GNU bug report logs - #26907
guix import (really: SSL) broken in different ways

Previous Next

Package: guix;

Reported by: Danny Milosavljevic <dannym <at> scratchpost.org>

Date: Sat, 13 May 2017 10:02:01 UTC

Severity: normal

Done: Leo Famulari <leo <at> famulari.name>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 26907 in the body.
You can then email your comments to 26907 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-guix <at> gnu.org:
bug#26907; Package guix. (Sat, 13 May 2017 10:02:01 GMT) Full text and rfc822 format available.
Acknowledgement sent to Danny Milosavljevic <dannym <at> scratchpost.org>:
New bug report received and forwarded. Copy sent to bug-guix <at> gnu.org. (Sat, 13 May 2017 10:02:01 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Danny Milosavljevic <dannym <at> scratchpost.org>
To: <bug-guix <at> gnu.org>
Subject: guix import (really: SSL) broken in different ways
Date: Sat, 13 May 2017 12:01:25 +0200

So after I installed the huge update from master, it seems that guix import doesn't work anymore (the cwd is a guix master checkout):

(1) Normal:

$ ./pre-inst-env guix import pypi flask-migrate
...
In guix/import/pypi.scm:
   278:17  5 (pypi->guix-package _)
In ice-9/boot-9.scm:
    837:9  4 (catch srfi-34 #<procedure 2b12300 at guix/import/json?> ?)
In guix/import/json.scm:
    32:17  3 (_)
In guix/http-client.scm:
   239:25  2 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # ?)
In guix/build/download.scm:
    520:4  1 (open-connection-for-uri _ #:timeout _ # _)
    360:0  0 (tls-wrap #<input-output: socket 14> "pypi.python.org" # ?)

guix/build/download.scm:360:0: In procedure tls-wrap:
guix/build/download.scm:360:0: In procedure module-lookup: Unbound variable: make-session

(2) In an environment:

$ guix environment guix --fallback --pure
$ ./pre-inst-env guix import pypi flask-migrate
...
In guix/import/pypi.scm:
   278:17  5 (pypi->guix-package _)
In ice-9/boot-9.scm:
    837:9  4 (catch srfi-34 #<procedure 1e971a0 at guix/import/json?> ?)
In guix/import/json.scm:
    32:17  3 (_)
In guix/http-client.scm:
   239:25  2 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # ?)
In guix/build/download.scm:
    520:4  1 (open-connection-for-uri _ #:timeout _ # _)
    417:6  0 (tls-wrap #<closed: file 1069af0> _ # _)

guix/build/download.scm:417:6: In procedure tls-wrap:
guix/build/download.scm:417:6: X.509 certificate of 'pypi.python.org' could not be verified:
  signer-not-found
  invalid

(2b) In an environment with guile-json:

$ guix environment guix --fallback --pure --ad-hoc guile-json
$ ./pre-inst-env guix import pypi flask-migrate
...

ERROR: In procedure scm-error:
ERROR: no code for module (json)

(3) In a container:

$ guix environment -C guix --fallback --pure --ad-hoc guile-json
$ ./pre-inst-env guix import pypi flask-migrate
...
In guix/import/pypi.scm:
   278:17  7 (pypi->guix-package _)
In ice-9/boot-9.scm:
    837:9  6 (catch srfi-34 #<procedure 4dac340 at guix/import/json?> ?)
In guix/import/json.scm:
    32:17  5 (_)
In guix/http-client.scm:
   239:25  4 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # ?)
In guix/build/download.scm:
    520:4  3 (open-connection-for-uri _ #:timeout _ # _)
   521:14  2 (thunk)
    460:7  1 (open-socket-for-uri _ #:timeout _)
In unknown file:
           0 (getaddrinfo "pypi.python.org" "https" 32 #<undefined> # ?)

ERROR: In procedure getaddrinfo:
ERROR: In procedure getaddrinfo: Servname not supported for ai_socktype

(4) For reference, the guix-pulled version works:

$ cd /
$ guix import pypi flask-migrate
following redirection to `https://pypi.python.org/pypi/Flask-Migrate/json'...

Starting download of /tmp/guix-file.lHkpNj
From https://pypi.python.org/packages/a9/fe/559c313679b08f67efb9fba6f01debbc9ea3a488539d03a5a38371351456/Flask-Migrate-2.0.3.tar.gz...
 ...-2.0.3.tar.gz  15KiB            170KiB/s 00:00 [####################] 100.0%
(package
...

Maybe I need to logout and login again?  Will test that later - but right now I just wanted to log the errors.
Information forwarded to bug-guix <at> gnu.org:
bug#26907; Package guix. (Sat, 13 May 2017 14:38:02 GMT) Full text and rfc822 format available.

