From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels Resent-From: Alexandru-Sergiu Marton Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 03 Jul 2020 07:09:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 42173@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.15937601199161 (code B ref -1); Fri, 03 Jul 2020 07:09:01 +0000 Received: (at submit) by debbugs.gnu.org; 3 Jul 2020 07:08:39 +0000 Received: from localhost ([127.0.0.1]:56325 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jrFoN-0002Nh-G9 for submit@debbugs.gnu.org; Fri, 03 Jul 2020 03:08:39 -0400 Received: from lists.gnu.org ([209.51.188.17]:53524) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jrFoL-0002Na-Uh for submit@debbugs.gnu.org; Fri, 03 Jul 2020 03:08:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33454) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jrFoL-0002lr-HF for bug-guix@gnu.org; Fri, 03 Jul 2020 03:08:37 -0400 Received: from mout01.posteo.de ([185.67.36.65]:41869) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jrFoJ-0003B0-G2 for bug-guix@gnu.org; Fri, 03 Jul 2020 03:08:37 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout01.posteo.de (Postfix) with ESMTPS id 182EA160063 for ; Fri, 3 Jul 2020 09:08:31 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.ro; s=2017; t=1593760112; bh=7MAcStqrAwcpi/r3dpCeXIs/G4NQHa/aCWIUpX+1dfI=; h=From:To:Subject:Date:From; b=rCDCmQp1es6ynTVy9FXEyZoI5qp1SLNHjJfohfpsRdoYy0syS87gthqp5cvE4XAGb NQFkQk75gG8M81HGLXSjPeXNs3W0Zix/g/ebxMcKXDReqYWRvqXj4wZ8guAaMroue1 iQnjrFMz1BOV9gduDgFJg79b5iO2rh544lEAqLXi9V2CSQkVvDk7jb+BVT521ltFPU Luj8drnseAd5oQppXCU8ZDoPc6oleevATXtQEE6mMdO++sJfykQtvfCQE+S2QdMzPg FcMagEVn8Y5gmTd+5HnpBZpBnu+bZmPotJ9WeTJVF/P49J6NhEDLs8gtZbJxg/71H+ +FXVxdVjPEDaw== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 49ymJv34mbz6tmR for ; Fri, 3 Jul 2020 09:08:31 +0200 (CEST) From: Alexandru-Sergiu Marton Date: Fri, 03 Jul 2020 12:56:33 +0300 User-agent: mu4e 1.4.10; emacs 26.3 Message-ID: <87a70gud45.fsf@posteo.ro> MIME-Version: 1.0 Content-Type: text/plain; format=flowed Received-SPF: pass client-ip=185.67.36.65; envelope-from=brown121407@posteo.ro; helo=mout01.posteo.de X-detected-operating-system: by eggs.gnu.org: First seen = 2020/07/03 03:08:32 X-ACL-Warn: Detected OS = Linux 3.11 and newer X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-Spam-Score: -1.3 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hi, I tried to set up the Nix package manager on my Guix System following the instructions at http://guix.gnu.org/manual/en/guix.html#index-Nix . Unfortunately, after reconfiguring the system and adding a channel with `nix-channel --add https://nixos.org/channels/nixpkgs-unstable`, when I tried to update the channels (`nix-channel --update`), this is what I got: --8<---------------cut here---------------start------------->8--- [brown@121408 ~]$ nix-channel --update unpacking channels... while setting up the build environment: executing '/gnu/store/pwcp239kjf7lnj5i4lkdzcfcxwcfyk72-bash-minimal-5.0.16/bin/bash': No such file or directory builder for '/nix/store/fqvvrsyznxfzckxbiz6krlykdb6w105n-nixpkgs-20.09pre232864.55668eb671b.drv' failed with exit code 1 error: build of '/nix/store/fqvvrsyznxfzckxbiz6krlykdb6w105n-nixpkgs-20.09pre232864.55668eb671b.drv' failed error: program '/gnu/store/lsixql26nig4v3icn124ja3ivjpgvn99-nix-2.3.6/bin/nix-env' failed with exit code 100 --8<---------------cut here---------------end--------------->8--- Any tips on how to fix this? Cheers, Sergiu From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 13 Jul 2020 13:37:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Alexandru-Sergiu Marton Cc: 42173@debbugs.gnu.org Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.159464736329595 (code B ref 42173); Mon, 13 Jul 2020 13:37:01 +0000 Received: (at 42173) by debbugs.gnu.org; 13 Jul 2020 13:36:03 +0000 Received: from localhost ([127.0.0.1]:47785 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1juycl-0007hH-6k for submit@debbugs.gnu.org; Mon, 13 Jul 2020 09:36:03 -0400 Received: from eggs.gnu.org ([209.51.188.92]:39368) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1juycj-0007go-Aq for 42173@debbugs.gnu.org; Mon, 13 Jul 2020 09:36:02 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:35917) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1juycd-0001eT-Bp; Mon, 13 Jul 2020 09:35:55 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=34726 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1juycc-0002K1-Ja; Mon, 13 Jul 2020 09:35:54 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <87a70gud45.fsf@posteo.ro> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 26 Messidor an 228 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Mon, 13 Jul 2020 15:35:53 +0200 In-Reply-To: <87a70gud45.fsf@posteo.ro> (Alexandru-Sergiu Marton's message of "Fri, 03 Jul 2020 12:56:33 +0300") Message-ID: <87blkjr0zq.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi Alexandru-Sergiu, Alexandru-Sergiu Marton skribis: > I tried to set up the Nix package manager on my Guix System following > the instructions at http://guix.gnu.org/manual/en/guix.html#index-Nix > . Unfortunately, after reconfiguring the system and adding a channel > with `nix-channel --add https://nixos.org/channels/nixpkgs-unstable`, > when I tried to update the channels (`nix-channel --update`), this is > what I got: > > --8<---------------cut here---------------start------------->8---=20 > [brown@121408 ~]$ nix-channel --update unpacking channels... while settin= g up the build environment: executing '/gnu/store/pwcp239kjf7lnj5i4lkdzcfcx= wcfyk72-bash-minimal-5.0.16/bin/bash': No such file or directory builder fo= r '/nix/store/fqvvrsyznxfzckxbiz6krlykdb6w105n-nixpkgs-20.09pre232864.55668= eb671b.drv' failed with exit code 1 error: build of '/nix/store/fqvvrsyznxf= zckxbiz6krlykdb6w105n-nixpkgs-20.09pre232864.55668eb671b.drv' failed error:= program '/gnu/store/lsixql26nig4v3icn124ja3ivjpgvn99-nix-2.3.6/bin/nix-env= ' failed with exit code 100 --8<---------------cut here---------------end--= ------------->8---=20 > > Any tips on how to fix this? It seems that the Nix binaries captured the /gnu/store/pwcp239kjf7lnj5i4lkdzcfcxwcfyk72-bash-minimal-5.0.16/bin/bash file name somewhere. Does this file actually exist? What does this return? guix gc --references /gnu/store/lsixql26nig4v3icn124ja3ivjpgvn99-nix-2.3.6 Thanks, Ludo=E2=80=99. From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels References: <87a70gud45.fsf@posteo.ro> In-Reply-To: <87a70gud45.fsf@posteo.ro> Resent-From: Zhu Zihao via web Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 15 Jul 2020 05:29:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 42173@debbugs.gnu.org Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.1594790909537 (code B ref 42173); Wed, 15 Jul 2020 05:29:01 +0000 Received: (at 42173) by debbugs.gnu.org; 15 Jul 2020 05:28:29 +0000 Received: from localhost ([127.0.0.1]:51896 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jvZy0-00008b-Nt for submit@debbugs.gnu.org; Wed, 15 Jul 2020 01:28:28 -0400 Received: from sender4-of-o56.zoho.com ([136.143.188.56]:21632) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jvZxy-00008R-Eu for 42173@debbugs.gnu.org; Wed, 15 Jul 2020 01:28:27 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1594790904; cv=none; d=zohomail.com; s=zohoarc; b=CXjKFhWry+p5x1JoW8udt8r+2yYhqNu8MI/8rShEkg6BnV7zvGoEOjwEVnTv2gM5AisqW0Cg+/SVYsK0XEOhktGj1oIyqhvSgks5CuJwWTBqgmU853aTAC9mJiDUQ/ce0MMHzQeA2PfDmEaYWoyZ6QLuxyVkqKYiNZr3O0nvVac= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1594790904; h=Content-Type:Date:From:MIME-Version:Message-ID:Subject:To; bh=gb5wBHpdWZr8x84lP1nTjI0PIm03oLfbLN6lyI2tvR4=; b=MLZbhyVKoenVIPc3ZvKk1fwyfERzFzMn8hrGzmdH1j99XEHudOqL7Bvh6d8rsnuXlir9FELcaCYtDNAgZ1I1jmk03wppLlCDhtSPPAnuc2thsyuUOTam3a1iCBE122OZ5id6I2GEok1MOlxcbKP+Rt4Nd/XlVPbWWaIHqiPHoN8= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=issues.guix.gnu.org@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1594790904; s=zoho; d=elephly.net; i=issues.guix.gnu.org@elephly.net; h=MIME-Version:Content-Type:From:To:Date:Message-ID:Subject; bh=gb5wBHpdWZr8x84lP1nTjI0PIm03oLfbLN6lyI2tvR4=; b=dPZjsBDE47/ZJW8SIbTLmid+l8MrgQ8PFv/PtLv9RTPJj4PLGphB2Flcww5D5o+T