GNU bug report logs - #21784
xz-5.0.4.tar.gz is unavailable upstream

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 21784 in the body.
You can then email your comments to 21784 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: "-=}\\*/{=-" <rui.damas <at> gmail.com>
To: bug-guix <at> gnu.org
Subject: cannot install icecat!
Date: Thu, 29 Oct 2015 07:30:39 +0000

[Message part 1 (text/plain, inline)]

starting download of
`/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz' from `
http://tukaani.org/xz/xz-5.0.4.tar.gz'...
ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
"Forbidden"
failed to download
"/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz" from "
http://tukaani.org/xz/xz-5.0.4.tar.gz"
builder for
`/gnu/store/1y6b3ar37ff4q16714m77d56giv01cr5-xz-5.0.4.tar.gz.drv' failed to
produce output path
`/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz'

[Message part 2 (text/html, inline)]

Message #8 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Efraim Flashner <efraim <at> flashner.co.il>
To: "-=}\\*/{=-" <rui.damas <at> gmail.com>
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: bug#21784: cannot install icecat!
Date: Thu, 29 Oct 2015 21:20:19 +0200

[Message part 1 (text/plain, inline)]

On Thu, 29 Oct 2015 07:30:39 +0000
"-=}\\*/{=-" <rui.damas <at> gmail.com> wrote:

> starting download of
> `/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz' from `
> http://tukaani.org/xz/xz-5.0.4.tar.gz'...
> ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
> "Forbidden"
> failed to download
> "/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz" from "
> http://tukaani.org/xz/xz-5.0.4.tar.gz"
> builder for
> `/gnu/store/1y6b3ar37ff4q16714m77d56giv01cr5-xz-5.0.4.tar.gz.drv' failed to
> produce output path
> `/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz'

from tukaani.org/xz:

Important

Availability of .tar.gz and .tar.bz2 files of certain old XZ Utils versions
have been temporary suspended because they are consume too much of the web
hosting bandwidth quota. The files will be restored in November 2015, but
further changes may be needed if the problem persist. Sorry for the
inconvenience.

It would be nice if developers of source-based distributions had their own
mirrors from where the users' computers would download the source packages.
It's not good if a package manager on every user's machine downloads the
source package from the upstream site. 

If we didn't need xz to unpack the tarball we could switch it. 5.0.4 is
pretty old, is that for the bootstrap?

-- 
Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[Message part 2 (application/pgp-signature, inline)]

Message #11 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Efraim Flashner <efraim <at> flashner.co.il>
To: "-=}\\*/{=-" <rui.damas <at> gmail.com>
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: bug#21784: cannot install icecat!
Date: Thu, 29 Oct 2015 21:23:40 +0200

[Message part 1 (text/plain, inline)]

On Thu, 29 Oct 2015 21:20:19 +0200
Efraim Flashner <efraim <at> flashner.co.il> wrote:

> On Thu, 29 Oct 2015 07:30:39 +0000
> "-=}\\*/{=-" <rui.damas <at> gmail.com> wrote:
> 
> > starting download of
> > `/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz' from `
> > http://tukaani.org/xz/xz-5.0.4.tar.gz'...
> > ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
> > "Forbidden"
> > failed to download
> > "/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz" from "
> > http://tukaani.org/xz/xz-5.0.4.tar.gz"
> > builder for
> > `/gnu/store/1y6b3ar37ff4q16714m77d56giv01cr5-xz-5.0.4.tar.gz.drv' failed to
> > produce output path
> > `/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz'  
> 
> from tukaani.org/xz:
> 
> Important
> 
> Availability of .tar.gz and .tar.bz2 files of certain old XZ Utils versions
> have been temporary suspended because they are consume too much of the web
> hosting bandwidth quota. The files will be restored in November 2015, but
> further changes may be needed if the problem persist. Sorry for the
> inconvenience.
> 
> It would be nice if developers of source-based distributions had their own
> mirrors from where the users' computers would download the source packages.
> It's not good if a package manager on every user's machine downloads the
> source package from the upstream site. 
> 
> If we didn't need xz to unpack the tarball we could switch it. 5.0.4 is
> pretty old, is that for the bootstrap?
> 

I spoke too soon, 5.0.4 is our current copy while 5.2.2 is upstream, and the
5.0.x branch is apparently now unmaintained. Unfortunately, I think it's fair
to say that at least half of the packages depend on xz, including the
bootstrap, so updating will involve lots of rebuilds.

-- 
Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[Message part 2 (application/pgp-signature, inline)]

Message #14 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: "-=}\\*/{=-" <rui.damas <at> gmail.com>
To: Efraim Flashner <efraim <at> flashner.co.il>
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: bug#21784: cannot install icecat!
Date: Thu, 29 Oct 2015 19:30:37 +0000

[Message part 1 (text/plain, inline)]

hi... :)

i'm just a gun fan...

i use linux since 2000, debian.
had a try with nixos, then i found guix.
i' running it on top of jessie to use icecat as richard stallman suggests.

i'm doing it for the kick's of it.
i barely really understand what you say.

i just want to use icecat and get acquainted with the new gnu system and
integrate it well along with debian... for now.

[]r.

