A84FDC69DB40CFB090B11993D9AEBB5 gpg: WARNING: server 'dirmngr' is older than us (2.2.12 < 2.2.27) gpg: Note: Outdated servers may lack important security fixes. gpg: Note: Use the command "gpgconf --kill all" to restart them. gpg: key 090B11993D9AEBB5: no user ID gpg: Total number processed: 1 $ cat ~/.gnupg/mykeyring.kbx KBXf`)y`)y% $ wc -c ~/.gnupg/mykeyring.kbx 32 /home/leo/.gnupg/mykeyring.kbx ------ As you can see, it does not contain two PGP keys. > Are you sure you downloaded it from https://guix.gnu.org/install.sh > (which just redirects to the current copy on the master branch) ? Yes. > Since commit e64af2060e8cfa48e74b887281acb3fd4c7e7781 (which was made > just before writing the original message), it checks for both keys. It checks for them one at a time, failing after each missing key. I described it here: https://lists.gnu.org/archive/html/guix-devel/2021-05/msg00039.html