From debbugs-submit-bounces@debbugs.gnu.org Sat Mar 25 10:27:18 2023 Received: (at submit) by debbugs.gnu.org; 25 Mar 2023 14:27:18 +0000 Received: from localhost ([127.0.0.1]:43198 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pg4rV-0008VI-Ra for submit@debbugs.gnu.org; Sat, 25 Mar 2023 10:27:18 -0400 Received: from lists.gnu.org ([209.51.188.17]:37430) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1pg4rT-0008VA-P5 for submit@debbugs.gnu.org; Sat, 25 Mar 2023 10:27:16 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1pg4rT-0004W7-7H for bug-guix@gnu.org; Sat, 25 Mar 2023 10:27:15 -0400 Received: from mout-p-201.mailbox.org ([80.241.56.171]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1pg4rQ-0005as-TX for bug-guix@gnu.org; Sat, 25 Mar 2023 10:27:14 -0400 Received: from smtp202.mailbox.org (unknown [10.196.197.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-201.mailbox.org (Postfix) with ESMTPS id 4PkLk56F1cz9sTc for ; Sat, 25 Mar 2023 15:17:01 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=6xq.net; s=MBO0001; t=1679753821; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type; bh=bRNuC3YoZoEPTuFZ1xfYTmASDUvAlObZ1LY7MqL/U7A=; b=ORmfyQNyivbmPSgE052MP/5bkOVQT8HkjlWZyiWFTTWxgGJJugOT3XHEHdKPV1kkddaX6X ulcsaT22VlS3EOYpHUyRpszeaRDkTEODVFZrPOLmvNWiUdspV458RZ0WzwRlL/MNi0b58Y 2BpYPJTG5fk57qKC1HgHFdn3roWtheEhdO9hzQjQJBilgshVh4fWw29La48ePgcMhQS5JX CycEeS3ILCtbxDXgQdfQ05KEkpq1I6RK0yFmarHDoOhQtS9dgLW9NT7qXCs8R7Roh6oJmm By51+/mtlaflF2Ri2bN34AjpFTBgjz7Srtj2qcLmlp/Mhgiay+fkH4IRc+1Bkw== Date: Sat, 25 Mar 2023 15:16:59 +0100 From: Lars-Dominik Braun To: bug-guix@gnu.org Subject: Latest Guix binary download permission issues Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Received-SPF: pass client-ip=80.241.56.171; envelope-from=lars@6xq.net; helo=mout-p-201.mailbox.org X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.6 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.6 (--) Hi, as noted in [1] the latest Guix binary (tar.xz) from CI has the following directory entry: drwx------ root/root 0 1970-01-01 01:00 ./ When installing this tarball using guix-install.sh the system will be bricked instantly, because the `tar -xf` command does not include --no-overwrite-dir, causing / to become readable only for the root user. Cheers, Lars [1] https://github.com/PromyLOPh/guix-install-action/issues/20