From unknown Wed Jul 09 00:18:05 2025 X-Loop: help-debbugs@gnu.org Subject: bug#47092: Icecat sandbox causes issues with fonts in --pure env Resent-From: Martin Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 12 Mar 2021 09:05:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 47092 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 47092@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.161553985027494 (code B ref -1); Fri, 12 Mar 2021 09:05:01 +0000 Received: (at submit) by debbugs.gnu.org; 12 Mar 2021 09:04:10 +0000 Received: from localhost ([127.0.0.1]:56013 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKdiM-00079O-9b for submit@debbugs.gnu.org; Fri, 12 Mar 2021 04:04:10 -0500 Received: from lists.gnu.org ([209.51.188.17]:40120) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKdiK-00079G-06 for submit@debbugs.gnu.org; Fri, 12 Mar 2021 04:04:08 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:47338) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lKdiI-0002eK-8e for bug-guix@gnu.org; Fri, 12 Mar 2021 04:04:07 -0500 Received: from knopi.disroot.org ([178.21.23.139]:42354) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lKdiF-0001NN-SS for bug-guix@gnu.org; Fri, 12 Mar 2021 04:04:05 -0500 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 9C02A579E0 for ; Fri, 12 Mar 2021 10:03:59 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fkmx5F-lZwEU for ; Fri, 12 Mar 2021 10:03:58 +0100 (CET) From: Martin DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1615539838; bh=1WyGYcmjL4Dicz5hZwJstj1fPtiwkKBG0+tqS/omYN0=; h=From:To:Subject:Date; b=Kf3Wa0BvU2RWPRG1EV6E047TE9O/EvF+/Dij4AWA7B2/tqo2Tgoc/fT4omR+Q6g7s G3wkmAKo3I2nie3RokN0IVjBS7yxB0P5G8Fy9quGiSBWIpmwmZwdluB5M5WjhZVCcP DXqawd3bqh9V4H9HESR/vnWK1v1AAnReTLDqNOzkeDwpg31JvadlbQlXSsriPNerlp jU/V7/ZXkO0i7bGyEgNkWu6vFiDHY5N86Y/egpQBoV4n0ocbGuzv8BPANGpvK0URKf tcJ/5kDu9WoS6wx3zCF2x0L/PYGExpCZEy2a9MJJITp0pxebmNjmH7cnbUcsVmjOsz uWK1scLSyY7KQ== Message-ID: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> Date: Fri, 12 Mar 2021 09:03:57 +0000 Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Content-Language: en-US Received-SPF: pass client-ip=178.21.23.139; envelope-from=smartin@disroot.org; helo=knopi.disroot.org X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Hello, whenever I'm trying to run 'guix environment --pure --ad-hoc icecat --=20 icecat' or similar commands in a --container I'm ending up with some=20 tofu ugly font fallback box glyphs in the app. However everything works=20 fine running 'guix environment --ad-hoc icecat -- icecat'. Moreover I've = noticed that when I edit the default value of=20 "security.sandbox.content.level" from 4 to 2 in "about:config" then the=20 problem disappear and the fonts are properly displayed in --pure and=20 --container env. I was trying to install all possible fonts, running=20 'fc-cache -rfv' and analyze the icecat logs with "MOZ_SANDBOX_LOGGING=3D1= "=20 to include blocking paths into the=20 "security.sandbox.content.read_path_whitelist" but still I couldn't fix=20 this issue with the icecat default sandbox level. Any ideas how to solve = it in Guix System and what are the side effects of using=20 "security.sandbox.content.level=3D2" in --pure env? Kind regards! Martin security.sandbox.content.read_path_whitelist From unknown Wed Jul 09 00:18:05 2025 X-Loop: help-debbugs@gnu.org Subject: bug#47092: Icecat sandbox causes issues with fonts in --pure env Resent-From: zimoun Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 12 Mar 2021 09:59:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47092 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Martin , 47092@debbugs.gnu.org Received: via spool by 47092-submit@debbugs.gnu.org id=B47092.161554313532440 (code B ref 47092); Fri, 12 Mar 2021 09:59:02 +0000 Received: (at 47092) by debbugs.gnu.org; 12 Mar 2021 09:58:55 +0000 Received: from localhost ([127.0.0.1]:56067 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKeZK-0008RA-Sj for submit@debbugs.gnu.org; Fri, 12 Mar 2021 04:58:55 -0500 Received: from mail-wm1-f44.google.com ([209.85.128.44]:51847) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKeZI-0008Qx-H7 for 47092@debbugs.gnu.org; Fri, 12 Mar 2021 04:58:52 -0500 Received: by mail-wm1-f44.google.com with SMTP id l19so3420199wmh.1 for <47092@debbugs.gnu.org>; Fri, 12 Mar 2021 01:58:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:in-reply-to:references:date:message-id:mime-version :content-transfer-encoding; bh=tj0UCJgYDzRmzumOVZ+bOAnSfZsQLoQkXrTVkJJv26s=; b=fHp3vl9owU1aW4wdOfnO4YpgtBr2MxNkcoFM4X4abEoQp/hTtP+IsWzvfu3npGGc5O ARMp+IZK0H9Nl91f+Whlk9DYM5smSa0wynrHu76V4FjOsUGld6axgYsYrsaMKONnD57+ YBYQSoyGEpE851rfwWlc7Q+JUeECvAn17XJoF3d/uVxmUWU9urgkutsVXpBcdRtWCE6W +RPo7O7VKTE5yGZnlgtP/DwnsjD5CuyxmNeecwxZc826C/qrKXJ2YPz7/GAGH9lY8amk oW5znKXYN4BpmjPO7gbMH+PprNub1V70SA7bTYOEtsprPCeJsE5ghRpqdK0LcQCdgE4b gFuQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=tj0UCJgYDzRmzumOVZ+bOAnSfZsQLoQkXrTVkJJv26s=; b=UWeHjUd2+ZdeKMEFIvlFP9wemGVdQgm0uiczRUYKA1C9l6h/AK0fQgvuj3lHiMqoFR xhEYqBvldLu9TcoqAxDIpATJAHCWsy49kBckb8urbCwRmAGbMOg7yxj9DbI6LMU5HvFQ 5pGU9X6epcN4PCRqnl/Y26Q8d4NZo3J3Krvez1BhMjQp/CMCY7tl4czrT16xxOP8ql6s gcxvR2sxlvD3T3Nppl8fRzx0sI7hD7qo1wUz2/RFUb32Or3yZbLT9jJkC0JE7yL558JC nF+9mlgzYh6ArDSJHeeSwSMBSiay61fwiu8a/2nXC2Vkr5TC/tr0Og0uyhExRtKnqdyL 4KCQ== X-Gm-Message-State: AOAM5337ySH2JiU1BvAdI+dpWC4u3Z69RMd5VIrc7naTSnOKyGq5rdui lc+JN74VKDEWnamjjCOC5bnxLW9SgO8= X-Google-Smtp-Source: ABdhPJzh05Nd9L6NHfmACVIsYv8lhHeQjEARlNArtJHjJKzGmN7/eVbTQdD0nfyYb4sp/7x9BGAfnQ== X-Received: by 2002:a1c:c282:: with SMTP id s124mr12187626wmf.99.1615543126673; Fri, 12 Mar 2021 01:58:46 -0800 (PST) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id l21sm1596473wmg.41.2021.03.12.01.58.45 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 12 Mar 2021 01:58:46 -0800 (PST) From: zimoun In-Reply-To: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> References: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> Date: Fri, 12 Mar 2021 10:53:05 +0100 Message-ID: <86sg50itq6.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, The example about =E2=80=99eolie=E2=80=99 adapted to your usecase, does it = not work? See: All the best, simon From unknown Wed Jul 09 00:18:05 2025 X-Loop: help-debbugs@gnu.org Subject: bug#47092: Icecat sandbox causes issues with fonts in --pure env Resent-From: Martin Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 12 Mar 2021 10:16:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47092 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 47092@debbugs.gnu.org Received: via spool by 47092-submit@debbugs.gnu.org id=B47092.16155441321674 (code B ref 47092); Fri, 12 Mar 2021 10:16:02 +0000 Received: (at 47092) by debbugs.gnu.org; 12 Mar 2021 10:15:32 +0000 Received: from localhost ([127.0.0.1]:56091 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKepQ-0000Qv-E4 