From unknown Tue Jun 17 01:33:39 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#45066 <45066@debbugs.gnu.org> To: bug#45066 <45066@debbugs.gnu.org> Subject: Status: guix environment --container is borken Reply-To: bug#45066 <45066@debbugs.gnu.org> Date: Tue, 17 Jun 2025 08:33:39 +0000 retitle 45066 guix environment --container is borken reassign 45066 guix submitter 45066 luhux severity 45066 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 06 04:14:57 2020 Received: (at submit) by debbugs.gnu.org; 6 Dec 2020 09:14:57 +0000 Received: from localhost ([127.0.0.1]:48879 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1klq89-0007b2-8h for submit@debbugs.gnu.org; Sun, 06 Dec 2020 04:14:57 -0500 Received: from lists.gnu.org ([209.51.188.17]:51790) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1klq88-0007av-D8 for submit@debbugs.gnu.org; Sun, 06 Dec 2020 04:14:56 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:42910) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1klq88-0002EC-8G for bug-guix@gnu.org; Sun, 06 Dec 2020 04:14:56 -0500 Received: from mail-oln040092254060.outbound.protection.outlook.com ([40.92.254.60]:6047 helo=APC01-PU1-obe.outbound.protection.outlook.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1klq86-0006Ow-0f for bug-guix@gnu.org; Sun, 06 Dec 2020 04:14:55 -0500 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=H6oVlzLmlnB+kdDnsiYZictWusCMPMNAD7fhGIxjYEkRCjPf0a/60HM9UlvEiBcH7MqadHmILyb8JnPTCCyiFm9+dFsERBACn81T+dwdezZUhNJYn5yCWwZoU2rbQgsIqnooCI81WaOX8Zf4zFxnsPOGbkpjfJhUrCym1HQdlujj5VHcHBdKBN5ZT9Pd0dgCiIT2uEE22TTQLowXJF9RuhhxPCVvBOaBdG3+/Hg2lXAMl+bfCKLIA2vMqLd/LQpfgrKErjFmZ5B+Aacc6HQGgqofeyI+6y2QShynYNMN+hr8OwKpTMaKdzNgT8TGAWqkYun42HZcLOfBN3/iid8uCA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pKbml26a5x9G1FJnKIgxo4MvajmdIm2NHDnto+Y0//I=; b=Uh+rquB/7dI0KgGg6oydnK5P/TRhyr5p0wD3rcjlaP7k8p5j2/W8YBAIXM44k8M2EcyMvZW9WyuPtijn3OrwIHSLIuc91rR+0dOpQxx/6wQ4s1MTF1JVg452cBSRssHu1R6T3Z/MbFjGwGlilQRDdxRvzxK2J29bngJ8frMxFljB07wBHgbATkZkeX44RZOZlHmtoNJJwnXEIfSHhmX5QtH725+sIOQPMu5TjmHuzfuoV8A9tv0zRhnasKg8HWJ64dY7hFWK+MjP4K4+qdQr2cFSXF13njZ7pmLpFqtiOUMWe1i7AUkBRyrUuYrgn9YfBUqBagyXnb7h+FQ9n/6PEQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pKbml26a5x9G1FJnKIgxo4MvajmdIm2NHDnto+Y0//I=; b=PiSfEqzBVW0KvxMDoiYWG+lCbyIv+5Lcxu3axgw9Jqfzo50iUNl2jNbT47ejpiIunt0nklsgo338R3fmoZZjucb1qZ7cAHq87Nh2vk21Dtj+buV4eXJuu5sNMLNBgqSiSxeoubmva0uFelw1aemP/Uv2deSlV3F91CEVL2eraH4hZlA/BpLQyvX/3UJxL+xpyp10RvxfcsTK1AXFrATtDAXDHfS5P4lnk9LUiE79vfB1JuUL6Jn2AGr+kvBWTpHZEZhYQXic7IJFRrJck3d+3N+6+ei2s2PZWnffwkIBWdXMO/4xrsYB5OMmaR7uQxK/+K5u1e97tNQLP34V9gCfGw== Received: from SG2APC01FT024.eop-APC01.prod.protection.outlook.com (2a01:111:e400:7ebd::4b) by SG2APC01HT098.eop-APC01.prod.protection.outlook.com (2a01:111:e400:7ebd::480) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3632.17; Sun, 6 Dec 2020 08:59:46 +0000 Received: from PSXP216MB0214.KORP216.PROD.OUTLOOK.COM (10.152.250.55) by SG2APC01FT024.mail.protection.outlook.com (10.152.250.185) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3632.17 via Frontend Transport; Sun, 6 Dec 2020 08:59:46 