GNU bug report logs - #78254
Replacement variables in guix-daemon.service

Message received at submit <at> debbugs.gnu.org:

Received: (at submit) by debbugs.gnu.org; 5 May 2025 07:18:18 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon May 05 03:18:17 2025
Received: from localhost ([127.0.0.1]:38077 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1uBq5g-0006I3-TS
	for submit <at> debbugs.gnu.org; Mon, 05 May 2025 03:18:17 -0400
Received: from lists.gnu.org ([2001:470:142::17]:59064)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <yarivido@HIDDEN>)
 id 1uBkLL-0005Oh-HA
 for submit <at> debbugs.gnu.org; Sun, 04 May 2025 21:10:04 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <yarivido@HIDDEN>)
 id 1uBkLB-0002z0-4X
 for bug-guix@HIDDEN; Sun, 04 May 2025 21:09:54 -0400
Received: from mail-ej1-x62a.google.com ([2a00:1450:4864:20::62a])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <yarivido@HIDDEN>)
 id 1uBkL8-0006Ed-EP
 for bug-guix@HIDDEN; Sun, 04 May 2025 21:09:52 -0400
Received: by mail-ej1-x62a.google.com with SMTP id
 a640c23a62f3a-acb5ec407b1so668416066b.1
 for <bug-guix@HIDDEN>; Sun, 04 May 2025 18:09:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1746407388; x=1747012188; darn=gnu.org;
 h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
 :date:message-id:reply-to;
 bh=FGw35D37lzfwTin3ntrP6EdKfPXmb5JOEse+1gjQh6g=;
 b=c2r3K0/LONT6of0fwwU7Qfz99NTWoh/iebHf/d/Lt3cUPTGvTfIAG1I3Y8kKEDvea7
 5tzdvfijKDytrZcVEzrKyybHSwRvxJeCMMVyp70fXK5YxQl3ni20oZtKIwahPn4oeL8p
 9Q62y2oqg9zbdOnP4Kjys0pV/Ckg0DA11lHrIfphJFDe4qj573TYJNIJsIfwxPPO2myl
 TKWux5kKzk7Y40ufS1k4diUIIVdCY6OzHG0Hb+020dGbKStPPah3g41ariOzsKt4MUT0
 Tbk+JnszY1JIg8o52s1kk8TRKAoS303u9LVcNIeYZZqSvxKaWUDdxIKUmwpe7EqGETYL
 9cFQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1746407388; x=1747012188;
 h=to:subject:message-id:date:from:mime-version:x-gm-message-state
 :from:to:cc:subject:date:message-id:reply-to;
 bh=FGw35D37lzfwTin3ntrP6EdKfPXmb5JOEse+1gjQh6g=;
 b=s0WuYufuLQTRr8CcERp2PKtQeiSxVxmQvhz759eqlfXXDJa76gzu0w9VnoMcEUwKdP
 m/4WndTBac9tdXb2d3baWNZ+mcTRZ/PugS2N4DYJF+091ZnC6ODdzkCVM/1nWeLlETFZ
 JH4UXu58vzYYVmSDXoky1Tid+4k/nZjAXU6kCDQ9todKxPCQ4sDOIo3ols3DAxVPknTV
 2KG6HgUlfgMQkmtYy3pBLqXAxP8xTQtwp4vd73RrwRgahXCM5rEbba7jOpox6ylXr2Ga
 2Q8VOiEaeanh0ekDXDKULJQbFf1+U7RgITUO86VqlHAL8SCzsFcRN7fdgV9aW/PTHSlg
 TcvQ==
X-Gm-Message-State: AOJu0YwhFU/lHIK89oNGAUxcWnDKnT97QwxJsqNhcJMkq8zf2MR0c+rs
 6qQh2yF6CygKxOYdJWYtzsckCEkzXhkjq3zIWTWpw/uF8SSzsEeypnGF2dJrKCc2iJUiNqoa07b
 tJExWKry0OQXKAIePFCfXJ1puSX8lA+pXDN4=
X-Gm-Gg: ASbGnctS0TA+piF56VuPRYXI9Hon34SSVhAfdEe5x2C5a2MB7K6Cd9+scOTccRW2Hh6
 GZhvUdW5b/LxkxskehmrONVMfkfiGbEH6MmuJIIz5FmOVlNLEyspxZfqcmad2Hmy2TFasGOjoVh
 sGZpKxjMEQYxsrWrTyKJVBs3+Nqi6u7B0PKs77n/6VypZkWOZ7DLJJS2LV
X-Google-Smtp-Source: AGHT+IEGOoobUeB7cP5FdZxgdLdiN8XrSk+ZmqT7n19KpG6HUPywOcEKvN8K3c4B3ce3Yt1xHDFDgpnAOp4mVrCrqUw=
X-Received: by 2002:a17:907:72c7:b0:ad1:8de4:358 with SMTP id
 a640c23a62f3a-ad1a4b7058cmr468960266b.61.1746407387580; Sun, 04 May 2025
 18:09:47 -0700 (PDT)
MIME-Version: 1.0
From: Ido Yariv <yarivido@HIDDEN>
Date: Sun, 4 May 2025 21:09:35 -0400
X-Gm-Features: ATxdqUFkfkl4KC5COOfL7RsIMwAR9gCNX2B5F0rgh48xE1kjb0f7zN0F1Nb_Oto
Message-ID: <CAMPn9MnogcKLjFVCE5G5fak35zhViAys2mOM=KyBAuu9HAxPdA@HIDDEN>
Subject: Replacement variables in guix-daemon.service
To: bug-guix@HIDDEN
Content-Type: multipart/alternative; boundary="000000000000f84bba063459279a"
Received-SPF: pass client-ip=2a00:1450:4864:20::62a;
 envelope-from=yarivido@HIDDEN; helo=mail-ej1-x62a.google.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: submit
X-Mailman-Approved-At: Mon, 05 May 2025 03:18:14 -0400
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

