GNU logs - #37380, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#37380: gdm doesn't load pam-limits
Resent-From: Jesse Gibbons <jgibbons2357@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 11 Sep 2019 15:13:01 +0000
Resent-Message-ID: <handler.37380.B.156821477231934 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 37380 <at> debbugs.gnu.org
Message-ID: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
From: Jesse Gibbons <jgibbons2357@HIDDEN>
Content-Type: multipart/mixed; boundary="=-yLDUD4w6zo0gq+pf6dX8"
Date: Wed, 11 Sep 2019 09:12:38 -0600
Mime-Version: 1.0
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
 
 Content preview:  I have been trying to set up ardour, but jackd doesn't start
    in real- time mode. I made an os definition that replicates this issue when
    I use a VM[0]. [0] https://lists.gnu.org/archive/html/help-guix [...] 
 
 Content analysis details:   (2.3 points, 10.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: pam_unix.so]
  0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider (jgibbons2357[at]gmail.com)
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
                             in digit (jgibbons2357[at]gmail.com)
  1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -1.0 MAILING_LIST_MULTI     Multiple indicators imply a widely-seen list
                             manager
  2.0 SPOOFED_FREEMAIL       No description available.


--=-yLDUD4w6zo0gq+pf6dX8
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit

I have been trying to set up ardour, but jackd doesn't start in real-
time mode. I made an os definition that replicates this issue when I
use a VM[0].
[0] https://lists.gnu.org/archive/html/help-guix/2019-09/msg00065.html
I asked the gnome and gdm IRC and found out gdm loads the gdm-password
pam config, which seems untouched by pam-limits-service. My
/etc/pam.d/gdm-password (which should be the default) is attached.

Thanks!
-- 
-Jesse
--=-yLDUD4w6zo0gq+pf6dX8
Content-Disposition: attachment; filename="gdm-password"
Content-Type: text/plain; name="gdm-password"; charset="UTF-8"
Content-Transfer-Encoding: base64

YWNjb3VudCByZXF1aXJlZCBwYW1fdW5peC5zbyAKYXV0aCByZXF1aXJlZCBwYW1fdW5peC5zbyBu
dWxsb2sKcGFzc3dvcmQgcmVxdWlyZWQgcGFtX3VuaXguc28gc2hhNTEyIHNoYWRvdwpzZXNzaW9u
IHJlcXVpcmVkIC9nbnUvc3RvcmUvOTBiM3lweTV3NnNpNHZkNGIxN2kybnl6eTBwZnI1ajItZWxv
Z2luZC0yNDEuMy9saWIvc2VjdXJpdHkvcGFtX2Vsb2dpbmQuc28gCnNlc3Npb24gcmVxdWlyZWQg
cGFtX2xvZ2ludWlkLnNvIApzZXNzaW9uIHJlcXVpcmVkIHBhbV9lbnYuc28gCnNlc3Npb24gcmVx
dWlyZWQgcGFtX3VuaXguc28gCg==


--=-yLDUD4w6zo0gq+pf6dX8--

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Jesse Gibbons <jgibbons2357@HIDDEN>
Subject: bug#37380: Acknowledgement (gdm doesn't load pam-limits)
Message-ID: <handler.37380.B.156821477231934.ack <at> debbugs.gnu.org>
References: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
X-Gnu-PR-Message: ack 37380
X-Gnu-PR-Package: guix
Reply-To: 37380 <at> debbugs.gnu.org
Date: Wed, 11 Sep 2019 15:13:02 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 37380 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
37380: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D37380
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#37380: gdm doesn't load pam-limits
Resent-From: Jesse Gibbons <jgibbons2357@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 11 Sep 2019 18:09:02 +0000
Resent-Message-ID: <handler.37380.B37380.156822534025090 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 37380 <at> debbugs.gnu.org
Message-ID: <31ed0ff0829f11529996a593da2b712014a6fb00.camel@HIDDEN>
From: Jesse Gibbons <jgibbons2357@HIDDEN>
In-Reply-To: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
References: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
Content-Type: text/plain; charset="UTF-8"
Date: Wed, 11 Sep 2019 12:08:49 -0600
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

On Wed, 2019-09-11 at 09:12 -0600, Jesse Gibbons wrote:
> I have been trying to set up ardour, but jackd doesn't start in real-
> time mode. I made an os definition that replicates this issue when I
> use a VM[0].
> [0] https://lists.gnu.org/archive/html/help-guix/2019-09/msg00065.htm
> l
> I asked the gnome and gdm IRC and found out gdm loads the gdm-
> password
> pam config, which seems untouched by pam-limits-service. My
> /etc/pam.d/gdm-password (which should be the default) is attached.
> 
> Thanks!
I'm not sure how to resolve this issue. I tried appending "gdm-
password" to the list of pam configs modified by pam-limits-service[1]
but it doesn't fix anything when I use ./pre-inst-env to build the
vm. gdm-password still does not have a line to load pam_limits.

