ABCL's build calls the hostname command, and needs the internet to download JUnit. Neither of these are really required, though, so we can patch them out to make it build. We also remove the Implemetation-Build property that ends up in the manifest file, because it stores information about the time of the build, which makes it non-deterministic. --- a/build.xml +++ b/build.xml @@ -327,7 +327,7 @@ from ${abcl.home.dir} + depends="abcl.compile,abcl.stamp.version"> @@ -455,11 +455,6 @@ from ${abcl.home.dir} value="${abcl.version}-${abcl.version.src}"/> - - - abcl.hostname: ${abcl.hostname} - - @@ -500,8 +495,6 @@ from ${abcl.home.dir} value="ABCL"/> - @@ -1019,8 +1012,7 @@ ${basedir}/../cl-bench - + path: root/tests/channels.scm
AgeCommit message (Expand)Author
2022-02-14git-authenticate: Ensure the target is a descendant of the introductory commit....Fixes a bug whereby authentication of a commit *not* descending from the introductory commit could succeed, provided the commit verifies the authorization invariant. In the example below, A is a common ancestor of the introductory commit I and of commit X. Authentication of X would succeed, even though it is not a descendant of I, as long as X is authorized according to the '.guix-authorizations' in A: X I \ / A This is because, 'authenticate-repository' would not check whether X descends from I, and the call (commit-difference X I) would return X. In practice that only affects forks because it means that ancestors of the introductory commit already contain a '.guix-authorizations' file. * guix/git-authenticate.scm (authenticate-repository): Add call to 'commit-descendant?'. * tests/channels.scm ("authenticate-channel, not a descendant of introductory commit"): New test. * tests/git-authenticate.scm ("authenticate-repository, target not a descendant of intro"): New test. * tests/guix-git-authenticate.sh: Expect earlier test to fail since 9549f0283a78fe36f2d4ff2a04ef8ad6b0c02604 is not a descendant of $intro_commit. Add new test targeting an ancestor of the introductory commit, and another test targeting the v1.2.0 commit. * doc/guix.texi (Specifying Channel Authorizations): Add a sentence. Ludovic Courtès