z21XBORrV3u3vKdbtObXW4UVvEizYtTsUGdyAeTLwfTRVikDSK3MZ4SbnojbtWPOAMG tMo0owTISrR14JFoOv3TVh70IvtNLJ/UqK2GW2Ew= Received: from localhost (181.ip-51-79-86.net [51.79.86.181]) by mx.zohomail.com with SMTPS id 1594790901943120.21917601788584; Tue, 14 Jul 2020 22:28:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 From: Zhu Zihao via web Date: Wed, 15 Jul 2020 07:28:15 +0200 Message-ID: <7fc08d8c7780.aa19f4b146749b1@guile.gnu.org> X-ZohoMailClient: External X-Spam-Score: 3.0 (+++) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: I found that if I put "sandbox = false" to /etc/nix/nix.conf. Nix can update channel. Maybe nix's sandbox forget to import some guix binary path? Content analysis details: (3.0 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 SPF_PASS SPF: sender matches SPF record -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [136.143.188.56 listed in list.dnswl.org] 0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4) [136.143.188.56 listed in wl.mailspike.net] 0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 3.0 AC_FROM_MANY_DOTS Multiple periods in From user name X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) I found that if I put "sandbox = false" to /etc/nix/nix.conf. Nix can update channel. Maybe nix's sandbox forget to import some guix binary path? From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 16 Jul 2020 10:13:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Zhu Zihao via web Cc: Oleg Pykhalov , 42173@debbugs.gnu.org Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.159489433424921 (code B ref 42173); Thu, 16 Jul 2020 10:13:01 +0000 Received: (at 42173) by debbugs.gnu.org; 16 Jul 2020 10:12:14 +0000 Received: from localhost ([127.0.0.1]:54656 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jw0sA-0006Tt-Jm for submit@debbugs.gnu.org; Thu, 16 Jul 2020 06:12:14 -0400 Received: from eggs.gnu.org ([209.51.188.92]:39798) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jw0s8-0006Te-BZ for 42173@debbugs.gnu.org; Thu, 16 Jul 2020 06:12:13 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:45937) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jw0s3-0003mN-11; Thu, 16 Jul 2020 06:12:07 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=50188 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1jw0s2-0004a0-Dr; Thu, 16 Jul 2020 06:12:06 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <87a70gud45.fsf@posteo.ro> <7fc08d8c7780.aa19f4b146749b1@guile.gnu.org> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 29 Messidor an 228 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Thu, 16 Jul 2020 12:12:02 +0200 In-Reply-To: <7fc08d8c7780.aa19f4b146749b1@guile.gnu.org> (Zhu Zihao via web's message of "Wed, 15 Jul 2020 07:28:15 +0200") Message-ID: <877dv37or1.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, (+Cc: Oleg, who worked on the Nix service.) Zhu Zihao via web skribis: > I found that if I put "sandbox =3D false" to /etc/nix/nix.conf. Nix can u= pdate channel. Maybe nix's sandbox forget to import some guix binary path? Yes, probably. There=E2=80=99s probably an option similar to the =E2=80=98--chroot-directory=E2=80=99 of =E2=80=98guix-daemon=E2=80=99 to sp= ecify additional directories that must be in the =E2=80=9Csandbox=E2=80=9D. If you find that option, then we can arrange and add all the dependencies of /gnu/store/=E2=80=A6/bin/bash there (similar to what =E2=80=98qemu-binfmt-service-type=E2=80=99 does). However, it=E2=80=99d still be good to find where that /gnu/store/=E2=80=A6= /bin/bash file name is captured. Thanks, Ludo=E2=80=99. From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels Resent-From: Alexandru-Sergiu Marton Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 19 Jul 2020 08:17:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 42173@debbugs.gnu.org Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.159514658119432 (code B ref 42173); Sun, 19 Jul 2020 08:17:02 +0000 Received: (at 42173) by debbugs.gnu.org; 19 Jul 2020 08:16:21 +0000 Received: from localhost ([127.0.0.1]:59934 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jx4Uf-00053M-KF for submit@debbugs.gnu.org; Sun, 19 Jul 2020 04:16:21 -0400 Received: from mout01.posteo.de ([185.67.36.65]:39039) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jx4Uc-00052w-Kc for 42173@debbugs.gnu.org; Sun, 19 Jul 2020 04:16:19 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout01.posteo.de (Postfix) with ESMTPS id 3BEEF16005F for <42173@debbugs.gnu.org>; Sun, 19 Jul 2020 10:16:12 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.ro; s=2017; t=1595146572; bh=7VngUfrMM+UMZhN9VilCEfTzoSqdO5hmdrOIqjk1eD8=; h=From:To:Cc:Subject:Date:From; b=ZFOS+1SgYebXe9xjN46tNDfQt8z3InLH9WoYjLRMXrnhSbA4EBlLnM8kLCFPtfFoc EwdsAiaMGvk7H9so5xnaplvue24W2MqKbfY1/XYqlnps1UcHQlSdipG2sNLCMVXPQy aTpLLymNkJpgGHHDHGy0OyPkYvP1WyviyO/sjJz/5jccQU9fIaIZZ0hXBzAQIHR0Pw d2rxy8kdPlFgKlWA3NB+DiiTzOnoG3UHYWYn1cxQ09fqWG+EcWy0N+JzaumpTXuADk fsEyjqHITUwuLGyY/9Q06a/e/ADuXGrrHwL2JMm1+6r3lVF5u8ATmefKyQQ/PzKGEO gdC2/8Tk7C9iA== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4B8d3b48R3z6tmM; Sun, 19 Jul 2020 10:16:11 +0200 (CEST) From: Alexandru-Sergiu Marton References: <87a70gud45.fsf@posteo.ro> <87blkjr0zq.fsf@gnu.org> Date: Sun, 19 Jul 2020 11:14:00 +0300 In-Reply-To: <87blkjr0zq.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Mon, 13 Jul 2020 15:35:53 +0200") Message-ID: <87o8obsz07.fsf@posteo.ro> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Ludovic Court=C3=A8s writes: > It seems that the Nix binaries captured the > /gnu/store/pwcp239kjf7lnj5i4lkdzcfcxwcfyk72-bash-minimal-5.0.16/bin/bash > file name somewhere. Does this file actually exist? > > What does this return? > > guix gc --references /gnu/store/lsixql26nig4v3icn124ja3ivjpgvn99-nix-2.= 3.6 Sorry for the delay. The bash thing exists, indeed: --8<---------------cut here---------------start------------->8--- [brown@121408 ~]$ ls -lah /gnu/store/pwcp239kjf7lnj5i4lkdzcfcxwcfyk72-bash-= minimal-5.0.16/bin/bash -r-xr-xr-x 2 root root 800K Jan 1 1970 /gnu/store/pwcp239kjf7lnj5i4lkdzcf= cxwcfyk72-bash-minimal-5.0.16/bin/bash --8<---------------cut here---------------end--------------->8--- And here's the output for that gc command: --8<---------------cut here---------------start------------->8--- [brown@121408 ~]$ guix gc --references /gnu/store/lsixql26nig4v3icn124ja3iv= jpgvn99-nix-2.3.6 /gnu/store/01b4w3m6mp55y531kyi1g8shh722kwqm-gcc-7.5.0-lib /gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.32 /gnu/store/5gc93y4n3f9p5sivp0i4f7ixqmqz3zpv-libseccomp-2.4.3 /gnu/store/5i02vg0pdmvv38kyqvbima2m5nknzpdi-brotli-1.0.7 /gnu/store/807c6g9xqrxdjyhm8wm1r6jjjmc8q4vs-sqlite-3.31.1 /gnu/store/a9f7wmc75hbpg520phw9z4l9asm3qvsw-bzip2-1.0.8 /gnu/store/fa6wj5bxkj5ll1d7292a70knmyl7a0cr-glibc-2.31 /gnu/store/hcxpkksmbql6s4al8yy2myr25kh4cic0-openssl-1.1.1g /gnu/store/k55975qhhph9a42f3ps1xq3jxyscd681-editline-1.17.1 /gnu/store/lsixql26nig4v3icn124ja3ivjpgvn99-nix-2.3.6 /gnu/store/m9rv4r32gnvpbmsd9m5b1mqs1i6fnqdk-curl-7.71.0 /gnu/store/ncydgq2znms5n1d2k5yqshhf58nsixwv-gzip-1.10 /gnu/store/pwcp239kjf7lnj5i4lkdzcfcxwcfyk72-bash-minimal-5.0.16 /gnu/store/r7k859hmcnkazf492fasqvk25jflnfk6-xz-5.2.4 /gnu/store/s54c6rbl40416ll0krrr52m3yivxcl3x-libsodium-1.0.18 /gnu/store/v6f44zccwh9z5zk3pjlywjybbi8n2hjh-tar-1.32 /gnu/store/wgk6wwmcbrb2mw2aj7lzd861gsnkz1an-boost-1.72.0 --8<---------------cut here---------------end--------------->8--- -- Sergiu From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels References: <87a70gud45.fsf@posteo.ro> In-Reply-To: <87a70gud45.fsf@posteo.ro> Resent-From: Zhu Zihao via web Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 21 Jul 2020 