;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2019 Ludovic Courtès ;;; ;;; This file is part of GNU Guix. ;;; ;;; GNU Guix is free software; you can redistribute it and/or modify it ;;; under the terms of the GNU General Public License as published by ;;; the Free Software Foundation; either version 3 of the License, or (at ;;; your option) any later version. ;;; ;;; GNU Guix is distributed in the hope that it will be useful, but ;;; WITHOUT ANY WARRANTY; without even the implied warranty of ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ;;; GNU General Public License for more details. ;;; ;;; You should have received a copy of the GNU General Public License ;;; along with GNU Guix. If not, see . (define-module (gnu build locale) #:use-module (guix build utils) #:use-module (srfi srfi-1) #:use-module (ice-9 rdelim) #:use-module (ice-9 match) #:use-module (ice-9 regex) #:export (build-locale normalize-codeset locale->name+codeset read-supported-locales)) (define locale-rx ;; Regexp matching a locale line in 'localedata/SUPPORTED'. (make-regexp "^[[:space:]]*([[:graph:]]+)/([[:graph:]]+)[[:space:]]*\\\\$")) (define (read-supported-locales port) "Read the 'localedata/SUPPORTED' file from PORT. That file is actually a makefile snippet, with one locale per line, and a header that can be discarded." (let loop ((locales '())) (define line (read-line port)) (cond ((eof-object? line) (reverse locales)) ((string-prefix? "#" (string-trim line)) ;comment (loop locales)) ((string-contains line "=") ;makefile variable assignment (loop locales)) (else (match (regexp-exec locale-rx line) (#f (loop locales)) (m (loop (alist-cons (match:substring m 1) (match:substring m 2) locales)))))))) (define (normalize-codeset codeset) "Compute the \"normalized\" variant of CODESET." ;; info "(libc) Using gettextized software", for the algorithm used to ;; compute the normalized codeset. (letrec-syntax ((-> (syntax-rules () ((_ proc value) (proc value)) ((_ proc rest ...) (proc (-> rest ...)))))) (-> (lambda (str) (if (string-every char-set:digit str) (string-append "iso" str) str)) string-downcase (lambda (str) (string-filter char-set:letter+digit str)) codeset))) (define* (build-locale locale #:key (localedef "localedef") (directory ".") (codeset "UTF-8") (name (string-append locale "." codeset))) "Compute locale data for LOCALE and CODESET--e.g., \"en_US\" and \"UTF-8\"--with LOCALEDEF, and store it in DIRECTORY under NAME." (format #t "building locale '~a'...~%" name) (invoke localedef "--no-archive" "--prefix" directory "-i" locale "-f" codeset (string-append directory "/" name))) (define (locale->name+codeset locale) "Split a locale name such as \"aa_ER@saaho.UTF-8\" into two values: the language/territory/modifier part, and the codeset." (match (string-rindex locale #\.) (#f (values locale #f)) (dot (values (string-take locale dot) (string-drop locale (+ dot 1)))))) 5ee1b5aafaff5'>authenticate: Encode strings as ISO-8859-1....Fixes <https://bugs.gnu.org/43421>. * guix/scripts/authenticate.scm (read-command): Decode strings as ISO-8859-1, not UTF-8. (guix-authenticate)[send-reply]: Encode strings as ISO-8859-1, not UTF-8. * tests/guix-authenticate.sh: Add test. Ludovic Courtès 2020-09-14daemon: Spawn 'guix authenticate' once for all....Previously, we'd spawn 'guix authenticate' once for each item that has to be signed (when exporting) or authenticated (when importing). Now, we spawn it once for all and then follow a request/reply protocol. This reduces the wall-clock time of: guix archive --export -r $(guix build coreutils -d) from 30s to 2s. * guix/scripts/authenticate.scm (sign-with-key): Return the signature instead of displaying it. Raise a &formatted-message instead of calling 'leave'. (validate-signature): Likewise. (read-command): New procedure. (define-enumerate-type, reply-code): New macros. (guix-authenticate)[send-reply]: New procedure. Change to read commands from current-input-port. * nix/libstore/local-store.cc (runAuthenticationProgram): Remove. (authenticationAgent, readInteger, readAuthenticateReply): New functions. (signHash, verifySignature): Rewrite in terms of the agent. * tests/store.scm ("import not signed"): Remove 'pk' call. ("import signed by unauthorized key"): Check the error message of C. * tests/guix-authenticate.sh: Rewrite using the new protocol. fixlet Ludovic Courtès 2020-09-11daemon: Simplify interface with 'guix authenticate'....There's no reason at this point to mimic the calling convention of the 'openssl' command. * nix/libstore/local-store.cc (LocalStore::exportPath): Add only "sign" and HASH to ARGS. Remove 'tmpDir' and 'hashFile'. (LocalStore::importPath): Add only "verify" and SIGNATURE to * guix/scripts/authenticate.scm (guix-authenticate): Adjust accordingly; remove the OpenSSL-style clauses. (read-hash-data): Remove. (sign-with-key): Replace 'port' with 'sha256' and adjust accordingly. (validate-signature): Export SIGNATURE to be a canonical sexp. * tests/guix-authenticate.sh: Adjust tests accordingly. Ludovic Courtès