From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id gEJiNc5fT2UNnwAAG6o9tA:P1 (envelope-from ) for ; Sat, 11 Nov 2023 12:04:47 +0100 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id gEJiNc5fT2UNnwAAG6o9tA (envelope-from ) for ; Sat, 11 Nov 2023 12:04:46 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B8AC75256A for ; Sat, 11 Nov 2023 12:04:46 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gnu.org header.s=fencepost-gnu-org header.b=r3P9iBCb; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1699700686; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=p6oIne+FWo7I8Huwd0+cmYTIlGJwC0Ju9pg2YgnBIqc=; b=ZG/8YhcQPcEjuUSd9hw5Du5hqnGLXMQN9VDw1FzieDStGtgPh7uWZz/trLaCscKCTYGMUP 8yrhgLzNBNtCBLyvQ/6Q+8YK/BahobcVJrBVlZIb3kWIVS5+51ch2iHKUjtIj9/6sVYbQK iigqHT5d4KUqgvODjymhRq4DfzStRH5wEyP5QmJznFWDg+78DzgGpQNOqjjajZ+2mTAVET kc+2QGM7Faazr67cbusOdCvnTlLoMBIVdS57pE0ryg8doreWQL+XNCeJokOMmSoEedBQbb Ka/jOYupDMyKA/xErisDF9OBHADITwMOMlDSshp1RObOIV8cas2ysyXN+2ZV3Q== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gnu.org header.s=fencepost-gnu-org header.b=r3P9iBCb; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Seal: i=1; s=key1; d=yhetil.org; t=1699700686; a=rsa-sha256; cv=none; b=r13aqkjke1XjrbUJs73VrhC8MXh39aE5shpOPfkEStHWWHStEbYEgNzlPKqPNJFElj+TCZ +ko08vh8du9bxvOCiNZjxh1cI/kQij2+KcRClOYjD2YYwUrF8BtcA0EyY4d9Vyk5QcQCz2 8VfcQZ/2K8jFAIkjM+a8dYnRq8gAWJye87pStHGpq64QLASKZeE0f+XiZ3qHWsHIqDrmos K6sdzQ8ry2STj6vldgURBGC3/5KefqXfD9OT04hTBf5Mmcr7OR7KskCd8seYyzC+/7ByYE wsb/APTBWCboJuJ4CPo8h+zQGfcBl0mFk4W1ffva+nmTQKYpbnEoJyGDwrSP7w== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1r1lmx-0008No-Jy; Sat, 11 Nov 2023 06:04:31 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r1lmv-0008Ng-RA for guix-patches@gnu.org; Sat, 11 Nov 2023 06:04:29 -0500 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1r1lmv-0004Ip-H5; Sat, 11 Nov 2023 06:04:29 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1r1lnR-0005XR-TN; Sat, 11 Nov 2023 06:05:01 -0500 X-Loop: help-debbugs@gnu.org Subject: [bug#67072] [PATCH 0/4] Helping diagnose substitute setup issues Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: guix@cbaines.net, dev@jpoiret.xyz, ludo@gnu.org, othacehe@gnu.org, rekado@elephly.net, zimon.toutoune@gmail.com, me@tobias.gr, guix-patches@gnu.org Resent-Date: Sat, 11 Nov 2023 11:05:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 67072 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 67072@debbugs.gnu.org Cc: Emmanuel Agullo , Ludovic =?UTF-8?Q?Court=C3=A8s?= , Simon Tournier , Christopher Baines , Josselin Poiret , Ludovic =?UTF-8?Q?Court=C3=A8s?= , Mathieu Othacehe , Ricardo Wurmus , Simon Tournier , Tobias Geerinckx-Rice X-Debbugs-Original-To: guix-patches@gnu.org X-Debbugs-Original-Xcc: Christopher Baines , Josselin Poiret , Ludovic =?UTF-8?Q?Court=C3=A8s?= , Mathieu Othacehe , Ricardo Wurmus , Simon Tournier , Tobias Geerinckx-Rice Received: via spool by submit@debbugs.gnu.org id=B.169970065321209 (code B ref -1); Sat, 11 Nov 2023 11:05:01 +0000 Received: (at submit) by debbugs.gnu.org; 11 Nov 2023 11:04:13 +0000 Received: from localhost ([127.0.0.1]:52157 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r1lme-0005W0-Id for submit@debbugs.gnu.org; Sat, 11 Nov 2023 06:04:12 -0500 Received: from lists.gnu.org ([2001:470:142::17]:60092) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r1lmc-0005Vk-93 for submit@debbugs.gnu.org; Sat, 11 Nov 2023 06:04:10 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r1lls-0008EH-F7 for guix-patches@gnu.org; Sat, 11 Nov 2023 06:03:24 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r1llq-00038h-If; Sat, 11 Nov 2023 06:03:22 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:Subject:To:From:in-reply-to: references; bh=p6oIne+FWo7I8Huwd0+cmYTIlGJwC0Ju9pg2YgnBIqc=; b=r3P9iBCbKRNaK3 cNaFP2nlnAiQomDeHAp3Xq3tRuGJuc49xDLNQsw0oQ4UJyVMimQseQWw9rECWtbv6oinLpYUHbjhw Id6IxRRhxQDpsIeiWD5s/N8etJMCCgmrHPT+EeqTuyicKjvZAEV50I/err84UlUaZyMpq2BfVzuD1 cHUEkThrxJzYIhhxVvSFdaxMltuzkTMNfhbpF/kNrxD5+F/TmvDCzsEGSgjtTh9y8AsaLL/N+iShj WEVf8Rxe9j9FY3JHJyRKuGIuswlsvf/jfgQqxu8Ss07CfSycV/CDVi9txDCCoyJSjmz0kaGxj1EBe FfK/guoTnlaf1y+jwLcw==; From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Date: Sat, 11 Nov 2023 12:03:06 +0100 Message-ID: X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -4.31 X-Spam-Score: -4.31 X-Migadu-Queue-Id: B8AC75256A X-Migadu-Scanner: mx13.migadu.com X-TUID: QEWlDjMdh0hv Hello Guix! While discussing at the Reproducible Software Environments Workshop yesterday, Emmanuel Agullo and Simon Tournier suggested adding tools to help diagnose substitute setup issues: to see which substitutes URLs are being used and whether one of them is unauthorized. This is a step in that direction. First ‘guix weather’ and ‘guix challenge’ now default to the same substitute URLs as guix-daemon (this was not the case until now because there was no way to get that information from the daemon). Second ‘guix weather’ reports about unauthorized servers, like so: --8<---------------cut here---------------start------------->8--- $ guix weather coreutils computing 1 package derivations for x86_64-linux... looking for 2 store items on https://ci.guix.gnu.org... guix weather: warning: substitutes from 'https://ci.guix.gnu.org' are unauthorized hint: To authorize substitute download from `https://ci.guix.gnu.org', the following command needs to be run as root: guix archive --authorize <8--- It turned out to be a low-hanging fruit! Thoughts? Ludo’. Ludovic Courtès (4): daemon: Implement ‘substitute-urls’ RPC. challenge: Use the same substitute URLs as guix-daemon. weather: Use the same substitute URLs as guix-daemon. weather: Report unauthorized substitute servers. doc/guix.texi | 26 ++++++++++++++++--- guix/scripts/challenge.scm | 11 +++++--- guix/scripts/weather.scm | 46 ++++++++++++++++++++++++++++++--- guix/store.scm | 18 ++++++++++--- nix/libstore/worker-protocol.hh | 5 ++-- nix/nix-daemon/nix-daemon.cc | 17 ++++++++++++ tests/store.scm | 25 ++++++++++++++++-- 7 files changed, 132 insertions(+), 16 deletions(-) base-commit: 08d94fe20eca47b69678b3eced8749dd02c700a4 -- 2.41.0