04:07:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 42173@debbugs.gnu.org Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.159530437032420 (code B ref 42173); Tue, 21 Jul 2020 04:07:02 +0000 Received: (at 42173) by debbugs.gnu.org; 21 Jul 2020 04:06:10 +0000 Received: from localhost ([127.0.0.1]:37118 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jxjXd-0008Qq-UM for submit@debbugs.gnu.org; Tue, 21 Jul 2020 00:06:10 -0400 Received: from sender4-of-o56.zoho.com ([136.143.188.56]:21689) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jxjXb-0008Qg-Es for 42173@debbugs.gnu.org; Tue, 21 Jul 2020 00:06:08 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1595304364; cv=none; d=zohomail.com; s=zohoarc; b=B1ewiWnZkQN/T0akPyLhHUHFkDOxF/iKd/3qBjou8AhYzyMAK8Bxz9D0ER/3YaaWhfXDGSk5zCqbCbUybNNr0PNQVlDejKRRsRf3XWVZwA6a6JwetA+NBm+Wr5mGx8qrPMyayUd9arLBjnFVtdhIifQ5cnBKWoL2Od5ghSNNEq4= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1595304364; h=Content-Type:Date:From:MIME-Version:Message-ID:Subject:To; bh=Hq0g5DtKrIxWqb9FjMjJOWyH1bV4B847vZGfmXHBfBg=; b=B2LuP7JL5Of/qkVVYWEE9vBq/7Jlc266gTiVRhxqMyaVcqjBxEQ4gk7Zw9aeATI5whRPjsTWJK1Xla3zTn8i07DXSN+SsiF4+4MbOGacX71KJSq6RtC9aXix+S/SISxvu8w48uN3E9fcOe1zX6L2gC1nyqGuwSInRiYT2feiMfQ= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=issues.guix.gnu.org@elephly.net; dmarc=pass header.from= header.from= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1595304364; s=zoho; d=elephly.net; i=issues.guix.gnu.org@elephly.net; h=MIME-Version:Content-Type:From:To:Date:Message-ID:Subject; bh=Hq0g5DtKrIxWqb9FjMjJOWyH1bV4B847vZGfmXHBfBg=; b=CVSNxxvBdl3xoupFLs1/+iI/oS5qtl+GRT69SbZdPWdZ1B6SQ4w+6nIW3M0YmP+n ud8Bec/Bufl+PPQMC1irBenuDC6seDCR77GAk5U2z/wgHtcpe4DoTWZUsCawRgRFXW2 nBGTIwuzTEahuhPzXGk1dRgEvGVF4fsrxKHm++bo= Received: from localhost (185.220.101.216 [185.220.101.216]) by mx.zohomail.com with SMTPS id 1595304360299841.7436293348251; Mon, 20 Jul 2020 21:06:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 From: Zhu Zihao via web Date: Tue, 21 Jul 2020 06:05:53 +0200 Message-ID: <7fc08d8ddb80.1dea4a53425ba2cb@guile.gnu.org> X-ZohoMailClient: External X-Spam-Score: 3.0 (+++) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: We can add the path to bash to build-sandbox-path in /etc/nix.conf, described in https://nixos.wiki/wiki/FAQ. Content analysis details: (3.0 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4) [136.143.188.56 listed in wl.mailspike.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no trust [136.143.188.56 listed in list.dnswl.org] 0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 3.0 AC_FROM_MANY_DOTS Multiple periods in From user name X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) We can add the path to bash to build-sandbox-path in /etc/nix.conf, described in https://nixos.wiki/wiki/FAQ. From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels Resent-From: Oleg Pykhalov Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 21 Jul 2020 07:41:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 42173@debbugs.gnu.org, Zhu Zihao via web Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.159531722822124 (code B ref 42173); Tue, 21 Jul 2020 07:41:01 +0000 Received: (at 42173) by debbugs.gnu.org; 21 Jul 2020 07:40:28 +0000 Received: from localhost ([127.0.0.1]:37792 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jxmt1-0005kl-SJ for submit@debbugs.gnu.org; Tue, 21 Jul 2020 03:40:28 -0400 Received: from mail-lf1-f51.google.com ([209.85.167.51]:40522) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jxmt0-0005kZ-5D for 42173@debbugs.gnu.org; Tue, 21 Jul 2020 03:40:26 -0400 Received: by mail-lf1-f51.google.com with SMTP id o4so11145096lfi.7 for <42173@debbugs.gnu.org>; Tue, 21 Jul 2020 00:40:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=k7NujUnTZzshgifplf86Zy/Bx7OAdrXnwq3VCbvxjfg=; b=TFqZzF5b5xQNUEnqAHrEZfff4XFhVvsDF0QG3GEcIfLQTlh5A1+FyOV3YiBsC3KDJU VWjUMO1t5bV1OZ05+/bnWcez2o2PccaItY7hcmknBa4tsli/yG178zhHt0BJoomCU2Jh zF6CdKwbK6hUv6i79YlnukxRpv9d3VJhCOeQLw4nSi7RtEHdxeP5dODOKViaEUemB6zE wJsT9YNSX8miJwSGeZUVgNNOuLuz9GruPKlDjugHF30CeU4IXV4f5dn9gu+EFD88bXMY AgjiB/zehPIfZm5VTImAYLyHFkiCPLBS+L9ozfeCGqVneW6mqIvmY66BV6q1XVP9cTNA eNZg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=k7NujUnTZzshgifplf86Zy/Bx7OAdrXnwq3VCbvxjfg=; b=sNZa+C7NlOlS/niNrmvBFSzlPfZInpVs61R1QFJt3aYQw2dC8U2EW/o+QZ5jqBErmy sVw4c4tqL5q6cVrk2Pa9LNtZVvgM1MM7MQKtnDo6o5x0RDCPNDWmXxtIri02/2NPN0ZX GHF/W8GYwOYPBiS8417KmfDRMXtk8jFM62z1qiTMZzcYRYS0CIPkaKuP2RBltciMZ0wq eyXCiPKbHouTQe4K75JfeRBk5mZ1NPl++xFVJeucGie3exqLkLMUFqSl+GeVRvEJy02i JGzhwFeNHvPIdhMonRKMKT5MYjWHABo114T97qisoGimltT7RtNb1oMYoh07sxCBOgPk 962A== X-Gm-Message-State: AOAM532mF9BPddGhI48roAscd3oYioumIP/rqyqj5+GsbSvI5p7IzoEM T/yMNmWGpFME+2AongJd/W07U9zUAjU= X-Google-Smtp-Source: ABdhPJze4PyPWWshZHn/GB+nHd97iV2H/S9VLB+mK7//M0LF5fZjch36EvxSmZizEXD07vcAhO+50A== X-Received: by 2002:a19:48d3:: with SMTP id v202mr13076346lfa.202.1595317219335; Tue, 21 Jul 2020 00:40:19 -0700 (PDT) Received: from guixsd (ppp91-122-98-213.pppoe.avangarddsl.ru. [91.122.98.213]) by smtp.gmail.com with ESMTPSA id x6sm4140419lff.64.2020.07.21.00.40.17 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 21 Jul 2020 00:40:18 -0700 (PDT) From: Oleg Pykhalov References: <87a70gud45.fsf@posteo.ro> <7fc08d8c7780.aa19f4b146749b1@guile.gnu.org> <877dv37or1.fsf@gnu.org> Date: Tue, 21 Jul 2020 10:39:57 +0300 In-Reply-To: <877dv37or1.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Thu, 16 Jul 2020 12:12:02 +0200") Message-ID: <878sfdqpte.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, Ludovic Court=C3=A8s writes: > Hi, > > (+Cc: Oleg, who worked on the Nix service.) > > Zhu Zihao via web skribis: > >> I found that if I put "sandbox =3D false" to /etc/nix/nix.conf. Nix can = update channel. Maybe nix's sandbox forget to import some guix binary path? > > Yes, probably. There=E2=80=99s probably an option similar to the > =E2=80=98--chroot-directory=E2=80=99 of =E2=80=98guix-daemon=E2=80=99 to = specify additional directories > that must be in the =E2=80=9Csandbox=E2=80=9D. > > If you find that option, then we can arrange and add all the > dependencies of /gnu/store/=E2=80=A6/bin/bash there (similar to what > =E2=80=98qemu-binfmt-service-type=E2=80=99 does). /gnu/store/=E2=80=A6/bin/bash (we need a static-bash) is not enough, we also should handle all packages (and closures in case binaries are not static) listed in: $(guix build --no-grafts nix)/share/nix/corepkgs/config.nix =2D-8<---------------cut here---------------start------------->8--- let fromEnv =3D var: def: let val =3D builtins.getEnv var; in if val !=3D "" then val else def; in rec { shell =3D "/gnu/store/pwcp239kjf7lnj5i4lkdzcfcxwcfyk72-bash-minimal-5.0.1= 6/bin/bash"; coreutils =3D "/gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.32= /bin"; bzip2 =3D "/gnu/store/a9f7wmc75hbpg520phw9z4l9asm3qvsw-bzip2-1.0.8/bin/bz= ip2"; gzip =3D "/gnu/store/ncydgq2znms5n1d2k5yqshhf58nsixwv-gzip-1.10/bin/gzip"; xz =3D "/gnu/store/r7k859hmcnkazf492fasqvk25jflnfk6-xz-5.2.4/bin/xz"; tar =3D "/gnu/store/v6f44zccwh9z5zk3pjlywjybbi8n2hjh-tar-1.32/bin/tar"; tarFlags =3D "--warning=3Dno-timestamp"; tr =3D "/gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.32/bin/tr= "; nixBinDir =3D fromEnv "NIX_BIN_DIR" "/gnu/store/2x4qyarbmhi3dqcqhkkia6l49= 1yjnf11-nix-2.3.6/bin"; nixPrefix =3D "/gnu/store/2x4qyarbmhi3dqcqhkkia6l491yjnf11-nix-2.3.6"; nixLibexecDir =3D fromEnv "NIX_LIBEXEC_DIR" "/gnu/store/2x4qyarbmhi3dqcqh= kkia6l491yjnf11-nix-2.3.6/libexec"; nixLocalstateDir =3D "/nix/var"; nixSysconfDir =3D "/etc"; nixStoreDir =3D fromEnv "NIX_STORE_DIR" "/nix/store"; # If Nix is installed in the Nix store, then automatically add it as # a dependency to the core packages. This ensures that they work # properly in a chroot. chrootDeps =3D if dirOf nixPrefix =3D=3D builtins.storeDir then [ (builtins.storePath nixPrefix) ] else [ ]; } =2D-8<---------------cut here---------------end--------------->8--- Currently I don't see a way to mount /gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.32 dependencies (and other packages) inside the Nix sandbox. Oleg. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcjhxI46s62NFSFhXFn+OpQAa+pwFAl8Wm80ACgkQFn+OpQAa +pzwYBAAgTjjfnHx8hNC7ueDy7sDFKj3B20at10fDQatGVwseSXEIkMRfBpzWk6H H7mhZdPQV/ZS/uz6OAsZ3TFqvGGvaOpzJhMQeK0PsuZ7DF/JPMB1Kf+fBusAPhKD kqKPYf7k5LhejkByGKuQVjYqFfIovlY+INna5Aa8B6q9mzUvUtBRODLcnLNtkibZ 6OYfQ/7l66D5txd6VicMZ+dL3WD+d2gvEskmCGMUIKa6aXVmE93/noeWGDq9yQ4o uaHD3YT1794fkBQBr1syX+qbkXNbp28oepWAwBqIcOMW4ejQiIWxtGJduT1FGV0B Cax2X3M/MNJYU6TRtQyUvwXEj3Da7vOsk05bwoZ1a/xO3UkUej6NQWEVP6eGl8Fp ib/73ddFkC/7ScVZp36UO6QPNrcGEsyJZitFSH1lVp0qGBWY+Dxu6Efq3UqY6mUa dFnsBUQGqYmAfDWLZptU7nZNYAMsJb+8cVc2G2x5K+lGwCHY5dMpwi06GWcD/xmf tLF3TQ5AKx05/8829oOh0kJzRKuk5Z2yOvAtataIrHzNUHB9YRfKBFYP51SQN8wN jHfvGN6xgL3gvwgum8AZudGAeAApZzeKRrKDoEcEecQQ1KJb0lXVPPpt0auMPSF6 CXYsp/dURE+/5wOkxyuqYtQmrenmXbCpuqT1WsVFW6pczSAfK4k= =VGMy -----END PGP SIGNATURE----- --=-=-=-- From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels Resent-From: Oleg Pykhalov Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 21 Jul 2020 17:28:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: Zhu Zihao via web , 42173@debbugs.gnu.org Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.159535244315712 (code B ref 42173); Tue, 21 Jul 2020 17:28:02 +0000 Received: (at 42173) by debbugs.gnu.org; 21 Jul 2020 17:27:23 +0000 Received: from localhost ([127.0.0.1]:40287 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jxw31-00045M-II for submit@debbugs.gnu.org; Tue, 21 Jul 2020 13:27:23 -0400 Received: from mail-lj1-f180.google.com ([209.85.208.180]:38122) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jxw2z-000455-8E for 42173@debbugs.gnu.org; Tue, 21 Jul 2020 13:27:22 -0400 Received: by mail-lj1-f180.google.com with SMTP id x9so24924168ljc.5 for <42173@debbugs.gnu.org>; Tue, 21 Jul 2020 10:27:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=O7FLP+EhSkUtLkiEYItcuHsMaynDGknRxyj8kvVbbpI=; b=dI1078UFVpF5wwzCfw0Q8ycr1hAwD0TR9Wwtu4+5hQ1qxN925HUsb+egRyBopiCIPn U8+5J28dxWuIaVsziD7mHwzgXSQ/wXe2KIrkyl4u9UsCFmmDUODCvcTVPWEdRJGsZ4yJ AM38ywiCDYbEN5h6tGn3/Biyx6FLxW00QAmtILIdhS7Rg4Oq88hcOKHY3Fe5MIScAdO3 wfddi249yB4ULRCWzLAdzi8c8bXGjelOR3rnK4irN54ntJ/XRk8WZ4luYnFVY5SxfSQO Ycc8C0f5b0iw98f4k/NpnzfRqEMgn0QuKnU23LbcZAN8EIGBkcO0p2+rzkj+FCbwiYlT H9Eg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=O7FLP+EhSkUtLkiEYItcuHsMaynDGknRxyj8kvVbbpI=; b=t31EA+4eW952fYvX/ylxwafaoJw7SgB1TD4b3D3xVyniuSdJ/YXJSd0yK3W51Qz4rs tZmbp6N4Dc0t50iPbt6kMF18cPEiOR+FcMSw4uRgq1ERxuDjUrWYIqDjEJx/xOmORdbm ZG+2lnoeRU8kYw2eQIa93pQAdNin9X7+yp8GZD7q9yrOfHIYsIy/Qu1RYHi1G0kUfmvj s7sSIKwtumoDT4RPXl9yRNHBfYQMDUhO0VazlZJwNdmmSiyoEf+yg0Aaug10j2HzP1gD sHUX5JnPk+zjioTF6ryCqD9fNVW60FtbwaOtMPxDD8JIiWO+oTr6mY84ziAPM0dkukK2 +X6A== X-Gm-Message-State: AOAM532Jk8CHD3EoMM6uEwRsd/WmpeA8jHAv5DzEWNe2did3bI0tbcvC lpeWBIGNLSsDWBW/gZu0QwZpFp64 X-Google-Smtp-Source: ABdhPJwjizcZwQ+3HfuvgRhEtPUWpVXjkF5kTn3y9JS0oRgThbcAQEfTzZnRhR2gKFjBt8V7n560JA== X-Received: by 2002:a2e:7804:: with SMTP id t4mr13267288ljc.8.1595352435107; Tue, 21 Jul 2020 10:27:15 -0700 (PDT) Received: from guixsd (ppp91-122-98-213.pppoe.avangarddsl.ru. [91.122.98.213]) by smtp.gmail.com with ESMTPSA id s2sm2259453lfs.4.2020.07.21.10.27.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 21 Jul 2020 10:27:14 -0700 (PDT) From: Oleg Pykhalov References: <87a70gud45.fsf@posteo.ro> <7fc08d8c7780.aa19f4b146749b1@guile.gnu.org> <877dv37or1.fsf@gnu.org> <878sfdqpte.fsf@gmail.com> Date: Tue, 21 Jul 2020 20:27:10 +0300 In-Reply-To: <878sfdqpte.fsf@gmail.com> (Oleg Pykhalov's message of "Tue, 21 Jul 2020 10:39:57 +0300") Message-ID: <87tuy0ye1d.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Oleg Pykhalov writes: [=E2=80=A6] > Currently I don't see a way to mount > /gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.32 > dependencies (and other packages) inside the Nix sandbox. Found one way: =2D-8<---------------cut here---------------start------------->8--- (with-output-to-file "/etc/nix/nix.conf" (lambda _ (display "sandbox =3D true") (newline) (format #t "build-sandbox-paths =3D ~{~a ~}~%" '#$(package-closure (map (match-lambda ((name package) package)) (package-inputs nix)))))) =2D-8<---------------cut here---------------end--------------->8--- But I fail to pass a self-written test. :-) Bind mounts are existing according to nix-daemon with =E2=80=98--debug=E2=80=99 flag. Should invest= igate more. Oleg. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcjhxI46s62NFSFhXFn+OpQAa+pwFAl8XJW4ACgkQFn+OpQAa +pybghAAwtKuI/oCEc99qG8gjzUiHmmhED3pw2gdoEYhcpOcjTdt7eJo1guT+B0F EPdWAFTYWQG2WEtr+DtvyAYhvMij6p8y+5JGx7GyQdrMAiZtH8J1sBCHXiZ66E5y XVs3w2ICQ9hkDTjq9YgirHOuS4coD9REULXCkOJYXk7qnxYLICnB0WEwTbhMj/2d 2WStE2RK9LuhRU6zuO5oenSfX6UGA7ai+iBkkyRuyfcnKxmykumLRZyAyAueaovd iLft8/mIvL4JL9yaFeaxgJinNhtkxTj8Z0VMQDCSXqr+6NBYieLtxxUSZ2RW+K8T 4m9fON5cqvgKyXxrzXseQoyPS4/trSZGkh9jgMqkFpKSVfcrp/+17ClNT6YTlQlx 7tYfOsibt0ul9CoFRFE87i9wfKI/khfVNF//KwoBZozqGowCZ7U+V+4MiIXQxf4/ jvq3aitaSMDI2wekmDsabO4F09h4HIRp/EK5MPuZo7zAXN1peOYZscoO9oc9Pzs6 I3PQadlO+aMguappZjmalu1xCoYgLgcQbHA9bnIOpKVKPCN+TKQ7M5TYu2BMvUrv 5WzBHRRKfWTX5ZoyqYHjUfENFfcXRJkBqFQFb7VBbHinz8Pd1wj65iWKhZsuTYGC Ibm/k7pWRwwffug8V/Qgoa/M0REl7oGDNcFCGEwEpcgU6ChoFDg= =wymB -----END PGP SIGNATURE----- --=-=-=-- From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 21 Jul 2020 21:29:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Oleg Pykhalov Cc: 42173@debbugs.gnu.org, Zhu Zihao via web Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.15953669116685 (code B ref 42173); Tue, 21 Jul 2020 21:29:02 +0000 Received: (at 42173) by debbugs.gnu.org; 21 Jul 2020 21:28:31 +0000 Received: from localhost ([127.0.0.1]:40553 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jxzoN-0001jl-22 for submit@debbugs.gnu.org; Tue, 21 Jul 2020 17:28:31 -0400 Received: from eggs.gnu.org ([209.51.188.92]:32934) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jxzoK-0001jY-Jd for 42173@debbugs.gnu.org; Tue, 21 Jul 2020 17:28:29 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:36645) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jxzoE-0007kl-Uk; Tue, 21 Jul 2020 17:28:22 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=56818 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1jxzoD-0004yG-V8; Tue, 21 Jul 2020 17:28:22 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <87a70gud45.fsf@posteo.ro> <7fc08d8c7780.aa19f4b146749b1@guile.gnu.org> <877dv37or1.fsf@gnu.org> <878sfdqpte.fsf@gmail.com> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 4 Thermidor an 228 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Tue, 21 Jul 2020 23:28:20 +0200 In-Reply-To: <878sfdqpte.fsf@gmail.com> (Oleg Pykhalov's message of "Tue, 21 Jul 2020 10:39:57 +0300") Message-ID: <878sfclfrf.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi! Oleg Pykhalov skribis: > Ludovic Court=C3=A8s writes: > >> Hi, >> >> (+Cc: Oleg, who worked on the Nix service.) >> >> Zhu Zihao via web skribis: >> >>> I found that if I put "sandbox =3D false" to /etc/nix/nix.conf. Nix can= update channel. Maybe nix's sandbox forget to import some guix binary path? >> >> Yes, probably. There=E2=80=99s probably an option similar to the >> =E2=80=98--chroot-directory=E2=80=99 of =E2=80=98guix-daemon=E2=80=99 to= specify additional directories >> that must be in the =E2=80=9Csandbox=E2=80=9D. >> >> If you find that option, then we can arrange and add all the >> dependencies of /gnu/store/=E2=80=A6/bin/bash there (similar to what >> =E2=80=98qemu-binfmt-service-type=E2=80=99 does). > > /gnu/store/=E2=80=A6/bin/bash (we need a static-bash) is not enough, we a= lso > should handle all packages (and closures in case binaries are not > static) listed in: > > $(guix build --no-grafts nix)/share/nix/corepkgs/config.nix > > let > fromEnv =3D var: def: > let val =3D builtins.getEnv var; in > if val !