l...@gnu.org (Ludovic Courtès) skribis:
>> + #:use-module (ice-9 optargs)
>
> This module is not needed (it’s for command-line argument processing.)
Sorry, I just realized my mistake: (ice-9 optargs) was indeed for #:key,
#:optional, and #:rest handling, but it no longer needs to be imported
wit
Nikita Karetnikov skribis:
>> That could be done by changing ‘gnupg-verify*’. An optional argument
>> could be added to select between interactive behavior (“do you want to
>> download this key and add it to your keyring?”), always-download, and
>> never-download.
>
> I'm attaching my attempt.
> That could be done by changing ‘gnupg-verify*’. An optional argument
> could be added to select between interactive behavior (“do you want to
> download this key and add it to your keyring?”), always-download, and
> never-download.
I'm attaching my attempt.
There are two similar but unrelated
Nikita Karetnikov skribis:
> (define (gnupg-receive-keys key-id server)
> - (system* (%gpg-command) "--keyserver" server "--recv-keys" key-id))
> + (system* (%gpg-command)
> + "--keyserver" server
> + "--search-keys" (string-append "0x" key-id)))
As the name suggests, this
>> And I still think that 'guix refresh' must ask before importing a key.
> Patches welcome. :-)
What do you think?
diff --git a/guix/gnupg.scm b/guix/gnupg.scm
index c17a495..ba5160a 100644
--- a/guix/gnupg.scm
+++ b/guix/gnupg.scm
@@ -143,7 +143,9 @@ missing key."
status))
(define
> Oh, maybe it doesn’t distinguish between “command not found” and some
> other error, that’s what you mean?
Yes, I guess.
>> '/etc/resolv.conf' isn't empty; '/usr/bin/gpg' works fine.
> /usr/bin/gpg uses a different libc, and perhaps it uses the IPv4-only
> gethostbyname too.
>> And I still th
Nikita Karetnikov skribis:
>>> In execlp of gpg2: No such file or directory
>
>> You need to have GnuPG 2.x installed:
>
>> guix package -i gnupg
>
> Why is it trying to download tarballs after this error? I think it
> should print an error message and exit.
Doesn’t fe3e603 address this? Oh,
>> In execlp of gpg2: No such file or directory
> You need to have GnuPG 2.x installed:
> guix package -i gnupg
Why is it trying to download tarballs after this error? I think it
should print an error message and exit.
How can I use packages from my profile? I've added
'/root/.guix-profile'
Nikita Karetnikov skribis:
>> Objects aren’t malicious. Perhaps you’re talking about situations where
>> a mirror provides a tarball along with a valid signature, but said
>> signature is made with a random key, and the tarball is actually not
>> genuine, right?
>
> Yep.
>
>> Second, this is the
> Objects aren’t malicious. Perhaps you’re talking about situations where
> a mirror provides a tarball along with a valid signature, but said
> signature is made with a random key, and the tarball is actually not
> genuine, right?
Yep.
> Second, this is the same model as used by the OpenSSH cli
Nikita Karetnikov skribis:
>> When downloading new tarballs, it also retrieves signatures and checks
>> them with GPG, via the new (guix gnupg) module.
>
> Could you point me to this part of the source code? I fail to find it.
See ‘download-tarball’ in gnu-maintenance.scm.
>> If the public key
> When downloading new tarballs, it also retrieves signatures and checks
> them with GPG, via the new (guix gnupg) module.
Could you point me to this part of the source code? I fail to find it.
> If the public key is missing, it attempts to get it from keys.gnupg.net,
> and tries again; in that
Am Montag, 29. April 2013 schrieb Ludovic Courtès:
> Commit e0fbbc8 should fix it. Can you confirm?
So far, I just tried the binary substituter, and it works. Excellent,
thanks for all your effort!
Andreas
l...@gnu.org (Ludovic Courtès) skribis:
> Andreas Enge skribis:
>
>> Am Samstag, 27. April 2013 schrieb Ludovic Courtès:
>>> Can you confirm that it all works beautifully? :-)
>>
>> No. But is there progress?
>>
>> $ guix build hello
>
> [...]
>
>> 359: 1 [filtered-port # #]
>> In unknown file:
Andreas Enge skribis:
> Am Samstag, 27. April 2013 schrieb Ludovic Courtès:
>> Can you confirm that it all works beautifully? :-)
>
> No. But is there progress?
>
> $ guix build hello
[...]
> 359: 1 [filtered-port # #]
> In unknown file:
>?: 0 [fileno #]
>
> ERROR: In procedure fileno:
>
Am Samstag, 27. April 2013 schrieb Ludovic Courtès:
> Can you confirm that it all works beautifully? :-)
No. But is there progress?
$ guix build hello
the following file will be downloaded:
/nix/store/w2121wnp8xv3ycjsgj3ymhb147mrgpc9-hello-2.8
@ substituter-started /nix/store/w2121wnp8xv3ycj
Andreas Enge skribis:
> Am Samstag, 27. April 2013 schrieb Ludovic Courtès:
>> I believe commit 1424a96 (in master) fixes that and the related
>> substituter problem. Could you try and report back?
>
> For "refresh", things seem to work:
>
> starting download of `guix-file.yU56z7' from
> `ftp:/
Am Samstag, 27. April 2013 schrieb Ludovic Courtès:
> I believe commit 1424a96 (in master) fixes that and the related
> substituter problem. Could you try and report back?
For "refresh", things seem to work:
starting download of `guix-file.yU56z7' from
`ftp://ftp.gnupg.org//gcrypt/libassuan/lib
Andreas Enge skribis:
> Am Donnerstag, 25. April 2013 schrieb Ludovic Courtès:
>> There’s a new ‘guix refresh’ command.
>
> It also requires a newer guile than 2.0.5:
>
> guix refresh: warning: using Guile 2.0.5-deb+1-3, which does not support
> HTTP ((chunked)) encodi
Am Donnerstag, 25. April 2013 schrieb Ludovic Courtès:
> There’s a new ‘guix refresh’ command.
It also requires a newer guile than 2.0.5:
guix refresh: warning: using Guile 2.0.5-deb+1-3, which does not support
HTTP ((chunked)) encoding
guix refresh: error: download failed; use a newer Gu
I’ve added a --select option. The idea is that in ‘master’ you would
run ‘guix refresh --select=non-core’ to avoid updating core packages,
which would otherwise trigger a full rebuild.
Conversely, on ‘core-updates’ you would happily run ‘guix refresh -s core’
to update only core packages.
Ludo’
Hello!
There’s a new ‘guix refresh’ command. The target audience is mostly
Guix developers: the command reports GNU packages that are not
up-to-date, and optionally updates the source files to reflect the new
version number and tarball hash. (This is essentially a port of my
‘gnupdate’ program
22 matches
Mail list logo
