[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: auth-tarball-from-git

From: Ludovic Courtès
Subject: Re: auth-tarball-from-git
Date: Mon, 30 May 2022 18:21:46 +0200
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux)

Hi! skribis:

> Authenticate a tarball through a signed tag in a git repository (with 
> reproducible builds).
> Blog post:
> Source code:
> Pretty interesting, could be useful for guix.

The example here is about downloading tarballs,
which we don’t do in Guix for other reasons.

The kind of tarballs that Guix packages refer to are not autogenerated;
they contain more than what the VCS has.  Thus, they’re also more
difficult to authenticate if they’re not signed.

Thanks for sharing!


reply via email to

[Prev in Thread] Current Thread [Next in Thread]