GNU bug report logs - #78318
Replacement variables in guix-daemon.service

Message received at submit <at> debbugs.gnu.org:

Received: (at submit) by debbugs.gnu.org; 8 May 2025 12:55:24 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu May 08 08:55:24 2025
Received: from localhost ([127.0.0.1]:55580 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1uD0mZ-0001qN-LL
	for submit <at> debbugs.gnu.org; Thu, 08 May 2025 08:55:24 -0400
Received: from lists.gnu.org ([2001:470:142::17]:47424)
 by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.84_2) (envelope-from <yarivido@HIDDEN>)
 id 1uD0mW-0001q3-HE
 for submit <at> debbugs.gnu.org; Thu, 08 May 2025 08:55:20 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <yarivido@HIDDEN>)
 id 1uD0mQ-00023l-DU
 for bug-guix@HIDDEN; Thu, 08 May 2025 08:55:14 -0400
Received: from mail-ej1-x629.google.com ([2a00:1450:4864:20::629])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <yarivido@HIDDEN>)
 id 1uD0mO-0006jz-G0
 for bug-guix@HIDDEN; Thu, 08 May 2025 08:55:14 -0400
Received: by mail-ej1-x629.google.com with SMTP id
 a640c23a62f3a-ac2ab99e16eso195941166b.0
 for <bug-guix@HIDDEN>; Thu, 08 May 2025 05:55:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=gmail.com; s=20230601; t=1746708910; x=1747313710; darn=gnu.org;
 h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
 :date:message-id:reply-to;
 bh=xLXrplFc5CVXMdZwpC1BmBJgB2fqa6sDwRX3CqWT27w=;
 b=KuSa8oeraCqUi/fg4Xg54CCr3lIHQlwNR4WRzSEp4/DjDhINi31NIDu2MU36UgfhUq
 5/3hs60BWZLL/5ughRIjoy86wacbXJ9ADrJaRWXBmo7Vvfwh4VT9D/b/p4OSmd32fegG
 322Hypozvn670EiWdlRoBxpgYwaCgJMMGl6lI3uR1nA+bF73lp6zltzmnbENGOhZGxI/
 sHiAINDfdhWi2eK3iIIiMruAWX0xpDIMrXVXJBEL/DNMIa6SwfeOwnioi8jLGckPGxlq
 /ehqmcnigRXJ3O3K3AMr5gSuinnwJKODOG4ZrRNSaqtRaa6UquU76R87I3X2RQ7UrhRK
 ENyQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1746708910; x=1747313710;
 h=to:subject:message-id:date:from:mime-version:x-gm-message-state
 :from:to:cc:subject:date:message-id:reply-to;
 bh=xLXrplFc5CVXMdZwpC1BmBJgB2fqa6sDwRX3CqWT27w=;
 b=I30TW0LWJVuHFcwCZ8XGK+VuclxRvug8Kd5V6cibNbOK2X5TRVkQ7AWz2XFE+mHaEO
 ml9zoGehmE8l4AK25l85+9ob9tr/7LW3JsE2KZoZYbwH2gz5z35Qhcf3C/Ze5pS7g/KF
 fnubtBHqgqXwCNBcSVdBgvMEX7bwKKc9Bk1Vl8MrumzY27iKW12bPZ3EWnwuzT4/Xwkt
 Ef5Bfn6bpOq8ENE1ucRt+WzA24zqA2m7GsCwsJ5icbth2boH7r890+W6u1Yy8QQqDThH
 7V5RdHYCk9uAb2NgP3SSKXFecscaiH6NBi2s/hKPXZgpF1rNtzkHyKmJGjKK0Fm3QD+i
 OZgA==
X-Gm-Message-State: AOJu0YwD52c2FwJm1m9BsvfRNVLtP20aIQy13/XCksEXkVObdNweJVl3
 h+dY3X94FJ5GuissIFTbCkSNNwncWBH9y84FoNe/1oAeo+w6DnvGMMEA7Th1W32ND/Bxs4uVDJ7
 4XXCiBryYUj91hvIiqjiaUkw2E9oLbuetUYk=
X-Gm-Gg: ASbGncvym6AImyfWViQqvNAODrGJizKP/AuAhvRYETUyiN0W1mTGRzedAKneeH98VVY
 XXb+hH3gHpd7KL68s5izp9mNYM6SDo4rcvHBvhekiIqICtRLfbEXdYsBX3w/xgPyzPuAs5UL39s
 bDyHLigO71lbblbvxUwNoJZE1vtmfUzH/RSSwpeoMWQFFyUuhCwVOLQ7dLV98+XfXfhXw=
X-Google-Smtp-Source: AGHT+IEIQUOwQJJ8pyHEzBLYb3FzN+j1aCQw6RaNwwu+n3EzYD+X1B81TjjMC4t31nrGGXfsjhUx/vps5P7KIr7iOuE=
X-Received: by 2002:a17:907:940f:b0:ace:6bfb:372a with SMTP id
 a640c23a62f3a-ad1fe935ac4mr353636566b.54.1746708910144; Thu, 08 May 2025
 05:55:10 -0700 (PDT)
MIME-Version: 1.0
From: Ido Yariv <yarivido@HIDDEN>
Date: Thu, 8 May 2025 08:54:58 -0400
X-Gm-Features: ATxdqUG113GPCQdYUIDTLr9tObekxT9UUdYO1DHSjTbHmBRsfdDfsv8VJ10lL5E
Message-ID: <CAMPn9MmigyhuPekuVr5Wmqc6SVH2YqGMXNgJRSrBNYQazVeH-A@HIDDEN>
Subject: Replacement variables in guix-daemon.service
To: bug-guix@HIDDEN
Content-Type: multipart/alternative; boundary="0000000000001d82e606349f5cec"
Received-SPF: pass client-ip=2a00:1450:4864:20::629;
 envelope-from=yarivido@HIDDEN; helo=mail-ej1-x629.google.com
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