On Thu, Oct 29, 2015 at 7:20 PM, Efraim Flashner <efraim <at> flashner.co.il>
wrote:

> On Thu, 29 Oct 2015 07:30:39 +0000
> "-=}\\*/{=-" <rui.damas <at> gmail.com> wrote:
>
> > starting download of
> > `/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz' from `
> > http://tukaani.org/xz/xz-5.0.4.tar.gz'...
> > ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
> > "Forbidden"
> > failed to download
> > "/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz" from "
> > http://tukaani.org/xz/xz-5.0.4.tar.gz"
> > builder for
> > `/gnu/store/1y6b3ar37ff4q16714m77d56giv01cr5-xz-5.0.4.tar.gz.drv' failed
> to
> > produce output path
> > `/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz'
>
> from tukaani.org/xz:
>
> Important
>
> Availability of .tar.gz and .tar.bz2 files of certain old XZ Utils versions
> have been temporary suspended because they are consume too much of the web
> hosting bandwidth quota. The files will be restored in November 2015, but
> further changes may be needed if the problem persist. Sorry for the
> inconvenience.
>
> It would be nice if developers of source-based distributions had their own
> mirrors from where the users' computers would download the source packages.
> It's not good if a package manager on every user's machine downloads the
> source package from the upstream site.
>
> If we didn't need xz to unpack the tarball we could switch it. 5.0.4 is
> pretty old, is that for the bootstrap?
>
> --
> Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
> GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
> Confidentiality cannot be guaranteed on emails sent or received unencrypted
>

[Message part 2 (text/html, inline)]

Message #17 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: "-=}\\*/{=-" <rui.damas <at> gmail.com>
To: Efraim Flashner <efraim <at> flashner.co.il>
Cc: 21784 <21784 <at> debbugs.gnu.org>
Subject: Re: bug#21784: cannot install icecat!
Date: Thu, 29 Oct 2015 19:39:08 +0000

[Message part 1 (text/plain, inline)]

lulz: i was not expecting AT ALL that icecat, suggested publicly, the only
package i needed (for now), the kick start, would fail to install... (lol:
please tell murphy to leave the room)...

when is fixed 'there' do i use "pull" or "package upgrade"?

[]r.

On Thu, Oct 29, 2015 at 7:30 PM, -=}\*/{=- <rui.damas <at> gmail.com> wrote:

> hi... :)
>
> i'm just a gun fan...
>
> i use linux since 2000, debian.
> had a try with nixos, then i found guix.
> i' running it on top of jessie to use icecat as richard stallman suggests.
>
> i'm doing it for the kick's of it.
> i barely really understand what you say.
>
> i just want to use icecat and get acquainted with the new gnu system and
> integrate it well along with debian... for now.
>
> []r.
>
> On Thu, Oct 29, 2015 at 7:20 PM, Efraim Flashner <efraim <at> flashner.co.il>
> wrote:
>
>> On Thu, 29 Oct 2015 07:30:39 +0000
>> "-=}\\*/{=-" <rui.damas <at> gmail.com> wrote:
>>
>> > starting download of
>> > `/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz' from `
>> > http://tukaani.org/xz/xz-5.0.4.tar.gz'...
>> > ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
>> > "Forbidden"
>> > failed to download
>> > "/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz" from "
>> > http://tukaani.org/xz/xz-5.0.4.tar.gz"
>> > builder for
>> > `/gnu/store/1y6b3ar37ff4q16714m77d56giv01cr5-xz-5.0.4.tar.gz.drv'
>> failed to
>> > produce output path
>> > `/gnu/store/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz'
>>
>> from tukaani.org/xz:
>>
>> Important
>>
>> Availability of .tar.gz and .tar.bz2 files of certain old XZ Utils
>> versions
>> have been temporary suspended because they are consume too much of the web
>> hosting bandwidth quota. The files will be restored in November 2015, but
>> further changes may be needed if the problem persist. Sorry for the
>> inconvenience.
>>
>> It would be nice if developers of source-based distributions had their own
>> mirrors from where the users' computers would download the source
>> packages.
>> It's not good if a package manager on every user's machine downloads the
>> source package from the upstream site.
>>
>> If we didn't need xz to unpack the tarball we could switch it. 5.0.4 is
>> pretty old, is that for the bootstrap?
>>
>> --
>> Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
>> GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
>> Confidentiality cannot be guaranteed on emails sent or received
>> unencrypted
>>
>
>

[Message part 2 (text/html, inline)]

Message #20 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Efraim Flashner <efraim <at> flashner.co.il>
To: "-=}\\*/{=-" <rui.damas <at> gmail.com>
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: bug#21784: cannot install icecat!
Date: Thu, 29 Oct 2015 21:51:02 +0200

[Message part 1 (text/plain, inline)]

On Thu, 29 Oct 2015 19:30:37 +0000
"-=}\\*/{=-" <rui.damas <at> gmail.com> wrote:

> hi... :)
>
> i'm just a gun fan...

I think most of us are GNU fans too, welcome!
 
> i use linux since 2000, debian.
> had a try with nixos, then i found guix.
> i' running it on top of jessie to use icecat as richard stallman suggests.
> 
> i'm doing it for the kick's of it.
> i barely really understand what you say.

Sorry, I that really wasn't my intention. I saw the version was old and my
first thought was to update it to a later version.

> i just want to use icecat and get acquainted with the new gnu system and
> integrate it well along with debian... for now.
> 
> []r.
> 

It turns out that hydra, the automated build server for guix, has a copy of
xz that you can download if you authorize hydra to provide substitutions.
With a copy of hydra.gnu.org.pub, the command is `sudo guix archive
--authorize hydra.gnu.org.pub`. After that, instead of building everything
locally, your computer will first check to see if hydra has already built a
package and you can just download it.