=3D "" then val else def; > in rec { > shell =3D "/gnu/store/pwcp239kjf7lnj5i4lkdzcfcxwcfyk72-bash-minimal-5.0= .16/bin/bash"; > coreutils =3D "/gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.= 32/bin"; > bzip2 =3D "/gnu/store/a9f7wmc75hbpg520phw9z4l9asm3qvsw-bzip2-1.0.8/bin/= bzip2"; > gzip =3D "/gnu/store/ncydgq2znms5n1d2k5yqshhf58nsixwv-gzip-1.10/bin/gzi= p"; > xz =3D "/gnu/store/r7k859hmcnkazf492fasqvk25jflnfk6-xz-5.2.4/bin/xz"; > tar =3D "/gnu/store/v6f44zccwh9z5zk3pjlywjybbi8n2hjh-tar-1.32/bin/tar"; > tarFlags =3D "--warning=3Dno-timestamp"; > tr =3D "/gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.32/bin/= tr"; > nixBinDir =3D fromEnv "NIX_BIN_DIR" "/gnu/store/2x4qyarbmhi3dqcqhkkia6l= 491yjnf11-nix-2.3.6/bin"; > nixPrefix =3D "/gnu/store/2x4qyarbmhi3dqcqhkkia6l491yjnf11-nix-2.3.6"; > nixLibexecDir =3D fromEnv "NIX_LIBEXEC_DIR" "/gnu/store/2x4qyarbmhi3dqc= qhkkia6l491yjnf11-nix-2.3.6/libexec"; > nixLocalstateDir =3D "/nix/var"; > nixSysconfDir =3D "/etc"; > nixStoreDir =3D fromEnv "NIX_STORE_DIR" "/nix/store"; > > # If Nix is installed in the Nix store, then automatically add it as > # a dependency to the core packages. This ensures that they work > # properly in a chroot. > chrootDeps =3D > if dirOf nixPrefix =3D=3D builtins.storeDir then > [ (builtins.storePath nixPrefix) ] > else > [ ]; > } > > Currently I don't see a way to mount > /gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.32 > dependencies (and other packages) inside the Nix sandbox. In =E2=80=98chrootDeps=E2=80=99 above (IIUC), you could add the closure of = all these things. To do that, you need to pass #:references-graphs. Then, on the build side, you can use =E2=80=98read-reference-graph=E2=80=99 to parse the= graph file, get the closures, and add it to =E2=80=98chrootDeps=E2=80=99 instead of the= empty list. Does that make sense? HTH, Ludo=E2=80=99. From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: [PATCH 1/2] services: base: Export references-file. Resent-From: Oleg Pykhalov Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 22 Jul 2020 07:01:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 42173@debbugs.gnu.org Cc: Oleg Pykhalov , Ludovic =?UTF-8?Q?Court=C3=A8s?= Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.159540122213076 (code B ref 42173); Wed, 22 Jul 2020 07:01:02 +0000 Received: (at 42173) by debbugs.gnu.org; 22 Jul 2020 07:00:22 +0000 Received: from localhost ([127.0.0.1]:41107 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jy8jm-0003Oq-IP for submit@debbugs.gnu.org; Wed, 22 Jul 2020 03:00:22 -0400 Received: from mail-lj1-f195.google.com ([209.85.208.195]:40052) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jy8jl-0003OZ-34 for 42173@debbugs.gnu.org; Wed, 22 Jul 2020 03:00:22 -0400 Received: by mail-lj1-f195.google.com with SMTP id j11so1312128ljo.7 for <42173@debbugs.gnu.org>; Wed, 22 Jul 2020 00:00:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=bFO8JZSpktPbKCZYjXmxNH8g2fSL5Fn/50YrDXKXWac=; b=ODjaIlxlOTTRkwB5DhcFvnuGGp+8F0zcXDSqGvn+6qyKTYMzXY4o4N0Cg0h3iJ3T10 nYbbbVZ1np6dzFcY0KPq8buMuPPweu30Mj6GwMLB0dQ8uXxFfhLv3IcQPXPtaGdISkdo YNXKjtWcUzH7QANsdr5VdMBgJwG1OGvOr05NQLlbdl88/CIAiYsbPjD+JRvmtRRUH2rS UYiXZiZN2FVpN1aro45SZWoHWl70JO28vo4+cJ9YTzL9yb8OG0OFbaXO/tQkPQF1wq65 Yc7IjyrR0+eF6PmfA6I86iv7DV6DTl+oeCKo5iipCLngrYcIuPSOb2GFGbDcZPvndqQL n5gg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=bFO8JZSpktPbKCZYjXmxNH8g2fSL5Fn/50YrDXKXWac=; b=P5sqwzCRNLWlW79WIMrD4bfY2U3gjU/q0i8zyWz/za89+6XoivWYemx3ptbS/1ei1f Gon3oBTNdbV0n6DH7Q5FKWYzaC8yhUOiIb6SBql51OY4SZ/owOFNIC70h7Q7gb78X6zY OX/0PzL3FFjvthWhMn+aIXHCjmlfo29KcEaVzRHv0DB0Em8FNQEU9/5ACFghch7Ut2BF Pj2HKj7cILBAxF76Qbk9PMq8j4jvonEMGsuPHzU+9Ok3US+KIZx9QR6qL+VBJeoluzzv FJ7pGmaYb8SXJOCAw7JceRFYu86LT5qm10+Id8DLgyWCGdIX9CrQZZVY7ogEgs6e6JxV l7xQ== X-Gm-Message-State: AOAM530MEUnEN/HwYA0pgyAzVGYOYrCiUwlOZPF7DjlH4AcWwFfnWrQL EJmT9BPsYlmP4ul8ZVWgXXdWzSlI X-Google-Smtp-Source: ABdhPJy/okSmSYzscvrnYeTLUwdWA+MjvgCG5na3kld1bH3wos+EMzU9PIuMMNWM+Ncj3lIssF4TJQ== X-Received: by 2002:a2e:8043:: with SMTP id p3mr15120696ljg.469.1595401214490; Wed, 22 Jul 2020 00:00:14 -0700 (PDT) Received: from localhost.localdomain (ppp91-122-98-213.pppoe.avangarddsl.ru. [91.122.98.213]) by smtp.gmail.com with ESMTPSA id h22sm6051027ljg.1.2020.07.22.00.00.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 22 Jul 2020 00:00:13 -0700 (PDT) From: Oleg Pykhalov Date: Wed, 22 Jul 2020 09:59:38 +0300 Message-Id: <20200722065939.18138-1-go.wigust@gmail.com> X-Mailer: git-send-email 2.27.0 In-Reply-To: <878sfclfrf.fsf@gnu.org> References: <878sfclfrf.fsf@gnu.org> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/services/base.scm (references-file): Export procedure. --- gnu/services/base.scm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gnu/services/base.scm b/gnu/services/base.scm index 83dc406aac..491f35702a 100644 --- a/gnu/services/base.scm +++ b/gnu/services/base.scm @@ -177,6 +177,8 @@ pam-limits-service-type pam-limits-service + references-file + %base-services)) ;;; Commentary: -- 2.27.0 From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: [PATCH 2/2] services: nix: Fix sandbox. Resent-From: Oleg Pykhalov Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 22 Jul 2020 07:01:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 42173@debbugs.gnu.org Cc: Oleg Pykhalov , Ludovic =?UTF-8?Q?Court=C3=A8s?= Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.159540123113097 (code B ref 42173); Wed, 22 Jul 2020 07:01:02 +0000 Received: (at 42173) by debbugs.gnu.org; 22 Jul 2020 07:00:31 +0000 Received: from localhost ([127.0.0.1]:41109 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jy8jr-0003P6-QE for submit@debbugs.gnu.org; Wed, 22 Jul 2020 03:00:31 -0400 Received: from mail-lj1-f175.google.com ([209.85.208.175]:39336) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jy8jm-0003Ob-3a for 42173@debbugs.gnu.org; Wed, 22 Jul 2020 03:00:27 -0400 Received: by mail-lj1-f175.google.com with SMTP id b25so1322759ljp.6 for <42173@debbugs.gnu.org>; Wed, 22 Jul 2020 00:00:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=pSm4rIIEDJc5+sajXfvFeR7VeGr2BcvrN88pk6G3N5Q=; b=ukerGj3s12NTKs2H966AjJErjSOojYwNK/cVKc8uSMDWBFhKefP82sYnjd+FSYd7nH RLYdzMrE7ML7VGk0o5AJc9bPoeIrcUQPyoL26VgL2fiNGSOUZtcd1IYzOC/I1peDvVSv S7d9Uuejj5TRry6GhYrnMCIHesLGoEu9pjLPnkiDrzOT2MhcOnZPkLI98NBHLKSL4EM/ kRBYSOUzcKI27YaR9azN9z8OHAF25ZoI42/2N/FSst0m2kW8e/CjUJgvVUhcMSCR18kW mtCIRTej6AdSQYp2xaRXhCTbUxQFdLVhUnJB7stTpsVkuZlckr+DP+7pzsxT+vglnXSO M72Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=pSm4rIIEDJc5+sajXfvFeR7VeGr2BcvrN88pk6G3N5Q=; b=N/b9hTbaEdqRlDy5rj/cxZsI8m611x5nsns6n0KPsdT28KVj/na5FjYKbso41SKiNr nLTuAfXA4aaUV1faxsjeV5MlzT/uuBUFNDKp5vpJ4ltWTgAEApJwC6UGgeNdYPybJfI+ TWfdKG3/fn9bZuoy+3yaSAkhJKBTKHP/nH/kpCaPdHwHsbGOKAzBEdbzqRWoXvzd4e0j cVtld4p0PY3jU0GEvrLDLKfJgLYaZq6huNbu4mRxYwzBEYDp4ZBlYSJ8khfCjiiQYdEP hFnknms1T2pUsxxaEAJianNMJrLLM0C2lrlKHRhn9wIVzVrd2NS8qFoiNP2+5Zi8iSuG KF7g== X-Gm-Message-State: AOAM531UgtgHkBR0V5698PoXsV97zbgdOCORbcEhL8ntY+R+xE9u745E xe57Wy9W7SRxX+oBpNwGWty2bL7r X-Google-Smtp-Source: ABdhPJwgnB0YDixNrW7/OGAtiQQ21XU80x9FEfbuvfhkoQIFo7lzP5QWnz6/hyNRQT2AYr4mXi7aDw== X-Received: by 2002:a2e:8187:: with SMTP id e7mr15799596ljg.308.1595401215589; Wed, 22 Jul 2020 00:00:15 -0700 (PDT) Received: from localhost.localdomain (ppp91-122-98-213.pppoe.avangarddsl.ru. [91.122.98.213]) by smtp.gmail.com with ESMTPSA id h22sm6051027ljg.1.2020.07.22.00.00.14 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 22 Jul 2020 00:00:14 -0700 (PDT) From: Oleg Pykhalov Date: Wed, 22 Jul 2020 09:59:39 +0300 Message-Id: <20200722065939.18138-2-go.wigust@gmail.com> X-Mailer: git-send-email 2.27.0 In-Reply-To: <20200722065939.18138-1-go.wigust@gmail.com> References: <878sfclfrf.fsf@gnu.org> <20200722065939.18138-1-go.wigust@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) * gnu/tests/package-management.scm: New file. * gnu/local.mk: Add this. * gnu/services/nix.scm (): New record. (nix-activation): Generate Nix config file. (nix-service-type): Add default value. (nix-shepherd-service): Allow provide Nix package. * doc/guix.texi (Miscellaneous Services)[Nix service]: Document record. --- doc/guix.texi | 21 +++++ gnu/local.mk | 1 + gnu/services/nix.scm | 90 +++++++++++++-------- gnu/tests/package-management.scm | 131 +++++++++++++++++++++++++++++++ 4 files changed, 211 insertions(+), 32 deletions(-) create mode 100644 gnu/tests/package-management.scm diff --git a/doc/guix.texi b/doc/guix.texi index 26ef937604..5639a360be 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -27597,6 +27597,27 @@ $ source /run/current-system/profile/etc/profile.d/nix.sh @end defvr +@deftp {Data Type} nix-configuration +This data type represents the configuration of the Nix daemon. + +@table @asis +@item @code{nix} (default: @code{nix}) +The Nix package to use. + +@item @code{sandbox} (default: @code{#t}) +Specifies whether builds are sandboxed by default. + +@item @code{build-sandbox-paths} (default: @code{'()}) +This is a list of strings or objects appended to the +@code{build-sandbox-paths} field of the configuration file. + +@item @code{extra-config} (default: @code{'()}) +This is a list of strings or objects appended to the configuration file. +It is used to pass extra text to be added verbatim to the configuration +file. +@end table +@end deftp + @node Setuid Programs @section Setuid Programs diff --git a/gnu/local.mk b/gnu/local.mk index 0eac01d72d..2c19562171 100644 --- a/gnu/local.mk +++ b/gnu/local.mk @@ -674,6 +674,7 @@ GNU_SYSTEM_MODULES = \ %D%/tests/mail.scm \ %D%/tests/messaging.scm \ %D%/tests/networking.scm \ + %D%/tests/package-management.scm \ %D%/tests/reconfigure.scm \ %D%/tests/rsync.scm \ %D%/tests/security-token.scm \ diff --git a/gnu/services/nix.scm b/gnu/services/nix.scm index 3c0065207d..04e7726e4d 100644 --- a/gnu/services/nix.scm +++ b/gnu/services/nix.scm @@ -1,5 +1,5 @@ ;;; GNU Guix --- Functional package management for GNU -;;; Copyright © 2019 Oleg Pykhalov +;;; Copyright © 2019, 2020 Oleg Pykhalov ;;; ;;; This file is part of GNU Guix. ;;; @@ -31,7 +31,9 @@ #:use-module (guix store) #:use-module (srfi srfi-1) #:use-module (srfi srfi-26) + #:use-module (ice-9 match) #:use-module (ice-9 format) + #:use-module (guix modules) #:export (nix-service-type)) ;;; Commentary: @@ -40,10 +42,17 @@ ;;; ;;; Code: - -;;; -;;; Accounts -;;; +(define-record-type* + nix-configuration make-nix-configuration + nix-configuration? + (package nix-configuration-package ;package + (default nix)) + (sandbox nix-configuration-sandbox ;boolean + (default #t)) + (build-sandbox-paths nix-configuration-build-sandbox-paths ;list of strings + (default '())) + (extra-config nix-configuration-extra-options ;list of strings + (default '()))) ;; Copied from gnu/services/base.scm (define* (nix-build-accounts count #:key @@ -74,32 +83,49 @@ GID." (id 40000)) (nix-build-accounts 10 #:group "nixbld"))) -(define (nix-activation _) - "Return the activation gexp." - (with-imported-modules '((guix build utils)) - #~(begin - (use-modules (guix build utils) - (srfi srfi-26)) - (for-each (cut mkdir-p <>) '("/nix/store" "/nix/var/log" - "/nix/var/nix/gcroots/per-user" - "/nix/var/nix/profiles/per-user")) - (chown "/nix/store" - (passwd:uid (getpw "root")) (group:gid (getpw "nixbld01"))) - (chmod "/nix/store" #o775) - (for-each (cut chmod <> #o777) '("/nix/var/nix/profiles" - "/nix/var/nix/profiles/per-user"))))) +(define nix-activation + ;; Return the activation gexp. + (match-lambda + (($ package sandbox build-sandbox-paths extra-config) + (with-imported-modules (source-module-closure + '((guix build store-copy))) + #~(begin + (use-modules (guix build utils) + (ice-9 format) + (srfi srfi-1) + (srfi srfi-26)) + (for-each (cut mkdir-p <>) '("/nix/store" "/nix/var/log" + "/nix/var/nix/gcroots/per-user" + "/nix/var/nix/profiles/per-user")) + (chown "/nix/store" + (passwd:uid (getpw "root")) (group:gid (getpw "nixbld01"))) + (chmod "/nix/store" #o775) + (for-each (cut chmod <> #o777) '("/nix/var/nix/profiles" + "/nix/var/nix/profiles/per-user")) + (mkdir-p "/etc/nix") + (with-output-to-file "/etc/nix/nix.conf" + (lambda _ + (format #t "sandbox = ~a~%" (if #$sandbox "true" "false")) + (format #t "build-sandbox-paths = ~{~a ~}~%" + (append (append-map (cut call-with-input-file <> read) + '#$(map references-file + (list package))) + '#$build-sandbox-paths)) + (for-each (cut display <>) '#$extra-config)))))))) -(define (nix-shepherd-service _) - "Return a for Nix." - (list - (shepherd-service - (provision '(nix-daemon)) - (documentation "Run nix-daemon.") - (requirement '()) - (start #~(make-forkexec-constructor - (list (string-append #$nix "/bin/nix-daemon")))) - (respawn? #f) - (stop #~(make-kill-destructor))))) +(define nix-shepherd-service + ;; Return a for Nix. + (match-lambda + (($ package _ ...) + (list + (shepherd-service + (provision '(nix-daemon)) + (documentation "Run nix-daemon.") + (requirement '()) + (start #~(make-forkexec-constructor + (list (string-append #$package "/bin/nix-daemon")))) + (respawn? #f) + (stop #~(make-kill-destructor))))))) (define nix-service-type (service-type @@ -108,7 +134,7 @@ GID." (list (service-extension shepherd-root-service-type nix-shepherd-service) (service-extension account-service-type nix-accounts) (service-extension activation-service-type nix-activation))) - (default-value '()) - (description "Run the Nix daemon."))) + (description "Run the Nix daemon.") + (default-value (nix-configuration)))) ;;; nix.scm ends here diff --git a/gnu/tests/package-management.scm b/gnu/tests/package-management.scm new file mode 100644 index 0000000000..dbb9df22df --- /dev/null +++ b/gnu/tests/package-management.scm @@ -0,0 +1,131 @@ +;;; GNU Guix --- Functional package management for GNU +;;; Copyright © 2020 Oleg Pykhalov +;;; +;;; This file is part of GNU Guix. +;;; +;;; GNU Guix is free software; you can redistribute it and/or modify it +;;; under the terms of the GNU General Public License as published by +;;; the Free Software Foundation; either version 3 of the License, or (at +;;; your option) any later version. +;;; +;;; GNU Guix is distributed in the hope that it will be useful, but +;;; WITHOUT ANY WARRANTY; without even the implied warranty of +;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +;;; GNU General Public License for more details. +;;; +;;; You should have received a copy of the GNU General Public License +;;; along with GNU Guix. If not, see . + +(define-module (gnu tests package-management) + #:use-module (gnu packages base) + #:use-module (gnu packages package-management) + #:use-module (gnu services) + #:use-module (gnu services networking) + #:use-module (gnu services nix) + #:use-module (gnu system) + #:use-module (gnu system vm) + #:use-module (gnu tests) + #:use-module (guix gexp) + #:use-module (guix git-download) + #:use-module (guix packages) + #:export (%test-nix)) + +;;; Commentary: +;;; +;;; This module provides a test definition for the nix-daemon +;;; +;;; Code: + +(define* (run-nix-test name test-os) + "Run tests in %NIX-OS Guix operating system, which has nix-daemon running." + (define os + (marionette-operating-system + test-os + #:imported-modules '((gnu services herd)))) + + (define vm + (virtual-machine + (operating-system os) + (port-forwardings '((8080 . 