create table if not exists ValidPaths (
    id               integer primary key autoincrement not null,
    path             text unique not null,
    hash             text not null,
    registrationTime integer not null,
    deriver          text,
    narSize          integer
);

create table if not exists Refs (
    referrer  integer not null,
    reference integer not null,
    primary key (referrer, reference),
    foreign key (referrer) references ValidPaths(id) on delete cascade,
    foreign key (reference) references ValidPaths(id) on delete restrict
);

create index if not exists IndexReferrer on Refs(referrer);
create index if not exists IndexReference on Refs(reference);

-- Paths can refer to themselves, causing a tuple (N, N) in the Refs
-- table.  This causes a deletion of the corresponding row in
-- ValidPaths to cause a foreign key constraint violation (due to `on
-- delete restrict' on the `reference' column).  Therefore, explicitly
-- get rid of self-references.
create trigger if not exists DeleteSelfRefs before delete on ValidPaths
  begin
    delete from Refs where referrer = old.id and reference = old.id;
  end;

create table if not exists DerivationOutputs (
    drv  integer not null,
    id   text not null, -- symbolic output id, usually "out"
    path text not null,
    primary key (drv, id),
    foreign key (drv) references ValidPaths(id) on delete cascade
);

create index if not exists IndexDerivationOutputs on DerivationOutputs(path);

create table if not exists FailedPaths (
    path text primary key not null,
    time integer not null
);
/a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/build/secret-service.scm'>
<input type='hidden' name='id' value='ebe967e1b7dec34b89199136ab9c0fb95092009a'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=ebe967e1b7dec34b89199136ab9c0fb95092009a'>root</a>/<a href='/guix/log/gnu?id=ebe967e1b7dec34b89199136ab9c0fb95092009a'>gnu</a>/<a href='/guix/log/gnu/build?id=ebe967e1b7dec34b89199136ab9c0fb95092009a'>build</a>/<a href='/guix/log/gnu/build/secret-service.scm?id=ebe967e1b7dec34b89199136ab9c0fb95092009a'>secret-service.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/build/secret-service.scm?id=ebe967e1b7dec34b89199136ab9c0fb95092009a&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=d5366500ec1aeecad6fc292b195088e30aa715fd'>secret-service: Add proper logging procedure and log to syslog.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (log): New macro.
(secret-service-send-secrets, secret-service-receive-secrets): Use it
instead of raw 'format' calls.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=59261a22f9819b1fdf797ffba17af17d385d6c92'>services: secret-service: Add initial client/server handshake.</a><span class='msg-avail'>...<span class='msg-tooltip'>This allows the client running on the host to know when it's actually
connect to the server running in the guest.  Failing that, the client
would connect right away to QEMU and send secrets even though the server
is not running yet in the guest, which is unreliable.

* gnu/build/secret-service.scm (secret-service-send-secrets): Add
 #:handshake-timeout.  Read from SOCK an initial message from the
server.  Return #f on error.
(secret-service-receive-secrets): Send 'secret-service-server' message
to the client.  Close SOCK upon timeout.
* gnu/services/virtualization.scm (hurd-vm-shepherd-service): 'start'
method returns #f when 'secret-service-send-secrets' returns #f.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=f9090015c58e6f47be74fe6116ef10a90378a899'>secret-service: Fix file port leak in 'secret-service-send-secrets'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-send-secrets): Use
'call-with-input-file' instead of 'open-input-file'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:27 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=4d047853da76dc5fa5dd50ecb750c861342ef47b'>secret-service: Add a timeout when waiting for a client.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-receive-secrets)
[wait-for-client]: Call 'select' with a 60s timeout before 'accept'.
Return #f upon timeout.
[read-secrets]: Return FILES on success.
Adjust caller of 'wait-for-client' to handle #f.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-29 21:56:26 +0200'>2020-09-29</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=118b6dbb46ff3376db7467301fe59673c042d220'>secret-service: Clarify the origin of messages.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/secret-service.scm (secret-service-send-secrets)
(secret-service-receive-secrets): Prefix messages by "secret service".
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-01 16:06:38 +0200'>2020-09-01</span></td><td><a href='/guix/commit/gnu/build/secret-service.scm?id=ec32d4f291b3cc039a99f8090b6c2b2444be5a83'>services: Add secret-service-type.</a><span class='msg-avail'>...<span class='msg-tooltip'>This adds a "secret-service" that can be added to a Childhurd VM to receive
out-of-band secrets (keys) sent from the host.

Co-authored-by: Ludovic Courtès &lt;ludo@gnu.org&gt;

* gnu/services/virtualization.scm (secret-service-activation): New procedure.
(secret-service-type): New variable.
* gnu/build/secret-service.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
</span></span></td><td>Jan (janneke) Nieuwenhuizen</td></tr>
