GNU bug report logs - #22459
Guix tools should not honor NIX_* environment variables

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: guix; Reported by: Jeff Mickey <j@HIDDEN>; merged with #23828; dated Mon, 25 Jan 2016 00:39:01 UTC; Maintainer for guix is bug-guix@HIDDEN.
Merged 22459 23828. Request was from ludo@HIDDEN (Ludovic Courtès) to control <at> debbugs.gnu.org. Full text available.
Severity set to 'normal' from 'wishlist' Request was from ludo@HIDDEN (Ludovic Courtès) to control <at> debbugs.gnu.org. Full text available.
Severity set to 'wishlist' from 'normal' Request was from ludo@HIDDEN (Ludovic Courtès) to control <at> debbugs.gnu.org. Full text available.
Changed bug title to 'Guix tools should not honor NIX_* environment variables' from 'guix daemon writes acl to /etc/nix/acl not /etc/guix' Request was from ludo@HIDDEN (Ludovic Courtès) to control <at> debbugs.gnu.org. Full text available.

Message received at 22459 <at> debbugs.gnu.org:


Received: (at 22459) by debbugs.gnu.org; 26 Jan 2016 10:00:33 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Jan 26 05:00:33 2016
Received: from localhost ([127.0.0.1]:36608 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aO0QL-0008GU-M1
	for submit <at> debbugs.gnu.org; Tue, 26 Jan 2016 05:00:33 -0500
Received: from eggs.gnu.org ([208.118.235.92]:36930)
 by debbugs.gnu.org with esmtp (Exim 4.84)
 (envelope-from <ludo@HIDDEN>) id 1aO0QJ-0008GG-Ht
 for 22459 <at> debbugs.gnu.org; Tue, 26 Jan 2016 05:00:31 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <ludo@HIDDEN>) id 1aO0Q8-00066Y-JP
 for 22459 <at> debbugs.gnu.org; Tue, 26 Jan 2016 05:00:26 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.0 required=5.0 tests=BAYES_20,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:60470)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <ludo@HIDDEN>)
 id 1aO0Q8-00066U-GY; Tue, 26 Jan 2016 05:00:20 -0500
Received: from pluto.bordeaux.inria.fr ([193.50.110.57]:53470 helo=pluto)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1aO0Q8-00080H-0h; Tue, 26 Jan 2016 05:00:20 -0500
From: ludo@HIDDEN (Ludovic =?utf-8?Q?Court=C3=A8s?=)
To: Jeff Mickey <j@HIDDEN>
Subject: Re: bug#22459: guix daemon writes acl to /etc/nix/acl not /etc/guix
References: <8760yixzl8.fsf@HIDDEN>
X-URL: http://www.fdn.fr/~lcourtes/
X-Revolutionary-Date: 7 =?utf-8?Q?Pluvi=C3=B4se?= an 224 de la =?utf-8?Q?R?=
 =?utf-8?Q?=C3=A9volution?=
X-PGP-Key-ID: 0x3D9AEBB5
X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc
X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4  0CFB 090B 1199 3D9A EBB5
X-OS: x86_64-unknown-linux-gnu
Date: Tue, 26 Jan 2016 11:00:18 +0100
In-Reply-To: <8760yixzl8.fsf@HIDDEN> (Jeff Mickey's message of
 "Sun, 24 Jan 2016 16:38:43 -0800")
Message-ID: <87zivsvex9.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -5.0 (-----)
X-Debbugs-Envelope-To: 22459
Cc: 22459 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.0 (-----)

Jeff Mickey <j@HIDDEN> skribis:

> On NixOS when I follow the binary installation instructions as of 0.9.0,
> it places the acl in the wrong place.
>
> guix archive --authorize < hydra.gnu.org.pub
>
> This puts the file in /etc/nix/acl, not /etc/guix acl. This means the
> guix daemon can't find the acl, and you build everything from scratch.

(guix pki) has:

--8<---------------cut here---------------start------------->8---
(define %acl-file
  (string-append %config-directory "/acl"))
--8<---------------cut here---------------end--------------->8---

where (guix config) does:

--8<---------------cut here---------------start------------->8---
(define %config-directory
  ;; This must match `NIX_CONF_DIR' as defined in `daemon.am'.
  (or (getenv "NIX_CONF_DIR") "@guix_sysconfdir@/guix"))
--8<---------------cut here---------------end--------------->8---

So most likely the =E2=80=98NIX_CONF_DIR=E2=80=99 environment variable is d=
efined on
your system, and =E2=80=98guix archive=E2=80=99 simply honors that.

Can you confirm?

Now, we=E2=80=99ve honored those =E2=80=98NIX_=E2=80=99 variables mostly be=
cause the daemon
code, which comes from Nix, uses them, and I initially didn=E2=80=99t want =
to
diverge.  Nowadays it would probably make sense to rename them.

> Also, /gnu/store is set to only have 1770 permissions instead of 1774,

That=E2=80=99s not what I see:

--8<---------------cut here---------------start------------->8---
$ tar tvf guix-binary-0.9.0.x86_64-linux.tar.xz |grep /gnu/store/$
drwxrwxr-t root/root         0 1970-01-01 01:00 ./gnu/store/
--8<---------------cut here---------------end--------------->8---

Which installation method did you use?