Whatever the solution, we will probably also want to implement it with
other graphical login services like slim and sddm (and eventually
lightdm and kdm).

[1] http://git.savannah.gnu.org/cgit/guix.git/tree/gnu/services/base.sc
m#n1480
-- 
-Jesse

Message sent to bug-guix@HIDDEN:

Subject: bug#37380: gdm doesn't load pam-limits
Resent-From: Ricardo Wurmus <rekado@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 11 Sep 2019 19:49:01 +0000
Resent-Message-ID: <handler.37380.B37380.15682312952932 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Jesse Gibbons <jgibbons2357@HIDDEN>
Cc: 37380 <at> debbugs.gnu.org
References: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
User-agent: mu4e 1.2.0; emacs 26.2
From: Ricardo Wurmus <rekado@HIDDEN>
In-reply-to: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
Date: Wed, 11 Sep 2019 21:48:03 +0200
Message-ID: <87sgp2pqbw.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>


Hi Jesse,

> I have been trying to set up ardour, but jackd doesn't start in real-
> time mode. I made an os definition that replicates this issue when I
> use a VM[0].
> [0] https://lists.gnu.org/archive/html/help-guix/2019-09/msg00065.html
> I asked the gnome and gdm IRC and found out gdm loads the gdm-password
> pam config, which seems untouched by pam-limits-service. My
> /etc/pam.d/gdm-password (which should be the default) is attached.

I can reproduce this.

(I=E2=80=99m sorry for accidentally misleading you earlier.  Turns out I us=
ed
JACK a little longer ago than I initially realized.)

I think it should be pretty easy to fix this:

1) we should generate a single file that is used for generic session
settings.

2) all login programs (including gdm) should include that file in their
PAM settings.

3) the pam-limits-service should extend that single file instead of
attempting to update a bunch of PAM files for a selected list of
programs.

