[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Making local development easy
From: |
Christopher Baines |
Subject: |
Re: Making local development easy |
Date: |
Wed, 25 May 2016 17:48:55 +0200 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Icedove/38.7.2 |
On 25/05/16 10:23, Alex Sassmannshausen wrote:
>> The first, is that the hash is required, which I only had to compute
>> once, but if I wanted to change the package, I would have to update
>> this, which is prohibitive to local development. As an improvement to
>> this, could the hash be optional, and if it does not exist, be
>> calculated when the build is performed?
>
> From my perspective, I think silently calculating a hash on the fly if
> it is not provided would be problematic: it might lead to laziness in
> completing the hash, which would undermine the security model of Guix
> (if I understand correctly).
>
> But maybe an explicit flag setting the declaration to "dev-mode", might
> be useful?
In the use case I described, where you are packaging a local resource, I
don't think this is relevant, as you implicitly trust your own machine.
If you don't for some reason, you can just specify the hash.
signature.asc
Description: OpenPGP digital signature
Re: Making local development easy, Andy Wingo, 2016/05/25