GNU bug report logs - #57229
‘guix system image’ forces commit authentication?

Previous Next

To reply to this bug, email your comments to 57229 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Tobias Geerinckx-Rice <me <at> tobias.gr>
To: bug-guix <at> gnu.org
Subject: ‘guix system image’ forces
 commit authentication?
Date: Mon, 15 Aug 2022 21:06:05 +0200

[Message part 1 (text/plain, inline)]

Hi all,

There doesn't seem to be a way to opt out of commit authentication 
with ‘./pre-inst-env guix system image’.  Am I missing (a 
reasonable!) one?

I'd expect all commands that authenticate commits to honour 
‘--disable-authentication’.

--8<---------------cut here---------------start------------->8---
λ ./pre-inst-env guix system image -t iso9660 
gnu/system/install.scm
Updating channel 'guix' from Git repository at 
'/home/nckx/guix/'...
Backtrace:
In guix/gexp.scm:
  898:13 19 (_ _)
In guix/store.scm:
  1996:8 18 (_ _)
In guix/gexp.scm:
  300:22 17 (_ _)
In guix/store.scm:
  1996:8 16 (_ _)
In guix/gexp.scm:
  300:22 15 (_ _)
In guix/store.scm:
  1996:8 14 (_ _)
In guix/packages.scm:
 1876:11 13 (_ _)
In guix/build-system/channel.scm:
    42:2 12 (_ _)
In guix/store.scm:
 2040:38 11 (_ #<store-connection 256.99 7bdb3437a460>)
In guix/channels.scm:
   523:7 10 (loop _ _)
In guix/combinators.scm:
   48:26  9 (fold2 #<procedure 7bdb32ca8120 at 
   guix/channels.scm:523:13 (channel previous-channels 
   instances)> () () (#<<channel> …>))
In guix/channels.scm:
  533:29  8 (_ #<<channel> name: guix url: "/home/nckx/guix/" 
  branch: "master" commit: 
  "43513c4e93740e2a9dc4ca138f8b34434f66e170" …> …)
  421:12  7 (latest-channel-instance #<store-connection 256.99 
  7bdb3437a460> _ #:patches _ #:starting-commit _ #:authenticate? 
  _ # _)
In guix/git.scm:
   299:7  6 (call-with-repository _ #<procedure 7bdb32ca8060 at 
   guix/channels.scm:384:2 (repository)>)
In guix/git-authenticate.scm:
   404:4  5 (authenticate-repository #<git-repository 69e6c0> _ 
   #vu8(187 176 45 223 44 234 246 168 13 29 230 67 162 160 109 
   242 # …) …)
  263:20  4 (load-keyring-from-reference #<git-repository 69e6c0> 
  _)
In git/branch.scm:
   101:8  3 (_ _ _ _)
In git/bindings.scm:
    77:2  2 (raise-git-error _)
In ice-9/boot-9.scm:
 1685:16  1 (raise-exception _ #:continuable? _)
 1685:16  0 (raise-exception _ #:continuable? _)

ice-9/boot-9.scm:1685:16: In procedure raise-exception:
Git error: cannot locate remote-tracking branch 'origin/keyring'

λ ./pre-inst-env guix system image -t iso9660 
gnu/system/install.scm --disable-authentication
guix system: error: disable-authentication: unrecognized option
--8<---------------cut here---------------end--------------->8---

Kind regards,

T G-R

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 57229 <at> debbugs.gnu.org (full text, mbox):

From: Mathieu Othacehe <othacehe <at> gnu.org>
To: Tobias Geerinckx-Rice <me <at> tobias.gr>
Cc: 57229 <at> debbugs.gnu.org
Subject: Re: bug#57229: ‘guix system image’ forces commit authentication?
Date: Tue, 16 Aug 2022 11:02:13 +0200

Hey,

> λ ./pre-inst-env guix system image -t iso9660 
> gnu/system/install.scm --disable-authentication
> guix system: error: disable-authentication: unrecognized option

That's probably a side effect of https://issues.guix.gnu.org/53210 that
includes the "current-guix" inside the installation image instead of the
latest Guix snapshot.

To build "current-guix", we rely on the channel-build-system and
ultimately the latest-channel-instance procedure. This procedure takes an
"authenticate?" argument.

Now passing this option will be tricky as we do not call
latest-channel-instance directly like in (guix scripts pull) but rather
rely on the "current-guix" variable.

