Received: (at 78287) by debbugs.gnu.org; 7 May 2025 11:27:24 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Wed May 07 07:27:24 2025 Received: from localhost ([127.0.0.1]:41673 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1uCcvr-00068K-Ki for submit <at> debbugs.gnu.org; Wed, 07 May 2025 07:27:23 -0400 Received: from mail-ed1-x530.google.com ([2a00:1450:4864:20::530]:60482) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from <sarg@HIDDEN>) id 1uCcvn-00067O-DD for 78287 <at> debbugs.gnu.org; Wed, 07 May 2025 07:27:20 -0400 Received: by mail-ed1-x530.google.com with SMTP id 4fb4d7f45d1cf-5fbed53b421so1045375a12.0 for <78287 <at> debbugs.gnu.org>; Wed, 07 May 2025 04:27:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sarg.org.ru; s=google; t=1746617233; x=1747222033; darn=debbugs.gnu.org; h=mime-version:message-id:date:user-agent:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=6ebjMEb5AZtSiypt9tkHFZqOvqEpC38MCTKpiBzQD3E=; b=kYbrZfWlWJ2V/JtFZaTUpc8DjznfayiDN0CH1wuHBnk33uYwzVR9i/rJKSaKeiSaMt p3qvtX4ABV3Yp69h4BGe5Uih6B/qytgsrK7AKvNUcxfL4bapHKooqilr0367ExVlFoEI Mf9BwlyZPig1rGVFEAT9Psg/95JkrFX+TweTzvijUU2LnByyWfROIoO2CUpFFEQ35UBh DXGxnFzltlHFLA7qHT3+M/4UpTGNwsuOdTBU2RWKuzqRns6tFsp8xPb4w7zwC8kVx8Zc YcKVHstFAmAZp8o4o3f1Xk7CFV479+YFqFP1EqmU8H7W403FNFBcEMsAtQ6BDXKYF6g3 82qg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1746617233; x=1747222033; h=mime-version:message-id:date:user-agent:subject:cc:to:from :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=6ebjMEb5AZtSiypt9tkHFZqOvqEpC38MCTKpiBzQD3E=; b=SUnDbxgQbg/xMCPIyDPxYcZJ3drd33w+fsk1NTWezoyo9KvKfpg1Uv4YBzG/KQ1Bcn 7f8YkOKrNCzbDpmu6IQDN0mlZlBj948A6vGzZWQ+//cV7CDulMSAVvYKhRgEeDmQH7ef 6PrqWbClIp20N4IlMCiJ3bkx0K7yA2N5Pp3XO0bNuCLHdQdaVwdWpuQ+DdFb7cq4CWYK 2TAxq99ijKD4aRD0rzGItj1iH/4Sacfdx50p2lHXA+pcVczJoBVUhI74ZPIx4yuPG67o dMwZnynf4/fYOVDC31g3geCKFIxG7XjMQmFSNWnqvCZC1n/5B0ymZBZ/wwHimKQPLRjP 52gg== X-Gm-Message-State: AOJu0YyH+jy0QtFXFyTzH6A+Y3TE7HEoaXJQsrspGW09RdeIH6QJ7EaD JwPK71RFNyXRer4SM7FOiOxWTzZ7xdGxCTSqF4wFpBudYr4Cp1PUsepYwrNBubLKy8QteUrW2UQ yNJVU7g== X-Gm-Gg: ASbGnctjE3zABHDmBFvIWqQpN5GzT9OIIP0Paoc8Q4EK6BRRla3QnOaUhb2CgOXxI2R WFmiykDKEX7ZjJduJQ8ewTIIS79pLXraRAAp5M8QSGJMnX3pggM2ji+bFCmAX/TgQo1Ymyq2Hcm okkyHGagr0QjeeAde4esX58yUXPhE7yqPBPZSv3AOhBbPWykYYj9i+7ksyXDjzvh6952CiQnqP1 JdfrdtyymdAWNWiRlKDgH7yayt0WtkN6DFZk90m6usAItwxTQm2yEbsgEA9jJsyYIoeG1YcnDOl o7di6IbJGMgK++koP972aS9RfsyRKOr9xip0Jw== X-Google-Smtp-Source: AGHT+IFY21OwCqhN/khubyptHuDxdT7GYL15cRGTn4DWHZPoGg/CVkpiUHCON6v5G5MV/dPxpS6XPA== X-Received: by 2002:a17:906:794d:b0:ac6:f6e2:7703 with SMTP id a640c23a62f3a-ad1e8bd2265mr249982266b.8.1746617232851; Wed, 07 May 2025 04:27:12 -0700 (PDT) Received: from localhost ([2a02:2454:a095:5600:a64e:31ff:fe38:fd6c]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-ad1891478fasm888848866b.26.2025.05.07.04.27.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 May 2025 04:27:12 -0700 (PDT) From: Sergey Trofimov <sarg@HIDDEN> To: Daniel Ziltener <dziltener@HIDDEN> Subject: Re: bug#78287: ssh broken on systems with nix-service User-Agent: mu4e 1.12.9; emacs 30.0.92 Date: Wed, 07 May 2025 13:27:11 +0200 Message-ID: <87y0v8iru8.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 78287 Cc: 78287 <at> debbugs.gnu.org X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) Hi Daniel, Daniel Ziltener <dziltener@HIDDEN> writes: > It seems the latest OpenSSH update breaks ssh completely for people who > have nix-service running. OpenSSH seems to be expecting a certain > ownership of /nix/store which it does not have on Guix, and then fails > with "bad ownership or modes for directory /nix/store". This seem to be a regression from https://issues.guix.gnu.org/77968 Could you please let me know the output of `stat -c '%n %a %U %G' /nix /nix/store` on your system? Also, do you manage your ssh configuration using nix?
