From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id cKmyAWoM+mSMRwEAauVa8A:P1 (envelope-from ) for ; Thu, 07 Sep 2023 19:46:18 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4789::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id cKmyAWoM+mSMRwEAauVa8A (envelope-from ) for ; Thu, 07 Sep 2023 19:46:18 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id CF3B83F6CA for ; Thu, 7 Sep 2023 19:46:17 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=wolfsden.cz header.s=mail header.b=uWmyd+nd; dkim=pass header.d=wolfsden.cz header.s=mail header.b=tWAhq+PT; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=wolfsden.cz ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1694108778; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=U3+GwfAhy8eUI66PmnZYuHKuaHm6N+uz3x6T8HC9w+k=; b=ExjkXDlBWvnBewlvBy9F4EwYcfJfFJtaKrph4OW4rKAQ8zqSOodhlGlKmgfNhNNYSWC5SH SkIhnZaxv5WUlQKw1vQXyUoydk8Kk9pD4oJR92zzkyNxfrHJhKbCb0bW5xrHCYMT//BThn YXf9nWCzq+kwLn5NHM0zjAHv2AkNzOtCvTeogMBwx/DabmBxP3tWU7mav6xvAaGkK4hXS4 Rx1UE1YeQ3uS2pFY5ylflgxUW4kLbHj9m4HXxaOyXBziusxeh/Xq7DT+IN/35vHSV6w0bt 7ecWocPbaOEvK+aSVp4FAvz9TAOnS8+cXxsFb+ouyyljHQKSIiNuNtTkozmnSQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=wolfsden.cz header.s=mail header.b=uWmyd+nd; dkim=pass header.d=wolfsden.cz header.s=mail header.b=tWAhq+PT; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=wolfsden.cz ARC-Seal: i=1; s=key1; d=yhetil.org; t=1694108778; a=rsa-sha256; cv=none; b=Nr8wzUmQRxWEfD2zAM0UCw0meAS/zTav9/OtSjzoo/l2eBqoeU0WpIL51Mlfwym87TfTjH rFFuad0tKY0kJCL2U+DLXRgaw87phz45bG790gX/c9aWcJQg9fbSlragPiTYbseRVdHlLd ISEmijjQivzJvbe1cEkcuJEHi2nQNDiZ1i7BnHHDQhcL5aIhVb80b+xwCd9QChnqEQCaUm J6MWK2tBa3mPaYGT9b5/kmZxDBfWggqk71nICxeGDld1oow2CEZUxSbVSd8WfXJUyL5Csk /tqnSih9fFrPKoOwaAUqNFJs4Oa2MZo8joJwF3XsRfRdnLxQIxHp0YJ9pnYhtw== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qeJ4Y-0008WS-DA; Thu, 07 Sep 2023 13:45:42 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qeJ4W-0008WF-I7 for guix-devel@gnu.org; Thu, 07 Sep 2023 13:45:40 -0400 Received: from wolfsden.cz ([37.205.8.62]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qeJ4T-0000rg-Fe for guix-devel@gnu.org; Thu, 07 Sep 2023 13:45:40 -0400 Received: by wolfsden.cz (Postfix, from userid 104) id 6D55C27FDE7; Thu, 7 Sep 2023 17:45:32 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1694108732; bh=i7qPYM/Ko1DZFp2WiikDuCANl0P4HY64gCKzIJPZ5Io=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=uWmyd+ndQ2g/Adq4ufEVpD6gIi2unZMeO/B4ewZrLrGrYRurGAqR0LuPjn8v6ToWR d0P63GnCI2oYhrEq5JcnicYlSIIpQg4ysdVSszCbrih75iF+5wsmCLy/ZEolD33Idn W1RUupqx5IvlW83yhvh8mKBPdVDp5N4kjebZK2kjUq1eJ73kP/7rQDgLtSeCNzDWQa lPj4fMO77kInd31EBk99UcmV+nohL1VffqzjNVquuGSAiUb5TMi0xEnNS3ViBwv6So