for submit@debbugs.gnu.org; Fri, 12 Mar 2021 05:15:32 -0500 Received: from knopi.disroot.org ([178.21.23.139]:43644) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKepN-0000Ql-Mq for 47092@debbugs.gnu.org; Fri, 12 Mar 2021 05:15:30 -0500 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 099685799A for <47092@debbugs.gnu.org>; Fri, 12 Mar 2021 11:15:28 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yFmyFSUT1tpN for <47092@debbugs.gnu.org>; Fri, 12 Mar 2021 11:15:26 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1615544125; bh=SJjPfPZtqkM4EtbYJ4QFIe/9dGsmrL57vD+dHivQ1bk=; h=Subject:To:References:From:Date:In-Reply-To; b=bW+eAT+Ju7g27WU8OWKvdIKFUfH2OMeM0jhq7hAy5M567C7z4tCNdgyvHYmV9GsqN 8cLRfK27OgxccCnHh9tB7OJnhyl5iJR5HTQgEK1JzNM132W3UTB2cLMOsh8qFAPObH qAr7Lyx8Anhwg+1Hwg2Eb0aS9ZOpqQ1fTmE/h73B/nSczhnM8jrtAsTETCL+zXIgOl ukWJIT65Bdx3+F+d4zYlW5mliRuuf/I3TD4ILSnha4ALEj0FOoVQo9CdjuB/kvZeSY FjWWYFrNwe2CzyFN1sYtDTzlzgwBL37nXV0mzY9Yg+gsnY9Q6VVbpKNbGMByUcvK// x3UEeEHff1ilg== References: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> <86sg50itq6.fsf@gmail.com> From: Martin Message-ID: <07e5c494-0bc7-47fd-ab0a-8884b88f7275@disroot.org> Date: Fri, 12 Mar 2021 10:15:25 +0000 Mime-Version: 1.0 In-Reply-To: <86sg50itq6.fsf@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Simon, no it doesn't help in this case and in general eolie package seems to be broken because it doesn't work even with the simple 'guix environment --ad-hoc eolie --  eolie': Traceback (most recent call last):   File "/gnu/store/w47sa5q3vki5siwk5lb62ld4ksxa5gcn-eolie-0.9.101/bin/.eolie-real", line 20, in     from eolie.application import Application   File "/gnu/store/w47sa5q3vki5siwk5lb62ld4ksxa5gcn-eolie-0.9.101/lib/python3.8/site-packages/eolie/application.py", line 19, in     gi.require_version("Handy", "1")   File "/gnu/store/597f7p79vyxjhwsv2qqnn76hx107xgj1-python-pygobject-3.34.0/lib/python3.8/site-packages/gi/__init__.py", line 129, in require_version     raise ValueError('Namespace %s not available' % namespace) ValueError: Namespace Handy not available Kind regards! Martin On 3/12/21 9:53 AM, zimoun wrote: > Hi, > > The example about ’eolie’ adapted to your usecase, does it not work? > > See: > > > > All the best, > simon From unknown Wed Jul 09 00:18:05 2025 X-Loop: help-debbugs@gnu.org Subject: bug#47092: Icecat sandbox causes issues with fonts in --pure env Resent-From: zimoun Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 12 Mar 2021 10:32:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47092 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Martin , 47092@debbugs.gnu.org Received: via spool by 47092-submit@debbugs.gnu.org id=B47092.16155451143439 (code B ref 47092); Fri, 12 Mar 2021 10:32:02 +0000 Received: (at 47092) by debbugs.gnu.org; 12 Mar 2021 10:31:54 +0000 Received: from localhost ([127.0.0.1]:56108 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKf5F-0000tP-Up for submit@debbugs.gnu.org; Fri, 12 Mar 2021 05:31:54 -0500 Received: from mail-wm1-f44.google.com ([209.85.128.44]:46785) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKf5E-0000tA-9p for 47092@debbugs.gnu.org; Fri, 12 Mar 2021 05:31:53 -0500 Received: by mail-wm1-f44.google.com with SMTP id d139-20020a1c1d910000b029010b895cb6f2so14861170wmd.5 for <47092@debbugs.gnu.org>; Fri, 12 Mar 2021 02:31:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:in-reply-to:references:date:message-id:mime-version :content-transfer-encoding; bh=8HlaSMUujBucBkbYRj+elL6j0soL5MOu3haE96nXsK8=; b=oK/TZ/jlNhqnxM93k5YJvvNqJi0A9q0SlzMl/2aef6TpkHEaEp5wYCFgJLU5AFwSHV VC0RkAGx7+H9r+TtlUtLKtAByvzk/L0/x3pMZVDsQa8gl0HJQrE6TX56XpK7qA+7ruim ov4FINQN21zKjC/nvBAsaIKP/KYCCMUzNHGN62uf9rj1f8FNDX65IA5c+iwXRr/tHo8i XKBxTT9WDEj0+MsMpsjzbBsqHtzYad8t9p6GoCXADQ3IWHpAUlgJfJwhk5rjlRr060Q4 Du2m4cFFbVQQJrchOBPgYwMP83S4/1Vl1s8+6c9As7yJYJWk9AKkP+a6xENGmzLSHTjc uEUQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=8HlaSMUujBucBkbYRj+elL6j0soL5MOu3haE96nXsK8=; b=ndUKWVY4MZ+735h0KYNkhzAgkaV8jjVxgIz9IcvEoHpzMsMnNZZpA2Z/bIAlPjWF3B N3YxA0L2VhivJAWU6FDjVaLOpRYRSHuVxB2VUXJ0YCCqr7S2YpxPg8I1iW0j3JQ0iAVk yJSMX58xslOvJ8CHaq3DYnj8BAqKPe1hAixfiIbsvr9FzlQNpMcUmDGQosg0uTTbzLBl 14Q+ptEIkKw1COV4H+1t3Fbdx88RQXYGN0q6qBFggE/Qb8F7yIm/MmlmxjV6T+ApNisP ZqVrhEl+4OsO5BvwqS4tLxiwnm6WFYgziZzM+46CAO3ckLBq2oVer3+mnimHgMU9KD8Z 0Zdg== X-Gm-Message-State: AOAM530438tq13CQYPKF2x2wOmLMMJia9aZ88o4DixH4d1YLsFhHWMAT e5nfhvnh3eo+eg98RIga/gPk0wTef7Y= X-Google-Smtp-Source: ABdhPJyj3TyQxPY3HfZzSSl3iEC7mWjjUZP9gPxtVwQ+NH0lEzsT3KUpQRNcc5pzBVv6isUTQ6MhCw== X-Received: by 2002:a7b:c308:: with SMTP id k8mr12240761wmj.54.1615545106271; Fri, 12 Mar 2021 02:31:46 -0800 (PST) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id d204sm1715218wmc.17.2021.03.12.02.31.45 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 12 Mar 2021 02:31:45 -0800 (PST) From: zimoun In-Reply-To: References: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> <86sg50itq6.fsf@gmail.com> Date: Fri, 12 Mar 2021 11:21:38 +0100 Message-ID: <86lfasisel.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, For discussion, please CC the bug. On Fri, 12 Mar 2021 at 10:14, Martin wrote: > Hi Simon, > no it doesn't help in this case and in general eolie package seems to be= =20 > broken because it doesn't work even with the simple 'guix environment=20 > --ad-hoc eolie --=C2=A0 eolie': The manual example is: --8<---------------cut here---------------start------------->8--- guix environment --preserve=3D'^DISPLAY$' --container --network \ --expose=3D/etc/machine-id \ --expose=3D/etc/ssl/certs/ \ --share=3D$HOME/.local/share/eolie/=3D$HOME/.local/share/eolie/ \ --ad-hoc eolie nss-certs dbus -- eolie --8<---------------cut here---------------end--------------->8--- from Does it not work for you? Then it should be adapted for your use-case. All the best, simon From unknown Wed Jul 09 00:18:05 2025 X-Loop: help-debbugs@gnu.org Subject: bug#47092: Icecat sandbox causes issues with fonts in --pure env Resent-From: zimoun Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 12 Mar 2021 10:54:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47092 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Martin , 47092@debbugs.gnu.org Received: via spool by 47092-submit@debbugs.gnu.org id=B47092.16155464345779 (code B ref 47092); Fri, 12 Mar 2021 10:54:02 +0000 Received: (at 47092) by debbugs.gnu.org; 12 Mar 2021 10:53:54 +0000 Received: from localhost ([127.0.0.1]:56139 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKfQY-0001V9-46 for submit@debbugs.gnu.org; Fri, 12 Mar 2021 05:53:54 -0500 Received: from mail-wm1-f43.google.com ([209.85.128.43]:55813) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKfQW-0001Ut-5X for 47092@debbugs.gnu.org; Fri, 12 Mar 2021 05:53:52 -0500 Received: by mail-wm1-f43.google.com with SMTP id o26so3523630wmc.5 for <47092@debbugs.gnu.org>; Fri, 