GNU bug report logs - #78275
Replacement variables in guix-daemon.service

Message received at submit <at> debbugs.gnu.org:

Received: (at submit) by debbugs.gnu.org; 6 May 2025 03:43:06 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon May 05 23:43:06 2025
Received: from localhost ([127.0.0.1]:45305 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1uC9Cz-0005gu-PU
	for submit <at> debbugs.gnu.org; Mon, 05 May 2025 23:43:06 -0400
Received: from lists.gnu.org ([2001:470:142::17]:48296)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <yarivido@HIDDEN>)
 id 1uC7KP-0007hJ-RW
 for submit <at> debbugs.gnu.org; Mon, 05 May 2025 21:42:39 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <yarivido@HIDDEN>)
 id 1uC7KJ-0006RV-PU
 for bug-guix@HIDDEN; Mon, 05 May 2025 21:42:31 -0400
Received: from mail-ej1-x62a.google.com ([2a00:1450:4864:20::62a])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <yarivido@HIDDEN>)
 id 1uC7KH-0000S9-Pv
 for bug-guix@HIDDEN; Mon, 05 May 2025 21:42:31 -0400
Received: by mail-ej1-x62a.google.com with SMTP id
 a640c23a62f3a-ac339f53df9so1063996666b.1
 for <bug-guix@HIDDEN>; Mon, 05 May 2025 18:42:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1746495747; x=1747100547; darn=gnu.org;
 h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
 :date:message-id:reply-to;
 bh=bY5NTH0aeNn9928CIdAwP3w/Eu1nV55vPpd6JRYTkjk=;
 b=IdPMmBBHYc5eFSjEFoHFoc8e1+ERrGSfXzWgUBQ+jNeN4ad3XBYKu5m9sG4ZYCakbK
 r4O7a/va4thYBOBBCsDF0aH2CpaX6XOO8f2b5zky3g9bvqgdHiFGGQtXLjckbBOyOmCU
 yananxIW4AE5/rZ0mcyb2gDbOcXolCiobuXZboxp67xJt77ncWn79qui/nojbN+0lXv3
 7lBEGZD+0yNvcTbLDy3GXZ0XG1YZUXzHG0wf5oB+h6WOt2YTUg/BJVdTQOJYSX9HsG00
 id4EuTGc7gqjfaPbq/2bNvV/ti6PSOeTuICTuvIVvdMVx+Fip1+NHHozS+Jks2qEBMJi
 idNg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1746495747; x=1747100547;
 h=to:subject:message-id:date:from:mime-version:x-gm-message-state
 :from:to:cc:subject:date:message-id:reply-to;
 bh=bY5NTH0aeNn9928CIdAwP3w/Eu1nV55vPpd6JRYTkjk=;
 b=noa20qf3JelEJ8KIERTyx9GTH0LNhVxwRq4ilCvslDO6LyE8RWukFwEx8poNVuvCsP
 MkJXRXgVdrI3+KRIWWmI5JXjNfcFrmjQoz8vAR0YBGTu+XPaRRJAD3lCo7ATpxQeTMoy
 lOKNTqqdQ3ZkRgxuON8HWurXI/0VeC+GuVdOurhhBiUaUiVjr91StwRcqwyVMJEUNJ34
 jqDvNfRttO1uBE+/PhZd5OQha++Jc+Ydq+LV7YPmoW5mryQ2c5OLmOynyKT1E0SPxQAa
 gr1aNbTqoQq9ZHO+qMMa3/VTqUP+/1o0nuG3A240Yu/ms02zdUBRs+zNIlXMbu46EU7d
 Z69A==
X-Gm-Message-State: AOJu0Yyx6BAFwVl5C9JAEr1YYSRU0qL8l+wJjryvTwh5AZ0MnHIxg5ju
 2GK/ARPhr01+TO3rEgfciOaYk7T/EkHYPoxJ2o/OqWz0EsklsseOKb3tO7M6jynNaptvPRWxKTy
 rQ3lvC8DDTSs1Yda0QBvNpLqnnP5mZzaUY8U=
X-Gm-Gg: ASbGncuJawi3QrFdezt7jSMJKMc+WRsSdaYt4upCFXncKtLwymXyGa/KWFEFMhRrEhA
 69s3hLORqZnjGdjN6z0R5k+ZdVdAs/WWXQF/CokjRouy7cLQYHmeP5HACdewTmqhLBPMlcjr8At
 EWwc/w3e7QqJ+WiAgENeuBzqFbrJydYW6dm8hAUbCNNG9p8PKdc9oAfHL5
X-Google-Smtp-Source: AGHT+IGVtJayThBTDU2vJfD4p+HPlOUsfZfPG9RV6JYSg0JdjjYFrMUW/N5Q7kWGzG8V2cVXHQmVut48e+HTOpg7PeE=
X-Received: by 2002:a17:907:97d4:b0:ad1:825f:e33e with SMTP id
 a640c23a62f3a-ad1a490ab7bmr957727966b.15.1746495746405; Mon, 05 May 2025
 18:42:26 -0700 (PDT)
MIME-Version: 1.0
From: Ido Yariv <yarivido@HIDDEN>
Date: Mon, 5 May 2025 21:42:15 -0400
X-Gm-Features: ATxdqUF9gMtEsazbfc7W0gkJMT6zV_i20wXJIpfHOYBwa1wlEtTcnFdOjKFMVfY
Message-ID: <CAMPn9M=bmW=1F2V69K59-3gps6SH0sg3a9r8t7gEjiXg0+w0Zg@HIDDEN>
Subject: Replacement variables in guix-daemon.service
To: bug-guix@HIDDEN
Content-Type: multipart/alternative; boundary="00000000000090fadf06346dba6a"
Received-SPF: pass client-ip=2a00:1450:4864:20::62a;
 envelope-from=yarivido@HIDDEN; helo=mail-ej1-x62a.google.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: submit
X-Mailman-Approved-At: Mon, 05 May 2025 23:42:59 -0400
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

