From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 20 18:42:17 2021 Received: (at 46849) by debbugs.gnu.org; 20 Mar 2021 22:42:17 +0000 Received: from localhost ([127.0.0.1]:53296 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkIP-0006cM-0q for submit@debbugs.gnu.org; Sat, 20 Mar 2021 18:42:17 -0400 Received: from mail-wr1-f49.google.com ([209.85.221.49]:43909) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lNkIL-0006bs-7r for 46849@debbugs.gnu.org; Sat, 20 Mar 2021 18:42:09 -0400 Received: by mail-wr1-f49.google.com with SMTP id e9so12761072wrw.10 for <46849@debbugs.gnu.org>; Sat, 20 Mar 2021 15:42:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:in-reply-to:references:date:message-id:mime-version :content-transfer-encoding; bh=VfZUZg495l0h4V7/dFDUqZeOuy85SHDgmlfEv4PM6Hc=; b=cd/2E1xpSeKMIJUrXw393MuXrbV2Dy8lPN/4/g/NQPugLNLwqndClR5sctXISxYqgp FRoEPyxcf+1t9YW2sOVNbC1tPUQ5IVBQnill7Af+ImjWV88lTA59WjJW4Tg9nxPRolnP dK0Mj59lGlAHZomgmvLUpIwsNDqwFCV3NMjdkiw85qZ+l/1QtjNqAS53XV0qNeFAZw0J JP+J0yu3EJFTBW+3vT1u13GZ8EofTvb0ZNYJuNj1TbmcqwmZpsnreuArrrOP1BlRLogA 1/FA0K5haYFoFAgm+kcr2GXqP/kD/rllFAHlWcnXP4OJPlD5gVymDcnVVLIuMR1on9h3 Lafg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=VfZUZg495l0h4V7/dFDUqZeOuy85SHDgmlfEv4PM6Hc=; b=Ez2QqHZCTQ7msfAkcbGtQcYK4O2fjCvI/4IK6PAl1PC92QchDAGfRNhOa8Y39HYZCS 5xrM0dzcfFxeZSTRZpHVTz1TDVW/t7A+iKSqjcsM6mlg07ucOgM1ag7gR+sKpK4rSHvk UYKdKzYsK5JNB6dCH2m8TQSGGooKbLPXYPOA9fMWqdolx3ftHKnKgcXHdlqsi/hbpUhg mREy5HVF59lAoQwGBWNVMIuNMOs829U0OudXT5UhN8hVpbinygnYpzdic/qHEHmGbQeu 7XwgseWmEPUBY9CwAK6HBDV9omFhkcl0yU1LJbhIlX3KmIEHYZMRUMB5fV6PozeUEoRL fKuQ== X-Gm-Message-State: AOAM532OZ11hLeJV535Gl7xS3jHcpPe3q3VcJcrVbbrHXRhW2bz9DOZv Wctl87IZ5cA+5gIfGgygIJLWtrN43yo= X-Google-Smtp-Source: ABdhPJya3wHTaDpiFezCJigFPUOf9c0QYPbXIPVlcg4jHSjgYQINFhvQFdxMjjdNY8wOAYkfdX3bDg== X-Received: by 2002:adf:dd47:: with SMTP id u7mr11086795wrm.13.1616280123691; Sat, 20 Mar 2021 15:42:03 -0700 (PDT) Received: from lili ([2a01:e0a:925:4d20:1002:72b2:7492:ea32]) by smtp.gmail.com with ESMTPSA id v13sm16607214wrt.45.2021.03.20.15.42.02 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 20 Mar 2021 15:42:03 -0700 (PDT) From: zimoun To: 86h7l5wj44.fsf@gmail.com, 46849@debbugs.gnu.org Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible In-Reply-To: <868s6hwirn.fsf@gmail.com> References: <1614944586.o4nfnu43ci.jorsn@jorsn.eu> <86eeg9wj0p.fsf@gmail.com> <868s6hwirn.fsf@gmail.com> Date: Sat, 20 Mar 2021 23:41:48 +0100 Message-ID: <864kh5wiqb.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 46849 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Follow up 3. -------------------- Start of forwarded message -------------------- From: zimoun To: Johannes Rosenberger Subject: Re: bug#46849: ELPA packages are fetched from unstable url -> not reproducible Date: Fri, 05 Mar 2021 13:31:09 +0100 Hi Johannes, On Fri, 05 Mar 2021 at 13:08, Johannes Rosenberger wrot= e: >>> There is 2 solutions: >>> >>> 1- trust the future Tarball Heritage [1] >>> 2- switch to git-fetch all the ELPA packages. >> 3- trust archive.org About archive.org, I do not know. Currently, there is no fallback in Guix to it that I am aware, and nothing planned AFAIK. > and maybe a fourth one: > > 4- https://www.softwareheritage.org/ > (Blog entry about Nix & this by Tweag: https://www.softwareheritag= e.org/) Yeah, this is what I called #1. :-) Currently, via the =E2=80=99nixguix=E2= =80=99 SWH loader [1], packages using url-fetch are archived via the file [2]. However, work remains to have a full robust end-to-end solution: a) not all the extensions of =E2=80=99url-fetch=E2=80=99 are archived (an= d I do not remember the status about the .el) b) the fallback is not robust because of inconsistent addresses between SWH (swh-id) and the-rest-of-the-world (checksum hashes)=E2=80=93to= say it quickly. The aim of the disarchive=E2=80=99s project [3] is to address b) by creatin= g a bridge, i.e., stores in a separate database [4] the structure of the metadata and then rebuild the archive from a checksum using the files addressed by swh-id. 1: 2: 3: 4: Cheers, simon -------------------- End of forwarded message --------------------