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:7CAFA5B9A46FA2869E03EF6EE6C7DAEAC9228D87AE9214E248C997E08CDB7E03; UpperCasedChecksum:B752C2DD2AB3E8515962C3F1C2002BB7C7D250E4CE2C85E13D7E873ACE2E64EB; SizeAsReceived:8379; Count:44 Received: from PSXP216MB0214.KORP216.PROD.OUTLOOK.COM ([fe80::3596:cdc4:9180:eeb3]) by PSXP216MB0214.KORP216.PROD.OUTLOOK.COM ([fe80::3596:cdc4:9180:eeb3%8]) with mapi id 15.20.3632.023; Sun, 6 Dec 2020 08:59:46 +0000 Date: Sun, 06 Dec 2020 16:59:41 +0800 User-Agent: K-9 Mail for Android Content-Type: multipart/alternative; boundary="----EJWN87MV1QLQ9P26PEHD9CA5FTM20J" Content-Transfer-Encoding: 7bit Subject: guix environment --container is borken To: bug-guix@gnu.org From: luhux Message-ID: X-TMN: [pmnLRCOjg2+LDMogP9f1jzRyazevaNp7] X-ClientProxiedBy: HKAPR04CA0003.apcprd04.prod.outlook.com (2603:1096:203:d0::13) To PSXP216MB0214.KORP216.PROD.OUTLOOK.COM (2603:1096:300:7::12) X-Microsoft-Original-Message-ID: <0E264B05-D04D-4C9F-9E0D-58A7DDADFDAF@outlook.com> MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from [192.168.0.245] (110.178.78.197) by HKAPR04CA0003.apcprd04.prod.outlook.com (2603:1096:203:d0::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3632.17 via Frontend Transport; Sun, 6 Dec 2020 08:59:45 +0000 X-MS-PublicTrafficType: Email X-IncomingHeaderCount: 44 X-EOPAttributedMessage: 0 X-MS-Office365-Filtering-Correlation-Id: d63b7667-f4d9-48f5-9239-08d899c5475a X-MS-TrafficTypeDiagnostic: SG2APC01HT098: X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: VDXFYLkXYxsuwUkjYG0J2ZCgmTHCgBLxfp39awfMg5Nz/3RnLxj+nWfSV5PR9JYgsCdt+MGIZzxVaBS1QbzFBtTvYMO/yLw2GnoSrfTGEHQPIQBc+rL/SE9FVi+yLk1S26FpgVihv5A1khHjhBCMCrZtf7uUkR9q9t86EkEvi8EzKsyHtLlm3K697ydeju5PNPDPwO8woOZWD0omTIRkJg== X-MS-Exchange-AntiSpam-MessageData: etpU6jRLLoAXsUVBvr9n1U1VKHoy35nHDqxlKU9H18uDn/+9eh5jP6fUmJqDDUZyVwy2NqbCzI9/5VF8z7EwdhQ9Bq0I+gMszX420EoqzqSRzKVPbQUkbACXIS6g4lCdgLrMQEaLHxSO8BHEy5YHxg== X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d63b7667-f4d9-48f5-9239-08d899c5475a X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Dec 2020 08:59:46.0608 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-AuthSource: SG2APC01FT024.eop-APC01.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2APC01HT098 Received-SPF: pass client-ip=40.92.254.60; envelope-from=luhux@outlook.com; helo=APC01-PU1-obe.outbound.protection.outlook.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, MSGID_FROM_MTA_HEADER=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.7 (/) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.3 (--) ------EJWN87MV1QLQ9P26PEHD9CA5FTM20J Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable In the new guix `guix environment --container` is borken=2E The reason lies in the 8bc5ca5160db3d82bd5b6b2b7ed80c96f42bd33e of the mas= ter branch: It checks if the file exists and then returns a boolean None of my 3 Guix System machines have this file but they can still run un= privileged containers=2E Please fix it, thanks very much luhux ------EJWN87MV1QLQ9P26PEHD9CA5FTM20J Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable In= the new guix `guix environment --container` is borken.