--
Ricardo

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#37380: gdm doesn't load pam-limits
Resent-From: Jesse Gibbons <jgibbons2357@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 12 Sep 2019 18:25:02 +0000
Resent-Message-ID: <handler.37380.B37380.156831264811047 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 37380
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ricardo Wurmus <rekado@HIDDEN>
Cc: 37380 <at> debbugs.gnu.org
Received: via spool by 37380-submit <at> debbugs.gnu.org id=B37380.156831264811047
          (code B ref 37380); Thu, 12 Sep 2019 18:25:02 +0000
Received: (at 37380) by debbugs.gnu.org; 12 Sep 2019 18:24:08 +0000
Received: from localhost ([127.0.0.1]:44098 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1i8TlI-0002s7-Ef
	for submit <at> debbugs.gnu.org; Thu, 12 Sep 2019 14:24:08 -0400
Received: from mail-pl1-f178.google.com ([209.85.214.178]:39945)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <jgibbons2357@HIDDEN>) id 1i8TlF-0002rT-AC
 for 37380 <at> debbugs.gnu.org; Thu, 12 Sep 2019 14:24:06 -0400
Received: by mail-pl1-f178.google.com with SMTP id y10so12115419pll.7
 for <37380 <at> debbugs.gnu.org>; Thu, 12 Sep 2019 11:24:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=message-id:subject:from:to:cc:in-reply-to:references:date
 :mime-version:content-transfer-encoding;
 bh=Pi7PA8+YzspkQQ+KTrHpWXqSbebewO+jCbP+zqCZVCI=;
 b=qM0MYn1eU64wKDbf/9LuZAI6GnU/hLd7bmIdT0SmyKnXO8mDRDZVqcnTmf3oYJqviL
 ijom+yetGdAUm7CaEflULX9gncLkkEGS5piexQLAQSVbSDo5pYqSHXeluI5hZOVR3YSQ
 5XDWB/iVmsSrmq8minNxgkaMfZ4OhP638X5eF6KOsGYGWc8zlDctBxDBxc6JMGuUTaek
 dy0t68vWTBwu5PtlPvgd+NcFPirElO5ChMT96oFLq4RRmHmGar3hOWbZ2JIVsm0BLcTX
 GUiW9ov6DIUDM3IOx1CNSLq5MDpCQGgFORCK9Ln2Yv3ZVFGUjo09b7bluZqlv2pzF0bv
 mxnQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:message-id:subject:from:to:cc:in-reply-to
 :references:date:mime-version:content-transfer-encoding;
 bh=Pi7PA8+YzspkQQ+KTrHpWXqSbebewO+jCbP+zqCZVCI=;
 b=sZ1ebDbK3aYeXuoYPkjpu5HFvwzjv0dDkM/32fqd0qXcBIx0UHk8e5cUMWd/31DmCM
 UGKomePeIj/rCbXo71a3ji7mQqA6diCdpfE+oDCTRBtYKveF7NcCXHTUd4FVGt2BsNjm
 gOje2Nuqa8HKufa0bKihnE1755CEH8qJO6QpAZ0mHgeYJ+LqeJRSek8Ft174FQdZwHyK
 MSTjB8/vVksf2etxQoxFsvXDe4FvzD1j9JMW76EXKQet3PGXUw876XwHRaqGPp6vuU7G
 4qy3WJtgYCmDfiEPbfm++1RO9bI1xCRISsuPkkOZIO5YGxFf80tFsmFLxg1LVKAUtllI
 JWrw==
X-Gm-Message-State: APjAAAW68kND+HLLVCNHNZ9yk/6nDe0Rchg3tJ+4080YIHyGqjV4FhCs
 m3NGXK4CVxJ0TTHXNcaeung=
X-Google-Smtp-Source: APXvYqz94nanzBVJBymHmS9S2CtDv7vspV/BTy9fiP2giHhqxw1UZqmDyqvf7dqQQ0Y+hyARzDq7wQ==
X-Received: by 2002:a17:902:9a0a:: with SMTP id
 v10mr25958531plp.186.1568312639374; 
 Thu, 12 Sep 2019 11:23:59 -0700 (PDT)
Received: from piranhaplant.local ([199.68.53.171])
 by smtp.googlemail.com with ESMTPSA id
 e192sm35893627pfh.83.2019.09.12.11.23.57
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Thu, 12 Sep 2019 11:23:58 -0700 (PDT)
Message-ID: <9826a76740c7a7028a2022abd08136b8664c765d.camel@HIDDEN>
From: Jesse Gibbons <jgibbons2357@HIDDEN>
In-Reply-To: <87sgp2pqbw.fsf@HIDDEN>
References: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
 <87sgp2pqbw.fsf@HIDDEN>
Content-Type: text/plain; charset="UTF-8"
Date: Thu, 12 Sep 2019 12:23:56 -0600
Mime-Version: 1.0
X-Mailer: Evolution 3.28.1 
Content-Transfer-Encoding: 8bit
X-Spam-Score: 0.3 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

Thanks Ricardo,
On Wed, 2019-09-11 at 21:48 +0200, Ricardo Wurmus wrote:
> Hi Jesse,
> 
> > I have been trying to set up ardour, but jackd doesn't start in
> > real-
> > time mode. I made an os definition that replicates this issue when
> > I
> > use a VM[0].
> > [0] https://lists.gnu.org/archive/html/help-guix/2019-09/msg00065.h
> > tml
> > I asked the gnome and gdm IRC and found out gdm loads the gdm-
> > password
> > pam config, which seems untouched by pam-limits-service. My
> > /etc/pam.d/gdm-password (which should be the default) is attached.
> 
> I can reproduce this.
> 
> (I’m sorry for accidentally misleading you earlier.  Turns out I used
> JACK a little longer ago than I initially realized.)
So was there a time when JACK worked realtime after logging in from gdm
on a GuixSD install?
> 
> I think it should be pretty easy to fix this:
> 
> 1) we should generate a single file that is used for generic session
> settings.
What should be this file's default contents? Should it be empty unless
the pam-limits-service is specified?
> 
> 2) all login programs (including gdm) should include that file in
> their
> PAM settings.
I suppose this could be done by adding
(pam-entry
 (control "include")
 (module "standard-session"))

I'm not sure "module" is a good word to describe the file.
> 
> 3) the pam-limits-service should extend that single file instead of
> attempting to update a bunch of PAM files for a selected list of
> programs.
Should this file be a part of base-services?
> --
> Ricardo
> 
I have to go to work soon, but I hope I can have this accomplished with
a patch series ready by Saturday. I'll check in with a status update
Saturday evening UTC -6.
-- 
-Jesse

