Hey Antonio,
Antonio Diaz Diaz <[email protected]> writes: >> https://ftp.gnu.org/gnu/guix/guix-binary-1.5.0.x86_64-linux.tar.xz > > Have you considered for the binary tarballs a compressed format that > guarantees the integrity of the decompressed data? > Gzip, bzip2, and lzip always check the integrity, and are therefore fine. > Zstd may also be adequate because, even if its integrity checking is > optional, I don't know of any zstd decompressor that does not implement it. > OTOH, some xz decompressors can't check the integrity of the current binary > tarballs. See, for example, > http://www.nongnu.org/lzip/lzip_benchmark.html#busybox There is a plan to move to zstd - https://codeberg.org/guix/guix/issues/4975. Please let's continue discussion there if you have any concerns with this change. Rutherther