The reason l= ies in the 8bc5ca5160db3d82bd5b6b2b7ed80c96f42bd33e of the master branch:


It checks if the file exists and then returns a boolean



None of my 3 Guix System machines have this file but they can= still run unprivileged containers.

Please fix it,

thanks ver= y much


luhux= ------EJWN87MV1QLQ9P26PEHD9CA5FTM20J-- From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 06 10:49:53 2020 Received: (at control) by debbugs.gnu.org; 6 Dec 2020 15:49:53 +0000 Received: from localhost ([127.0.0.1]:50846 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1klwIL-00010x-Ky for submit@debbugs.gnu.org; Sun, 06 Dec 2020 10:49:53 -0500 Received: from tobias.gr ([80.241.217.52]:56816) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1klwIJ-00010f-6v for control@debbugs.gnu.org; Sun, 06 Dec 2020 10:49:51 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tobias.gr; s=2018; bh=DZRxnzGLX6bRd7de7/RN6M+ZN+IyLVFe6OTFLjHf5S4=; h=date:to:from; b=Bt2 iD+ZwjCxiRjrfoANIzE2ApQ4VA30D+mfYQAaOyq7gIPLuei4fFO2f8Ta/0tiiDMO/coiQp zSYHOBGqQBMawjn1eH7K21wUeddIkgJIoTDFqUfA/FwlPCBnOK5TpmmNM7PCHVai+dqAmk YaXH6ya9JSWZoPQ57qZyqLbzSxgGmRIE3fdlREw3R/73JAhE9VA8LVpQKgvlNuCGynkG6C QFt8duGl5i94X+ji9pz4lRHORKTrM4RVOUv37bUPXYvn1S0ZtjpvwzBRrijtjYsyKTPEya zNgS4LQHKiI5grZRD2sBdwyeYCXV+zeS7WNSRahMnSYgvdXo8CnXlyxbytA== Received: by submission.tobias.gr (OpenSMTPD) with ESMTPSA id e37a3271 (TLSv1.2:ECDHE-ECDSA-AES256-GCM-SHA384:256:NO) for ; Sun, 6 Dec 2020 15:50:04 +0000 (UTC) BIMI-Selector: v=BIMI1; s=default; From: Tobias Geerinckx-Rice To: control@debbugs.gnu.org Date: Sun, 06 Dec 2020 16:49:48 +0100 Message-ID: <87mtyrvsrn.fsf@nckx> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Spam-Score: 1.7 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: merge 45066 45069 Content analysis details: (1.7 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/, medium trust [80.241.217.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.8 MISSING_SUBJECT Missing Subject: header 0.2 NO_SUBJECT Extra score for no subject 2.0 BODY_EMPTY No body text in message X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.7 (/) merge 45066 45069 From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 06 12:10:59 2020 Received: (at 45066) by debbugs.gnu.org; 6 Dec 2020 17:10:59 +0000 Received: from localhost ([127.0.0.1]:51109 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1klxYp-0007RX-Kr for submit@debbugs.gnu.org; Sun, 06 Dec 2020 12:10:59 -0500 Received: from mail-wm1-f44.google.com ([209.85.128.44]:37913) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1klxYo-0007RM-R4 for 45066@debbugs.gnu.org; Sun, 06 Dec 2020 12:10:59 -0500 Received: by mail-wm1-f44.google.com with SMTP id g185so11514947wmf.3 for <45066@debbugs.gnu.org>; Sun, 06 Dec 2020 09:10:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:in-reply-to:references:date:message-id:mime-version; bh=vZX1R+HVwEHDtkvSDvF4KbngxrD1B/TBDCFGor0RUpU=; b=JxPO+eKcK99bmUZWW6tD4klA4/V8pZDTiVL70x8QpoBFMvkg6tQQatiPEMiTl5oNDx 