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#37380: gdm doesn't load pam-limits
Resent-From: Jesse Gibbons <jgibbons2357@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Sat, 14 Sep 2019 23:14:01 +0000
Resent-Message-ID: <handler.37380.B37380.156850283428050 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 37380
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ricardo Wurmus <rekado@HIDDEN>
Cc: 37380 <at> debbugs.gnu.org
Received: via spool by 37380-submit <at> debbugs.gnu.org id=B37380.156850283428050
          (code B ref 37380); Sat, 14 Sep 2019 23:14:01 +0000
Received: (at 37380) by debbugs.gnu.org; 14 Sep 2019 23:13:54 +0000
Received: from localhost ([127.0.0.1]:47220 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1i9HEo-0007IM-5c
	for submit <at> debbugs.gnu.org; Sat, 14 Sep 2019 19:13:54 -0400
Received: from mail-pf1-f194.google.com ([209.85.210.194]:43062)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <jgibbons2357@HIDDEN>) id 1i9HEm-0007I8-Qy
 for 37380 <at> debbugs.gnu.org; Sat, 14 Sep 2019 19:13:53 -0400
Received: by mail-pf1-f194.google.com with SMTP id a2so1167349pfo.10
 for <37380 <at> debbugs.gnu.org>; Sat, 14 Sep 2019 16:13:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=message-id:subject:from:to:cc:in-reply-to:references:date
 :mime-version:content-transfer-encoding;
 bh=Ku0ndnxqPmD+iLO4UgY8zSC26dkP6dmf9nS8q/b67sI=;
 b=ERhjRWNuOjm/mClfbC7D5/2wT59HpU57HM3Mkcfl5Bw07Klm29ssrqqO+NmzmQGRL+
 9psIgr2zIcDsGE0rHd9g7xAb0uQ7oF2CUhBqkFFKAAJo89Pu0p65UNOrGXgYMJ9qxatj
 U15aZ+sC9UuNGrIU15JC7i4IbhRDaj0+pVseXFBDjV6DAek0ZxT6uI5Ix9FljECho4BF
 ZbjhZYEnIiMuUlx0SfZbc4L2wjBmVWZpdED3EwuKdhatiEWrrxwyBf8eBnmuA+ZFMA48
 /5WEVxSstT1iuHkol/AM1Oh9fSOSBkBRRuo7j3/yPRGut6LRhDytd4Mpw2j6g75Ho4SB
 nnGw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:message-id:subject:from:to:cc:in-reply-to
 :references:date:mime-version:content-transfer-encoding;
 bh=Ku0ndnxqPmD+iLO4UgY8zSC26dkP6dmf9nS8q/b67sI=;
 b=iF+e4lKWnjR5OJAf05hG9yE86uQORkhDOmmXQ/7axdthR2Klj/Zs79xUlC3cunZSkg
 tB2Nafi+WD9/17pw8cUaOdl44QH3DY4gewP5RmAX5PkQPNHSag1grql6LuV/oJfKnqWN
 TicMgKxmz24MXvENxYpJB1EVK0MQtEywx6UU9dh+nDO2yTReasJ6F+MP3b1myQWo1Pod
 EPkok8ycV4TKJpLS95HFtmqAyL8S+TVajN28xDrW3TviB/NjRx0asHUSvAuVPtSlex/k
 3lumwfOKk+bLWRr2WiHKUdS9FKoc8dXNHEDqaLDhzNnt3MFm7STyPktbfQKoGz9hY0vR
 TJSg==
X-Gm-Message-State: APjAAAVbdpo8nuofTCFQn25VbMuNL12wLI8lXrlS9i/76Bbe7Z+d5GVP
 FrGM6fcmHmeqAlpdf4mT7VQrHWyx
X-Google-Smtp-Source: APXvYqyP4TBivvFvgRrmok4zWEGgpk3W25OvjDyBvS1TYQ9TZ1bcyjDRyF/c4owim0bvK5oUYSo5Vw==
X-Received: by 2002:a17:90a:714c:: with SMTP id
 g12mr254545pjs.48.1568502826989; 
 Sat, 14 Sep 2019 16:13:46 -0700 (PDT)
Received: from piranhaplant.local ([199.68.53.171])
 by smtp.googlemail.com with ESMTPSA id b5sm55831247pfp.38.2019.09.14.16.13.45
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Sat, 14 Sep 2019 16:13:46 -0700 (PDT)
Message-ID: <a47dac236a66eca44357c1ed8a952a4fa850bdab.camel@HIDDEN>
From: Jesse Gibbons <jgibbons2357@HIDDEN>
In-Reply-To: <87sgp2pqbw.fsf@HIDDEN>
References: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
 <87sgp2pqbw.fsf@HIDDEN>
Content-Type: text/plain; charset="UTF-8"
Date: Sat, 14 Sep 2019 17:13:44 -0600
Mime-Version: 1.0
X-Mailer: Evolution 3.28.1 
Content-Transfer-Encoding: 8bit
X-Spam-Score: 0.3 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

