# GNU Guix --- Functional package management for GNU
# Copyright © 2020, 2022 Ludovic Courtès <ludo@gnu.org>
#
# This file is part of GNU Guix.
#
# GNU Guix is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or (at
# your option) any later version.
#
# GNU Guix is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

#
# Test the 'guix git authenticate' command-line utility.
#

# Skip if we're not in a Git checkout.
[ -d "$abs_top_srcdir/.git" ] || exit 77

# Skip if there's no 'keyring' branch.
guile -c '(use-modules (git))
  (member "refs/heads/keyring" (branch-list (repository-open ".")))' || \
    exit 77

# Keep in sync with '%default-channels' in (guix channels)!
intro_commit="9edb3f66fd807b096b48283debdcddccfea34bad"
intro_signer="BBB0 2DDF 2CEA F6A8 0D1D  E643 A2A0 6DF2 A33A 54FA"

cache_key="test-$$"

# This must fail because the end commit is not a descendant of $intro_commit.
guix git authenticate "$intro_commit" "$intro_signer"	\
     --cache-key="$cache_key" --stats			\
     --end=9549f0283a78fe36f2d4ff2a04ef8ad6b0c02604 && false

# The v1.2.0 commit is a descendant of $intro_commit and it satisfies the
# authorization invariant.
v1_2_0_commit="a099685659b4bfa6b3218f84953cbb7ff9e88063"
guix git authenticate "$intro_commit" "$intro_signer"	\
     --cache-key="$cache_key" --stats			\
     --end="$v1_2_0_commit"

rm "$XDG_CACHE_HOME/guix/authentication/$cache_key"

# Commit and signer of the 'v1.0.0' tag.
v1_0_0_commit="6298c3ffd9654d3231a6f25390b056483e8f407c"
v1_0_0_signer="3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5" # civodul
v1_0_1_commit="d68de958b60426798ed62797ff7c96c327a672ac"

# This should succeed because v1.0.0 is an ancestor of $intro_commit.
guix git authenticate "$intro_commit" "$intro_signer"	\
     --cache-key="$cache_key" --stats			\
     --end="$v1_0_0_commit"

# This should fail because these commits lack '.guix-authorizations'.
guix git authenticate "$v1_0_0_commit" "$v1_0_0_signer" \
       --cache-key="$cache_key" --end="$v1_0_1_commit" && false

# This should work thanks to '--historical-authorizations'.
guix git authenticate "$v1_0_0_commit" "$v1_0_0_signer" 	\
     --cache-key="$cache_key" --end="$v1_0_1_commit" --stats	\
     --historical-authorizations="$abs_top_srcdir/etc/historical-authorizations"
put type='hidden' name='id' value='1667e151ba28bed7f6d7e905ac6b0868bc1d9d17'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><table summary='commit info' class='commit-info'>
<tr><th>author</th><td>Julien Lepiller &lt;julien@lepiller.eu&gt;</td><td class='right'>2023-12-25 11:09:35 +0100</td></tr>
<tr><th>committer</th><td>Julien Lepiller &lt;julien@lepiller.eu&gt;</td><td class='right'>2023-12-30 22:11:26 +0100</td></tr>
<tr><th>commit</th><td colspan='2' class='oid'><a href='/guix/commit/gnu/system/images/pinebook-pro.scm?id=1667e151ba28bed7f6d7e905ac6b0868bc1d9d17'>1667e151ba28bed7f6d7e905ac6b0868bc1d9d17</a> (<a href='/guix/patch/gnu/system/images/pinebook-pro.scm?id=1667e151ba28bed7f6d7e905ac6b0868bc1d9d17'>patch</a>)</td></tr>
<tr><th>tree</th><td colspan='2' class='oid'><a href='/guix/tree/?id=1667e151ba28bed7f6d7e905ac6b0868bc1d9d17'>9ae09e53438b2bbc9e3ec62ecd44a87a0582322b</a> /<a href='/guix/tree/gnu/system/images/pinebook-pro.scm?id=1667e151ba28bed7f6d7e905ac6b0868bc1d9d17'>gnu/system/images/pinebook-pro.scm</a></td></tr>
<tr><th>parent</th><td colspan='2' class='oid'><a href='/guix/commit/gnu/system/images/pinebook-pro.scm?id=2cd18578e783e4ffba24ae65f78e419615d9746e'>2cd18578e783e4ffba24ae65f78e419615d9746e</a> (<a href='/guix/diff/gnu/system/images/pinebook-pro.scm?id=1667e151ba28bed7f6d7e905ac6b0868bc1d9d17&amp;id2=2cd18578e783e4ffba24ae65f78e419615d9746e'>diff</a>)</td></tr><tr><th>download</th><td colspan='2' class='oid'><a href='/guix/snapshot/guix-1667e151ba28bed7f6d7e905ac6b0868bc1d9d17.tar.gz'>guix-1667e151ba28bed7f6d7e905ac6b0868bc1d9d17.tar.gz</a><br/><a href='/guix/snapshot/guix-1667e151ba28bed7f6d7e905ac6b0868bc1d9d17.zip'>guix-1667e151ba28bed7f6d7e905ac6b0868bc1d9d17.zip</a><br/></td></tr></table>
<div class='commit-subject'>gnu: Remove ocaml4.07-ppx-assert.</div><div class='commit-msg'>* gnu/packages/ocaml.scm (ocaml4.07-ppx-assert): Remove variable.
(ocaml-ppx-assert)[properties]: Remove variant.

Change-Id: Iba0b987323b8ee3feb2330b1e5eed199856466ee
</div><div class='diffstat-header'><a href='/guix/diff/?id=1667e151ba28bed7f6d7e905ac6b0868bc1d9d17'>Diffstat</a> (limited to 'gnu/system/images/pinebook-pro.scm')</div><table summary='diffstat' class='diffstat'></table><div class='diffstat-summary'>0 files changed, 0 insertions, 0 deletions</div><table summary='diff' class='diff'><tr><td></td></tr></table></div> <!-- class=content -->
                         <div class=footer>generated by
                             <a href="https://git.zx2c4.com/cgit/about/">
                                 cgit
                             </a>
                         </div>
                        </div> <!-- id=cgit -->
</body>
</html>