Feel free to ask anything and we'll try to help out :)

[Message part 2 (application/pgp-signature, inline)]

Message #23 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: "-\=}\\*\/{\=-" <rui.damas <at> gmail.com>
Cc: 21784 <at> debbugs.gnu.org, lasse.collin <at> tukaani.org
Subject: Re: bug#21784: cannot install icecat!
Date: Thu, 29 Oct 2015 21:27:12 +0100

"-=}\*/{=-" <rui.damas <at> gmail.com> skribis:

> ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
> "Forbidden"

This seems to be an issue at tukaani.org since this URL is still listed
at <http://tukaani.org/xz/old.html>.

Lasse: Could it be that the permissions for old tarballs were
inadvertently changed?

-=}\*/{=-: in the meantime, you can work around it by enabling
substitutes, since hydra.gnu.org has it in cache:

  http://www.gnu.org/software/guix/manual/html_node/Substitutes.html

Thanks,
Ludo’.

Message #28 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: "-=}\\*/{=-" <rui.damas <at> gmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 21784 <21784 <at> debbugs.gnu.org>, Andreas Enge <andreas <at> enge.fr>,
 lasse.collin <at> tukaani.org, Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: cannot install icecat!
Date: Thu, 29 Oct 2015 23:07:53 +0000

[Message part 1 (text/plain, inline)]

# @ ~root ...

.guix-profile/bin/guix archive --authorize <
.guix-profile/share/guix/hydra.gnu.org.pub

.guix-profile/bin/guix -u
# ... did nothing

.guix-profile/bin/guix pull --verbose
# compiled lots of files

.guix-profile/bin/guix -u
# ... did lots of stuff, but no icecat

.guix-profile/bin/guix package -i icecat
# ... :)

nice... how do i clean possible rolbacks?

[ty all] r.


On Thu, Oct 29, 2015 at 8:27 PM, Ludovic Courtès <ludo <at> gnu.org> wrote:

> "-=}\*/{=-" <rui.damas <at> gmail.com> skribis:
>
> > ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
> > "Forbidden"
>
> This seems to be an issue at tukaani.org since this URL is still listed
> at <http://tukaani.org/xz/old.html>.
>
> Lasse: Could it be that the permissions for old tarballs were
> inadvertently changed?
>
> -=}\*/{=-: in the meantime, you can work around it by enabling
> substitutes, since hydra.gnu.org has it in cache:
>
>   http://www.gnu.org/software/guix/manual/html_node/Substitutes.html
>
> Thanks,
> Ludo’.
>

[Message part 2 (text/html, inline)]

Message #31 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: "-=}\\*/{=-" <rui.damas <at> gmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 21784 <21784 <at> debbugs.gnu.org>, Andreas Enge <andreas <at> enge.fr>,
 "lasse.collin" <lasse.collin <at> tukaani.org>,
 Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: cannot install icecat!
Date: Thu, 29 Oct 2015 23:20:43 +0000

[Message part 1 (text/plain, inline)]

guix gc --optimize
# 75.02 MiB freed by hard-linking 10086 files

guix gc
# ... deleted some files :)

[ty]r.

On Thu, Oct 29, 2015 at 11:07 PM, -=}\*/{=- <rui.damas <at> gmail.com> wrote:

> # @ ~root ...
>
> .guix-profile/bin/guix archive --authorize <
> .guix-profile/share/guix/hydra.gnu.org.pub
>
> .guix-profile/bin/guix -u
> # ... did nothing
>
> .guix-profile/bin/guix pull --verbose
> # compiled lots of files
>
> .guix-profile/bin/guix -u
> # ... did lots of stuff, but no icecat
>
> .guix-profile/bin/guix package -i icecat
> # ... :)
>
> nice... how do i clean possible rolbacks?
>
> [ty all] r.
>
>
> On Thu, Oct 29, 2015 at 8:27 PM, Ludovic Courtès <ludo <at> gnu.org> wrote:
>
>> "-=}\*/{=-" <rui.damas <at> gmail.com> skribis:
>>
>> > ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
>> > "Forbidden"
>>
>> This seems to be an issue at tukaani.org since this URL is still listed
>> at <http://tukaani.org/xz/old.html>.
>>
>> Lasse: Could it be that the permissions for old tarballs were
>> inadvertently changed?
>>
>> -=}\*/{=-: in the meantime, you can work around it by enabling
>> substitutes, since hydra.gnu.org has it in cache:
>>
>>   http://www.gnu.org/software/guix/manual/html_node/Substitutes.html
>>
>> Thanks,
>> Ludo’.
>>
>
>

[Message part 2 (text/html, inline)]

Message #34 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: "-=}\\*/{=-" <rui.damas <at> gmail.com>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 21784 <21784 <at> debbugs.gnu.org>, Andreas Enge <andreas <at> enge.fr>,
 "lasse.collin" <lasse.collin <at> tukaani.org>,
 Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: cannot install icecat!
Date: Fri, 30 Oct 2015 07:53:45 +0000

[Message part 1 (text/plain, inline)]

rehi...

just have one more little problem...

in the footnote at the end of this page:
http://www.gnu.org/soft
ware/guix/manual/html_node/Build-Environment-Setup.html

"If your machine uses the systemd init system, dropping the
prefix/lib/systemd/system/guix-daemon.service file in /etc/systemd/system
will ensure that guix-daemon is automatically started."

i did this:
  ln -s /root/.guix-profile/lib/systemd/system/guix-daemon.service
/etc/systemd/

... but it does no start at boot...

i'am able to start/stop it with:

  systemctl start guix-daemon
  systemctl stop guix-daemon

... but not enable it... :(

  systemctl enable guix-daemon

says: "Failed to execute operation: No such file or directory"

i'm still used to the old init.d scheme and not acquainted with the new
one... how can i easily solve this?