On Wed, 2019-09-11 at 21:48 +0200, Ricardo Wurmus wrote:
> Hi Jesse,
> 
> > I have been trying to set up ardour, but jackd doesn't start in
> > real-
> > time mode. I made an os definition that replicates this issue when
> > I
> > use a VM[0].
> > [0] https://lists.gnu.org/archive/html/help-guix/2019-09/msg00065.h
> > tml
> > I asked the gnome and gdm IRC and found out gdm loads the gdm-
> > password
> > pam config, which seems untouched by pam-limits-service. My
> > /etc/pam.d/gdm-password (which should be the default) is attached.
> 
> I can reproduce this.
> 
> (I’m sorry for accidentally misleading you earlier.  Turns out I used
> JACK a little longer ago than I initially realized.)
> 
> I think it should be pretty easy to fix this:
> 
> 1) we should generate a single file that is used for generic session
> settings.
> 
> 2) all login programs (including gdm) should include that file in
> their
> PAM settings.
> 
> 3) the pam-limits-service should extend that single file instead of
> attempting to update a bunch of PAM files for a selected list of
> programs.
> 
> --
> Ricardo
> 
Is all this best practice?

This solution would have patches for three files:
- gnu/system/pam.scm (adding the generic session settings file and
patching the "su" and "login" configurations)
- gnu/services/base.scm (patching pam-limits-service)
- gnu/services/desktop.scm (patching the graphical login
configurations).

All new login services would require a patch to just one file with
these steps implemented(to add the service), whereas they would each
need a patch to two files if they are not implemented (one to add the
service, another to have pam-limits-service modify the service's pam
config.

If you think this solution is better design than what we currently
have, and others in this mailing list agree, I will work to provide
these patches.

I previously said adding gdm-password to the list of pam configs
amended by pam-limits-service did not work. I then discovered the
changes in the environment will not work unless I run "make". I don't
know if this is a bug in guix or guile, or if it is intentionally this
way; the manual should be updated to clarify that guix needs to be
built in the environment for the changes to work.

I sent a patch (bug#37405) that fixes this issue for gdm-password. A
simple change can probably fix it for gdm-autologin (not added because
I haven't tested it) and whatever gdm loads when the user logs in with
biometric fingerprints (I don't know the name). When we add ldm and
kdm, I think we can do something similar.

-- 
-Jesse

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#37380: gdm doesn't load pam-limits
Resent-From: Jesse Gibbons <jgibbons2357@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 19 Sep 2019 02:47:02 +0000
Resent-Message-ID: <handler.37380.B37380.156886120010159 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 37380
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ricardo Wurmus <rekado@HIDDEN>
Cc: 37380 <at> debbugs.gnu.org
Received: via spool by 37380-submit <at> debbugs.gnu.org id=B37380.156886120010159
          (code B ref 37380); Thu, 19 Sep 2019 02:47:02 +0000
Received: (at 37380) by debbugs.gnu.org; 19 Sep 2019 02:46:40 +0000
Received: from localhost ([127.0.0.1]:55028 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1iAmSt-0002dn-Ra
	for submit <at> debbugs.gnu.org; Wed, 18 Sep 2019 22:46:40 -0400
Received: from mail-pg1-f195.google.com ([209.85.215.195]:45855)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <jgibbons2357@HIDDEN>) id 1iAmSr-0002dZ-1B
 for 37380 <at> debbugs.gnu.org; Wed, 18 Sep 2019 22:46:37 -0400
Received: by mail-pg1-f195.google.com with SMTP id 4so944737pgm.12
 for <37380 <at> debbugs.gnu.org>; Wed, 18 Sep 2019 19:46:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=message-id:subject:from:to:cc:in-reply-to:references:date
 :mime-version:content-transfer-encoding;
 bh=zSvGCCDDUXZTy29BvoZU0HumqwJbzeh2EaDL35QDLqw=;
 b=tu16Rf2NJq70WNhpr6kgRhkhO7VgyU45LY2BoIEDghi+j4JcS/UZaqbbaaPEa3KLQP
 7+aEAIO0NVNToHjEzpBpY5IPgiD/6envHnLiZ1ZCbuJgwgcOo1pUUb/LReyub+xJjAcR
 mVCCiFfJI52wmvba7+ufxeq+g/W4zsUlfqNRvZHV/osE28eWHcU3al6Q4mRmFdyq6aNX
 9V11YPEmAT6Xm3N/gv3QXnowhBQ/cI2kjcw0uFRavd8tOE5VwS9gBPD49f7DlXV0YCj3
 fwK3iQS9GlpVIKwUOAzgW8zMe3PneZ8OEmTwOnBXmMyCYUx82CT6Ep/iKTLE4VGCYUen
 A8HA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:message-id:subject:from:to:cc:in-reply-to
 :references:date:mime-version:content-transfer-encoding;
 bh=zSvGCCDDUXZTy29BvoZU0HumqwJbzeh2EaDL35QDLqw=;
 b=hAUGxgzibZfvebvSRv9NgBso8l3lcd0OpHM52UCKHKb3pvrORcGE5tTKjFroFJ28KX
 rwPMwu2Y52KMVYOY+DO5EaajdglLGVhNUDRiCoEBeDBySutnXLWyTTTrpyO//DAJBG9u
 NwZBToek5+uyOfeEzh1VIaGHmSYVvDmhSWmaNVo+iZlYEWIximA9Nbzg2hz41wo6N7TQ
 WnsP+AJxph3P0BBoiIhMd6tVmn/zq3MGd+JW9thC/3re5FNmlCO227zm2TkED0Hh8VkN
 RYT7Y/R/TNO0XcBPEUuLn158V6TkJFgGxCLDwTZ02Vjhfb/d/W6oytPt1Ue8sjKSTDff
 5Wsg==
X-Gm-Message-State: APjAAAUuph5rW46AwRdWP0zEkwYu4DGtUmsGXN1yUJX/NVclSTIGu84n
 3Hte/OmapVrDZDkM5AiXwjhU18OJ
X-Google-Smtp-Source: APXvYqxdi6V5lOf6UFv+yCgZFs5DibctPqeyXZWQjk5Wxje14tiY/nr53vyhQ6WIGgwSCfykkyTtsQ==
X-Received: by 2002:a65:6903:: with SMTP id s3mr6886477pgq.269.1568861191305; 
 Wed, 18 Sep 2019 19:46:31 -0700 (PDT)
Received: from piranhaplant.local ([199.68.53.171])
 by smtp.googlemail.com with ESMTPSA id z2sm14663908pfq.58.2019.09.18.19.46.29
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Wed, 18 Sep 2019 19:46:30 -0700 (PDT)
Message-ID: <e96a249f31478c922ada535c5f80230824127c57.camel@HIDDEN>
From: Jesse Gibbons <jgibbons2357@HIDDEN>
In-Reply-To: <a47dac236a66eca44357c1ed8a952a4fa850bdab.camel@HIDDEN>
References: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
 <87sgp2pqbw.fsf@HIDDEN>
 <a47dac236a66eca44357c1ed8a952a4fa850bdab.camel@HIDDEN>
Content-Type: text/plain; charset="UTF-8"
Date: Wed, 18 Sep 2019 20:46:29 -0600
Mime-Version: 1.0
X-Mailer: Evolution 3.28.1 
Content-Transfer-Encoding: 8bit
X-Spam-Score: 0.3 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

On Sat, 2019-09-14 at 17:13 -0600, Jesse Gibbons wrote:
> On Wed, 2019-09-11 at 21:48 +0200, Ricardo Wurmus wrote:
> > Hi Jesse,
> > 
> > > I have been trying to set up ardour, but jackd doesn't start in
> > > real-
> > > time mode. I made an os definition that replicates this issue when
> > > I
> > > use a VM[0].
> > > [0] https://lists.gnu.org/archive/html/help-guix/2019-09/msg00065.h
> > > tml
> > > I asked the gnome and gdm IRC and found out gdm loads the gdm-
> > > password
> > > pam config, which seems untouched by pam-limits-service. My
> > > /etc/pam.d/gdm-password (which should be the default) is attached.
> > 
> > I can reproduce this.
> > 
> > (I’m sorry for accidentally misleading you earlier.  Turns out I used
> > JACK a little longer ago than I initially realized.)
> > 
> > I think it should be pretty easy to fix this:
> > 
> > 1) we should generate a single file that is used for generic session
> > settings.
> > 
> > 2) all login programs (including gdm) should include that file in
> > their
> > PAM settings.
> > 
> > 3) the pam-limits-service should extend that single file instead of
> > attempting to update a bunch of PAM files for a selected list of
> > programs.
> > 
> > --
> > Ricardo
> > 
> 
> Is all this best practice?
> 
> This solution would have patches for three files:
> - gnu/system/pam.scm (adding the generic session settings file and
> patching the "su" and "login" configurations)
> - gnu/services/base.scm (patching pam-limits-service)
> - gnu/services/desktop.scm (patching the graphical login
> configurations).
> 
> All new login services would require a patch to just one file with
> these steps implemented(to add the service), whereas they would each
> need a patch to two files if they are not implemented (one to add the
> service, another to have pam-limits-service modify the service's pam
> config.
> 
> If you think this solution is better design than what we currently
> have, and others in this mailing list agree, I will work to provide
> these patches.
> 
> I previously said adding gdm-password to the list of pam configs
> amended by pam-limits-service did not work. I then discovered the
> changes in the environment will not work unless I run "make". I don't
> know if this is a bug in guix or guile, or if it is intentionally this
> way; the manual should be updated to clarify that guix needs to be
> built in the environment for the changes to work.
> 
> I sent a patch (bug#37405) that fixes this issue for gdm-password. A
> simple change can probably fix it for gdm-autologin (not added because
> I haven't tested it) and whatever gdm loads when the user logs in with
> biometric fingerprints (I don't know the name). When we add ldm and
> kdm, I think we can do something similar.
> 
ping

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#37380: gdm doesn't load pam-limits
Resent-From: Jesse Gibbons <jgibbons2357@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 25 Sep 2019 15:49:02 +0000
Resent-Message-ID: <handler.37380.B37380.156942649012751 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 37380
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Ricardo Wurmus <rekado@HIDDEN>
Cc: 37380 <at> debbugs.gnu.org
Received: via spool by 37380-submit <at> debbugs.gnu.org id=B37380.156942649012751
          (code B ref 37380); Wed, 25 Sep 2019 15:49:02 +0000
Received: (at 37380) by debbugs.gnu.org; 25 Sep 2019 15:48:10 +0000
Received: from localhost ([127.0.0.1]:42353 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1iD9WU-0003Jb-EO
	for submit <at> debbugs.gnu.org; Wed, 25 Sep 2019 11:48:10 -0400
Received: from mail-pf1-f195.google.com ([209.85.210.195]:46777)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <jgibbons2357@HIDDEN>) id 1iD9WQ-0003Iq-90
 for 37380 <at> debbugs.gnu.org; Wed, 25 Sep 2019 11:48:06 -0400
Received: by mail-pf1-f195.google.com with SMTP id q5so3701166pfg.13
 for <37380 <at> debbugs.gnu.org>; Wed, 25 Sep 2019 08:48:06 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=message-id:subject:from:to:cc:in-reply-to:references:date
 :mime-version:content-transfer-encoding;
 bh=zSvGCCDDUXZTy29BvoZU0HumqwJbzeh2EaDL35QDLqw=;
 b=qNOCBCpHl1UDWa01XbBbBHeX05JmqaoHFKFjONbPcSH+CaOj0WsITej8WLoSRUdDax
 RE1TaKAdf4b+no+du+JXWfmauqFjihuZssX0TzRSius0/5j20DH0krWL0bjoBIa3t4mP
 2BpcZdUPx6Ym0hhzxkogCQgTf93I92sqFIIoccdudIrolYt5NmAFbu+k/HGjlJM80gUQ
 hsvG+XL373iPgh3s/HZI7lepmirYWEmQVrWmS9yRMbiX2lLGqpFNGQVsTI5UL0ZCEupB
 xtUkS9EdTLclq/8RiwpptIH+JqCrgaaou2hsuMaFQ4hTyQgZgmZPLLtXGhKDl1Sfs5fv
 eCLw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:message-id:subject:from:to:cc:in-reply-to
 :references:date:mime-version:content-transfer-encoding;
 bh=zSvGCCDDUXZTy29BvoZU0HumqwJbzeh2EaDL35QDLqw=;
 b=oMeGHO0GEFJ4ba7sLcEwlQi/XJngUGeReKufNvQuWNNSxUXEzrrj+/AiVYYNUyCW19
 l8Z8Dc7LJ18aes2koEgb80iChsd3Suwx1x/KfIAWQ8WOGga6qqYEFggv8tmuWToMDJTq
 Yv9N2epPRankTR3fwkh2nxIkPQosReoRRy+1gWW4n+Q2xMHpl9enxgxt2EGkmMckhLIw
 wPM7i/ArosQ3Q1V1kS1ANTbo5dIWk0HMJ41C6DGfPfTuJ8dEXI7okEWxrK9PmDmZ9MQw
 bus/fKKqQOTGGNbcYJX9KYBlfyn5BiOYZx71DSb1/hQwT/AJN+w5CsARgB6A9HSgpFXx
 7wlg==
X-Gm-Message-State: APjAAAVnipwLi3bMhbnav5lIHQF/Zc9fT0G7IpfRjQ4RYNN2xxvWs1FG
 MhFKiMdJ6/egLEGtjQMr5JOJzUFR
X-Google-Smtp-Source: APXvYqxnEhMDHfFboS0DiMWry3rCC106wAeB2IZcJBr/Wj8mtun2yP41PCAUZ6uGdKUKxnk5xZCabg==
X-Received: by 2002:a65:60c3:: with SMTP id r3mr31681pgv.116.1569426480627;
 Wed, 25 Sep 2019 08:48:00 -0700 (PDT)
Received: from piranhaplant.local ([199.68.53.171])
 by smtp.googlemail.com with ESMTPSA id
 j128sm10002300pfg.51.2019.09.25.08.47.58
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Wed, 25 Sep 2019 08:47:59 -0700 (PDT)
Message-ID: <c5664c66d4bb289de30afee8721c82b770f8f150.camel@HIDDEN>
From: Jesse Gibbons <jgibbons2357@HIDDEN>
In-Reply-To: <a47dac236a66eca44357c1ed8a952a4fa850bdab.camel@HIDDEN>
References: <c24fb719e529bfaf92f2a11bbebf08aa49d302cc.camel@HIDDEN>
 <87sgp2pqbw.fsf@HIDDEN>
 <a47dac236a66eca44357c1ed8a952a4fa850bdab.camel@HIDDEN>
Content-Type: text/plain; charset="UTF-8"
Date: Wed, 25 Sep 2019 09:47:53 -0600
Mime-Version: 1.0
X-Mailer: Evolution 3.28.1 
Content-Transfer-Encoding: 8bit
X-Spam-Score: 0.3 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

