Request for merging "go-team" branch

2024-11-08 Thread Sharlatan Hellseher
Hi! I'm tempted to merge go-team to master today/tomorrow. Nothing major was added since last time I've rebased it and the build coverage looks positive without regression. ARM builds are still scheduled, but as I noticed it's quite normal. -- Thanks, Oleg signature.asc Description: PGP signat

Magic Wormhole Package Weirdness/Potential Security Issues?

2024-11-08 Thread Juliana Sims
Hey folks, I tried to update magic-wormhole today and things went super smoothly. All I had to do was change the version number. I didn't even have to change the source hash. If that strikes you as odd, good! It should! To cover all my bases, I pk'd the hash produced by `pypi-uri` and used

Re: Magic Wormhole Package Weirdness/Potential Security Issues?

2024-11-08 Thread Ian Eure
Hi Juliana, Iโ€™ve observed some similar weirdness in the past when Iโ€™ve updated versions. I believe whatโ€™s happening is that Guix uses the hash to look up the file in a content-addressed store (either the local store or SWH), and is lacking verification that the retrieved object is the expect

Re: Magic Wormhole Package Weirdness/Potential Security Issues?

2024-11-08 Thread Troy Figiel
Hi Juli, On Fri, 2024-11-08 at 13:26 -0500, Juliana Sims wrote: > To cover all my bases, I pk'd the hash produced by `pypi-uri` and > used > `guix download` to try to fetch the same file and check its hash, > only > to find that `guix download` couldn't find anything at that URL or > its > fall

Re: Magic Wormhole Package Weirdness/Potential Security Issues?

2024-11-08 Thread Julien Lepiller
If you only change the version number, guix will cry to download that version. If it fails, then it relies on the provided hash to fetch from a content-adressed store, such as ci or sohtware heritage. It relies on the hash as the source of truth. Usually, when updating a package, I alter the ha

Re: Bug triage

2024-11-08 Thread Nicolas Graves
This email just to add Arun to the loop, IIUC he's also working on this. On 2024-11-08 15:11, Rostislav Svoboda wrote: > Hello, > >> I've tried to do some bug/patch triage yesterday and marked a bunch of >> patches as "easy" > > How well does mumi, the issue tracker, support predicates? > > Th

Re: Bug triage

2024-11-08 Thread Rostislav Svoboda
Hi, > Isn't this the same as [...] I wasn't talking about the meaning of the predicates in my examples. I wanted to point out that: - it would be nice to have a few predicate examples under the Hint and/or in the Help https://issues.guix.gnu.org/help#search - it seems like negation (i.e. "NOT") c

Re: Bug triage

2024-11-08 Thread Luis Felipe
Hi, On 8/11/24 14:11, Rostislav Svoboda wrote: Hello, > I've tried to do some bug/patch triage yesterday and marked a bunch of > patches as "easy" How well does mumi, the issue tracker, support predicates? This does not work: 'tag:easy AND (NOT (is:closed OR is:done))' https://issues.guix.gn

Fwd: Re: New North American based Guix Substitute Server, cuirass.genenetwork.org Now Available

2024-11-08 Thread Collin J. Doering
Didn't send this to the mailing list by accident. Forwarding for reference. Start of forwarded message From: "Collin J. Doering" To: Vagrant Cascadian Subject: Re: New North American based Guix Substitute Server, cuirass.genenetwork.org Now Available Da

Re: Bug triage

2024-11-08 Thread Rostislav Svoboda
Hello, > I've tried to do some bug/patch triage yesterday and marked a bunch of > patches as "easy" How well does mumi, the issue tracker, support predicates? This does not work: 'tag:easy AND (NOT (is:closed OR is:done))' https://issues.guix.gnu.org/search?query=tag%3Aeasy+AND+%28NOT+%28is%3Acl

Re: (unrelated and off-topics) Visiting a future of GNU

2024-11-08 Thread Andreas Enge
Am Fri, Nov 01, 2024 at 02:53:56PM +0100 schrieb Ricardo Wurmus: > The GNU Assembly ended up being rather immobilized by Not to mention Covid. And the fact that the hard part would have started when we wanted to not just define our basic manifesto, but move on to concrete governance structures. No

Re: Running a Guix User and Contributor survey

2024-11-08 Thread Steve George
Hi Denis, Thanks for reading through it. On 5 Nov, Denis 'GNUtoo' Carikli wrote: > On Wed, 30 Oct 2024 12:03:26 + > Steve George wrote: > Here's some feedback on the proposal below. > > > # Audience > > The audience for this survey are all Guix users and contributors > > [^1]. This means:

system-sexps?

2024-11-08 Thread Christopher Howard
Hi, I am trying to troubleshoot some old code (bug#74272). Did there used to be a guix function called system-sexps? Can anyone tell me where it used to be, or what function replaced it? -- ๐Ÿ“› Christopher Howard ๐Ÿš€ gemini://gem.librehacker.com ๐ŸŒ http://gem.librehacker.com ื‘ืจืืฉื™ืช ื‘ืจื ืืœื”ื™ื ืืช ื”ืฉืž