[]r.

On Thu, Oct 29, 2015 at 11:20 PM, -=}\*/{=- <rui.damas <at> gmail.com> wrote:

> guix gc --optimize
> # 75.02 MiB freed by hard-linking 10086 files
>
> guix gc
> # ... deleted some files :)
>
> [ty]r.
>
> On Thu, Oct 29, 2015 at 11:07 PM, -=}\*/{=- <rui.damas <at> gmail.com> wrote:
>
>> # @ ~root ...
>>
>> .guix-profile/bin/guix archive --authorize <
>> .guix-profile/share/guix/hydra.gnu.org.pub
>>
>> .guix-profile/bin/guix -u
>> # ... did nothing
>>
>> .guix-profile/bin/guix pull --verbose
>> # compiled lots of files
>>
>> .guix-profile/bin/guix -u
>> # ... did lots of stuff, but no icecat
>>
>> .guix-profile/bin/guix package -i icecat
>> # ... :)
>>
>> nice... how do i clean possible rolbacks?
>>
>> [ty all] r.
>>
>>
>> On Thu, Oct 29, 2015 at 8:27 PM, Ludovic Courtès <ludo <at> gnu.org> wrote:
>>
>>> "-=}\*/{=-" <rui.damas <at> gmail.com> skribis:
>>>
>>> > ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
>>> > "Forbidden"
>>>
>>> This seems to be an issue at tukaani.org since this URL is still listed
>>> at <http://tukaani.org/xz/old.html>.
>>>
>>> Lasse: Could it be that the permissions for old tarballs were
>>> inadvertently changed?
>>>
>>> -=}\*/{=-: in the meantime, you can work around it by enabling
>>> substitutes, since hydra.gnu.org has it in cache:
>>>
>>>   http://www.gnu.org/software/guix/manual/html_node/Substitutes.html
>>>
>>> Thanks,
>>> Ludo’.
>>>
>>
>>
>

[Message part 2 (text/html, inline)]

Message #37 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Efraim Flashner <efraim <at> flashner.co.il>
To: "-=}\\*/{=-" <rui.damas <at> gmail.com>
Cc: 21784 <21784 <at> debbugs.gnu.org>,
 Ludovic Courtès <ludo <at> gnu.org>,
 Andreas Enge <andreas <at> enge.fr>
Subject: Re: bug#21784: cannot install icecat!
Date: Fri, 30 Oct 2015 10:02:13 +0200

[Message part 1 (text/plain, inline)]

On Fri, 30 Oct 2015 07:53:45 +0000
"-=}\\*/{=-" <rui.damas <at> gmail.com> wrote:

> re hi...
> 
> just have one more little problem...
> 
> in the footnote at the end of this page:
> http://www.gnu.org/soft
> ware/guix/manual/html_node/Build-Environment-Setup.html
> 
> "If your machine uses the systemd init system, dropping the
> prefix/lib/systemd/system/guix-daemon.service file in /etc/systemd/system
> will ensure that guix-daemon is automatically started."
> 
> i did this:
>   ln -s /root/.guix-profile/lib/systemd/system/guix-daemon.service
> /etc/systemd/

you're missing the last system, the symlink goes in /etc/systemd/system/

> ... but it does no start at boot...
> 
> i'am able to start/stop it with:
> 
>   systemctl start guix-daemon
>   systemctl stop guix-daemon
> 
> ... but not enable it... :(
> 
>   systemctl enable guix-daemon
> 
> says: "Failed to execute operation: No such file or directory"
> 
> i'm still used to the old init.d scheme and not acquainted with the new
> one... how can i easily solve this?

Delete the old symlink and make a new one :)

-- 
Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[Message part 2 (application/pgp-signature, inline)]

Message #40 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: "-=}\\*/{=-" <rui.damas <at> gmail.com>
To: Efraim Flashner <efraim <at> flashner.co.il>
Cc: 21784 <21784 <at> debbugs.gnu.org>,
 Ludovic Courtès <ludo <at> gnu.org>,
 Andreas Enge <andreas <at> enge.fr>
Subject: Re: bug#21784: cannot install icecat!
Date: Fri, 30 Oct 2015 08:14:14 +0000

[Message part 1 (text/plain, inline)]

... sorry, my bad at writing last email... i do have the symlink
at /etc/systemd/system/ ... otherwise would not work for start/stop (i
presume)... only `enable' does not.

... so it presists.

[]r.