--0000000000001d82e606349f5cec
Content-Type: text/plain; charset="UTF-8"

Hi,

It appears guix-daemon.service leaks some replacement variables defined in
guix-daemon.service.in, e.g.:
--8<---------------cut here---------------start------------->8---
Environment='GUIX_STATE_DIRECTORY=/var/guix'
'GUIX_LOCPATH=@localstatedir@/guix/profiles/per-user/root/guix-profile/lib/locale'
LC_ALL=en_US.utf8

# Run under a dedicated unprivileged user account.
User=guix-daemon

# Bind-mount the store read-write in a private namespace, to counter the
# effect of 'gnu-store.mount'.
PrivateMounts=true
BindPaths=@storedir@
--8<---------------cut here---------------end--------------->8---

From what I can tell, it looks like the replacement is done by nix/local.mk
(as
opposed to self.scm), and the sed script there doesn't include all
variables,
nor is it replacing matched patterns globally.

Thanks,
Ido.

--0000000000001d82e606349f5cec
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<br><br>It appears guix-daemon.service leaks some repla=
cement variables defined in<br><a href=3D"http://guix-daemon.service.in">gu=
ix-daemon.service.in</a>, e.g.:<br>--8&lt;---------------cut here----------=
-----start-------------&gt;8---<br>Environment=3D&#39;GUIX_STATE_DIRECTORY=
=3D/var/guix&#39; &#39;GUIX_LOCPATH=3D@localstatedir@/guix/profiles/per-use=
r/root/guix-profile/lib/locale&#39; LC_ALL=3Den_US.utf8<br><br># Run under =
a dedicated unprivileged user account.<br>User=3Dguix-daemon<br><br># Bind-=
mount the store read-write in a private namespace, to counter the<br># effe=
ct of &#39;gnu-store.mount&#39;.<br>PrivateMounts=3Dtrue<br>BindPaths=3D@st=
oredir@<br>--8&lt;---------------cut here---------------end---------------&=
gt;8---<br><br>From what I can tell, it looks like the replacement is done =
by nix/<a href=3D"http://local.mk">local.mk</a> (as<br>opposed to self.scm)=
, and the sed script there doesn&#39;t include all variables,<br>nor is it =
replacing matched patterns globally.<br><br>Thanks,<br>Ido.<br><br></div>

--0000000000001d82e606349f5cec--