5cClnEhwb2mdZ4IFl9Ro8M4xsH96jbluiVbc1C26k/Y85j0YOvoyCQH5BjPG2T+2/7oi /uuUxXEVt+CLEexNaBgsgGbvG0RqgXoFdhqCwPZGaBkd2lGbYQTmDXPeyeICWYPhi76P 1qPH/R0+5A0FzeL4+cQLuk+lN54z9Y0YBPHL8XuHruUsKNz/uvksOqiQZnmsEM0gQ56h CxQcrQcvonESjDKCrz3L+uV/C6daaeZJd6b6xD39UNoxkRmCLIgVvxduFo7gd6EWdyal wyiQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:in-reply-to:references:date :message-id:mime-version; bh=vZX1R+HVwEHDtkvSDvF4KbngxrD1B/TBDCFGor0RUpU=; b=g1xlWbBluQBpYDljSTxTae4NySh7Rl5sT4jrjfACkIXmTNER9KCpVA241SNJsjCb3/ /0GlhxyvFszG57shlia6TxsgBDqzXKU5Boi2HAZCV6faw9EfN4Gq9sNXsqECTHZaXm+B 6/NxfR+T3nq3w9n440sugCbTPKmgtaQVxsdSsngW5zFug6D/7QWDxAWMFuu+XYopRQzf BKKiuRkr0TaUKvro5we3KmwjJLFiCIdc1QpAzzTsYjSZFvTLrZYyL7LoAVD5WMEefmur maioTfI6C+8HrC+qD5BzLXfgEAC+8sbiGZm1j9GysX6u9+fMOaNXG03M5IATBpSKLdAe Qjqw== X-Gm-Message-State: AOAM533hhNQBUYCTIkSSp03O82+Zg7PoM5eNJ1rNyW6FVSGVoOLdkdF+ BdtlpxjqqBed9X2oCrgNbSX6dpRzRdU= X-Google-Smtp-Source: ABdhPJx2M0HJnY67Yzp3mMfeCz1XogNczmtG+UL0BfJJxLLdFH7W/Fy7Xg6P8ZxAS50WEowSzBLe3w== X-Received: by 2002:a1c:2e48:: with SMTP id u69mr14755919wmu.30.1607274652885; Sun, 06 Dec 2020 09:10:52 -0800 (PST) Received: from lili ([88.126.110.68]) by smtp.gmail.com with ESMTPSA id m8sm11029393wmc.27.2020.12.06.09.10.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 06 Dec 2020 09:10:52 -0800 (PST) From: zimoun To: luhux , 45066@debbugs.gnu.org Subject: Re: bug#45066: guix environment --container is borken In-Reply-To: References: Date: Sun, 06 Dec 2020 18:05:49 +0100 Message-ID: <86a6uqamqa.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 45066 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, On Sun, 06 Dec 2020 at 16:59, luhux wrote: > In the new guix `guix environment --container` is borken. It is not broken. > Please fix it, Please fix your config. :-) The message says: --8<---------------cut here---------------start------------->8--- $ guix environment -C --ad-hoc hello -- hello guix environment: error: cannot create container: unprivileged user cannot create user namespaces guix environment: error: please set /proc/sys/kernel/unprivileged_userns_clone to "1" --8<---------------cut here---------------end--------------->8--- Have you tried the recommendation? --8<---------------cut here---------------start------------->8--- $ su - Password: # echo 1 > /proc/sys/kernel/unprivileged_userns_clone # logout $ guix environment -C --ad-hoc hello -- hello Hello, world! --8<---------------cut here---------------end--------------->8--- Feel free to comment on the thread: if it does not work for you. If no major objection, I am closing. All the best, simon From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 06 16:02:26 2020 Received: (at 45066-done) by debbugs.gnu.org; 6 Dec 2020 21:02:26 +0000 Received: from localhost ([127.0.0.1]:51476 