On Fri, Oct 30, 2015 at 8:02 AM, Efraim Flashner <efraim <at> flashner.co.il>
wrote:

> On Fri, 30 Oct 2015 07:53:45 +0000
> "-=}\\*/{=-" <rui.damas <at> gmail.com> wrote:
>
> > re hi...
> >
> > just have one more little problem...
> >
> > in the footnote at the end of this page:
> > http://www.gnu.org/soft
> > ware/guix/manual/html_node/Build-Environment-Setup.html
> >
> > "If your machine uses the systemd init system, dropping the
> > prefix/lib/systemd/system/guix-daemon.service file in /etc/systemd/system
> > will ensure that guix-daemon is automatically started."
> >
> > i did this:
> >   ln -s /root/.guix-profile/lib/systemd/system/guix-daemon.service
> > /etc/systemd/
>
> you're missing the last system, the symlink goes in /etc/systemd/system/
>
> > ... but it does no start at boot...
> >
> > i'am able to start/stop it with:
> >
> >   systemctl start guix-daemon
> >   systemctl stop guix-daemon
> >
> > ... but not enable it... :(
> >
> >   systemctl enable guix-daemon
> >
> > says: "Failed to execute operation: No such file or directory"
> >
> > i'm still used to the old init.d scheme and not acquainted with the new
> > one... how can i easily solve this?
>
> Delete the old symlink and make a new one :)
>
> --
> Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
> GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
> Confidentiality cannot be guaranteed on emails sent or received unencrypted
>

[Message part 2 (text/html, inline)]

Message #43 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: "-=}\\*/{=-" <rui.damas <at> gmail.com>
To: Efraim Flashner <efraim <at> flashner.co.il>
Cc: 21784 <21784 <at> debbugs.gnu.org>,
 Ludovic Courtès <ludo <at> gnu.org>,
 Andreas Enge <andreas <at> enge.fr>
Subject: Re: bug#21784: cannot install icecat!
Date: Fri, 30 Oct 2015 15:45:24 +0000

[Message part 1 (text/plain, inline)]

... and solved :D

made a copy instead of link...

https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1419318

[ty all]r.

On Fri, Oct 30, 2015 at 8:14 AM, -=}\*/{=- <rui.damas <at> gmail.com> wrote:

> ... sorry, my bad at writing last email... i do have the symlink
> at /etc/systemd/system/ ... otherwise would not work for start/stop (i
> presume)... only `enable' does not.
>
> ... so it presists.
>
> []r.
>
> On Fri, Oct 30, 2015 at 8:02 AM, Efraim Flashner <efraim <at> flashner.co.il>
> wrote:
>
>> On Fri, 30 Oct 2015 07:53:45 +0000
>> "-=}\\*/{=-" <rui.damas <at> gmail.com> wrote:
>>
>> > re hi...
>> >
>> > just have one more little problem...
>> >
>> > in the footnote at the end of this page:
>> > http://www.gnu.org/soft
>> > ware/guix/manual/html_node/Build-Environment-Setup.html
>> >
>> > "If your machine uses the systemd init system, dropping the
>> > prefix/lib/systemd/system/guix-daemon.service file in
>> /etc/systemd/system
>> > will ensure that guix-daemon is automatically started."
>> >
>> > i did this:
>> >   ln -s /root/.guix-profile/lib/systemd/system/guix-daemon.service
>> > /etc/systemd/
>>
>> you're missing the last system, the symlink goes in /etc/systemd/system/
>>
>> > ... but it does no start at boot...
>> >
>> > i'am able to start/stop it with:
>> >
>> >   systemctl start guix-daemon
>> >   systemctl stop guix-daemon
>> >
>> > ... but not enable it... :(
>> >
>> >   systemctl enable guix-daemon
>> >
>> > says: "Failed to execute operation: No such file or directory"
>> >
>> > i'm still used to the old init.d scheme and not acquainted with the new
>> > one... how can i easily solve this?
>>
>> Delete the old symlink and make a new one :)
>>
>> --
>> Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
>> GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
>> Confidentiality cannot be guaranteed on emails sent or received
>> unencrypted
>>
>
>

[Message part 2 (text/html, inline)]

Message #48 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Efraim Flashner <efraim <at> flashner.co.il>
Cc: 21784 <at> debbugs.gnu.org
Subject: Alternate xz-5.0.4.tar.gz URL
Date: Fri, 30 Oct 2015 18:06:26 +0100

Efraim Flashner <efraim <at> flashner.co.il> skribis:

> It turns out that hydra, the automated build server for guix, has a copy of
> xz that you can download if you authorize hydra to provide substitutions.
> With a copy of hydra.gnu.org.pub, the command is `sudo guix archive
> --authorize hydra.gnu.org.pub`. After that, instead of building everything
> locally, your computer will first check to see if hydra has already built a
> package and you can just download it.

Since we must have an additional URL to fetch it.

I looked for mirrors on the Web for this tarball and couldn’t find one
(fossies.org doesn’t have it, for instance.)

Then I wanted to upload it to ftp://alpha.gnu.org/gnu/guix/mirror, but
that is rejected:

  file rejected: xz-5.0.4.tar.gz contains a vulnerable Makefile.in
  CVE-2012-3386
  Regenerate it with automake 1.11.6 / 1.12.2 or newer.

So we need another solution.  Any suggestions?  Like mirror URLs I might
have missed?

TIA,
Ludo’.

Message #51 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 21784 <at> debbugs.gnu.org, Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: Alternate xz-5.0.4.tar.gz URL
Date: Fri, 30 Oct 2015 18:12:11 +0100

On Fri, Oct 30, 2015 at 06:06:26PM +0100, Ludovic Courtès wrote:
> So we need another solution.  Any suggestions? 

I would not mind hosting it on enge.fr, but this is of course less reliable
than "real" hosting, since the machine is in my living room. Alternatively,
I could host it with a commercial hoster at multiprecision.org.

