GNU bug report logs - #53187
emacs-shroud propagates the wrong gnupg

Previous Next

To reply to this bug, email your comments to 53187 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Efraim Flashner <efraim <at> flashner.co.il>
To: bug-guix <at> gnu.org
Subject: emacs-shroud propagates the wrong gnupg
Date: Tue, 11 Jan 2022 15:46:09 +0200

[Message part 1 (text/plain, inline)]

-- 
Efraim Flashner   <efraim <at> flashner.co.il>   רנשלפ םירפא
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[Message part 2 (message/rfc822, inline)]

From: Gary Johnson <lambdatronic <at> disroot.org>
To: help-guix <at> gnu.org
Subject: emacs-shroud package appears to be out of date
Date: Thu, 06 Jan 2022 11:46:02 -0500

Hi Guix,

During my recent `guix pull` + `guix package -u` adventure, the
emacs-shroud package barfed due to what looks like a hard-coded
reference to an older version of gnupg. I uninstalled it in order to
complete my upgrade. Of course, when I try to reinstall it now, I
continue to get the same version conflict error due to gnupg.

```
gjohnson <at> euclid ~ $ guix package -i emacs-shroud
The following package will be installed:
   emacs-shroud 1.105

guix package: error: profile contains conflicting entries for gnupg
guix package: error:   first entry: gnupg <at> 2.2.30 /gnu/store/0snfzd41n430ddpq316j9v2z5fn2y62m-gnupg-2.2.30
guix package: error:    ... propagated from emacs-shroud <at> 1.105
guix package: error:   second entry: gnupg <at> 2.2.32 /gnu/store/75122spwjdkxxgd32gkkil3n7ifax8i5-gnupg-2.2.32
guix package: error:    ... propagated from emacs-pinentry <at> 0.1-1.dcc9ba0
hint: Try upgrading both `emacs-shroud' and `emacs-pinentry', or remove one of them from the profile.
```

Note, that while the above error message is complaining about
emacs-pinentry, it still barfs even if I remove emacs-pinentry and just
install gnupg directly since the current gnupg is 2.2.32.

Can whoever is maintaining the emacs-shroud package please update it to
gnupg <at> 2.2.32, so it can be installed again?

Thanks,
  Gary

-- 
GPG Key ID: 7BC158ED
Use `gpg --search-keys lambdatronic' to find me
Protect yourself from surveillance: https://emailselfdefense.fsf.org
=======================================================================
()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments

Why is HTML email a security nightmare? See https://useplaintext.email/

Please avoid sending me MS-Office attachments.
See http://www.gnu.org/philosophy/no-word-attachments.html

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 53187 <at> debbugs.gnu.org (full text, mbox):

From: Maxime Devos <maximedevos <at> telenet.be>
To: Efraim Flashner <efraim <at> flashner.co.il>, 53187 <at> debbugs.gnu.org
Subject: Re: bug#53187: emacs-shroud propagates the wrong gnupg
Date: Tue, 11 Jan 2022 16:15:43 +0100

[Message part 1 (text/plain, inline)]

Efraim Flashner schreef op di 11-01-2022 om 15:46 [+0200]:
> guix package: error:   first entry:
> gnupg <at> 2.2.30 /gnu/store/0snfzd41n430ddpq316j9v2z5fn2y62m-gnupg-2.2.30
> guix package: error:    ... propagated from emacs-shroud <at> 1.105
> guix package: error:   second entry:
> gnupg <at> 2.2.32 /gnu/store/75122spwjdkxxgd32gkkil3n7ifax8i5-gnupg-2.2.32
> guix package: error:    ... propagated from
> emacs-pinentry <at> 0.1-1.dcc9ba0
> hint: Try upgrading both `emacs-shroud' and `emacs-pinentry', or
> remove one of them from the profile.
> ```
> 
> Note, that while the above error message is complaining about
> emacs-pinentry, it still barfs even if I remove emacs-pinentry and
> just
> install gnupg directly since the current gnupg is 2.2.32.
> 
> Can whoever is maintaining the emacs-shroud package please update it
> to
> gnupg <at> 2.2.32, so it can be installed again?

Instead of working around the limitations of propagation, why not
unpropagate?

I took a look at emacs-shroud's source code, and I don't see it calling
gnupg anywhere, so maybe propagating gnupg from emacs-shroud isn't
necessary?  The dependency 'shroud' hardcodes the GPG binary location,
so I don't see why 'gpg' was included in 'propagated-inputs'. 

I made the following change in emacs-shroud

    (propagated-inputs
     (list emacs-bui
           emacs-dash
           emacs-f
           emacs-s
           #;gnupg ;; <--- changed line
           shroud)),

set ~/.shroud according to https://dthompson.us/projects/shroud.html

ran "./pre-inst-env guix shell --pure emacs shroud emacs-shroud -- emacs"
and evaluated the following S-exps:
(require 'shroud) ;; why is this required? e.g. emacs-magit
(shroud--init)    ;; require things like this.

Then did "M-x shroud-bui" but nothing happened (a bug?),
so I couldn't test the change.

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.