GNU bug report logs - #33368
"guix archive" fails because of guix-authenticate

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 33368 in the body.
You can then email your comments to 33368 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Konrad Hinsen <konrad.hinsen <at> fastmail.net>
To: bug-guix <at> gnu.org
Subject: "guix archive" fails because of guix-authenticate
Date: Tue, 13 Nov 2018 19:37:01 +0100

Dear Guix maintainers,

With guix current as of today (commit
d5401375099f6e4562b849121265bb1c3e85874f), I cannot produce nar archives
because of a failure of guix-authenticate.

Demonstration:

  $ guix archive --export git > git.nar
  guix archive: error: build failed: program `guix-authenticate' failed with exit code 1

Note: I did run "guix archive –generate-key" earlier on that machine,
and I do have the public/private keys under /etc/guix.

Cheers,
  Konrad

Message #8 received at 33368 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Konrad Hinsen <konrad.hinsen <at> fastmail.net>
Cc: 33368 <at> debbugs.gnu.org
Subject: Re: bug#33368: "guix archive" fails because of guix-authenticate
Date: Wed, 14 Nov 2018 11:12:29 +0100

Hi Konrad!

Konrad Hinsen <konrad.hinsen <at> fastmail.net> skribis:

> With guix current as of today (commit
> d5401375099f6e4562b849121265bb1c3e85874f), I cannot produce nar archives
> because of a failure of guix-authenticate.
>
> Demonstration:
>
>   $ guix archive --export git > git.nar
>   guix archive: error: build failed: program `guix-authenticate' failed with exit code 1

Could you strace the daemon and then re-run the command?

  sudo strace -p $(pidof guix-daemon) -f -o daemon.log -s 234
  guix archive --export sed > /dev/null

I tested and it works for me, so we’ll have to see what’s going wrong
behind the scenes.

Thanks,
Ludo’.

Message #11 received at 33368 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Konrad Hinsen <konrad.hinsen <at> fastmail.net>
Cc: 33368 <at> debbugs.gnu.org
Subject: Re: bug#33368: "guix archive" fails because of guix-authenticate
Date: Wed, 14 Nov 2018 11:13:50 +0100

Note: If you post the strace output, make sure to remove your public key
from the log.

Message #14 received at 33368 <at> debbugs.gnu.org (full text, mbox):

From: Ricardo Wurmus <rekado <at> elephly.net>
To: Konrad Hinsen <konrad.hinsen <at> fastmail.net>
Cc: 33368 <at> debbugs.gnu.org
Subject: Re: bug#33368: "guix archive" fails because of guix-authenticate
Date: Wed, 14 Nov 2018 12:43:31 +0100

Hi Konrad,

> With guix current as of today (commit
> d5401375099f6e4562b849121265bb1c3e85874f), I cannot produce nar archives
> because of a failure of guix-authenticate.
>
> Demonstration:
>
>   $ guix archive --export git > git.nar
>   guix archive: error: build failed: program `guix-authenticate' failed with exit code 1

Is the guix-daemon also recent?

-- 
Ricardo

Message #17 received at 33368 <at> debbugs.gnu.org (full text, mbox):

From: Konrad Hinsen <konrad.hinsen <at> fastmail.net>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 33368 <at> debbugs.gnu.org
Subject: Re: bug#33368: "guix archive" fails because of guix-authenticate
Date: Wed, 14 Nov 2018 16:06:13 +0100

Hi Ludo and Ricardo,

> Could you strace the daemon and then re-run the command?
>
>   sudo strace -p $(pidof guix-daemon) -f -o daemon.log -s 234
>   guix archive --export sed > /dev/null
>
> I tested and it works for me, so we’ll have to see what’s going wrong
> behind the scenes.

With the strace log (see below) that's pretty obvious: the daemon
doesn't find the guix-authenticate binary. But where should it be, and
why is it missing on my machine?

> Is the guix-daemon also recent?

A bit less than the rest of guix, but I did update it after the Great
Pull Revolution. The first line of the strace log contains the path in
the store, which should say all there is to know about my daemon.

Cheers,
  Konrad.