--00000000000090fadf06346dba6a
Content-Type: text/plain; charset="UTF-8"

Hi,

It appears guix-daemon.service leaks some replacement variables defined in
guix-daemon.service.in, e.g.:
--8<---------------cut here---------------start------------->8---
Environment='GUIX_STATE_DIRECTORY=/var/guix'
'GUIX_LOCPATH=@localstatedir@/guix/profiles/per-user/root/guix-profile/lib/locale'
LC_ALL=en_US.utf8

# Run under a dedicated unprivileged user account.
User=guix-daemon

# Bind-mount the store read-write in a private namespace, to counter the
# effect of 'gnu-store.mount'.
PrivateMounts=true
BindPaths=@storedir@
--8<---------------cut here---------------end--------------->8---

From what I can tell, the replacement is done by nix/local.mk (not
self.scm).
The sed script there doesn't include all variables, nor is it replacing
matched patterns globally.

Thanks,
Ido.

--00000000000090fadf06346dba6a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><span style=3D"font-family:monospace">Hi,<br><br>It appear=
s guix-daemon.service leaks some replacement variables defined in<br><a hre=
f=3D"http://guix-daemon.service.in">guix-daemon.service.in</a>, e.g.:<br>--=
8&lt;---------------cut here---------------start-------------&gt;8---<br>En=
vironment=3D&#39;GUIX_STATE_DIRECTORY=3D/var/guix&#39; &#39;GUIX_LOCPATH=3D=
@localstatedir@/guix/profiles/per-user/root/guix-profile/lib/locale&#39; LC=
_ALL=3Den_US.utf8<br><br># Run under a dedicated unprivileged user account.=
<br>User=3Dguix-daemon<br><br># Bind-mount the store read-write in a privat=
e namespace, to counter the<br># effect of &#39;gnu-store.mount&#39;.<br>Pr=
ivateMounts=3Dtrue<br>BindPaths=3D@storedir@<br>--8&lt;---------------cut h=
ere---------------end---------------&gt;8---<br><br>From what I can tell, t=
he replacement is done by nix/<a href=3D"http://local.mk">local.mk</a> (not=
 self.scm).<br>The sed script there doesn&#39;t include all variables, nor =
is it replacing<br>matched patterns globally.<br><br>Thanks,<br>Ido.</span>=
</div>

--00000000000090fadf06346dba6a--