X-Loop: help-debbugs@HIDDEN Subject: bug#68894: Prosody guix service required fixes. Resent-From: "email@HIDDEN" <email@HIDDEN> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> Resent-CC: bug-guix@HIDDEN Resent-Date: Fri, 02 Feb 2024 15:47:01 +0000 Resent-Message-ID: <handler.68894.B.17068888146840 <at> debbugs.gnu.org> Resent-Sender: help-debbugs@HIDDEN X-GNU-PR-Message: report 68894 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 68894 <at> debbugs.gnu.org X-Debbugs-Original-To: bug-guix@HIDDEN Received: via spool by submit <at> debbugs.gnu.org id=B.17068888146840 (code B ref -1); Fri, 02 Feb 2024 15:47:01 +0000 Received: (at submit) by debbugs.gnu.org; 2 Feb 2024 15:46:54 +0000 Received: from localhost ([127.0.0.1]:45451 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rVvkk-0001mF-9Q for submit <at> debbugs.gnu.org; Fri, 02 Feb 2024 10:46:54 -0500 Received: from lists.gnu.org ([2001:470:142::17]:38148) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <email@HIDDEN>) id 1rVvkh-0001m1-Fp for submit <at> debbugs.gnu.org; Fri, 02 Feb 2024 10:46:52 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <email@HIDDEN>) id 1rVvkQ-0007gk-Nq for bug-guix@HIDDEN; Fri, 02 Feb 2024 10:46:34 -0500 Received: from mail.webarch.email ([81.95.52.48]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <email@HIDDEN>) id 1rVvkN-0006Rh-Ja for bug-guix@HIDDEN; Fri, 02 Feb 2024 10:46:33 -0500 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id BA13C1A8D8A8 for <bug-guix@HIDDEN>; Fri, 2 Feb 2024 15:46:18 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msavoritias.me; s=20210930; t=1706888781; h=from:subject:date:message-id:to:mime-version:content-type: content-language; bh=EsPfG0UJ2fTG4FPuWPDv8X2YkcG6OVp6x8Lv/WMEBfc=; b=g7ggkRN9CoKvmhlU/qEMZ8xzHCT+n3bEZfy76Zszlfn4LVJafzSUNhcqgD8bOwKKgapnJt eNZTx6anxLu5jxvjLoiTdNunbPdGIg1+fYLBBAnSx84r0LmSKm+2zD2xe+mMJdKqtH5hUH sykSv8TxPrFyXvcvzqN/0Tw1YzyJthWkhYq3XW1k4bchpt85MopA1OUZSoYwQXJGxP2Esy D8KZCuBP5smEiQKRkyosBbJrwNwJkkowBnbfPsqTsLainNsGv3bY5MksPeTbaoUJJNpi8b 1rhG5i8/stx3c8twtJ8NzPuwrnTKfpn+eIjXEorHb9k9wmIJRnxFD3EuT9PUIA== Content-Type: multipart/alternative; boundary="------------8c4fUGcDEhyc0Rk208H4b5yJ" Message-ID: <41a23fb5-7698-bc69-8c22-80c5433b53cd@HIDDEN> Date: Fri, 2 Feb 2024 17:46:11 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.0 Content-Language: en-US From: "email@HIDDEN" <email@HIDDEN> X-Last-TLS-Session-Version: TLSv1.3 Received-SPF: pass client-ip=81.95.52.48; envelope-from=email@HIDDEN; helo=mail.webarch.email X-Spam_score_int: -16 X-Spam_score: -1.7 X-Spam_bar: - X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.0 (/) This is a multi-part message in MIME format. --------------8c4fUGcDEhyc0Rk208H4b5yJ Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Tried to write a system declaration that includes a prosody server. This bug aims to collect some bugs that were found and some features that were needed during writing. 1. The opaque-prosody-configuration as used in this example https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua is broken. A workaround for now is adding raw-content as a field inside prosody-configuration. 2. Prosody Includes a plugin installer now https://prosody.im/doc/installing_modules#using-the-installer so the plugin-directory here https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths needs to be changed to wrap the module installer instead. since its easier to do that than manually copying modules. This is for modules that are not part of guix yet. Ideally imo an xmpp package file would be ideal to host any module that are packaged plus all related software. 3. The modules enabled by default is outdated https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled A simple example vcard is deprecated now. also not sure if register should be default now since we have invites. 4. Security should be the default at this point https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f should be turned to true by default. all are already true by default upstream https://prosody.im/doc/s2s#security 5. The internal authentication here https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication |should be internal_hashed as per default. https://prosody.im/doc/authentication it should never be plain.| |6. Also a field for http_file_share is mandatory nowadays. see https://prosody.im/doc/modules/mod_http_file_share| |7. room creation should be local for safety reasons https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation| |nobody allows non local anymore.| I plan to get to do this btw after i am done with the joinjabber server at some point. :) |Regards,| |MSavoritias| --------------8c4fUGcDEhyc0Rk208H4b5yJ Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> </head> <body> <p>Tried to write a system declaration that includes a prosody server.