15629 execve("/gnu/store/lm2zy00ciq5pb6gfibvakps7aa1hgz68-guix-daemon-0.15.0-6.f9a8fce/libexec/guix-authenticate", ["guix-authenticate", "rsautl", "-sign", "-inkey", "/etc/guix/signing-key.sec", "-in", "/tmp/nix-15338-0/hash"], 0x11542d0 /* 17 vars */) = -1 ENOENT (No such file or directory)
15629 execve("/usr/local/sbin/guix-authenticate", ["guix-authenticate", "rsautl", "-sign", "-inkey", "/etc/guix/signing-key.sec", "-in", "/tmp/nix-15338-0/hash"], 0x11542d0 /* 17 vars */) = -1 ENOENT (No such file or directory)
15629 execve("/usr/local/bin/guix-authenticate", ["guix-authenticate", "rsautl", "-sign", "-inkey", "/etc/guix/signing-key.sec", "-in", "/tmp/nix-15338-0/hash"], 0x11542d0 /* 17 vars */) = -1 ENOENT (No such file or directory)
15629 execve("/usr/sbin/guix-authenticate", ["guix-authenticate", "rsautl", "-sign", "-inkey", "/etc/guix/signing-key.sec", "-in", "/tmp/nix-15338-0/hash"], 0x11542d0 /* 17 vars */) = -1 ENOENT (No such file or directory)
15629 execve("/usr/bin/guix-authenticate", ["guix-authenticate", "rsautl", "-sign", "-inkey", "/etc/guix/signing-key.sec", "-in", "/tmp/nix-15338-0/hash"], 0x11542d0 /* 17 vars */) = -1 ENOENT (No such file or directory)
15629 execve("/sbin/guix-authenticate", ["guix-authenticate", "rsautl", "-sign", "-inkey", "/etc/guix/signing-key.sec", "-in", "/tmp/nix-15338-0/hash"], 0x11542d0 /* 17 vars */) = -1 ENOENT (No such file or directory)
15629 execve("/bin/guix-authenticate", ["guix-authenticate", "rsautl", "-sign", "-inkey", "/etc/guix/signing-key.sec", "-in", "/tmp/nix-15338-0/hash"], 0x11542d0 /* 17 vars */) = -1 ENOENT (No such file or directory)
15629 openat(AT_FDCWD, "/gnu/store/l4lr0f5cjd0nbsaaf8b5dmcw1a1yypr3-glibc-2.27/share/locale/en_US.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)

Message #22 received at 33368-done <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Konrad Hinsen <konrad.hinsen <at> fastmail.net>
Cc: 33368-done <at> debbugs.gnu.org
Subject: Re: bug#33368: "guix archive" fails because of guix-authenticate
Date: Wed, 14 Nov 2018 22:56:37 +0100

Hi!

Konrad Hinsen <konrad.hinsen <at> fastmail.net> skribis:

> 15629 execve("/gnu/store/lm2zy00ciq5pb6gfibvakps7aa1hgz68-guix-daemon-0.15.0-6.f9a8fce/libexec/guix-authenticate", ["guix-authenticate", "rsautl", "-sign", "-inkey", "/etc/guix/signing-key.sec", "-in", "/tmp/nix-15338-0/hash"], 0x11542d0 /* 17 vars */) = -1 ENOENT (No such file or directory)

Oops, this is fixed in commit 7a54b2281d1f60fd0ae2e058c219c5a600ad756b
(the next commit, 0fe1fba4af41f267c4bb2c006fb37f42422ab703, changes Guix
itself so that the script is installed as LIBEXECDIR/guix/authenticate,
for consistency.)

To test it, you’ll have to run ‘guix pull’ as root and to restart the
daemon.

Thanks,
Ludo’.

Message #25 received at 33368-done <at> debbugs.gnu.org (full text, mbox):

From: Konrad Hinsen <konrad.hinsen <at> fastmail.net>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 33368-done <at> debbugs.gnu.org
Subject: Re: bug#33368: "guix archive" fails because of guix-authenticate
Date: Thu, 15 Nov 2018 09:18:24 +0100

ludo <at> gnu.org (Ludovic Courtès) writes:

> Oops, this is fixed in commit 7a54b2281d1f60fd0ae2e058c219c5a600ad756b
> (the next commit, 0fe1fba4af41f267c4bb2c006fb37f42422ab703, changes Guix
> itself so that the script is installed as LIBEXECDIR/guix/authenticate,
> for consistency.)
>
> To test it, you’ll have to run ‘guix pull’ as root and to restart the
> daemon.

Done, works, thanks!

It would be nice if guix could detect an outdated daemon and ask for an
update. Technically that shouldn't be hard to do, but it requires
keeping a daemon API version number.

Konrad.

Message #28 received at 33368-done <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Konrad Hinsen <konrad.hinsen <at> fastmail.net>
Cc: 33368-done <at> debbugs.gnu.org
Subject: Re: bug#33368: "guix archive" fails because of guix-authenticate
Date: Thu, 15 Nov 2018 11:43:56 +0100

Konrad Hinsen <konrad.hinsen <at> fastmail.net> skribis:

> ludo <at> gnu.org (Ludovic Courtès) writes:
>
>> Oops, this is fixed in commit 7a54b2281d1f60fd0ae2e058c219c5a600ad756b
>> (the next commit, 0fe1fba4af41f267c4bb2c006fb37f42422ab703, changes Guix
>> itself so that the script is installed as LIBEXECDIR/guix/authenticate,
>> for consistency.)
>>
>> To test it, you’ll have to run ‘guix pull’ as root and to restart the
>> daemon.
>
> Done, works, thanks!
>
> It would be nice if guix could detect an outdated daemon and ask for an
> update. Technically that shouldn't be hard to do, but it requires
> keeping a daemon API version number.

There’s a protocol version that clients get during the handshake, so
clients could report about “old” daemons.

Now, the client-daemon protocol is meant to be backward-compatible and
to change rarely, so I’m not sure if we should warn about it.

Thoughts?

Thanks,
Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.