Re: Securing the software distribution chain

2020-07-31 Thread Justus Winter
Hello :) Ludovic Courtès writes: > Justus Winter skribis: >> So I think two things need to happen before this step can be improved: >> The package metadata should include the URL of the signature and a set >> of cryptographic identities eligible for signing the artifact. &g

Securing the software distribution chain

2020-07-23 Thread Justus Winter
Hello :) doing some packaging lately I noticed a weak link in Guix' authentication chain. Artifacts downloaded by Guix are authenticated using a hashsum included in the packaging definition, and 'guix download' will compute this hashsum over artifacts, but the step of authenticating the artifact

Re: [GSoC] Porting GuixSD to GNU Hurd draft

2016-03-24 Thread Justus Winter
Hi, Quoting Manolis Ragkousis (2016-03-24 14:55:31) > On 03/24/16 15:22, Ludovic Courtès wrote: > >>> The main question is whether you should implement build isolation in > >>> guix-daemon, in which case that would leave little time for the GuixSD > >>> parts. I think I would rather let you focus

Re: [GSoC] Porting GuixSD to GNU Hurd draft

2016-03-24 Thread Justus Winter
Quoting Manolis Ragkousis (2016-03-24 13:36:04) > > Hmmm, so one still needs a filesystem, right? That's going to be a > > bit tricky too, since whatever tool you use for that purpose, it > > surely does not support creating hurdish passive translator records. > > Without passive translator record

Re: [GSoC] Porting GuixSD to GNU Hurd draft

2016-03-24 Thread Justus Winter
Quoting Manolis Ragkousis (2016-03-24 12:18:25) > >>> The project consists of four main stages > >>> > >>> 1. Modify Guix so it will be able to create and mount the file-system > >>> needed to boot into a system with Hurd at its core. > >>> 2. Modify Guix so it can produce a working image, while

Re: [GSoC] Porting GuixSD to GNU Hurd draft

2016-03-23 Thread Justus Winter
Hi, Quoting Ludovic Courtès (2016-03-23 14:40:38) > > 2. The Project > > > > The project consists of four main stages > > > > 1. Modify Guix so it will be able to create and mount the file-system > > needed to boot into a system with Hurd at its core. > > 2. Modify Guix so it can produce a worki

Re: [PATCH] po: Drop removed file 'weechat.scm'.

2016-03-03 Thread Justus Winter
Hi Chris :) Quoting Chris Marusich (2016-03-03 16:47:13) > Is it not necessary to also do something about the other files that > mention weechat's prevoius location? For example: > > --8<---cut here---start->8--- > $ grep -r gnu/packages/weechat . > ./po/packag

Build-dependency on guile-json

2016-03-03 Thread Justus Winter
Hi, README says: > - optionally > [[http://savannah.nongnu.org/projects/guile-json/][Guile-JSON]], for the > 'guix import pypi' command However, lacking guile-json, building guix fails with: LOAD (guix import github) Backtrace: In ice-9/boot-9.scm: 1724: 19 [%start-stack load-stack ...

[PATCH] po: Drop removed file 'weechat.scm'.

2016-03-03 Thread Justus Winter
weechat has been merged into 'irc.scm' in e288f007. * po/packages/POTFILES.in: Drop removed file 'weechat.scm'. --- po/packages/POTFILES.in | 1 - 1 file changed, 1 deletion(-) diff --git a/po/packages/POTFILES.in b/po/packages/POTFILES.in index d77cb3b..60c6ab3 100644 --- a/po/packages/POTFILES

Re: [PATCH] gnu: Add genometools.

2016-02-15 Thread Justus Winter
Quoting Ben Woodcroft (2016-02-15 02:13:07) > Thanks for the patch, but it appears you've included many other > changes. Yeah :/ > Can you resend without them please? I will, as soon as I have revised the package not to use some libraries it bundles. Justus

Re: [PATCH] gnu: Add genometools.

2016-02-14 Thread Justus Winter
Quoting Justus Winter (2016-02-14 18:19:35) > I'll send a follow-up. Eww, that went bad :( Furthermore, the application bundles some libraries, I need to take care of that first. I'll send a revised patch soonish... Justus

Re: [PATCH] gnu: Add genometools.

2016-02-14 Thread Justus Winter
Hi, Quoting Andreas Enge (2016-02-14 16:47:10) > On Sun, Feb 14, 2016 at 03:56:21PM +0100, Justus Winter wrote: > > this is my first package, please be nice ;) > > we always are :-) :) > The package looks very nice, I only have a few minor comments. > > On Sun, Fe

[PATCH] gnu: Add genometools.

2016-02-14 Thread Justus Winter
* gnu-system.am (dist_patch_DATA): Add new patch. * gnu/packages/bioinformatics.scm (genometools): New package. * gnu/packages/patches/genometools-fix-testsuite.patch: New file. --- gnu-system.am | 1 + gnu/packages/bioinformatics.scm| 40 +

New package 'genometools'

2016-02-14 Thread Justus Winter
Hello, this is my first package, please be nice ;) Thanks to Manolis for answering all my questions :) Cheers, Justus

Re: [GSoC] Guix + Hurd continuation

2015-07-02 Thread Justus Winter
Quoting Ludovic Courtès (2015-07-02 14:14:57) > Justus Winter <4win...@informatik.uni-hamburg.de> skribis: > > > Quoting Ludovic Courtès (2015-07-02 11:33:29) > >> I think it would work anyway, but would end up starting one instance of > >> /hurd/symlink f

Re: [GSoC] Guix + Hurd continuation

2015-07-02 Thread Justus Winter
Quoting Ludovic Courtès (2015-07-02 11:33:29) > I think it would work anyway, but would end up starting one instance of > /hurd/symlink for each symlink, which is suboptimal. No, /hurd/symlink doesn't quite work as expected. Currently, the shortcut semantics are important for us. Justus