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1km1An-0002Zr-RD for submit@debbugs.gnu.org; Sun, 06 Dec 2020 16:02:26 -0500 Received: from eggs.gnu.org ([209.51.188.92]:46270) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1km1Am-0002V3-HP for 45066-done@debbugs.gnu.org; Sun, 06 Dec 2020 16:02:24 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]:42972) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1km1Ah-0008FP-1m; Sun, 06 Dec 2020 16:02:19 -0500 Received: from host-37-191-236-253.lynet.no ([37.191.236.253]:59332 helo=localhost) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1km1Af-0007Ll-HE; Sun, 06 Dec 2020 16:02:18 -0500 From: Marius Bakke To: zimoun , luhux , 45066-done@debbugs.gnu.org Subject: Re: bug#45066: guix environment --container is borken In-Reply-To: <86a6uqamqa.fsf@gmail.com> References: <86a6uqamqa.fsf@gmail.com> Date: Sun, 06 Dec 2020 22:02:14 +0100 Message-ID: <874kky1wdl.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 45066-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable zimoun skriver: > Hi, > > On Sun, 06 Dec 2020 at 16:59, luhux wrote: >> In the new guix `guix environment --container` is borken. > > It is not broken. It was broken. :-) > Have you tried the recommendation? > > --8<---------------cut here---------------start------------->8--- > $ su - > Password:=20 > # echo 1 > /proc/sys/kernel/unprivileged_userns_clone=20 > # logout > > $ guix environment -C --ad-hoc hello -- hello=20 > Hello, world! > --8<---------------cut here---------------end--------------->8--- ...because this only works on the Debian kernel. We need to find a more robust test for user namespaces, but for now I reverted the commit. Closing! Thanks for the report luhux. :-) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFDBAEBCgAtFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAl/NRtYPHG1hcml1c0Bn bnUub3JnAAoJEKKgbfKjOlT6lCoIALELPwC/yU69unv973jNMyFX3VQj/8pBJVMF 0TvoY4oxFEAbPOlq/O/uR45Laq/VdzvdVF8+yx36YFkD05YWZoWqKo9lXK5IVO3a 2lS8me/El0dHoyIEP73/fks5mBSHtZHHBe/+VMgDpI2bnW0pxSimpiT3Sp96HYS7 HszTVR9iLzfQ09F+ZlI17qz4QzUjdUuRuF0z6rU+6ktGWWvYCjh11KVEHNtkQHw+ PUsco8Wtq5/zgBAtYOolkW0jZsGHWmMVIVJA6IDWR0PorObrRr7yuCG+8QrMhbb1 44vUiNHTSH1oYkRxVIVDLAAZetCm1BgmVUAkVtPVgHr6ei6sDUY= =r74s -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Sun Dec 06 19:53:02 2020 Received: (at 45066-done) by debbugs.gnu.org; 7 Dec 2020 00:53:02 +0000 Received: from localhost ([127.0.0.1]:51802 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1km4ly-0006UC-6G for submit@debbugs.gnu.org; Sun, 06 Dec 2020 19:53:02 -0500 Received: from mail-wm1-f44.google.com ([209.85.128.44]:40431) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1km4lw-0006TY-IW for 45066-done@debbugs.gnu.org; Sun, 06 Dec 2020 19:53:01 -0500 Received: by mail-wm1-f44.google.com with SMTP id a3so12131291wmb.5 for <45066-done@debbugs.gnu.org>; Sun, 06 Dec 2020 