12 Mar 2021 02:53:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:in-reply-to:references:date:message-id:mime-version :content-transfer-encoding; bh=G74oaVBVt3BaejbRlXOGzhg/CDB0YhWm/gFFvoerXk4=; b=idg3n2G6kQvPc6M3OluI+H9RHi8kKM/DvJzM4Tz5t+tRmWOT6BFJwVUaiDx+SWp9+i Etxhe3bHcALJiu/nPn3F85Yy+ZaW7PT0u34eYqSaCFq/KxkV1P/4sHKkWaFi4yM/sMzi yDip6mxp8UipY7XQgHm89uAW/KRUvemhvS5vsZNj5ZK5b5lp6a4sDCCgu2ijR0FybacS CLr8zj5Wbu2AOLnNAxUlGiqo0H0yc2R+12JrXxoEw+DKlDTsm83qHow1o9MaK0xd17m9 AV1X8vPKVVV3EypvDJuUC0IHe/YEUV5yrb0d4uZpAMTPLrG/9FbCo6Fsl0setvlzB3aZ 9kjw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:in-reply-to:references:date :message-id:mime-version:content-transfer-encoding; bh=G74oaVBVt3BaejbRlXOGzhg/CDB0YhWm/gFFvoerXk4=; b=fWbIumX56RDElRC2yTgD9bV7LeU/VIYwv7cKsSXb74OQhRSiF1xZqgiz8nRT99bSQb RLdGS9Y+BYKmDZ0QjyEXgQgZTMe7F0C9jPa+VIiIds13dV4zxjQ17r1lYkfBlRyOKGv1 8m/04tZvMucdyLodo8/2UhYC3avs6C294JUGoy42pmG0YVmYjHWSkgs2XDEmNiM4XrTH agsuSge0Ysru23nn8QlPjR/a7MASeHHjBID578dVcANiPKEDnSrL+xJDcYIugAcWOx6B VHjfE/q1AF5Qz+B/7XKJFOEwq8bT/bZBhf4ER7HB2G5KCQMV2w+59X/r6ReAnqkM9S5z WqUQ== X-Gm-Message-State: AOAM531Msg45VDone5l6qJtyxIl76LJIgMacP1fjawpK0RlOIfJWBwdY nx3+SEwbBzU8Kt2xNV2h7IzYKr8tij4= X-Google-Smtp-Source: ABdhPJyv2V6U8a6ePTUJ8eQRzDcnwUP+x7gLm70AY9GodXQ2L/bLGhPWUttKsBJpe8dA2MhJmu86+A== X-Received: by 2002:a7b:cc85:: with SMTP id p5mr12634378wma.148.1615546426489; Fri, 12 Mar 2021 02:53:46 -0800 (PST) Received: from lili ([2a01:e0a:59b:9120:65d2:2476:f637:db1e]) by smtp.gmail.com with ESMTPSA id v18sm7619008wru.85.2021.03.12.02.53.45 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 12 Mar 2021 02:53:46 -0800 (PST) From: zimoun In-Reply-To: <07e5c494-0bc7-47fd-ab0a-8884b88f7275@disroot.org> References: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> <86sg50itq6.fsf@gmail.com> <07e5c494-0bc7-47fd-ab0a-8884b88f7275@disroot.org> Date: Fri, 12 Mar 2021 11:51:30 +0100 Message-ID: <86im5wir0t.fsf@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, On Fri, 12 Mar 2021 at 10:15, Martin via Bug reports for GNU Guix wrote: > no it doesn't help in this case and in general eolie package seems to be= =20 > broken because it doesn't work even with the simple 'guix environment=20 > --ad-hoc eolie --=C2=A0 eolie': Indeed, the package eolie is broken; which is another issue=E2=80=93and BTW thanks for pointing this out. Back to your initial report about icecat, what about something like that: --8<---------------cut here---------------start------------->8--- guix environment --preserve=3D'^DISPLAY$' --container --network \ --expose=3D/etc/machine-id \ --expose=3D/etc/ssl/certs/ \ --share=3D$HOME/.local/share/icecat/=3D$HOME/.local/share/icecat/ \ --ad-hoc icecat nss-certs dbus -- icecat --8<---------------cut here---------------end--------------->8--- All the best, simon From unknown Wed Jul 09 00:18:05 2025 X-Loop: help-debbugs@gnu.org Subject: bug#47092: Icecat sandbox causes issues with fonts in --pure env Resent-From: Martin Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 12 Mar 2021 11:11:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47092 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: zimoun , 47092@debbugs.gnu.org Received: via spool by 47092-submit@debbugs.gnu.org id=B47092.16155474047509 (code B ref 47092); Fri, 12 Mar 2021 11:11:02 +0000 Received: (at 47092) by debbugs.gnu.org; 12 Mar 2021 11:10:04 +0000 Received: from localhost ([127.0.0.1]:56159 