80))) + (memory-size 1024))) + + (define test + (with-imported-modules '((gnu build marionette)) + #~(begin + (use-modules (srfi srfi-11) + (srfi srfi-64) + (gnu build marionette) + (web client) + (web response)) + + (define marionette + (make-marionette (list #$vm))) + + (mkdir #$output) + (chdir #$output) + + (test-begin #$name) + + ;; XXX: Shepherd reads the config file *before* binding its control + ;; socket, so /var/run/shepherd/socket might not exist yet when the + ;; 'marionette' service is started. + (test-assert "shepherd socket ready" + (marionette-eval + `(begin + (use-modules (gnu services herd)) + (let loop ((i 10)) + (cond ((file-exists? (%shepherd-socket-file)) + #t) + ((> i 0) + (sleep 1) + (loop (- i 1))) + (else + 'failure)))) + marionette)) + + (test-assert "Nix daemon running" + (marionette-eval + '(begin + ;; Wait for nix-daemon to be up and running. + (start-service 'nix-daemon) + (with-output-to-file "guix-test.nix" + (lambda () + (display "\ +with import ; + +derivation { + system = builtins.currentSystem; + name = \"guix-test\"; + builder = shell; + args = [\"-c\" \"mkdir $out\\necho FOO > $out/foo\"]; + PATH = coreutils; +} +"))) + (zero? (system* (string-append #$nix "/bin/nix-build") + "--substituters" "" "--debug" "--no-out-link" + "guix-test.nix"))) + marionette)) + + (test-end) + + (exit (= (test-runner-fail-count (test-runner-current)) 0))))) + + (gexp->derivation (string-append name "-test") test)) + +(define %nix-os + ;; Return operating system under test. + (let ((base-os + (simple-operating-system + (service nix-service-type) + (service dhcp-client-service-type)))) + (operating-system + (inherit base-os) + (packages (cons nix (operating-system-packages base-os)))))) + +(define %test-nix + (system-test + (name "nix") + (description "Connect to a running nix-daemon") + (value (run-nix-test name %nix-os)))) + +;;; package-management.scm ends here -- 2.27.0 From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: Nix on Guix System: can't update channels Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 22 Jul 2020 10:10:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Oleg Pykhalov Cc: Zhu Zihao via web , 42173@debbugs.gnu.org Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.15954125836617 (code B ref 42173); Wed, 22 Jul 2020 10:10:01 +0000 Received: (at 42173) by debbugs.gnu.org; 22 Jul 2020 10:09:43 +0000 Received: from localhost ([127.0.0.1]:41309 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jyBh1-0001if-5A for submit@debbugs.gnu.org; Wed, 22 Jul 2020 06:09:43 -0400 Received: from eggs.gnu.org ([209.51.188.92]:46880) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jyBgz-0001iS-A1 for 42173@debbugs.gnu.org; Wed, 22 Jul 2020 06:09:41 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:45946) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jyBgt-0004uH-U6; Wed, 22 Jul 2020 06:09:35 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=58948 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1jyBgs-0002Z1-3Q; Wed, 22 Jul 2020 06:09:34 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <87a70gud45.fsf@posteo.ro> <7fc08d8c7780.aa19f4b146749b1@guile.gnu.org> <877dv37or1.fsf@gnu.org> <878sfdqpte.fsf@gmail.com> <87tuy0ye1d.fsf@gmail.com> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 5 Thermidor an 228 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Wed, 22 Jul 2020 12:09:32 +0200 In-Reply-To: <87tuy0ye1d.fsf@gmail.com> (Oleg Pykhalov's message of "Tue, 21 Jul 2020 20:27:10 +0300") Message-ID: <87imefkgir.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi Oleg, Oleg Pykhalov skribis: > Oleg Pykhalov writes: > > [=E2=80=A6] > >> Currently I don't see a way to mount >> /gnu/store/57xj5gcy1jbl9ai2lnrqnpr0dald9i65-coreutils-8.32 >> dependencies (and other packages) inside the Nix sandbox. > > Found one way: > > (with-output-to-file "/etc/nix/nix.conf" > (lambda _ > (display "sandbox =3D true") > (newline) > (format #t "build-sandbox-paths =3D ~{~a ~}~%" > '#$(package-closure (map (match-lambda ((name package) packag= e)) > (package-inputs nix)))))) That=E2=80=99s inaccurate: =E2=80=98package-closure=E2=80=99 does not captu= re non-package inputs, and it=E2=80=99s the set of build-time dependencies, not references. Using #:references-graphs solves that problem because it gives you precisely the closure of each package, as returned by =E2=80=98guix gc -R= =E2=80=99. HTH! Ludo=E2=80=99. From unknown Wed Sep 10 20:08:04 2025 X-Loop: help-debbugs@gnu.org Subject: bug#42173: [PATCH 2/2] services: nix: Fix sandbox. Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 22 Jul 2020 10:35:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 42173 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Oleg Pykhalov Cc: 42173@debbugs.gnu.org Received: via spool by 42173-submit@debbugs.gnu.org id=B42173.15954140969320 (code B ref 42173); Wed, 22 Jul 2020 10:35:01 +0000 Received: (at 42173) by debbugs.gnu.org; 22 Jul 2020 10:34:56 +0000 Received: from localhost ([127.0.0.1]:41351 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jyC5Q-0002QG-1W for submit@debbugs.gnu.org; Wed, 22 Jul 2020 06:34:56 -0400 Received: from eggs.gnu.org ([209.51.188.92]:54230) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jyC5O-0002Q2-Pz for 42173@debbugs.gnu.org; Wed, 22 Jul 2020 06:34:55 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:46338) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jyC5J-0000m9-Hu; Wed, 22 Jul 2020 06:34:49 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=59052 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1jyC5H-0006VG-Db; Wed, 22 Jul 2020 06:34:48 -0400 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <878sfclfrf.fsf@gnu.org> <20200722065939.18138-1-go.wigust@gmail.com> <20200722065939.18138-2-go.wigust@gmail.com> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 5 Thermidor an 228 de la =?UTF-8?Q?R=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Wed, 22 Jul 2020 12:34:45 +0200 In-Reply-To: <20200722065939.18138-2-go.wigust@gmail.com> (Oleg Pykhalov's message of "Wed, 22 Jul 2020 09:59:39 +0300") Message-ID: <87zh7rj0sa.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi! Oleg Pykhalov skribis: > * gnu/tests/package-management.scm: New file. > * gnu/local.mk: Add this. > * gnu/services/nix.scm (): New record. > (nix-activation): Generate Nix config file. > (nix-service-type): Add default value. > (nix-shepherd-service): Allow provide Nix package. > * doc/guix.texi (Miscellaneous Services)[Nix service]: > Document record. Nice! You can add a =E2=80=9CFixes=E2=80=9D line too. > +@item @code{build-sandbox-paths} (default: @code{'()}) > +This is a list of strings or objects appended to the > +@code{build-sandbox-paths} field of the configuration file. I=E2=80=99d use =E2=80=9Cfiles=E2=80=9D or =E2=80=9Citems=E2=80=9D instead = of =E2=80=9Cpaths=E2=80=9D, for consistency. > + (mkdir-p "/etc/nix") > + (with-output-to-file "/etc/nix/nix.conf" > + (lambda _ > + (format #t "sandbox =3D ~a~%" (if #$sandbox "true" "false= ")) > + (format #t "build-sandbox-paths =3D ~{~a ~}~%" > + (append (append-map (cut call-with-input-file <> = read) > + '#$(map references-file > + (list package))) > + '#$build-sandbox-paths)) > + (for-each (cut display <>) '#$extra-config)))))))) Here you=E2=80=99re adding the closure of Nix itself, which is a bit more t= han needed I guess, but maybe it=E2=80=99s OK (perhaps with a comment explaining that =E2=80=98config.nix=E2=80=99 captures store file names.) Actually I thought this would have to be addressed in the =E2=80=98nix=E2= =80=99 package itself because this is where those store file names are captured. But maybe it=E2=80=99s OK to do it in the service. WDYT? > +(define* (run-nix-test name test-os) > + "Run tests in %NIX-OS Guix operating system, which has nix-daemon runn= ing." ^ TEST-OS > +(define %nix-os Pretty fun. :-) > +(define %test-nix > + (system-test > + (name "nix") > + (description "Connect to a running nix-daemon") > + (value (run-nix-test name %nix-os)))) Great that you were able to write a test for that! Thanks, Ludo=E2=80=99. From unknown Wed Sep 10 20:08:04 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Alexandru-Sergiu Marton Subject: bug#42173: closed (Re: [PATCH 2/2] services: nix: Fix sandbox.) Message-ID: References: <87ft9j732x.fsf@gmail.com> <87a70gud45.fsf@posteo.ro> X-Gnu-PR-Message: they-closed 42173 X-Gnu-PR-Package: guix Reply-To: 42173@debbugs.gnu.org Date: Wed, 22 Jul 2020 19:39:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1595446742-13797-1" This is a multi-part message in MIME format... ------------=_1595446742-13797-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #42173: Nix on Guix System: can't update channels which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 