Andreas

Message #54 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Lasse Collin <lasse.collin <at> tukaani.org>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: "-=}\\*/{=-" <rui.damas <at> gmail.com>, 21784 <at> debbugs.gnu.org
Subject: Re: bug#21784: cannot install icecat!
Date: Fri, 30 Oct 2015 19:47:30 +0200

On 2015-10-29 Ludovic Courtès wrote:
> "-=}\*/{=-" <rui.damas <at> gmail.com> skribis:
> 
> > ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
> > "Forbidden"
> 
> This seems to be an issue at tukaani.org since this URL is still
> listed at <http://tukaani.org/xz/old.html>.
> 
> Lasse: Could it be that the permissions for old tarballs were
> inadvertently changed?

As documented at the beginning of the page you linked, it's intentional
but (possibly) temporary. I'm sorry for the inconvenience.

For some reason the old XZ Utils versions are more popular downloads
than the latest versions (5.0.8 and 5.2.2). Perhaps I should move the
downloads somewhere else to avoid bandwidth quota issues, but on the
other hand I feel that it's not nice if source-based distributions rely
on upstream servers instead of providing their own distro-specific
mirrors. If you think this isn't a reasonable wish, feel free to say so.

By the way, is there a reason why you use 5.0.4 instead of 5.0.8 (or
even 5.2.2)? I know that the point of many stable distributions is that
packages don't get upgraded without a good reason, but with XZ Utils a
stable branch gets fixes without new features. I hope this makes it
easier for downstream distributions to make bug fixes available for
users (backporting gets done by the upstream).

-- 
Lasse Collin  |  IRC: Larhzu @ IRCnet & Freenode

Message #57 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Lasse Collin <lasse.collin <at> tukaani.org>
Cc: 21784 <at> debbugs.gnu.org
Subject: Old XZ tarballs
Date: Fri, 30 Oct 2015 20:58:27 +0100

Hi,

Lasse Collin <lasse.collin <at> tukaani.org> skribis:

> On 2015-10-29 Ludovic Courtès wrote:
>> "-=}\*/{=-" <rui.damas <at> gmail.com> skribis:
>> 
>> > ERROR: download failed "http://tukaani.org/xz/xz-5.0.4.tar.gz" 403
>> > "Forbidden"
>> 
>> This seems to be an issue at tukaani.org since this URL is still
>> listed at <http://tukaani.org/xz/old.html>.
>> 
>> Lasse: Could it be that the permissions for old tarballs were
>> inadvertently changed?
>
> As documented at the beginning of the page you linked, it's intentional
> but (possibly) temporary. I'm sorry for the inconvenience.

Sorry, I had overlooked that.

> For some reason the old XZ Utils versions are more popular downloads
> than the latest versions (5.0.8 and 5.2.2). Perhaps I should move the
> downloads somewhere else to avoid bandwidth quota issues,

Some people move old tarballs to an old/ sub-directory, to make sure
people do not mistakenly take an old version.  I don’t know if that
would help here?

> but on the other hand I feel that it's not nice if source-based
> distributions rely on upstream servers instead of providing their own
> distro-specific mirrors. If you think this isn't a reasonable wish,
> feel free to say so.

Guix does automatically mirror tarballs via its “substitute” mechanism.
However, users can turn it off, in which case they end up downloading
the tarball from the upstream URL specified in the package recipe.

> By the way, is there a reason why you use 5.0.4 instead of 5.0.8 (or
> even 5.2.2)?

No good reason!  We’ll upgrade it as soon as this can be done without
triggering too much rebuild/redownloads for users.

Thank you,
Ludo’.

Message #60 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Andreas Enge <andreas <at> enge.fr>
Cc: 21784 <at> debbugs.gnu.org, Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: Alternate xz-5.0.4.tar.gz URL
Date: Sat, 31 Oct 2015 11:41:41 +0100

Andreas Enge <andreas <at> enge.fr> skribis:

> On Fri, Oct 30, 2015 at 06:06:26PM +0100, Ludovic Courtès wrote:
>> So we need another solution.  Any suggestions? 
>
> I would not mind hosting it on enge.fr, but this is of course less reliable
> than "real" hosting, since the machine is in my living room. Alternatively,
> I could host it with a commercial hoster at multiprecision.org.

Could you put a copy at multiprecision.org?  That would be great.

Thanks!

Ludo’.

Message #63 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Lasse Collin <lasse.collin <at> tukaani.org>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: Old XZ tarballs
Date: Sat, 31 Oct 2015 20:29:08 +0200

On 2015-10-30 Ludovic Courtès wrote:
> Lasse Collin <lasse.collin <at> tukaani.org> skribis:
> > For some reason the old XZ Utils versions are more popular downloads
> > than the latest versions (5.0.8 and 5.2.2). Perhaps I should move
> > the downloads somewhere else to avoid bandwidth quota issues,
> 
> Some people move old tarballs to an old/ sub-directory, to make sure
> people do not mistakenly take an old version.  I don’t know if that
> would help here?

I don't like to break links intentionally. I know I did exactly that a
few days ago, but it cannot be the long-term solution. The links to old
versions are on a separate page already, so those using a web browser
are unlikely to get an old version by accident.

> > but on the other hand I feel that it's not nice if source-based
> > distributions rely on upstream servers instead of providing their
> > own distro-specific mirrors. If you think this isn't a reasonable
> > wish, feel free to say so.
> 
> Guix does automatically mirror tarballs via its “substitute”
> mechanism. However, users can turn it off, in which case they end up
> downloading the tarball from the upstream URL specified in the
> package recipe.

