From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id EKcgBXnZY2EXmQAAgWs5BA (envelope-from ) for ; Mon, 11 Oct 2021 08:28:09 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id QISWO3jZY2HqXAAAB5/wlQ (envelope-from ) for ; Mon, 11 Oct 2021 06:28:08 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B169DF132 for ; Mon, 11 Oct 2021 08:28:00 +0200 (CEST) Received: from localhost ([::1]:51650 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mZon0-0000Py-Kd for larch@yhetil.org; Mon, 11 Oct 2021 02:27:58 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:58542) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mZomm-0000Pn-91 for help-guix@gnu.org; Mon, 11 Oct 2021 02:27:44 -0400 Received: from wout5-smtp.messagingengine.com ([64.147.123.21]:35129) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mZomj-0002KB-H7 for help-guix@gnu.org; Mon, 11 Oct 2021 02:27:44 -0400 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id 4C6E73200A3E; Mon, 11 Oct 2021 02:27:38 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Mon, 11 Oct 2021 02:27:38 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fastmail.net; h= from:to:cc:subject:in-reply-to:references:date:message-id :mime-version:content-type:content-transfer-encoding; s=fm1; bh= W2WjeJHuSdzYGFmgtEuCJnz6eyTnd6xJUWlbqabw7xc=; b=KNc4AXaPljTG0E74 NB9MpQnw5hf2SMhNvs29TC1CKwWttoTiru4INhefVMEM3yhfNHoIomjYWePBjaLw bVO1UpiLDO4r8YrbvSNLENYWrGqCuRc7G168/6zPXdoTk9q+MIdWcyuIIFRQsHZ0 Dq7WVvte3/BJZmNaoe71BbEexpzHimCaRLVsZc8dUhoL9LHz4w+ki2cX20VVupPO KQUq+TzkZPqv2foMNU7IsYtUvR9jUkZwcbd95fO713zsT6TUmamw0W6oT3mYO+Qb 4qpkq3K+KJ1IcSBBm96NtGo2CNPSSqFDQirNb3Gaqkr8bU6gr+6tDev524h9DxwJ 6K7wbg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=W2WjeJHuSdzYGFmgtEuCJnz6eyTnd6xJUWlbqabw7 xc=; b=NpCmJby5FglsQreh3gLZ2gHAB+BOpMiSDbQhL6b5VftEt+/E+hdKLI2Y8 LtNkR6VxuukrwIUUch6/BxpfCvbBjzGal+q1B17gsQp4PORB3xNRvskbyiz7Jije Q5vDjO3RPSd/Vn+CUsxyVYnkgRYM03RCn62xYyhESFfvdU2rVb0RSyVhwUBL6/vb Vhr+QEUpLvUyDiIJpYw1j9Qz1Xdo4CnfONirdMifmF4SlyAbY+sh8LgeHw7ESWJP EditVeAy8gSGrKSYd7x28iXsZ7Jny+/5miVUb738lT/EtVWg+UMr9450XT+Nl9if O73VULBnzN1olJ1btLMABoqJLtXhg== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrvddthedguddtgecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enucfjughrpefhvffujghffffkgggtgfesthhqredttddtjeenucfhrhhomhepmfhonhhr rgguucfjihhnshgvnhcuoehkohhnrhgrugdrhhhinhhsvghnsehfrghsthhmrghilhdrnh gvtheqnecuggftrfgrthhtvghrnhepveehleevgeejuddvgfduieefveetffdvteegfeek gfduueejfeegvdehgeekhfejnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpe hmrghilhhfrhhomhepkhhonhhrrggurdhhihhnshgvnhesfhgrshhtmhgrihhlrdhnvght X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 11 Oct 2021 02:27:36 -0400 (EDT) From: Konrad Hinsen To: Wiktor =?utf-8?Q?=C5=BBelazny?= Subject: Re: Certificates in pure and containerized environments In-Reply-To: <20211010154242.k4xrcaxtptevu4fx@wzguix> References: <20211003164510.ebwlm6u24a2bgao4@wzguix> <86v92ddzfq.fsf@gmail.com> <20211010154242.k4xrcaxtptevu4fx@wzguix> Date: Mon, 11 Oct 2021 08:27:35 +0200 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=64.147.123.21; envelope-from=konrad.hinsen@fastmail.net; helo=wout5-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix@gnu.org Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1633933683; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=W2WjeJHuSdzYGFmgtEuCJnz6eyTnd6xJUWlbqabw7xc=; b=Ybs+Uh8VxbbyEoletM1lR0YpQcmelRbl9xhgIyzoN42lZRT7LnKOIa01ZxrFBpM3Fa1Rb0 v+jOC1S+eiDLppJ9D66nRRVAW12hEresYPWvVK3xKrB4Cpe+qY3fumo58rsdzkdQ9z4paj nNJXTXkXd7GbGo4eU0+N3kd8MS9WyT50BWxUMApplH4O2M2TbCCdaweoX/g5stgjicYqB/ zYtjyRKwMksLkXJ43CMzx2YQnM93r8db/zwQEHjsia/wKf1/6IUF3b1Gg0h/UwHdYL7t24 lqsGwoLmDA+zVz+hh/Erw+WJ6RyDoQH7LPfNgEIc5WounXFCqEb34kWXsnHG0Q== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1633933683; a=rsa-sha256; cv=none; b=kQOfp9IyVujyhDO5riSdT3Pw/9nFdHP5Kpo2EX+T0SqY3ilmAAmVDTy0vZcUFygLWyi67i tvvZOIbLAPSocNpBY0mLPkYZ0gxKh0UfzHOP38B9ootrtpeVsk7ti8s7hbOqjS7RvJ4ZiN IhLh982usOmzjQauz9IBXXiL7slgocwLeAbVqm/sm/wVpW/Te/GytYt9A9GFck6DTLBgIk uMH6rmQunGdajINEefI631ot5nf5biNNe7Yg7apfcdZtMK2pixElibH2A/LAq7Gx2kvzAX cJ/5jklhNp9bn+kcHgr6ePKwV4ALiJjIFA5rz6J2MVulW4HZNU4YLgYa1ccNmQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=fastmail.net header.s=fm1 header.b=KNc4AXaP; dkim=pass header.d=messagingengine.com header.s=fm1 header.b=NpCmJby5; dmarc=pass (policy=none) header.from=fastmail.net; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Spam-Score: -3.11 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=fastmail.net header.s=fm1 header.b=KNc4AXaP; dkim=pass header.d=messagingengine.com header.s=fm1 header.b=NpCmJby5; dmarc=pass (policy=none) header.from=fastmail.net; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Queue-Id: B169DF132 X-Spam-Score: -3.11 X-Migadu-Scanner: scn0.migadu.com X-TUID: ooHf7dmJ8qd8 Wiktor =C5=BBelazny writes: > Would it make sense to define a minimal package that includes only > nss-certs input and use it for this purpose, then? A package that > inherits from "hello" with nss-certs input added, for instance? That would be a quick fix. Could it become an obstacle to a better long-term solution? Otherwise I like the idea. Cheers, Konrad