mfIUp5rDhUd3+j65lhVnNuqAhiCsLbHHKyOf5fJub+2lC9b6GCHjEHXmDgTN3b3BIp NzgOdVvap2eJplDVqCsAPlqQQ6VflN8djhrn2vjJ4ObOWN+Kep/09lG2MBAMg1UFn9 x0PtXDKqllMACf/b3QbctUtJESrzCtLX3Ojy6GbkdNfpkCWESxbc+BNV4iP374ckyh HmM2CV+F3uKA0LkkM1CQiDVAkYccmVJ+BLvAfymCu9Nx79jzxVc60ledTB7vuIVVmt S4FAHrOGT+bWYMp1Bftz9sOgrvmsvT8QgWRgl7//dzkFXfddXXKi0r0bPaA5aNT4Ce PMheXAgMYJoYp/Q5ysQWbraloS31MdqpoROg6cSu4mpFI1zjveWSsBM1g+Gh8wxAJa OYHx+YJM2WPf4UqjOVFwNeeg= Received: from localhost (unknown [146.70.134.166]) by wolfsden.cz (Postfix) with ESMTPSA id 3AB96259020; Thu, 7 Sep 2023 17:45:31 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1694108731; bh=i7qPYM/Ko1DZFp2WiikDuCANl0P4HY64gCKzIJPZ5Io=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=tWAhq+PTqk06Td7ERZTcOdkvjSohjQv+F603ZcehHaw+z41dZjSZCB+elDq5iQDXb OR647YQzaJ4T6FuTVAU9n5fDQFD9vbB4nM2ZUKBPH5iXR5b3sf1FNa3EKdoToZSSd5 vcVkbfZOnmI3SaTpfcSRvEsYMX6XOCDlrAR/NyJkXcp0elF3W/hionNijyOczbt/lR VsxxRnz2jpD/OSBKZBNGihN9f5gZTYqSDSflv8y+5MhZtsjXiu/2B98U9MiKBDv9Zo 24NUDKx8RXF6uwRdVKz7fhcQ3b5D77Vy2ZsswHHFl93AoFgb2Zv4Bszhbm+TxRLc1q bG3recldD87N9WE+tDVxJ9X3PEES6q6Yq21r+f9jIV17U8RI6GnKMmfTJBlxw9jiyT rv7NO2PAFKOoFo8vkapr78HEK6z0+VnZ9DS1BvGIj36njOlSMJDCYcdA3KtwHAr/Yu /AW7iBihdXcze0rTUjw3lGy6a7dnqX5vNgjS6ot5uqyxq10PbgXykeKxlWcSeISNV4 kVcoHbtexAUbv/0DW81QYsQT1F60A2+kfffNcMOdGSf/ZMTI3LdC7tAv+KTyuIDnO5 UNSHd4k/oCq2Ja6XNfu8/zomuRT4GUpMgrKhKSRE21KbiBDlj1ZwpeS84kc3Vo1HlB tRrf75mOt9Bo/zjWIylrjMvw= Received: from localhost (localhost [local]) by localhost (OpenSMTPD) with ESMTPA id cc8538de; Thu, 7 Sep 2023 17:45:30 +0000 (UTC) Date: Thu, 7 Sep 2023 19:45:30 +0200 From: wolf To: Simon Tournier Cc: Nicolas =?iso-8859-1?Q?D=E9bonnaire?= , guix-devel@gnu.org Subject: Re: Building from git Message-ID: Mail-Followup-To: Simon Tournier , Nicolas =?iso-8859-1?Q?D=E9bonnaire?= , guix-devel@gnu.org References: <87ledikx1u.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="/ykyUoJpZkAf5cg4" Content-Disposition: inline In-Reply-To: <87ledikx1u.fsf@gmail.com> Received-SPF: none client-ip=37.205.8.62; envelope-from=ws@wolfsnet.cz; helo=wolfsden.cz X-Spam_score_int: -17 X-Spam_score: -1.8 X-Spam_bar: - X-Spam_report: (-1.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, SPF_HELO_PASS=-0.001, SPF_NONE=0.001, UNPARSEABLE_RELAY=0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: CF3B83F6CA X-Migadu-Scanner: mx1.migadu.com X-Migadu-Spam-Score: -11.31 X-Spam-Score: -11.31 X-TUID: hw3xnfrFP6Wf --/ykyUoJpZkAf5cg4 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2023-09-07 14:06:05 +0200, Simon Tournier wrote: > Hi, >=20 > On Sat, 02 Sep 2023 at 11:03, Nicolas D=C3=A9bonnaire wrote: >=20 > > guix shell -D guix --pure > > ./bootstrap > > ./configure --localstatedir=3D/var --syscondir=3D/etc > > make >=20 > [...] >=20 > > Error: fontconfig:Didn't find expected font family. Perhaps URW Type 1 > > fonts need installing? >=20 > Hum, weird. That=E2=80=99s because the documentation seems failing, I gu= ess. >=20 > Could you share which Git commit you are building? And using which Guix > revision, before guix shell, what is the output of =E2=80=9Cguix describe= =E2=80=9C? >=20 >=20 >=20 >=20 > > Then if I run make authenticate as stated in the documentation it > > fails with the error: guix: command not found. >=20 > Yeah, I think that=E2=80=99s expected because =E2=80=99make=E2=80=99 fail= ed. Quoting: >=20 > If anything fails, take a look at installation instructions (*note > Installation::) or send a message to the mailing list > . >=20 > From there on, you can authenticate all the commits included i= n your > checkout by running: >=20 > make authenticate >=20 > However, hum maybe there is bug with that command on pure environment. > The manual is maybe inaccurate. >=20 > The Makefile does not run =E2=80=98guix git authenticate=E2=80=99 using .= /pre-inst-env. > And that=E2=80=99s probably to ensure the source of trust. If one corrup= t the > commit that is built, then =E2=80=99make authenticate=E2=80=99 would auth= enticate the > corruption because it would run the corrupted newly built guix command. > Currently, =E2=80=99make authenticate=E2=80=99 run one guix command that = had already > been authenticated. Well, that=E2=80=99s my understanding. Hmm, but the recipe for the authenticate rule comes from the (possibly) compromised source, no? So the attacker can just modify the recipe instead= of the command going the authentication. Am I missing something? >=20 >=20 > Cheers, > simon >=20 --=20 There are only two hard things in Computer Science: cache invalidation, naming things and off-by-one errors. --/ykyUoJpZkAf5cg4 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEt4NJs4wUfTYpiGikL7/ufbZ/wakFAmT6DDoACgkQL7/ufbZ/ wak8vA//dEq99LaXVq5NBYod5wU+9R+9HY4eqlRR411UbbpxouJY9f8SWuE3dGkB fiCYDoeWSIKKrwccWVKyGBlU5+PzSaPabwDWDmeIwScRFjY1aKLdVZA90amZx8P2 wev12sr8E2MF70tWlPSSkxECvWlZeHrvuRrJ8JEJinAHY7r30Zj89Y17WdhLpQiC JiwrlQNFF9rwlulsmmw2uc8LMG1ELoXLKcHQK8bxdZ0/ySLVvSrdihlmJ8leJ813 d8TpFie+VS++IH0xTGpCI40JY1AWQlrSJ+dMHubk9+45epIMeiLMJXgcwq+SeGQM gAB+n1AMPUqD9NG4lsc4rS8U/MVEWEB3R6wXH0KxC6+BzDpDvm2AYAUn7T1JKuOh pQ2CFn2JJFG7opjkI/UDuJQ9RCaLrSL2FLKegCSll1Ysf9MDLuR5KTDMfPCDK9h8 MG32InuOSysmdBpr8CAeGd4b9cJXTVgRQFNQDawzDV9opprTWbXlALcovT4nOgWw AK08Do3mGLnTsPgeuJInTEEdM+TqX+KK4ehfAbGZHRIb+TPNjrDhk+KZNmsZLJFs D0xPS7hnHrFnyV077eCC24LIBPCPnO0liSb0XUfnVliZQ2Csb0yqhN75Pg3cP+lx cc8ip1SkDxn5euvj5o6FUfFul757tw/gMhO1RHnfLX5EheGQ0sg= =h5fw -----END PGP SIGNATURE----- --/ykyUoJpZkAf5cg4--