OK. :-) Why would users turn it off though? I would guess that one good
mirror would be more reliable than dozens of upstream sites of which
just one needs to be down to be a problem for a user. A package manager
should know the hash or signature of the file, so from security point
of view it doesn't matter where the file comes.

Note that I have nothing against including the upstream URL in the
build scripts. I just wish that it doesn't cause a *large* number of
users downloading the file from the upstream instead of distro's
mirror. To be fair, xz-5.0.4.tar.gz hasn't been a popular download
(xz-5.0.4.tar.bz2 is somewhat popular though), so I believe Guix users
haven't caused a significant amount of traffic for me. :-)

> > By the way, is there a reason why you use 5.0.4 instead of 5.0.8 (or
> > even 5.2.2)?
> 
> No good reason!  We’ll upgrade it as soon as this can be done without
> triggering too much rebuild/redownloads for users.

API/ABI is backward compatible so one shouldn't need to rebuild other
packages. There's a mailing list "xz-announce" in case you want a
notification when a new version is released:
<http://tukaani.org/xz/lists.html>

-- 
Lasse Collin  |  IRC: Larhzu @ IRCnet & Freenode

Message #66 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 21784 <at> debbugs.gnu.org, Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: Alternate xz-5.0.4.tar.gz URL
Date: Sat, 31 Oct 2015 22:20:32 +0100

On Sat, Oct 31, 2015 at 11:41:41AM +0100, Ludovic Courtès wrote:
> Could you put a copy at multiprecision.org?  That would be great.

Is that it? The result of "guix build xz -S" copied over:
   http://www.multiprecision.org/guix/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz

Andreas

Message #69 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Lasse Collin <lasse.collin <at> tukaani.org>
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: Old XZ tarballs
Date: Sun, 01 Nov 2015 11:20:07 +0100

Lasse Collin <lasse.collin <at> tukaani.org> skribis:

> On 2015-10-30 Ludovic Courtès wrote:

[...]

>> Guix does automatically mirror tarballs via its “substitute”
>> mechanism. However, users can turn it off, in which case they end up
>> downloading the tarball from the upstream URL specified in the
>> package recipe.
>
> OK. :-) Why would users turn it off though?

The substitute mechanism is very generic; it’s not just about mirroring
tarballs:

  http://www.gnu.org/software/guix/manual/html_node/Substitutes.html

Some people might prefer to build things locally rather than download
pre-built items.

> I would guess that one good mirror would be more reliable than dozens
> of upstream sites of which just one needs to be down to be a problem
> for a user. A package manager should know the hash or signature of the
> file, so from security point of view it doesn't matter where the file
> comes.

Yes exactly, all we need is to mirror it somewhere.

>> > By the way, is there a reason why you use 5.0.4 instead of 5.0.8 (or
>> > even 5.2.2)?
>> 
>> No good reason!  We’ll upgrade it as soon as this can be done without
>> triggering too much rebuild/redownloads for users.
>
> API/ABI is backward compatible so one shouldn't need to rebuild other
> packages. There's a mailing list "xz-announce" in case you want a
> notification when a new version is released:
> <http://tukaani.org/xz/lists.html>

Noted, thanks!

Ludo’.

Message #72 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Andreas Enge <andreas <at> enge.fr>
Cc: 21784 <at> debbugs.gnu.org, Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: Alternate xz-5.0.4.tar.gz URL
Date: Sun, 01 Nov 2015 11:20:59 +0100

Andreas Enge <andreas <at> enge.fr> skribis:

> On Sat, Oct 31, 2015 at 11:41:41AM +0100, Ludovic Courtès wrote:
>> Could you put a copy at multiprecision.org?  That would be great.
>
> Is that it? The result of "guix build xz -S" copied over:
>    http://www.multiprecision.org/guix/0d7xnp3nji2mi4cw4jmd3mzbpija9a5a-xz-5.0.4.tar.gz

Cool.  Could you rename it to ‘xz-5.0.4.tar.gz’?

Thanks,
Ludo’.

Message #75 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Andreas Enge <andreas <at> enge.fr>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 21784 <at> debbugs.gnu.org, Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: Alternate xz-5.0.4.tar.gz URL
Date: Sun, 1 Nov 2015 13:06:11 +0100

On Sun, Nov 01, 2015 at 11:20:59AM +0100, Ludovic Courtès wrote:
> Cool.  Could you rename it to ‘xz-5.0.4.tar.gz’?

Done!

Andreas

Message #80 received at 21784-done <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Andreas Enge <andreas <at> enge.fr>
Cc: 21784-done <at> debbugs.gnu.org, Efraim Flashner <efraim <at> flashner.co.il>
Subject: Re: bug#21784: Alternate xz-5.0.4.tar.gz URL
Date: Sun, 01 Nov 2015 21:05:47 +0100

Andreas Enge <andreas <at> enge.fr> skribis:

> On Sun, Nov 01, 2015 at 11:20:59AM +0100, Ludovic Courtès wrote:
>> Cool.  Could you rename it to ‘xz-5.0.4.tar.gz’?
>
> Done!

I’m adding it as an alternate URL in (gnu packages compression).

Thank you!

Ludo’.