Message #8 received at 26907 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Danny Milosavljevic <dannym <at> scratchpost.org>
Cc: 26907 <at> debbugs.gnu.org
Subject: Re: bug#26907: guix import (really: SSL) broken in different ways
Date: Sat, 13 May 2017 16:37:36 +0200

Hi Danny,

Danny Milosavljevic <dannym <at> scratchpost.org> skribis:

> So after I installed the huge update from master, it seems that guix import doesn't work anymore (the cwd is a guix master checkout):
>
> (1) Normal:
>
> $ ./pre-inst-env guix import pypi flask-migrate
> ...
> In guix/import/pypi.scm:
>    278:17  5 (pypi->guix-package _)
> In ice-9/boot-9.scm:
>     837:9  4 (catch srfi-34 #<procedure 2b12300 at guix/import/json?> ?)
> In guix/import/json.scm:
>     32:17  3 (_)
> In guix/http-client.scm:
>    239:25  2 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # ?)
> In guix/build/download.scm:
>     520:4  1 (open-connection-for-uri _ #:timeout _ # _)
>     360:0  0 (tls-wrap #<input-output: socket 14> "pypi.python.org" # ?)
>
> guix/build/download.scm:360:0: In procedure tls-wrap:
> guix/build/download.scm:360:0: In procedure module-lookup: Unbound variable: make-session

GnuTLS is not installed.  It’s now a mandatory dependency and
./configure checks for it.

Note that if you use Guile 2.2, you need to install “guile2.2-gnutls”
rather than just “gnutls”.

> (2) In an environment:
>
> $ guix environment guix --fallback --pure
> $ ./pre-inst-env guix import pypi flask-migrate
> ...
> In guix/import/pypi.scm:
>    278:17  5 (pypi->guix-package _)
> In ice-9/boot-9.scm:
>     837:9  4 (catch srfi-34 #<procedure 1e971a0 at guix/import/json?> ?)
> In guix/import/json.scm:
>     32:17  3 (_)
> In guix/http-client.scm:
>    239:25  2 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # ?)
> In guix/build/download.scm:
>     520:4  1 (open-connection-for-uri _ #:timeout _ # _)
>     417:6  0 (tls-wrap #<closed: file 1069af0> _ # _)
>
> guix/build/download.scm:417:6: In procedure tls-wrap:
> guix/build/download.scm:417:6: X.509 certificate of 'pypi.python.org' could not be verified:
>   signer-not-found
>   invalid

See “X.509 Certificates” in the manual.  :-)

> (2b) In an environment with guile-json:
>
> $ guix environment guix --fallback --pure --ad-hoc guile-json
> $ ./pre-inst-env guix import pypi flask-migrate
> ...
>
> ERROR: In procedure scm-error:
> ERROR: no code for module (json)

If you use Guile 2.2, you need “guile2.2-json”, not “guile-json”.

> (3) In a container:
>
> $ guix environment -C guix --fallback --pure --ad-hoc guile-json
> $ ./pre-inst-env guix import pypi flask-migrate
> ...
> In guix/import/pypi.scm:
>    278:17  7 (pypi->guix-package _)
> In ice-9/boot-9.scm:
>     837:9  6 (catch srfi-34 #<procedure 4dac340 at guix/import/json?> ?)
> In guix/import/json.scm:
>     32:17  5 (_)
> In guix/http-client.scm:
>    239:25  4 (http-fetch _ #:port _ #:text? _ #:buffered? _ # _ # _ # ?)
> In guix/build/download.scm:
>     520:4  3 (open-connection-for-uri _ #:timeout _ # _)
>    521:14  2 (thunk)
>     460:7  1 (open-socket-for-uri _ #:timeout _)
> In unknown file:
>            0 (getaddrinfo "pypi.python.org" "https" 32 #<undefined> # ?)
>
> ERROR: In procedure getaddrinfo:
> ERROR: In procedure getaddrinfo: Servname not supported for ai_socktype

In addition to -C, you need -N for network access.

> (4) For reference, the guix-pulled version works:
>
> $ cd /
> $ guix import pypi flask-migrate
> following redirection to `https://pypi.python.org/pypi/Flask-Migrate/json'...
>
> Starting download of /tmp/guix-file.lHkpNj
> From https://pypi.python.org/packages/a9/fe/559c313679b08f67efb9fba6f01debbc9ea3a488539d03a5a38371351456/Flask-Migrate-2.0.3.tar.gz...
>  ...-2.0.3.tar.gz  15KiB            170KiB/s 00:00 [####################] 100.0%
> (package
> ...
>
> Maybe I need to logout and login again?  Will test that later - but right now I just wanted to log the errors.

I think you stumbled upon a mixture of poor error reporting,
misconfiguration, and overall a situation where there are many ways to
shoot oneself in the foot.

HTH!

Ludo’.
Reply sent to Leo Famulari <leo <at> famulari.name>:
You have taken responsibility. (Tue, 11 Jan 2022 05:17:01 GMT) Full text and rfc822 format available.
Notification sent to Danny Milosavljevic <dannym <at> scratchpost.org>:
bug acknowledged by developer. (Tue, 11 Jan 2022 05:17:02 GMT) Full text and rfc822 format available.

Message #13 received at 26907-done <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: Danny Milosavljevic <dannym <at> scratchpost.org>, 26907-done <at> debbugs.gnu.org
Subject: Re: bug#26907: guix import (really: SSL) broken in different ways
Date: Tue, 11 Jan 2022 00:16:11 -0500

The pypi importer does currently work so I'm closing this old bug.
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Tue, 08 Feb 2022 12:24:04 GMT) Full text and rfc822 format available.
This bug report was last modified 2 years and 75 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.