16:53:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:in-reply-to:references:date:message-id:mime-version :content-transfer-encoding; bh=FFNzGtOKYELzhzNEqW8DPa5Ti8FApAS9jphbczDnN4Y=; b=dbiG8NkM2zrR9GYZzG9oCWjtwvop7StG8aCxi/wlwfSHFnwy2Wi4U7W2+6cIZnym5+ U4y9Ju+drERipSFDUo1bZBDasAK8MmjlJbwL6r+pGiHupV9LnJQX2wIyqsVgDLMYEteG xhX7JBlZ02ZgY/6zsn8FwQAN/Vgar/96GJY7gGCyVTGDsKfD8IAuOpnuZW/joQIuwBF9 3wdpSPMGBnJpN8YbbRPon2D6DoaYuIhyG+VPAJYN7lNoI8I/gJmRhDPWtLRdA2+3UAZG Btj2B9zNuu4Ug4/wnuTscHncd0iLCxU8ZVn3KtvY7RpS5Y1uK0Ri8VQZIr4NpEnmaUCv DWMA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=FFNzGtOKYELzhzNEqW8DPa5Ti8FApAS9jphbczDnN4Y=; b=bH5ExggXFH5NseGbM7YS1kLh1HdxyPypywmG1KRTu874wKFtrc89LGgvbuuRrL2AW8 vm6Djr3UTEwH49LpiLoY5auaJoZGL4GGOyQ2KjnWhqW/xd17cTYpEmtD3SL/TGyrl7df NKJDw8nj9ovbjvgPlXpVhEvywv4ee1402AvRxUzHT8SvZMLkvhWCdvjIfUhiifKgs92U lpAmqr6LGFtSjpE5lWs3tyyN8nVmdhDZNpQKqWgrJXduGE44ty9OqT++UwCRFlkGdwIz miBguKg+TcFwAtBdP3dNBX2JDOVntJ5/KbhHniqfGqoHzMNhAa1o0WJyIaYg6aS+BaDt SJ8w== X-Gm-Message-State: AOAM533ZbS1BQJ12hVu8bjc638Ff1aZIf5k604lbyyomA6Mc5or3vWvH VV/od1b+ygf8s9jD6Wjhymjq8E99bOE= X-Google-Smtp-Source: ABdhPJy7TrFIX/ERL0nHLKrlF+91ufTWxqXaFVQyK89RM9hACSLR4SFcD2I3cPFohWobeWFQvJp1hQ== X-Received: by 2002:a1c:2d8a:: with SMTP id t132mr12659728wmt.128.1607302374847; Sun, 06 Dec 2020 16:52:54 -0800 (PST) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id o13sm11450188wmc.44.2020.12.06.16.52.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 06 Dec 2020 16:52:54 -0800 (PST) From: zimoun To: Marius Bakke , luhux , 45066-done@debbugs.gnu.org Subject: Re: bug#45066: guix environment --container is borken In-Reply-To: <874kky1wdl.fsf@gnu.org> References: <86a6uqamqa.fsf@gmail.com> <874kky1wdl.fsf@gnu.org> Date: Mon, 07 Dec 2020 01:52:23 +0100 Message-ID: <86o8j68mk8.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 45066-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Marius, On Sun, 06 Dec 2020 at 22:02, Marius Bakke wrote: >> Have you tried the recommendation? > It was broken. :-) [...] > ...because this only works on the Debian kernel. Therefore, what does the recommendation mean? From [1] on Guix System: --8<---------------cut here---------------start------------->8--- ~/co/guix (master)$ guix environment -C guix guix environment: error: cannot create container: unprivileged user cannot = create user namespaces guix environment: error: please set /proc/sys/kernel/unprivileged_userns_cl= one to "1" --8<---------------cut here---------------end--------------->8--- 1: > We need to find a more robust test for user namespaces, but for now I > reverted the commit. How do you =C2=ABset /proc/sys/kernel/unprivileged_userns_clone to "1"=C2= =BB on Guix System? BTW, reverting means reopen #31977; I did. All the best, simon From unknown Tue Jun 17 01:33:39 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 03 Feb 2021 12:24:08 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator