X-Loop: help-debbugs@HIDDEN Subject: bug#78287: ssh broken on systems with nix-service Resent-From: Daniel Ziltener <dziltener@HIDDEN> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> Resent-CC: bug-guix@HIDDEN Resent-Date: Wed, 07 May 2025 00:54:02 +0000 Resent-Message-ID: <handler.78287.B.17465792229812 <at> debbugs.gnu.org> Resent-Sender: help-debbugs@HIDDEN X-GNU-PR-Message: report 78287 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 78287 <at> debbugs.gnu.org X-Debbugs-Original-To: bug-guix@HIDDEN Received: via spool by submit <at> debbugs.gnu.org id=B.17465792229812 (code B ref -1); Wed, 07 May 2025 00:54:02 +0000 Received: (at submit) by debbugs.gnu.org; 7 May 2025 00:53:42 +0000 Received: from localhost ([127.0.0.1]:36221 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1uCT2c-0002YC-7k for submit <at> debbugs.gnu.org; Tue, 06 May 2025 20:53:42 -0400 Received: from lists.gnu.org ([2001:470:142::17]:43824) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <dziltener@HIDDEN>) id 1uCT2Y-0002Xp-Up for submit <at> debbugs.gnu.org; Tue, 06 May 2025 20:53:39 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <dziltener@HIDDEN>) id 1uCT2T-0008A5-Eu for bug-guix@HIDDEN; Tue, 06 May 2025 20:53:33 -0400 Received: from 195-15-242-23.dc3-a.pub1.etik-cloud.com ([195.15.242.23] helo=lyrion.ch) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <dziltener@HIDDEN>) id 1uCT2R-0003NF-9x for bug-guix@HIDDEN; Tue, 06 May 2025 20:53:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lyrion.ch; s=20230702; t=1746578779; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=v6OvJUuKFeM7/1vQ6zCG8PGx3BLGnHyDjlTpRAbtTAI=; b=wDVG/QRONuD735fLV27AnlTgVVLCv81IfJQ/WMNTjKF3sq5YyiD3o9xWDyONh1rK7MrMfo CB4+Nd7Tlb2KoZRbaW2gZpvAHC/N2vhLyNQhclrCDokCmDTcoJ2o9yein3bz3HzjPYJWeY OQmjj2YMmj1Dx3/iaK6nkopqrtl9btq9ERLk+Pz48HYbnK7FpF8C3XAiId/zqiunSaniox JLdOPElgCG3jAUI60qnRPrz2tUY65gPvfyG3TFsAXBrxG8m5DI7X3wzls6RP3MY7YkTFYb AanfCg1ShTyucgxFnjohnYq4Ho129eH2TM3QL/DFX+esZiaW1S2XtEc8CVbmMQ== Received: from localhost (053d9243.dynamic.tele-ag.de [5.61.146.67]) by lyrion.ch (OpenSMTPD) with ESMTPSA id 7af4cb0b (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO) for <bug-guix@HIDDEN>; Wed, 7 May 2025 00:46:18 +0000 (UTC) From: Daniel Ziltener <dziltener@HIDDEN> User-Agent: mu4e 1.12.9; emacs 30.1 Date: Wed, 07 May 2025 02:46:14 +0200 Message-ID: <87tt5xi6y1.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=195.15.242.23; envelope-from=dziltener@HIDDEN; helo=lyrion.ch X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RDNS_DYNAMIC=0.982, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TVD_RCVD_IP=0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.1 (/) It seems the latest OpenSSH update breaks ssh completely for people who have nix-service running. OpenSSH seems to be expecting a certain ownership of /nix/store which it does not have on Guix, and then fails with "bad ownership or modes for directory /nix/store".
Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) Content-Type: text/plain; charset=utf-8 X-Loop: help-debbugs@HIDDEN From: help-debbugs@HIDDEN (GNU bug Tracking System) To: Daniel Ziltener <dziltener@HIDDEN> Subject: bug#78287: Acknowledgement (ssh broken on systems with nix-service) Message-ID: <handler.78287.B.17465792229812.ack <at> debbugs.gnu.org> References: <87tt5xi6y1.fsf@HIDDEN> X-Gnu-PR-Message: ack 78287 X-Gnu-PR-Package: guix Reply-To: 78287 <at> debbugs.gnu.org Date: Wed, 07 May 2025 00:54:02 +0000 Thank you for filing a new bug report with debbugs.gnu.org. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): bug-guix@HIDDEN If you wish to submit further information on this problem, please send it to 78287 <at> debbugs.gnu.org. Please do not send mail to help-debbugs@HIDDEN unless you wish to report a problem with the Bug-tracking system. --=20 78287: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D78287 GNU Bug Tracking System Contact help-debbugs@HIDDEN with problems