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKfgB-0001x3-No for submit@debbugs.gnu.org; Fri, 12 Mar 2021 06:10:03 -0500 Received: from knopi.disroot.org ([178.21.23.139]:43110) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKfg9-0001wX-QV for 47092@debbugs.gnu.org; Fri, 12 Mar 2021 06:10:02 -0500 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 6B4BD579C8; Fri, 12 Mar 2021 12:10:00 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x6vEprOyeUZB; Fri, 12 Mar 2021 12:09:59 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1615547398; bh=RuUh4BoLHdDtFKHnuvKwqsPQcIZ9FcVLlJA2M/qgWXY=; h=To:References:From:Subject:Date:In-Reply-To; b=W3bHQLSik9Vri9R9dLTWOvkCS6qPB0l08nm0IlQOCeLLbVF9zdF6rI0gal/XeY4Yq u+5HKD2jsKVBONHRki7sQTa6jF4TgnWwV9AMogfqvLjx4sCb6tG3qv4M3rXC0x1Bi9 mjZjlpPL868qjjpcwcZrKAFNC8jp4SO5gLEgrhOtWxe0bA53koFcAdnNUCubK3q0Wn SkjGR0ovcxhij/d2N5deyPfoiWmNIP7X4mrSpcISP1T3fJNtrJs18z40Qu/hy9tuj3 0exYM6IS5ycXO42NRR5EZKnK0TAaULObnv8XrXC71SZIJs7/kDbo2bbK7VVaYOJab0 tvlBfkpr6qSug== References: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> <86sg50itq6.fsf@gmail.com> <07e5c494-0bc7-47fd-ab0a-8884b88f7275@disroot.org> <86im5wir0t.fsf@gmail.com> From: Martin Message-ID: <08906e6f-ea39-e1c6-b16e-72a7768a5960@disroot.org> Date: Fri, 12 Mar 2021 11:09:58 +0000 Mime-Version: 1.0 In-Reply-To: <86im5wir0t.fsf@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Content-Language: en-US X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) On 3/12/21 10:51 AM, zimoun wrote: > Indeed, the package eolie is broken; which is another issue=E2=80=93and= BTW > thanks for pointing this out. Back to your initial report about icecat= , > what about something like that: > > --8<---------------cut here---------------start------------->8--- > guix environment --preserve=3D'^DISPLAY$' --container --network \ > --expose=3D/etc/machine-id \ > --expose=3D/etc/ssl/certs/ \ > --share=3D$HOME/.local/share/icecat/=3D$HOME/.local/share/icecat/= \ > --ad-hoc icecat nss-certs dbus -- icecat > --8<---------------cut here---------------end--------------->8--- It's still not relevant to my issue. To run icecat using your example=20 you should change one parameter to=20 "--share=3D$HOME/.mozilla=3D$HOME/.mozilla" but again with the default=20 "security.sandbox.content.level=3D4" the fonts will be tofued. I think=20 once the issue could be fixed with simpler command, i.e. 'guix=20 environment --pure --ad-hoc icecat -- icecat' than it would be easier to = port the solution on the --container case. Kind regards! Martin From unknown Wed Jul 09 00:18:05 2025 X-Loop: help-debbugs@gnu.org Subject: bug#47092: Icecat sandbox causes issues with fonts in --pure env References: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> In-Reply-To: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> Resent-From: Martin Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 28 Oct 2021 11:16:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47092 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 47092@debbugs.gnu.org Received: via spool by 47092-submit@debbugs.gnu.org id=B47092.16354197094362 (code B ref 47092); Thu, 28 Oct 2021 11:16:02 +0000 Received: (at 47092) by debbugs.gnu.org; 28 Oct 2021 11:15:09 +0000 Received: from localhost ([127.0.0.1]:51470 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mg3NE-00017z-KW for submit@debbugs.gnu.org; Thu, 28 Oct 2021 07:15:08 -0400 Received: from knopi.disroot.org ([178.21.23.139]:51672) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mg3NC-00014C-KY for 47092@debbugs.gnu.org; Thu, 28 Oct 2021 07:15:07 -0400 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 2D6BF6DE32 for <47092@debbugs.gnu.org>; Thu, 28 Oct 2021 13:15:05 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OnuLzsLgTGqj for <47092@debbugs.gnu.org>; Thu, 28 Oct 2021 13:15:04 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1635419703; bh=lwSPWEiPs+GnDNGNAr1+bA4irS3Y/jVVYeKisXuv3Js=; h=To:From:Subject:Date; b=CyNjRM3Hyvx56zuQ9uspa8oVjqRRq2IvZX1UTy4psfQE/oM5m+cIJBvtLRfmkrYCH mIzYGOKW83LA0i59QmBFahVyxagb8ugYsJaxFtVXP6bqqAvGBweU1lk1PVRV6sq3Qu 3PGegiJkxocoMgXpmcpp62Ij0ZBqbtiwe2UoNYcdC1pka74IhtwOTXOcR1ClXQQkKo ptGDJNWwGQ82wCzbs+PUCRMJhlbRUPOT8KvhzgIZTPF22b0iVh07B9eDQjib9YcSiV jNuspVQb18a1l2H4Vij3/NebtQlOLqvEwQL296j1Qr78qNpmT6qJVIFgVdQ0Ezt5Fz sd754pXyOQomw== From: Martin Message-ID: <09f18b9b-6023-344d-e083-d6c5e921bfa9@disroot.org> Date: Thu, 28 Oct 2021 11:15:03 +0000 Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Problem fixed with the newest IceCat v91.2.0-guix0-preview1 in the  guix c1ca853     repository URL: https://git.savannah.gnu.org/git/guix.git     branch: master     commit: c1ca85323d5246fc805a31e03b4164b8da08e930 From unknown Wed Jul 09 00:18:05 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Martin Subject: bug#47092: closed (Re: bug#47092: Icecat sandbox causes issues with fonts in --pure env) Message-ID: References: <878rydvvay.fsf@netris.org> <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> X-Gnu-PR-Message: they-closed 47092 X-Gnu-PR-Package: guix Reply-To: 47092@debbugs.gnu.org Date: Thu, 28 Oct 2021 18:52:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1635447122-3754-1" This is a multi-part message in MIME format... ------------=_1635447122-3754-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #47092: Icecat sandbox causes issues with fonts in --pure env which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 47092@debbugs.gnu.org. --=20 47092: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D47092 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1635447122-3754-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 47092-done) by debbugs.gnu.org; 28 Oct 2021 18:51:23 +0000 Received: from localhost ([127.0.0.1]:53188 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mgAUl-0000xh-Hz for submit@debbugs.gnu.org; Thu, 28 Oct 2021 14:51:23 -0400 Received: from world.peace.net ([64.112.178.59]:46910) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mgAUg-0000xP-Gi for 47092-done@debbugs.gnu.org; Thu, 28 Oct 2021 14:51:22 -0400 Received: from mhw by world.peace.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1mgAUa-0003Jf-3C; Thu, 28 Oct 2021 14:51:12 -0400 From: Mark H Weaver To: Martin , 47092-done@debbugs.gnu.org Subject: Re: bug#47092: Icecat sandbox causes issues with fonts in --pure env In-Reply-To: <09f18b9b-6023-344d-e083-d6c5e921bfa9@disroot.org> References: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> <09f18b9b-6023-344d-e083-d6c5e921bfa9@disroot.org> Date: Thu, 28 Oct 2021 14:49:14 -0400 Message-ID: <878rydvvay.fsf@netris.