</p> <p>This bug aims to collect some bugs that were found and some features that were needed during writing.</p> <p><br> </p> <p>1. The <span class="syntax-paren0"><span class="syntax-symbol"><span class="syntax-paren1"><span class="syntax-symbol"><span class="syntax-symbol">opaque-prosody-configuration as used in this example </span></span></span></span></span><a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua">https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua</a></p> <p>is broken. A workaround for now is adding raw-content as a field inside prosody-configuration.</p> <p><br> </p> <p>2. Prosody Includes a plugin installer now <a class="moz-txt-link-freetext" href="https://prosody.im/doc/installing_modules#using-the-installer">https://prosody.im/doc/installing_modules#using-the-installer</a></p> <p>so the plugin-directory here <a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths">https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths</a> needs to be changed to wrap the module installer instead. since its easier to do that than manually copying modules.</p> <p>This is for modules that are not part of guix yet. Ideally imo an xmpp package file would be ideal to host any module that are packaged plus all related software.</p> <p><br> </p> <p>3. The modules enabled by default is outdated <a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled">https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled</a></p> <p>A simple example vcard is deprecated now. also not sure if register should be default now since we have invites.</p> <p><br> </p> <p>4. Security should be the default at this point <br> </p> <p><a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f">https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f</a></p> <p><a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f">https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f</a></p> <p><a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f">https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f</a></p> <p>should be turned to true by default. all are already true by default upstream <a class="moz-txt-link-freetext" href="https://prosody.im/doc/s2s#security">https://prosody.im/doc/s2s#security</a></p> <p><br> </p> <p>5. The internal authentication here <a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication">https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication</a></p> <p><code><font face="DejaVu Sans">should be internal_hashed as per default. <a class="moz-txt-link-freetext" href="https://prosody.im/doc/authentication">https://prosody.im/doc/authentication</a> it should never be plain.</font></code></p> <p><br> </p> <p><code><font face="DejaVu Sans">6. Also a field for http_file_share is mandatory nowadays. see <a class="moz-txt-link-freetext" href="https://prosody.im/doc/modules/mod_http_file_share">https://prosody.im/doc/modules/mod_http_file_share</a></font></code></p> <p><br> </p> <p><code><font face="DejaVu Sans">7. room creation should be local for safety reasons <a class="moz-txt-link-freetext" href="https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation">https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation</a></font></code></p> <p><code><font face="DejaVu Sans">nobody allows non local anymore.</font></code></p> <p><br> </p> <p>I plan to get to do this btw after i am done with the joinjabber server at some point. :)<br> </p> <p><br> </p> <p><code><font face="DejaVu Sans">Regards,</font></code></p> <p><code><font face="DejaVu Sans">MSavoritias</font></code><br> </p> </body> </html> --------------8c4fUGcDEhyc0Rk208H4b5yJ--
Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) Content-Type: text/plain; charset=utf-8 X-Loop: help-debbugs@HIDDEN From: help-debbugs@HIDDEN (GNU bug Tracking System) To: "email@HIDDEN" <email@HIDDEN> Subject: bug#68894: Acknowledgement (Prosody guix service required fixes.) Message-ID: <handler.68894.B.17068888146840.ack <at> debbugs.gnu.org> References: <41a23fb5-7698-bc69-8c22-80c5433b53cd@HIDDEN> X-Gnu-PR-Message: ack 68894 X-Gnu-PR-Package: guix Reply-To: 68894 <at> debbugs.gnu.org Date: Fri, 02 Feb 2024 15:47:02 +0000 Thank you for filing a new bug report with debbugs.gnu.org. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): bug-guix@HIDDEN If you wish to submit further information on this problem, please send it to 68894 <at> debbugs.gnu.org. Please do not send mail to help-debbugs@HIDDEN unless you wish to report a problem with the Bug-tracking system. --=20 68894: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D68894 GNU Bug Tracking System Contact help-debbugs@HIDDEN with problems
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.