bug-guix@HIDDEN
:bug#78287
; Package guix
.
Full text available.Received: (at submit) by debbugs.gnu.org; 7 May 2025 00:53:42 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue May 06 20:53:42 2025 Received: from localhost ([127.0.0.1]:36221 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1uCT2c-0002YC-7k for submit <at> debbugs.gnu.org; Tue, 06 May 2025 20:53:42 -0400 Received: from lists.gnu.org ([2001:470:142::17]:43824) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from <dziltener@HIDDEN>) id 1uCT2Y-0002Xp-Up for submit <at> debbugs.gnu.org; Tue, 06 May 2025 20:53:39 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <dziltener@HIDDEN>) id 1uCT2T-0008A5-Eu for bug-guix@HIDDEN; Tue, 06 May 2025 20:53:33 -0400 Received: from 195-15-242-23.dc3-a.pub1.etik-cloud.com ([195.15.242.23] helo=lyrion.ch) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <dziltener@HIDDEN>) id 1uCT2R-0003NF-9x for bug-guix@HIDDEN; Tue, 06 May 2025 20:53:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lyrion.ch; s=20230702; t=1746578779; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=v6OvJUuKFeM7/1vQ6zCG8PGx3BLGnHyDjlTpRAbtTAI=; b=wDVG/QRONuD735fLV27AnlTgVVLCv81IfJQ/WMNTjKF3sq5YyiD3o9xWDyONh1rK7MrMfo CB4+Nd7Tlb2KoZRbaW2gZpvAHC/N2vhLyNQhclrCDokCmDTcoJ2o9yein3bz3HzjPYJWeY OQmjj2YMmj1Dx3/iaK6nkopqrtl9btq9ERLk+Pz48HYbnK7FpF8C3XAiId/zqiunSaniox JLdOPElgCG3jAUI60qnRPrz2tUY65gPvfyG3TFsAXBrxG8m5DI7X3wzls6RP3MY7YkTFYb AanfCg1ShTyucgxFnjohnYq4Ho129eH2TM3QL/DFX+esZiaW1S2XtEc8CVbmMQ== Received: from localhost (053d9243.dynamic.tele-ag.de [5.61.146.67]) by lyrion.ch (OpenSMTPD) with ESMTPSA id 7af4cb0b (TLSv1.3:TLS_AES_256_GCM_SHA384:256:NO) for <bug-guix@HIDDEN>; Wed, 7 May 2025 00:46:18 +0000 (UTC) From: Daniel Ziltener <dziltener@HIDDEN> To: bug-guix@HIDDEN Subject: ssh broken on systems with nix-service User-Agent: mu4e 1.12.9; emacs 30.1 Date: Wed, 07 May 2025 02:46:14 +0200 Message-ID: <87tt5xi6y1.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=195.15.242.23; envelope-from=dziltener@HIDDEN; helo=lyrion.ch X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RDNS_DYNAMIC=0.982, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, TVD_RCVD_IP=0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.1 (/) It seems the latest OpenSSH update breaks ssh completely for people who have nix-service running. OpenSSH seems to be expecting a certain ownership of /nix/store which it does not have on Guix, and then fails with "bad ownership or modes for directory /nix/store".
Daniel Ziltener <dziltener@HIDDEN>
:bug-guix@HIDDEN
.
Full text available.bug-guix@HIDDEN
:bug#78287
; Package guix
.
Full text available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.