X-Loop: help-debbugs@HIDDEN
Subject: bug#66347: GHC packages inputs leak in guix shell
Resent-From: Simon Tournier <zimon.toutoune@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Wed, 04 Oct 2023 18:33:01 +0000
Resent-Message-ID: <handler.66347.B.169644437121034 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: report 66347
X-GNU-PR-Package: guix
X-GNU-PR-Keywords:
To: 66347 <at> debbugs.gnu.org
X-Debbugs-Original-To: bug-guix@HIDDEN
Received: via spool by submit <at> debbugs.gnu.org id=B.169644437121034
(code B ref -1); Wed, 04 Oct 2023 18:33:01 +0000
Received: (at submit) by debbugs.gnu.org; 4 Oct 2023 18:32:51 +0000
Received: from localhost ([127.0.0.1]:45353 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
id 1qo6fy-0005TC-Ot
for submit <at> debbugs.gnu.org; Wed, 04 Oct 2023 14:32:51 -0400
Received: from lists.gnu.org ([2001:470:142::17]:47976)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <zimon.toutoune@HIDDEN>) id 1qo6fw-0005Sy-W9
for submit <at> debbugs.gnu.org; Wed, 04 Oct 2023 14:32:49 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from <zimon.toutoune@HIDDEN>)
id 1qo6fS-0008HV-6v
for bug-guix@HIDDEN; Wed, 04 Oct 2023 14:32:22 -0400
Received: from mail-wm1-x32b.google.com ([2a00:1450:4864:20::32b])
by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
(Exim 4.90_1) (envelope-from <zimon.toutoune@HIDDEN>)
id 1qo6fM-0007PY-8u
for bug-guix@HIDDEN; Wed, 04 Oct 2023 14:32:17 -0400
Received: by mail-wm1-x32b.google.com with SMTP id
5b1f17b1804b1-406532c49dcso280295e9.0
for <bug-guix@HIDDEN>; Wed, 04 Oct 2023 11:32:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1696444330; x=1697049130; darn=gnu.org;
h=mime-version:message-id:date:references:subject:to:from:from:to:cc
:subject:date:message-id:reply-to;
bh=swNBjaXgCEhe9TrRyuaf4qYQOXjT/kmdsL5KkW58Wis=;
b=R1ckMz7wa9x5EPpu7bodL7QWn7mxwtI+2w/3K92uZ+5IO/t8cQECqSIIryKkj0eyAm
i/Yy1iTFPNp9woWLStzkIzrojL/JLIeWJsGsaKqlD2XNVMIBJDDKmQ2FYus9B/+x4cLM
IJI0SAGtOGvVv6vryVvIKgUleOyqfWjy2SfBI6TWlWsdYuGk5n0hiohqAJRqxMhKqnL/
WYbtPPYdNWO5BNs6KLErst1FSSU5W6PXTwNI59GzJ9PiAUWIKdfzzLZql4E6EKMr3jI4
HiUQVHC3Vlorqfub1v9NFztpB5ZpQkhiFRP2ZYJvq45TpcuLAS+q6JyrQYCMmG3f7tEU
0zQg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1696444330; x=1697049130;
h=mime-version:message-id:date:references:subject:to:from
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=swNBjaXgCEhe9TrRyuaf4qYQOXjT/kmdsL5KkW58Wis=;
b=r9Zk5F1LXRy0PMYQvCTfJzXsMLHExMJDcIKnpjZvYlHCFGLnlJM3IzSdyoz1ebTzge
LlabmetQbbJGE+Gz9SJTxwcVw8TAMyokcF1Vhq3QBFyHg89r+uQRbDawyIgaejjkF28W
N3m/zZVZOEVO2xphL/jxOby8Lnq2W3ZvOObwL+l89VAbRDBSAFvHmtfFX6NR5Z+S4/x+
c+E5UjCD9dDofD51vv+6hI7aDo8/p9j5goLyGTRSdVbL0xPVKLiHQimoE2spWPphtMn/
WPMbbhy3rZwSatiQt3Ju67aZ7k0C68PVDU8XZ2Ld8/4Qway69+x+IpY5GSBLtKvhtFvu
FDpg==
X-Gm-Message-State: AOJu0YyCkfNvenf/oQc7pNs43BODrK+BtAFnJIM4G6yEHhhWIn5WtPEE
gRxqG8H2Tfaq2srPbWb4BbhiyblJJvQ=
X-Google-Smtp-Source: AGHT+IG6sFrrXS5Ib7v8STIhyLEK/hm+3Ijgi9AoMAxKB9qXoFUGygjyr2K1Yv6jGCMK2KNQ0sXCBw==
X-Received: by 2002:a5d:5707:0:b0:323:2e5d:b7c6 with SMTP id
a7-20020a5d5707000000b003232e5db7c6mr2792123wrv.0.1696444330448;
Wed, 04 Oct 2023 11:32:10 -0700 (PDT)
Received: from pfiuh07 ([193.48.40.241]) by smtp.gmail.com with ESMTPSA id
y9-20020a5d4ac9000000b0030ada01ca78sm4567551wrs.10.2023.10.04.11.32.10
for <bug-guix@HIDDEN>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Wed, 04 Oct 2023 11:32:10 -0700 (PDT)