X-Loop: help-debbugs@HIDDEN Subject: bug#78287: ssh broken on systems with nix-service References: <87tt5xi6y1.fsf@HIDDEN> In-Reply-To: <87tt5xi6y1.fsf@HIDDEN> Resent-From: Sergey Trofimov <sarg@HIDDEN> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> Resent-CC: bug-guix@HIDDEN Resent-Date: Wed, 07 May 2025 11:28:02 +0000 Resent-Message-ID: <handler.78287.B78287.174661724423585 <at> debbugs.gnu.org> Resent-Sender: help-debbugs@HIDDEN X-GNU-PR-Message: followup 78287 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Daniel Ziltener <dziltener@HIDDEN> Cc: 78287 <at> debbugs.gnu.org Received: via spool by 78287-submit <at> debbugs.gnu.org id=B78287.174661724423585 (code B ref 78287); Wed, 07 May 2025 11:28:02 +0000 Received: (at 78287) by debbugs.gnu.org; 7 May 2025 11:27:24 +0000 Received: from localhost ([127.0.0.1]:41673 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1uCcvr-00068K-Ki for submit <at> debbugs.gnu.org; Wed, 07 May 2025 07:27:23 -0400 Received: from mail-ed1-x530.google.com ([2a00:1450:4864:20::530]:60482) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from <sarg@HIDDEN>) id 1uCcvn-00067O-DD for 78287 <at> debbugs.gnu.org; Wed, 07 May 2025 07:27:20 -0400 Received: by mail-ed1-x530.google.com with SMTP id 4fb4d7f45d1cf-5fbed53b421so1045375a12.0 for <78287 <at> debbugs.gnu.org>; Wed, 07 May 2025 04:27:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sarg.org.ru; s=google; t=1746617233; x=1747222033; darn=debbugs.gnu.org; h=mime-version:message-id:date:user-agent:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=6ebjMEb5AZtSiypt9tkHFZqOvqEpC38MCTKpiBzQD3E=; b=kYbrZfWlWJ2V/JtFZaTUpc8DjznfayiDN0CH1wuHBnk33uYwzVR9i/rJKSaKeiSaMt p3qvtX4ABV3Yp69h4BGe5Uih6B/qytgsrK7AKvNUcxfL4bapHKooqilr0367ExVlFoEI Mf9BwlyZPig1rGVFEAT9Psg/95JkrFX+TweTzvijUU2LnByyWfROIoO2CUpFFEQ35UBh DXGxnFzltlHFLA7qHT3+M/4UpTGNwsuOdTBU2RWKuzqRns6tFsp8xPb4w7zwC8kVx8Zc YcKVHstFAmAZp8o4o3f1Xk7CFV479+YFqFP1EqmU8H7W403FNFBcEMsAtQ6BDXKYF6g3 82qg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1746617233; x=1747222033; h=mime-version:message-id:date:user-agent:subject:cc:to:from :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=6ebjMEb5AZtSiypt9tkHFZqOvqEpC38MCTKpiBzQD3E=; b=SUnDbxgQbg/xMCPIyDPxYcZJ3drd33w+fsk1NTWezoyo9KvKfpg1Uv4YBzG/KQ1Bcn 7f8YkOKrNCzbDpmu6IQDN0mlZlBj948A6vGzZWQ+//cV7CDulMSAVvYKhRgEeDmQH7ef 6PrqWbClIp20N4IlMCiJ3bkx0K7yA2N5Pp3XO0bNuCLHdQdaVwdWpuQ+DdFb7cq4CWYK 2TAxq99ijKD4aRD0rzGItj1iH/4Sacfdx50p2lHXA+pcVczJoBVUhI74ZPIx4yuPG67o dMwZnynf4/fYOVDC31g3geCKFIxG7XjMQmFSNWnqvCZC1n/5B0ymZBZ/wwHimKQPLRjP 52gg== X-Gm-Message-State: AOJu0YyH+jy0QtFXFyTzH6A+Y3TE7HEoaXJQsrspGW09RdeIH6QJ7EaD JwPK71RFNyXRer4SM7FOiOxWTzZ7xdGxCTSqF4wFpBudYr4Cp1PUsepYwrNBubLKy8QteUrW2UQ yNJVU7g== X-Gm-Gg: ASbGnctjE3zABHDmBFvIWqQpN5GzT9OIIP0Paoc8Q4EK6BRRla3QnOaUhb2CgOXxI2R WFmiykDKEX7ZjJduJQ8ewTIIS79pLXraRAAp5M8QSGJMnX3pggM2ji+bFCmAX/TgQo1Ymyq2Hcm okkyHGagr0QjeeAde4esX58yUXPhE7yqPBPZSv3AOhBbPWykYYj9i+7ksyXDjzvh6952CiQnqP1 JdfrdtyymdAWNWiRlKDgH7yayt0WtkN6DFZk90m6usAItwxTQm2yEbsgEA9jJsyYIoeG1YcnDOl o7di6IbJGMgK++koP972aS9RfsyRKOr9xip0Jw== X-Google-Smtp-Source: AGHT+IFY21OwCqhN/khubyptHuDxdT7GYL15cRGTn4DWHZPoGg/CVkpiUHCON6v5G5MV/dPxpS6XPA== X-Received: by 2002:a17:906:794d:b0:ac6:f6e2:7703 with SMTP id a640c23a62f3a-ad1e8bd2265mr249982266b.8.1746617232851; Wed, 07 May 2025 04:27:12 -0700 (PDT) Received: from localhost ([2a02:2454:a095:5600:a64e:31ff:fe38:fd6c]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-ad1891478fasm888848866b.26.2025.05.07.04.27.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 May 2025 04:27:12 -0700 (PDT) From: Sergey Trofimov <sarg@HIDDEN> User-Agent: mu4e 1.12.9; emacs 30.0.92 Date: Wed, 07 May 2025 13:27:11 +0200 Message-ID: <87y0v8iru8.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) Hi Daniel, Daniel Ziltener <dziltener@HIDDEN> writes: > It seems the latest OpenSSH update breaks ssh completely for people who > have nix-service running. OpenSSH seems to be expecting a certain > ownership of /nix/store which it does not have on Guix, and then fails > with "bad ownership or modes for directory /nix/store". This seem to be a regression from https://issues.guix.gnu.org/77968 Could you please let me know the output of `stat -c '%n %a %U %G' /nix /nix/store` on your system? Also, do you manage your ssh configuration using nix?
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.