I'll think more about it.

Mathieu

Message #11 received at 57229 <at> debbugs.gnu.org (full text, mbox):

From: Janneke Nieuwenhuizen <janneke <at> gnu.org>
To: Mathieu Othacehe <othacehe <at> gnu.org>
Cc: 57229 <at> debbugs.gnu.org, Tobias Geerinckx-Rice <me <at> tobias.gr>
Subject: Re: bug#57229: ‘guix system image’ forces commit authentication?
Date: Wed, 27 Nov 2024 17:37:51 +0100

Mathieu Othacehe writes:

Hello,

>> λ ./pre-inst-env guix system image -t iso9660 
>> gnu/system/install.scm --disable-authentication
>> guix system: error: disable-authentication: unrecognized option
>
> That's probably a side effect of https://issues.guix.gnu.org/53210 that
> includes the "current-guix" inside the installation image instead of the
> latest Guix snapshot.
>
> To build "current-guix", we rely on the channel-build-system and
> ultimately the latest-channel-instance procedure. This procedure takes an
> "authenticate?" argument.
>
> Now passing this option will be tricky as we do not call
> latest-channel-instance directly like in (guix scripts pull) but rather
> rely on the "current-guix" variable.
>
> I'll think more about it.

Just got hit by this

--8<---------------cut here---------------start------------->8---
Git error: cannot locate remote-tracking branch 'origin/keyring'
--8<---------------cut here---------------end--------------->8---

too, working on a fresh clone.  The only way I found around it is by
first doing

   make update-guix

before running "guix sytem image".  This is not required in my old clone
and I cannot figure out the differences between those git trees.  Ideas?

Greetings,
Janneke

PS: I ran guix authenticate ..., did a git fetch origin keyring:keyring,
    even created a keyring worktree.

-- 
Janneke Nieuwenhuizen <janneke <at> gnu.org>  | GNU LilyPond https://LilyPond.org
Freelance IT https://www.JoyOfSource.com | Avatar® https://AvatarAcademy.com

Message #14 received at 57229 <at> debbugs.gnu.org (full text, mbox):

From: Janneke Nieuwenhuizen <janneke <at> gnu.org>
To: Mathieu Othacehe <othacehe <at> gnu.org>
Cc: 57229 <at> debbugs.gnu.org, Tobias Geerinckx-Rice <me <at> tobias.gr>
Subject: Re: bug#57229: ‘guix system image’ forces commit authentication?
Date: Wed, 27 Nov 2024 19:01:57 +0100

Janneke Nieuwenhuizen writes:

Hi!

> Mathieu Othacehe writes:
>
> Hello,
>
>>> λ ./pre-inst-env guix system image -t iso9660 
>>> gnu/system/install.scm --disable-authentication
>>> guix system: error: disable-authentication: unrecognized option
>>
>> That's probably a side effect of https://issues.guix.gnu.org/53210 that
>> includes the "current-guix" inside the installation image instead of the
>> latest Guix snapshot.
>>
>> To build "current-guix", we rely on the channel-build-system and
>> ultimately the latest-channel-instance procedure. This procedure takes an
>> "authenticate?" argument.
>>
>> Now passing this option will be tricky as we do not call
>> latest-channel-instance directly like in (guix scripts pull) but rather
>> rely on the "current-guix" variable.
>>
>> I'll think more about it.
>
> Just got hit by this
>
> Git error: cannot locate remote-tracking branch 'origin/keyring'
>
> too, working on a fresh clone.  The only way I found around it is by
> first doing
>
>    make update-guix
>
> before running "guix sytem image".  This is not required in my old clone
> and I cannot figure out the differences between those git trees.  Ideas?

Here's a workaround:

--8<---------------cut here---------------start------------->8---
18:58:11 janneke <at> glimdal:~/src/guix/master 
$ guix pull --url=$PWD
18:58:11 janneke <at> glimdal:~/src/guix/master 
./pre-inst-env guix system image --image-type=iso9660 \
   --system=i686-linux gnu/system/install.scm
--8<---------------cut here---------------end--------------->8---

not great, but at least I can build system images.  And it should
(might?) give a clue to a nicer solution.

Greetings,
Janneke

-- 
Janneke Nieuwenhuizen <janneke <at> gnu.org>  | GNU LilyPond https://LilyPond.org
Freelance IT https://www.JoyOfSource.com | Avatar® https://AvatarAcademy.com

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.