Hi amirouche,

amirouche <amirou...@hypermove.net> skribis:

> After discussing gnunet & guix at fosdem with gnunet
> people I have better picture of where things can go.
>
> The short story is:
>
> 1) There is no way to know the gnunet hash aka. gnunet uri
>   of a substitute before the build.
>
> 2) There is no way to associate gnunet hash and guix hash
>   in a secure/trusted manner over gnunet. Except maybe
>   if we use GNS to publish guix hash as subdomains of
>   substitute-server.guix.gnu?

Before jumping to conclusions, did you check the narinfo format that we
use on HTTP?  A narinfo is essentially a statement that a given store
item, resulting from a .drv build, has a specific content hash.

Lookup by content hash over GNUnet’s AFS is all we’d need.

See also the discussion in
<https://www.gnu.org/software/guix/blog/2017/reproducible-builds-a-status-update/>.

HTH!

Ludo’.

Reply via email to