Re: Guix & signed archive export/import

[Ludovic Courtès]

address@hidden (Niels Möller) skribis:

> address@hidden (Ludovic Courtès) writes:
>
>> Sure, but again, all we have is a small subset of SPKI, and no
>> delegations.
>
> I think spki gets really interesting once you have delegations. I intend
> to add that to lsh, for both user and host keys. But it's been some years
> without any progress on that front.

Yeah...

>> Currently I don’t see how such tags could be used, and they may be hard
>> to define.
>> 
>> In Guix, all package binaries are collected in the “store”, a big
>> directory with one sub-directory per package.
>
> Then, it would make some sense to have a tag syntax to restrict
> authorization to a single package, and not allow installation of the
> packege to touch anything outside of its corresponding directory.

By construction, the build process of a package can only touch its own
directory:

  http://www.gnu.org/software/guix/manual/guix.html#Introduction

Thanks!

Ludo’.