diff --git a/guix/download.scm b/guix/download.scm index 73c0e897b4..b2dcdc88f9 100644 --- a/guix/download.scm +++ b/guix/download.scm @@ -236,8 +236,15 @@ (define %content-addressed-mirrors ;; List of content-addressed mirrors. Each mirror is represented as a ;; procedure that takes a file name, an algorithm (symbol) and a hash ;; (bytevector), and returns a URL or #f. + ;; Note: Avoid 'https' to mitigate . ;; TODO: Add more. '(list (lambda (file algo hash) + ;; Files served by 'guix publish' are accessible under a single + ;; hash algorithm. + (string-append "http://mirror.hydra.gnu.org/file/" + file "/" (symbol->string algo) "/" + (bytevector->nix-base32-string hash))) + (lambda (file algo hash) ;; 'tarballs.nixos.org' supports several algorithms. (string-append "http://tarballs.nixos.org/" (symbol->string algo) "/"