On Sat, 2019-09-14 at 17:13 -0600, Jesse Gibbons wrote:
> On Wed, 2019-09-11 at 21:48 +0200, Ricardo Wurmus wrote:
> > Hi Jesse,
> > 
> > > I have been trying to set up ardour, but jackd doesn't start in
> > > real-
> > > time mode. I made an os definition that replicates this issue when
> > > I
> > > use a VM[0].
> > > [0] https://lists.gnu.org/archive/html/help-guix/2019-09/msg00065.h
> > > tml
> > > I asked the gnome and gdm IRC and found out gdm loads the gdm-
> > > password
> > > pam config, which seems untouched by pam-limits-service. My
> > > /etc/pam.d/gdm-password (which should be the default) is attached.
> > 
> > I can reproduce this.
> > 
> > (I’m sorry for accidentally misleading you earlier.  Turns out I used
> > JACK a little longer ago than I initially realized.)
> > 
> > I think it should be pretty easy to fix this:
> > 
> > 1) we should generate a single file that is used for generic session
> > settings.
> > 
> > 2) all login programs (including gdm) should include that file in
> > their
> > PAM settings.
> > 
> > 3) the pam-limits-service should extend that single file instead of
> > attempting to update a bunch of PAM files for a selected list of
> > programs.
> > 
> > --
> > Ricardo
> > 
> 
> Is all this best practice?
> 
> This solution would have patches for three files:
> - gnu/system/pam.scm (adding the generic session settings file and
> patching the "su" and "login" configurations)
> - gnu/services/base.scm (patching pam-limits-service)
> - gnu/services/desktop.scm (patching the graphical login
> configurations).
> 
> All new login services would require a patch to just one file with
> these steps implemented(to add the service), whereas they would each
> need a patch to two files if they are not implemented (one to add the
> service, another to have pam-limits-service modify the service's pam
> config.
> 
> If you think this solution is better design than what we currently
> have, and others in this mailing list agree, I will work to provide
> these patches.
> 
> I previously said adding gdm-password to the list of pam configs
> amended by pam-limits-service did not work. I then discovered the
> changes in the environment will not work unless I run "make". I don't
> know if this is a bug in guix or guile, or if it is intentionally this
> way; the manual should be updated to clarify that guix needs to be
> built in the environment for the changes to work.
> 
> I sent a patch (bug#37405) that fixes this issue for gdm-password. A
> simple change can probably fix it for gdm-autologin (not added because
> I haven't tested it) and whatever gdm loads when the user logs in with
> biometric fingerprints (I don't know the name). When we add ldm and
> kdm, I think we can do something similar.
> 
ping

Last modified: Mon, 25 Nov 2019 12:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.