We could easily distribute nar files over distributed networks (IPFS, bittorrent, …) but we still need a "canonical source" that builds these packages, otherwise how do you know what you are looking for? Don't we always need some sort of central authority?
Le 2 novembre 2018 22:04:51 GMT+01:00, Pjotr Prins <pjotr.publi...@thebird.nl> a écrit : >On Fri, Nov 02, 2018 at 01:16:03PM +0100, Giovanni Biscuolo wrote: >> please is there a roadmap in GNU and/or Guix devel team to address >this >> problems? > >I think it would be a good idea to create a more distributed approach >for creating and finding substitutes. A simple name service would >help. We could even use IPFS or something to fetch nar files - IPFS >comes with a name service. That way anyone building a substitute could >push it to IPFS and expose it to the rest of the world. Since IPFS is >content-addressable we can prevent injections. Any change to the file >would change its location. So the address + NAR hash is safe. And no >key setting required. > >Does away with the dependency on just a few machines. Maintaining >machines is a pain. Why not distribute the effort? I am happy to build >some stuff and put it out there - in fact I already run my own >substitute server, but it has only the substitutes I need. If we all >do that we can bundle resources together. Guix can easily support >that. > >If someone wants to think this through and can write a prototype it >would make a great talk at FOSDEM. We can also discuss it at Guix >days. > >Pj.