--000000000000f84bba063459279a
Content-Type: text/plain; charset="UTF-8"

Hi,

It appears guix-daemon.service leaks some replacement variables defined in
guix-daemon.service.in, e.g.:
--8<---------------cut here---------------start------------->8---
Environment='GUIX_STATE_DIRECTORY=/var/guix'
'GUIX_LOCPATH=@localstatedir@/guix/profiles/per-user/root/guix-profile/lib/locale'
LC_ALL=en_US.utf8

# Run under a dedicated unprivileged user account.
User=guix-daemon

# Bind-mount the store read-write in a private namespace, to counter the
# effect of 'gnu-store.mount'.
PrivateMounts=true
BindPaths=@storedir@
--8<---------------cut here---------------end--------------->8---

From what I can tell, it looks like the replacement is done by nix/local.mk
(as opposed to self.scm), and the sed script there doesn't include all
variables, nor is it replacing matched patterns globally.

Thanks,
Ido.

--000000000000f84bba063459279a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><span style=3D"font-family:monospace">Hi,<br><br>It appear=
s guix-daemon.service leaks some replacement variables defined in <a href=
=3D"http://guix-daemon.service.in">guix-daemon.service.in</a>, e.g.:<br>--8=
&lt;---------------cut here---------------start-------------&gt;8---<br>Env=
ironment=3D&#39;GUIX_STATE_DIRECTORY=3D/var/guix&#39; &#39;GUIX_LOCPATH=3D@=
localstatedir@/guix/profiles/per-user/root/guix-profile/lib/locale&#39; LC_=
ALL=3Den_US.utf8<br><br># Run under a dedicated unprivileged user account.<=
br>User=3Dguix-daemon<br><br># Bind-mount the store read-write in a private=
 namespace, to counter the<br># effect of &#39;gnu-store.mount&#39;.<br>Pri=
vateMounts=3Dtrue<br>BindPaths=3D@storedir@<br>--8&lt;---------------cut he=
re---------------end---------------&gt;8---<br><br>From what I can tell, it=
 looks like the replacement is done by nix/<a href=3D"http://local.mk">loca=
l.mk</a> (as opposed to self.scm), and the sed script there doesn&#39;t inc=
lude all variables, nor is it replacing matched patterns globally.<br><br>T=
hanks,<br>Ido.</span></div>

--000000000000f84bba063459279a--