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 47092-done X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Martin via Bug reports for GNU Guix writes: > Problem fixed with the newest IceCat v91.2.0-guix0-preview1 in the > =C2=A0guix c1ca853 > =C2=A0=C2=A0=C2=A0 repository URL: https://git.savannah.gnu.org/git/guix= .git > =C2=A0=C2=A0=C2=A0 branch: master > =C2=A0=C2=A0=C2=A0 commit: c1ca85323d5246fc805a31e03b4164b8da08e930 Thanks for letting us know! I'm closing this bug now. Regards, Mark --=20 Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about . ------------=_1635447122-3754-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 12 Mar 2021 09:04:10 +0000 Received: from localhost ([127.0.0.1]:56013 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKdiM-00079O-9b for submit@debbugs.gnu.org; Fri, 12 Mar 2021 04:04:10 -0500 Received: from lists.gnu.org ([209.51.188.17]:40120) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lKdiK-00079G-06 for submit@debbugs.gnu.org; Fri, 12 Mar 2021 04:04:08 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:47338) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lKdiI-0002eK-8e for bug-guix@gnu.org; Fri, 12 Mar 2021 04:04:07 -0500 Received: from knopi.disroot.org ([178.21.23.139]:42354) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lKdiF-0001NN-SS for bug-guix@gnu.org; Fri, 12 Mar 2021 04:04:05 -0500 Received: from localhost (localhost [127.0.0.1]) by disroot.org (Postfix) with ESMTP id 9C02A579E0 for ; Fri, 12 Mar 2021 10:03:59 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at disroot.org Received: from knopi.disroot.org ([127.0.0.1]) by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fkmx5F-lZwEU for ; Fri, 12 Mar 2021 10:03:58 +0100 (CET) From: Martin DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail; t=1615539838; bh=1WyGYcmjL4Dicz5hZwJstj1fPtiwkKBG0+tqS/omYN0=; h=From:To:Subject:Date; b=Kf3Wa0BvU2RWPRG1EV6E047TE9O/EvF+/Dij4AWA7B2/tqo2Tgoc/fT4omR+Q6g7s G3wkmAKo3I2nie3RokN0IVjBS7yxB0P5G8Fy9quGiSBWIpmwmZwdluB5M5WjhZVCcP DXqawd3bqh9V4H9HESR/vnWK1v1AAnReTLDqNOzkeDwpg31JvadlbQlXSsriPNerlp jU/V7/ZXkO0i7bGyEgNkWu6vFiDHY5N86Y/egpQBoV4n0ocbGuzv8BPANGpvK0URKf tcJ/5kDu9WoS6wx3zCF2x0L/PYGExpCZEy2a9MJJITp0pxebmNjmH7cnbUcsVmjOsz uWK1scLSyY7KQ== To: bug-guix@gnu.org Subject: Icecat sandbox causes issues with fonts in --pure env Message-ID: <984f327f-c850-1a41-cfd5-367918d18f23@disroot.org> Date: Fri, 12 Mar 2021 09:03:57 +0000 Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Content-Language: en-US Received-SPF: pass client-ip=178.21.23.139; envelope-from=smartin@disroot.org; helo=knopi.disroot.org X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Hello, whenever I'm trying to run 'guix environment --pure --ad-hoc icecat --=20 icecat' or similar commands in a --container I'm ending up with some=20 tofu ugly font fallback box glyphs in the app. However everything works=20 fine running 'guix environment --ad-hoc icecat -- icecat'. Moreover I've = noticed that when I edit the default value of=20 "security.sandbox.content.level" from 4 to 2 in "about:config" then the=20 problem disappear and the fonts are properly displayed in --pure and=20 --container env. I was trying to install all possible fonts, running=20 'fc-cache -rfv' and analyze the icecat logs with "MOZ_SANDBOX_LOGGING=3D1= "=20 to include blocking paths into the=20 "security.sandbox.content.read_path_whitelist" but still I couldn't fix=20 this issue with the icecat default sandbox level. Any ideas how to solve = it in Guix System and what are the side effects of using=20 "security.sandbox.content.level=3D2" in --pure env? Kind regards! Martin security.sandbox.content.read_path_whitelist ------------=_1635447122-3754-1--