42173@debbugs.gnu.org. --=20 42173: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D42173 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1595446742-13797-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 42173-done) by debbugs.gnu.org; 22 Jul 2020 19:38:28 +0000 Received: from localhost ([127.0.0.1]:43097 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jyKZQ-0003Zl-1U for submit@debbugs.gnu.org; Wed, 22 Jul 2020 15:38:28 -0400 Received: from mail-lj1-f195.google.com ([209.85.208.195]:36114) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jyKZO-0003ZY-6F for 42173-done@debbugs.gnu.org; Wed, 22 Jul 2020 15:38:26 -0400 Received: by mail-lj1-f195.google.com with SMTP id d17so3768693ljl.3 for <42173-done@debbugs.gnu.org>; Wed, 22 Jul 2020 12:38:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:references:date:in-reply-to:message-id:user-agent :mime-version; bh=X3C6/KmRf5ieO0+KE6GzfAwor7YmxysYFokikq8W2zw=; b=FyUq9xccoWnbJY1YiTEL2JjtKpCcdUgQyVOHAAADhzICAubzz/BYcWqWH0AoMAN0Cc Ay2Wc3hhqdeEaRWU/bId9iMRXFgaiMPQ1kPYqA3jP7gBjrdE/122ozLBPCoLDYbUuhAD bA3TowimKQlj0ycUI+k8piksMan2C/YfbfojBiljyl1Csb/HH4daOsxRlNdLkbz1rK2I McXxYQT8dLdg1Nq6TquupJK8W8WKkbDSbsoyBdHDWxyogbZSo79Zh+B/59TR6YDZJLQ6 gxz3aKkTbk31zGyOH8hMkjCnRlSbu3EeAYt4zuReLjjID1u5EyWQtzYbgGAO1mGue9+C 7Rog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=X3C6/KmRf5ieO0+KE6GzfAwor7YmxysYFokikq8W2zw=; b=YLKZw3Yc6Wm/M4m7gdCW9mS67yZLaH7i6sW/dnBzh5ojuHmjfGyynUY5mqKl37xtJ5 6JrgPoQTJ9Lq5ljrm8ktZPTkDEBFt/G7VxR0/vpD02g/1ne1PdFk+nL0QbDWNqPagtkp EoR3Ggf8JoxDw2DVPogUoOyNL+Gyjh10BlaZp7jUvs/tpLt/zi2AIL3+Zr9OFR4Vj03c lPSdAeQlbogQqL3HxFPyCQPe/BEbBhviDr8f+dPNHhpczfYb2u8V4w8sT5vRCBCHGFhy P+CXRWYHOUZlWlvYrh3db2Te2VthkskOEiBNeDKA7/5yhDXI1IRKQHqMWgboA+SJNuuD nF+w== X-Gm-Message-State: AOAM531OcnI+fyq5QwcmDaxeBrRm6gvPW3pMDNbLLvrIw9xqDtkgTRMF gYKvYCSOTPKdqHEddTPXAjcAt91G X-Google-Smtp-Source: ABdhPJxotPLGIn4th0CPdcQS8ZEvV4s26iqbPbK7NE6KE2FZ1Y7z36BAitVnaN1F6l99dluDkLrTjw== X-Received: by 2002:a2e:9c82:: with SMTP id x2mr317410lji.292.1595446699470; Wed, 22 Jul 2020 12:38:19 -0700 (PDT) Received: from guixsd (ppp91-122-98-213.pppoe.avangarddsl.ru. [91.122.98.213]) by smtp.gmail.com with ESMTPSA id l19sm692889ljb.15.2020.07.22.12.38.18 for <42173-done@debbugs.gnu.org> (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 22 Jul 2020 12:38:18 -0700 (PDT) From: Oleg Pykhalov To: 42173-done@debbugs.gnu.org Subject: Re: [PATCH 2/2] services: nix: Fix sandbox. References: <878sfclfrf.fsf@gnu.org> <20200722065939.18138-1-go.wigust@gmail.com> <20200722065939.18138-2-go.wigust@gmail.com> <87zh7rj0sa.fsf@gnu.org> Date: Wed, 22 Jul 2020 22:38:14 +0300 In-Reply-To: <87zh7rj0sa.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Wed, 22 Jul 2020 12:34:45 +0200") Message-ID: <87ft9j732x.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 42173-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi, Ludovic Court=C3=A8s writes: [=E2=80=A6] >> + (with-output-to-file "/etc/nix/nix.conf" >> + (lambda _ >> + (format #t "sandbox =3D ~a~%" (if #$sandbox "true" "fals= e")) >> + (format #t "build-sandbox-paths =3D ~{~a ~}~%" >> + (append (append-map (cut call-with-input-file <>= read) >> + '#$(map references-file >> + (list package))) >> + '#$build-sandbox-paths)) >> + (for-each (cut display <>) '#$extra-config)))))))) > > Actually I thought this would have to be addressed in the =E2=80=98nix=E2= =80=99 package > itself because this is where those store file names are captured. But > maybe it=E2=80=99s OK to do it in the service. WDYT? I think it's good enough for now to fix the issue. We could delete prepending =E2=80=98build-sandbox-paths=E2=80=99 with =E2=80=98nix=E2=80=99= closure in future. >> +(define %nix-os > > Pretty fun. :-) Yea, :-). Pushed to master as 4656180d5de1fef2846bea9af27ae509f32376ba Oleg. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcjhxI46s62NFSFhXFn+OpQAa+pwFAl8YlaYACgkQFn+OpQAa +pxhVw//d+loKm+gxOWel+43appqPIPd5m0zllbzUa6X/+c3mNNcidGF4wDbhO01 uOW9wr8vxq7vKQYz+2UbM7R7rfYArm79seQfCCjmukX1nUVO8Nhrj6NCnhLDQjc9 Tj3uI7Gu/Ui4pgKwOWXNXNmF36rX3UqBCdNoteHHGbbDZ5/OhQTZSq+pFmVwNdEz 13OrWCi9/UtvNxGU+GT68hiubk9BZDc0vxAd2yZeLWtqcm67tj7EiEwwXgVJnHlu ynLGPGplkWfyIvyz32fUw1M0P1uh/iTgxh8s7/QxyzIZNVDMQ8PnDKwzBt7cv1pc 3GXai1KogOM6Vy1dHKRIECr/PhRq9HSeFReOYEa5NiNbOVoUA8wOxDijvteXbAsk QFSZ7auhuWj2dTV5cqqHfJYoWJlRLvEI+1l/USdUvu9VJZhBEm73TmKLwgk6hcE0 ad71b78Yey0HcB4RRt9Y31XDBspr1ylDYnq6Tj/NK6MQGJf/B+s3jIW2LqeBMAYX hCQFP6FTKi9tgCX2gO2kFA1gNAhe5ggNy0YzWjZl81cyyuHl94ip9IMiXHeLJQ+4 fKAii89xaSbG4Gv2Kxtn07sqNBZBAZ0Suqh8J7a8T5P/6Qc+X6Mfw3BL4hcQ6TRo FWIDIruqfzOxoPIIWRYI0dSDzR/iAWSf9+DBB+CbXXT9CA+PUP0= =5O7I -----END PGP SIGNATURE----- --=-=-=-- ------------=_1595446742-13797-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 3 Jul 2020 07:08:39 +0000 Received: from localhost ([127.0.0.1]:56325 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jrFoN-0002Nh-G9 for submit@debbugs.gnu.org; Fri, 03 Jul 2020 03:08:39 -0400 Received: from lists.gnu.org ([209.51.188.17]:53524) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1jrFoL-0002Na-Uh for submit@debbugs.gnu.org; Fri, 03 Jul 2020 03:08:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33454) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jrFoL-0002lr-HF for bug-guix@gnu.org; Fri, 03 Jul 2020 03:08:37 -0400 Received: from mout01.posteo.de ([185.67.36.65]:41869) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jrFoJ-0003B0-G2 for bug-guix@gnu.org; Fri, 03 Jul 2020 03:08:37 -0400 Received: from submission (posteo.de [89.146.220.130]) by mout01.posteo.de (Postfix) with ESMTPS id 182EA160063 for ; Fri, 3 Jul 2020 09:08:31 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.ro; s=2017; t=1593760112; bh=7MAcStqrAwcpi/r3dpCeXIs/G4NQHa/aCWIUpX+1dfI=; h=From:To:Subject:Date:From; b=rCDCmQp1es6ynTVy9FXEyZoI5qp1SLNHjJfohfpsRdoYy0syS87gthqp5cvE4XAGb NQFkQk75gG8M81HGLXSjPeXNs3W0Zix/g/ebxMcKXDReqYWRvqXj4wZ8guAaMroue1 iQnjrFMz1BOV9gduDgFJg79b5iO2rh544lEAqLXi9V2CSQkVvDk7jb+BVT521ltFPU Luj8drnseAd5oQppXCU8ZDoPc6oleevATXtQEE6mMdO++sJfykQtvfCQE+S2QdMzPg FcMagEVn8Y5gmTd+5HnpBZpBnu+bZmPotJ9WeTJVF/P49J6NhEDLs8gtZbJxg/71H+ +FXVxdVjPEDaw== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 49ymJv34mbz6tmR for ; Fri, 3 Jul 2020 09:08:31 +0200 (CEST) From: Alexandru-Sergiu Marton To: bug-guix@gnu.org Subject: Nix on Guix System: can't update channels Date: Fri, 03 Jul 2020 12:56:33 +0300 User-agent: mu4e 1.4.10; emacs 26.3 Message-ID: <87a70gud45.fsf@posteo.ro> MIME-Version: 1.0 Content-Type: text/plain; format=flowed Received-SPF: pass client-ip=185.67.36.65; envelope-from=brown121407@posteo.ro; helo=mout01.posteo.de X-detected-operating-system: by eggs.gnu.org: First seen = 2020/07/03 03:08:32 X-ACL-Warn: Detected OS = Linux 3.11 and newer X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-Spam-Score: -1.3 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) Hi, I tried to set up the Nix package manager on my Guix System following the instructions at http://guix.gnu.org/manual/en/guix.html#index-Nix . Unfortunately, after reconfiguring the system and adding a channel with `nix-channel --add https://nixos.org/channels/nixpkgs-unstable`, when I tried to update the channels (`nix-channel --update`), this is what I got: --8<---------------cut here---------------start------------->8--- [brown@121408 ~]$ nix-channel --update unpacking channels... while setting up the build environment: executing '/gnu/store/pwcp239kjf7lnj5i4lkdzcfcxwcfyk72-bash-minimal-5.0.16/bin/bash': No such file or directory builder for '/nix/store/fqvvrsyznxfzckxbiz6krlykdb6w105n-nixpkgs-20.09pre232864.55668eb671b.drv' failed with exit code 1 error: build of '/nix/store/fqvvrsyznxfzckxbiz6krlykdb6w105n-nixpkgs-20.09pre232864.55668eb671b.drv' failed error: program '/gnu/store/lsixql26nig4v3icn124ja3ivjpgvn99-nix-2.3.6/bin/nix-env' failed with exit code 100 --8<---------------cut here---------------end--------------->8--- Any tips on how to fix this? Cheers, Sergiu ------------=_1595446742-13797-1--