GNU bug report logs - #35902
Guix resets passwords on reconfigure

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 35902 in the body.
You can then email your comments to 35902 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Marlon <mbmattos1113 <at> firemail.cc>
To: Bug Guix <bug-guix <at> gnu.org>
Subject: Guix resets passwords on reconfigure
Date: Sat, 25 May 2019 14:32:42 -0300

My user and root passwords have been reset about 3 times in 4 days upon running guix system reconfigure.

I can't seem to recognize any pattern, it appears to occur randomly, and it requires setting passwords manually. 

The password is left blank, and could be a security issue, as anybody would be able to access the root account easily.

Message #8 received at 35902 <at> debbugs.gnu.org (full text, mbox):

From: Marius Bakke <mbakke <at> fastmail.com>
To: Marlon <mbmattos1113 <at> firemail.cc>, 35902 <at> debbugs.gnu.org
Subject: Re: bug#35902: Guix resets passwords on reconfigure
Date: Sun, 26 May 2019 09:31:35 +0200

[Message part 1 (text/plain, inline)]

Marlon <mbmattos1113 <at> firemail.cc> writes:

> My user and root passwords have been reset about 3 times in 4 days upon running guix system reconfigure.
>
> I can't seem to recognize any pattern, it appears to occur randomly, and it requires setting passwords manually. 
>
> The password is left blank, and could be a security issue, as anybody would be able to access the root account easily.

This sounds really odd.  Can you share your system configuration?

Do you manage users outside of the Guix configuration system by any
chance?  Or can you reproduce it by simply invoking `guix system
reconfigure` enough times?

[signature.asc (application/pgp-signature, inline)]

Message #11 received at 35902 <at> debbugs.gnu.org (full text, mbox):

From: Gábor Boskovits <boskovits <at> gmail.com>
To: Marius Bakke <mbakke <at> fastmail.com>
Cc: Marlon <mbmattos1113 <at> firemail.cc>, 35902 <at> debbugs.gnu.org
Subject: Re: bug#35902: Guix resets passwords on reconfigure
Date: Mon, 27 May 2019 08:38:59 +0200

[Message part 1 (text/plain, inline)]

Hello,



Marius Bakke <mbakke <at> fastmail.com> ezt írta (időpont: 2019. máj. 26., Vas
9:39):

> Marlon <mbmattos1113 <at> firemail.cc> writes:
>
> > My user and root passwords have been reset about 3 times in 4 days upon
> running guix system reconfigure.
> >
> > I can't seem to recognize any pattern, it appears to occur randomly, and
> it requires setting passwords manually.
> >
> > The password is left blank, and could be a security issue, as anybody
> would be able to access the root account easily.
>
I have also noticed this once, but could not reproduce it since then. This
happened to me not too much after the 1.0.1 release, on a vm with 512 mb
ram. I later cleared up that machine, as it was too small. So in my case it
was either a sporadic thing, a specific commit from guix pull fixed later,
or a not obvious out of memory. Wdyt?

>
> This sounds really odd.  Can you share your system configuration?
>
> Do you manage users outside of the Guix configuration system by any
> chance?  Or can you reproduce it by simply invoking `guix system
> reconfigure` enough times?
>
Best regards,
g_bor

>

[Message part 2 (text/html, inline)]

Message #14 received at 35902 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: Gábor Boskovits <boskovits <at> gmail.com>
Cc: Marlon <mbmattos1113 <at> firemail.cc>, 35902 <at> debbugs.gnu.org,
 Marius Bakke <mbakke <at> fastmail.com>
Subject: Re: bug#35902: Guix resets passwords on reconfigure
Date: Sun, 02 Jun 2019 22:43:15 +0200

Hi,

Gábor Boskovits <boskovits <at> gmail.com> skribis:

> I have also noticed this once, but could not reproduce it since then.

We’d need more info.  This would obviously be a serious problem, and one
I’ve never experienced, FWIW.

Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.