Re: The rust:cargo output - why?

2020-07-23 Thread John Soo
Hi Jakub, I agree. In my mind, anything that would be installed via rustup add component would be a separate output. Aside from that, to reduce closure size, Maybe the docs can go into a separate output? But cargo is quite integral to the rust workflow I was very confused by cargo as a se

MPFR and MPC

2020-07-23 Thread Andreas Enge
Hello, mpfr just had a new release 4.1.0: https://ftp.gnu.org/pub/gnu/mpfr/ and I am planning to make one for mpc as well. Should I follow some procedure for an update in Guix, or could I just push two commits to core-updates? Andreas

The rust:cargo output - why?

2020-07-23 Thread Jakub Kądziołka
Hi Guix, I have noticed that the procedure we use to install cargo to a separate output in the Rust definition has started rebuilding quite a large part of the compiler when the prefix is changed starting in Rust 1.34. I have asked around, and upstream doesn't support any straightforward way of in

Securing the software distribution chain

2020-07-23 Thread Justus Winter
Hello :) doing some packaging lately I noticed a weak link in Guix' authentication chain. Artifacts downloaded by Guix are authenticated using a hashsum included in the packaging definition, and 'guix download' will compute this hashsum over artifacts, but the step of authenticating the artifact