Message #88 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Lasse Collin <lasse.collin <at> tukaani.org>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: Old XZ tarballs
Date: Mon, 2 Nov 2015 14:07:18 +0200

On 2015-11-01 Ludovic Courtès wrote:
> Lasse Collin <lasse.collin <at> tukaani.org> skribis:
> 
> > On 2015-10-30 Ludovic Courtès wrote:
> 
> [...]
> 
> >> Guix does automatically mirror tarballs via its “substitute”
> >> mechanism. However, users can turn it off, in which case they end
> >> up downloading the tarball from the upstream URL specified in the
> >> package recipe.
> >
> > OK. :-) Why would users turn it off though?
> 
> The substitute mechanism is very generic; it’s not just about
> mirroring tarballs:
> 
>   http://www.gnu.org/software/guix/manual/html_node/Substitutes.html
> 
> Some people might prefer to build things locally rather than download
> pre-built items.

That makes sense, but I don't understand how it implies that the source
packages will then be downloaded from upstream servers. Since you are
distributing binary packages, I assume you are also distributing the
matching source packages due to many packages being under the GNU
(L)GPL. My understanding is that the GNU GPL requires that if you
distribute the binary, you must take care of making the source
code available too.

Anyway, I'm sorry for the hassle and for perhaps making a mountain out
of a molehill. Based on the number of xz-5.0.4.tar.gz downloads, Guix
users didn't create much traffic for me. You just happened to get
affected when I was trying to find out what distros where causing most
of the traffic.

-- 
Lasse Collin  |  IRC: Larhzu @ IRCnet & Freenode

Message #91 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Lasse Collin <lasse.collin <at> tukaani.org>
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: Old XZ tarballs
Date: Mon, 02 Nov 2015 14:37:56 +0100

Lasse Collin <lasse.collin <at> tukaani.org> skribis:

> On 2015-11-01 Ludovic Courtès wrote:
>> Lasse Collin <lasse.collin <at> tukaani.org> skribis:
>> 
>> > On 2015-10-30 Ludovic Courtès wrote:
>> 
>> [...]
>> 
>> >> Guix does automatically mirror tarballs via its “substitute”
>> >> mechanism. However, users can turn it off, in which case they end
>> >> up downloading the tarball from the upstream URL specified in the
>> >> package recipe.
>> >
>> > OK. :-) Why would users turn it off though?
>> 
>> The substitute mechanism is very generic; it’s not just about
>> mirroring tarballs:
>> 
>>   http://www.gnu.org/software/guix/manual/html_node/Substitutes.html
>> 
>> Some people might prefer to build things locally rather than download
>> pre-built items.
>
> That makes sense, but I don't understand how it implies that the source
> packages will then be downloaded from upstream servers.

It might sound counter-intuitive, but our server at gnu.org provides
substitutes for “things” users could do locally; these “things” include
building software, and downloading source.  Quoting the above page:

  Substitutes can be anything resulting from a derivation build (see
  Derivations). Of course, in the common case, they are pre-built
  package binaries, but source tarballs, for instance, which also result
  from derivation builds, can be available as substitutes.

> Anyway, I'm sorry for the hassle and for perhaps making a mountain out
> of a molehill.

No problem.  It is best if URLs remain stable over time, but I
understand there are cost constraints related to hosting.

Maybe an option for you in the longer term would be to use a service
such as savannah.gnu.org, which could host tarballs virtually forever
and which is mirrored.

Thanks,
Ludo’.

Message #94 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: Lasse Collin <lasse.collin <at> tukaani.org>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: Old XZ tarballs
Date: Mon, 2 Nov 2015 16:24:27 +0200

On 2015-11-02 Ludovic Courtès wrote:
> No problem.  It is best if URLs remain stable over time, but I
> understand there are cost constraints related to hosting.
> 
> Maybe an option for you in the longer term would be to use a service
> such as savannah.gnu.org, which could host tarballs virtually forever
> and which is mirrored.

Maybe, I had already thought about that some time ago. On the other
hand I have felt that it's weird if upstreams should do such things
solely because package managers in some source-based distros use
upstreams as their primary source of packages (I don't count Guix into
this category). Over half of my bandwidth quota is used for serving old
xz versions and that somehow that doesn't feel right, but perhaps it's
just me being weird.

5.0.4.tar.gz and .bz2 are up again on tukaani.org so at least Guix
shouldn't have issues now because of me.

Thanks! :-)

-- 
Lasse Collin  |  IRC: Larhzu @ IRCnet & Freenode

Message #97 received at 21784 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Lasse Collin <lasse.collin <at> tukaani.org>
Cc: 21784 <at> debbugs.gnu.org
Subject: Re: Old XZ tarballs
Date: Mon, 02 Nov 2015 16:07:11 +0100

Lasse Collin <lasse.collin <at> tukaani.org> skribis:

> On 2015-11-02 Ludovic Courtès wrote:
>> No problem.  It is best if URLs remain stable over time, but I
>> understand there are cost constraints related to hosting.
>> 
>> Maybe an option for you in the longer term would be to use a service
>> such as savannah.gnu.org, which could host tarballs virtually forever
>> and which is mirrored.
>
> Maybe, I had already thought about that some time ago. On the other
> hand I have felt that it's weird if upstreams should do such things
> solely because package managers in some source-based distros use
> upstreams as their primary source of packages (I don't count Guix into
> this category). Over half of my bandwidth quota is used for serving old
> xz versions and that somehow that doesn't feel right, but perhaps it's
> just me being weird.

I agree that it’s weird that old tarballs get so much attention.

In an ideal world, every distro and user would upgrade on the day of the
new release, but it turns out to take much more time.

Another way to look at it is to think of the web as an append-only
place, similar to Git.  If people want to access old tarballs for
whatever reasons, it should be possible.

Anyway, thanks again.  :-)

Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.