zimoun schreef op vr 26-11-2021 om 02:38 [+0100]: > Hi, > > On Fri, 15 Oct 2021 at 17:20, Ludovic Courtès <l...@gnu.org> wrote: > > zimoun <zimon.touto...@gmail.com> skribis: > > > On Thu, 16 Sep 2021 at 09:33, zimoun <zimon.touto...@gmail.com> > > > wrote: > > > > On Tue, 27 Feb 2018 at 17:00, l...@gnu.org (Ludovic Courtès) > > > > wrote: > > > The Cuirass Shepherd service still does: > > > > #:environment-variables > > (list "GIT_SSL_CAINFO=/etc/ssl/certs/ca- > > certificates.crt" …) > > > > which means that users still need to install certificates globally. > > > > Now, whether it’s an issue, I don’t know. > > > > Maybe we can close? > > I propose to close since I do not see what could the next action. > > 1: <http://issues.guix.gnu.org/issue/30619>
The next action would be splitting of the bundle generation from the profile code, and adding a ‘certificates’ field defaulting to nss- certs, as Ludo seemed to suggest. This could be useful if the server the channel repositories are on use self-signed certificates (are git repositories of channels over https the reason cuirass requires TLS certificates). Greetings, Maxime