Vincent Ambo <taz...@yandex-team.ru> writes:

> How would another official server be different from the various mirrors
> of the official servers that already exist?
>
> https://libreplanet.org/wiki/Group:Guix/Mirrors
>
> These use the same signing keys (as they are just mirroring), so there's
> no additional trust infrastructure needed for them.

The GCD conflates build farms and mirrors. I thought each mirror needed
to build and sign substitutes themselves but it seems that is not the
case. I will update it. The main point is to get users to start using
mirrors: requiring people to manually set --substitute-urls and look up
the URLs on LibrePlanet is not ideal.

> Maybe an alternative (and for now - cheaper) approach would be something
> like surfacing these more actively in the documentation, and maybe
> developing a site that shows the respective "weather" for these caches,
> to indicate that they are indeed still up-to-date.

Yes there would definitely need to be a way to verify the mirrors are
working/correct. Also there should be a process to determine which
mirrors are reliable enough to be listed in the installer or
documentation.

Reply via email to