From debbugs-submit-bounces@debbugs.gnu.org Mon Oct 02 16:29:16 2017 Received: (at 28659) by debbugs.gnu.org; 2 Oct 2017 20:29:16 +0000 Received: from localhost ([127.0.0.1]:44589 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz7L2-0005Kn-7d for submit@debbugs.gnu.org; Mon, 02 Oct 2017 16:29:16 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:55987) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dz7Kw-0005KV-Ey for 28659@debbugs.gnu.org; Mon, 02 Oct 2017 16:29:10 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.nyi.internal (Postfix) with ESMTP id B00BB22840; Mon, 2 Oct 2017 16:29:09 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute4.internal (MEProxy); Mon, 02 Oct 2017 16:29:09 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to:x-me-sender:x-me-sender:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=we671giaR7IBvrqX26SP/SKyAZuzWTqWxokP8W +BBVA=; b=OVrEGVKUnSDlGwNgXVHfpZqNCtbY3q6yimBbAITV7mUbSkzLjZv4e4 UcxJz33lQDEWLVy+8Uh9vpCyIbN9eL6hU05XjC4adetbUyOdw/KviUVYmNwR+hl4 oQJss/gu3RNjLGuEkvhinMMHuwCEcsoM55nCW5i4g+pnXs/7cNekw= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-sender :x-me-sender:x-sasl-enc:x-sasl-enc; s=fm1; bh=we671giaR7IBvrqX26 SP/SKyAZuzWTqWxokP8W+BBVA=; b=EOIkd7iWjhPt+tUMpeEcoYw1nGET0y665m fYvJmwdKz7PF0qbNrCxSSFYbdZBkK1zLT3k9x1HPF988g9QkWqAgNEN5vWuBhU8U UTfy3ASXg4FEcEQ1FJQwG4/kcvHPJuB6Xcg6mPqEVlZCfpyFxjsF0DHDgvKVyvIy m24YGA4+wUwgKHRSKO5YmK/gpcPdiCzuEM/1TsxUE/PHylh2V2jBVJoJ+7BfMhZF pmHlEINVVeMwa5Ui3xK4Qgde/mQt96l/ckNgYjqfO7r6rDPHW5P3+nLVWuvncvqT iBwz2IoTpGEAzJ+gDp6Czz9mhynXQeBlQu1q24gsbSF5qmmxa4gA== X-ME-Sender: X-Sasl-enc: gCr/REJKc0PM5rmYgJq1OMzdD9QPZQlMZyFE8arRG+wq 1506976149 Received: from localhost (c-73-165-108-70.hsd1.pa.comcast.net [73.165.108.70]) by mail.messagingengine.com (Postfix) with ESMTPA id 572027F9CC; Mon, 2 Oct 2017 16:29:09 -0400 (EDT) Date: Mon, 2 Oct 2017 16:29:07 -0400 From: Leo Famulari To: Jan Nieuwenhuizen Subject: Re: bug#28659: v0.13: guix pull fails; libgit2-0.26.0 and 0.25.1 content hashes fail Message-ID: <20171002202907.GA23960@jasmine.lan> References: <877ewf18d4.fsf@gnu.org> <87o9ppoabw.fsf@gnu.org> <20171002182208.GB10773@jasmine.lan> <878tgt721q.fsf@gnu.org> <87a8198fli.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Kj7319i9nmIyA2yE" Content-Disposition: inline In-Reply-To: <87a8198fli.fsf@gnu.org> User-Agent: Mutt/1.8.3 (2017-05-23) X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 28659 Cc: Ludovic =?iso-8859-1?Q?Court=E8s?= , 28659@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.7 (/) --Kj7319i9nmIyA2yE Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Oct 02, 2017 at 10:22:33PM +0200, Jan Nieuwenhuizen wrote: > Hmm. I'm not sure what problem we are solving. Should we only do this > for github(-like) tarballs? Do we see this problem with other sources, > should we prevent it? Possibly github will never do something like this > again. Or we could banish github/gitlab(?) auto-generated tarballs and > go for git checkouts+commits? Files referenced by URL (location-addressing vs content-addressing) have been changed in place by a variety of hosters and upstream projects since I've started paying attention to these issues. I don't think we need to do anything special regarding GitHub. --Kj7319i9nmIyA2yE Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlnSoZMACgkQJkb6MLrK fwgprRAAncJAFH/BMSTVqiV8vTF9mvsS8qFSaX1Vfj6XLPa3WpwoobMi6JOZQ1PG jSWwudvXNdVRljU337d3XpcFEHZdau6BYwgMg52RcQv8Tzd2rgG50alJT5PkrTb0 7Gs4QiTQbJbWkQWJBPZ0g6nvFctj30H2AtFRp91hrQbo1mKt0X+VHjEQavzZ162z 8xLTQ+fYt8/GtZB3EDKk4o0in+HpLSZTIasDmsNsmscEREXic0eEnUlASA56WhrU gXK82rqD36Vdvn5LJKfWfHFN24hHe/4gv3PT5DnaqmyI8Qz7D0UNcIGpOQM+NN1U Pg3ugWXHSxyvT9bXJtK/LNATO6/02W7hVB44Hzh1Bw0FD5svD9wCXkzXNojCjqn1 wWGVQ45xMk+Ach5VIntmH6gqLu5dVyFRcS1RX9/osBOPxO6A8SLAiod6XWcp7j/a 7VueoRU6wnsaZ7eIgjUZ59tAu/PUs5+XprFvz1oDfjKqS1hS8gyhncd83LEpdOma 7XXWON82W8xSZfK7mHOsdkje2O5LF1jygqhjJRtCYbhiPmhHC0FUCtue61lT2CH4 YUNDRyaJbnF3d4suGS/yftLFpEyZ/1sandASq643lAHO05lCsBwkcrr2AoA9a5zE 1dLX0qja45/Mf4oJkQUdzyO9kw7vgfvbNhPjvuDJ8mm2S11vWYU= =XoO+ -----END PGP SIGNATURE----- --Kj7319i9nmIyA2yE--