> which means you can't use any of your guix symlinks with 0.9.0 :/

What do you mean by =E2=80=9Cyour guix symlinks=E2=80=9D?

Thanks,
Ludo=E2=80=99.




Information forwarded to bug-guix@HIDDEN:
bug#22459; Package guix. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 25 Jan 2016 00:38:56 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sun Jan 24 19:38:56 2016
Received: from localhost ([127.0.0.1]:35297 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aNVBI-0002eg-Cb
	for submit <at> debbugs.gnu.org; Sun, 24 Jan 2016 19:38:56 -0500
Received: from eggs.gnu.org ([208.118.235.92]:51938)
 by debbugs.gnu.org with esmtp (Exim 4.84)
 (envelope-from <j@HIDDEN>) id 1aNVBH-0002eU-O9
 for submit <at> debbugs.gnu.org; Sun, 24 Jan 2016 19:38:55 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <j@HIDDEN>) id 1aNVBB-00038X-W0
 for submit <at> debbugs.gnu.org; Sun, 24 Jan 2016 19:38:50 -0500
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05,T_DKIM_INVALID
 autolearn=disabled version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:48837)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <j@HIDDEN>) id 1aNVBB-00038T-SZ
 for submit <at> debbugs.gnu.org; Sun, 24 Jan 2016 19:38:49 -0500
Received: from eggs.gnu.org ([2001:4830:134:3::10]:42907)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <j@HIDDEN>) id 1aNVBB-0001wi-0u
 for bug-guix@HIDDEN; Sun, 24 Jan 2016 19:38:49 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <j@HIDDEN>) id 1aNVB7-00037u-P8
 for bug-guix@HIDDEN; Sun, 24 Jan 2016 19:38:48 -0500
Received: from out3-smtp.messagingengine.com ([66.111.4.27]:43236)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <j@HIDDEN>) id 1aNVB7-00037e-IV
 for bug-guix@HIDDEN; Sun, 24 Jan 2016 19:38:45 -0500
Received: from compute5.internal (compute5.nyi.internal [10.202.2.45])
 by mailout.nyi.internal (Postfix) with ESMTP id 16F0C20A5D;
 Sun, 24 Jan 2016 19:38:45 -0500 (EST)
Received: from frontend1 ([10.202.2.160])
 by compute5.internal (MEProxy); Sun, 24 Jan 2016 19:38:45 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=codemac.net; h=
 content-type:date:from:message-id:mime-version:subject:to
 :x-sasl-enc:x-sasl-enc; s=mesmtp; bh=H979krw/Y822wh9DBC5A5v3/8Ys
 =; b=rHkkjK8FjN17gKG4gcDXpvlyLejeMagBU1Cgj/SHZsurRi7IF5yuw5/oYs2
 D/+57vGkdDqxJ3GwMZX7LDFXqShEJKFHm76iMSo5cjAZf2IlYmmX++GyPOe++q9J
 IxXf8hmUJseJN09YrTxEsdw5AHBD6ds7pwO5yka+geq1OizY=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=
 messagingengine.com; h=content-type:date:from:message-id
 :mime-version:subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=H9
 79krw/Y822wh9DBC5A5v3/8Ys=; b=lbqZq1PHC7wGG71yckjuMb6yvxygHw/XGy
 al9h4FtBkuRcOGNqgSYb8FW8IZJAIBFsytQWOyD2sxEwf9CstGE1Q3kSuDdESi3F
 wSHAnqR17hjuC6rOI0yKryVkONsf1+WzUoznvNXFD2TyHUh4QyqcZegHqP34+GZc
 hVIOz+ams=
X-Sasl-enc: wBl1SHJKa9GqH+JnhMULQGlMvaod8P5KoOH5UtNwuqW3 1453682324
Received: from nevada.int.iggy.bz.codemac.net
 (c-73-221-143-40.hsd1.wa.comcast.net [73.221.143.40])
 by mail.messagingengine.com (Postfix) with ESMTPA id 8E388C013FE
 for <bug-guix@HIDDEN>; Sun, 24 Jan 2016 19:38:44 -0500 (EST)
From: Jeff Mickey <j@HIDDEN>
To: bug-guix@HIDDEN
Subject: guix daemon writes acl to /etc/nix/acl not /etc/guix
User-Agent: Notmuch/0.21 (http://notmuchmail.org) Emacs/24.5.1
 (x86_64-unknown-linux-gnu)
Date: Sun, 24 Jan 2016 16:38:43 -0800
Message-ID: <8760yixzl8.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -5.0 (-----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.0 (-----)

On NixOS when I follow the binary installation instructions as of 0.9.0,
it places the acl in the wrong place.

guix archive --authorize < hydra.gnu.org.pub

This puts the file in /etc/nix/acl, not /etc/guix acl. This means the
guix daemon can't find the acl, and you build everything from scratch.

I solved this locally by making them a symlink.

Also, /gnu/store is set to only have 1770 permissions instead of 1774,
which means you can't use any of your guix symlinks with 0.9.0 :/

  //  codemac




Acknowledgement sent to Jeff Mickey <j@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-guix@HIDDEN. Full text available.
Report forwarded to bug-guix@HIDDEN:
bug#22459; Package guix. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Fri, 24 Jun 2016 23:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.