From: Simon Tournier <zimon.toutoune@HIDDEN>
References: <p4jjdigofugtd66rsmq336z2obcj3jfbrbeiui7jitr37czyyc@s3ueljv5sroe>
Date: Wed, 04 Oct 2023 20:26:29 +0200
Message-ID: <87jzs2z1ka.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
Received-SPF: pass client-ip=2a00:1450:4864:20::32b;
envelope-from=zimon.toutoune@HIDDEN; helo=mail-wm1-x32b.google.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.0 (+)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)
Hi,
Consider this:
--8<---------------cut here---------------start------------->8---
$ guix shell -C ghc-esqueleto ghc gcc-toolchain -- ghci
GHCi, version 9.2.5: https://www.haskell.org/ghc/ :? for help
ghci> import Data.ByteString.Base64.URL.Lazy
ghci> :t encode
encode
:: Data.ByteString.Lazy.Internal.ByteString
-> Data.ByteString.Lazy.Internal.ByteString
--8<---------------cut here---------------end--------------->8---
The package ghc-base64-bytestring should not be visible and instead, the
user should see:
<no location info>: error:
Could not find module `Data.ByteString.Base64.URL.Lazy'
It is not a module in the current program, or in any known package.
See discussion for more details if needed.
GHC packages' inputs leak in guix shell
Saku Laesvuori <saku@HIDDEN>
Tue, 15 Aug 2023 09:51:50 +0300
id:20230815065150.5joaxyts646mnpex@X-kone
https://lists.gnu.org/archive/html/help-guix/2023-08
https://yhetil.org/guix/20230815065150.5joaxyts646mnpex@X-kone
As reported in the discussion above, cabal is not exposing the package
required as dependency.
--8<---------------cut here---------------start------------->8---
$ guix shell -CN cabal-install coreutils zlib -D ghc-old-time
$ cabal update
$ env -u GHC_PACKAGE_PATH cabal install --lib esqueleto
$ ghci
ghci> import Database.Esqueleto.Experimental
ghci> :t encode
<interactive>:1:1: error: Variable not in scope: encode
ghci> import Data.ByteString.Base64.URL.Lazy
<no location info>: error:
Could not load module `Data.ByteString.Base64.URL.Lazy'
It is a member of the hidden package `base64-bytestring-1.2.1.0'.
You can run `:set -package base64-bytestring' to expose it.
(Note: this unloads all the modules in the current scope.)
--8<---------------cut here---------------end--------------->8---
Cheers,
simon
Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) Content-Type: text/plain; charset=utf-8 X-Loop: help-debbugs@HIDDEN From: help-debbugs@HIDDEN (GNU bug Tracking System) To: Simon Tournier <zimon.toutoune@HIDDEN> Subject: bug#66347: Acknowledgement (GHC packages inputs leak in guix shell) Message-ID: <handler.66347.B.169644437121034.ack <at> debbugs.gnu.org> References: <87jzs2z1ka.fsf@HIDDEN> X-Gnu-PR-Message: ack 66347 X-Gnu-PR-Package: guix Reply-To: 66347 <at> debbugs.gnu.org Date: Wed, 04 Oct 2023 18:33:02 +0000 Thank you for filing a new bug report with debbugs.gnu.org. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): bug-guix@HIDDEN If you wish to submit further information on this problem, please send it to 66347 <at> debbugs.gnu.org. Please do not send mail to help-debbugs@HIDDEN unless you wish to report a problem with the Bug-tracking system. --=20 66347: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D66347 GNU Bug Tracking System Contact help-debbugs@HIDDEN with problems
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.