From unknown Fri Jun 20 18:11:11 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#66121 <66121@debbugs.gnu.org> To: bug#66121 <66121@debbugs.gnu.org> Subject: Status: [PATCH] system: bare-bones: Add comments about nss-cert and NTP service. Reply-To: bug#66121 <66121@debbugs.gnu.org> Date: Sat, 21 Jun 2025 01:11:11 +0000 retitle 66121 [PATCH] system: bare-bones: Add comments about nss-cert and N= TP service. reassign 66121 guix-patches submitter 66121 Nikolaos Chatzikonstantinou severity 66121 normal tag 66121 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Wed Sep 20 10:36:47 2023 Received: (at submit) by debbugs.gnu.org; 20 Sep 2023 14:36:47 +0000 Received: from localhost ([127.0.0.1]:60120 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qiyJq-0006Ru-Jk for submit@debbugs.gnu.org; Wed, 20 Sep 2023 10:36:46 -0400 Received: from lists.gnu.org ([2001:470:142::17]:55054) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qiyJp-0006Rg-GS for submit@debbugs.gnu.org; Wed, 20 Sep 2023 10:36:46 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qiyJY-0004Fr-3D for guix-patches@gnu.org; Wed, 20 Sep 2023 10:36:28 -0400 Received: from mail-yb1-xb2b.google.com ([2607:f8b0:4864:20::b2b]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qiyJV-0001x3-7Y for guix-patches@gnu.org; Wed, 20 Sep 2023 10:36:26 -0400 Received: by mail-yb1-xb2b.google.com with SMTP id 3f1490d57ef6-d849df4f1ffso3977996276.0 for ; Wed, 20 Sep 2023 07:36:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1695220583; x=1695825383; darn=gnu.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=ZHuQpToavjh73uQ40mNhikGi+eThtkWN5JAxh08teZU=; b=fugtjF4R8FxbJ7XAt/TtETXwjP2JUfTA6uf1/fDt+mCOgMGuO5H01zAaOjTQGRX3N5 UOoZnU5ovLfGVsRfUEo7Q5O2PrOGkkBXvhBeh6rQsQIU9Ak1v5YZFVRRYj4KLnmLfEhN DDadz9MUIIfRlXmuw5ZVcGGlXQ03Ok7zV9Hm7/caP9QOAY7L6XkxhRqzWgwrmnaIEvGi x8lOo2laBBdQk0tQE5HGeRRGA5BjO1FN93BX2gVACsSQEvGAsV63H7C9lxT7NSxunvYI Ypa8rfUk2hfJVvo58Rx9e2jrZnGHSadM7tNN1iQ7TOMHHHBRskTrludrmhQC49gqfb/n jNHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1695220583; x=1695825383; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=ZHuQpToavjh73uQ40mNhikGi+eThtkWN5JAxh08teZU=; b=K66bJJjhMAvTTv/Ni+uMZdMBavGgg87wwjdk9KUM59nBISzmz9MyrKV0e+6VsVw88C DMxknLXra6PyWnjDugSwEOToopgRt0RqALvgkxTqKS9N31uwib2Sr6UW87EpGP13oyfU 4Dt1bZmfIJwfa3WAxL+fl4jy1FlmoUZmDs40El0EqODO11/1cGIgX/dqAJ2IJjIZiAC2 11JtTWAnY9xocENUA7xs8orO3SuGwC6OPZpguhtSnU5+vMlFrp0xdqyhYqw0kNI6M3p4 kGRrFRoUM71wCbpwI2w8d3t1gRosZgcVW+TXcaw8RBEKdaVyVckALeIoPRrzvzePBHTX D8fQ== X-Gm-Message-State: AOJu0Yxwitol2MXRhxFmtZ1X45AEN9NwiOV8kuaS4X/Lfhl6QYuz0ZKG szytBn7EPm9pBcjdP33nYl4ckvUR+XXYCu6GJUkBc6Ql X-Google-Smtp-Source: AGHT+IFjdYOp8bAdJxiyDvd4IarSBluAkBhNr7+Dd3fF8LcohXY0xEHBszEfmEwAdJx7lzOJiuGzpdCEik80Vij74YU= X-Received: by 2002:a25:690d:0:b0:d44:351c:8ac2 with SMTP id e13-20020a25690d000000b00d44351c8ac2mr3007906ybc.35.1695220583352; Wed, 20 Sep 2023 07:36:23 -0700 (PDT) MIME-Version: 1.0 From: Nikolaos Chatzikonstantinou Date: Wed, 20 Sep 2023 17:36:12 +0300 Message-ID: Subject: [PATCH] system: bare-bones: Add comments about nss-cert and NTP service. To: guix-patches@gnu.org Content-Type: multipart/mixed; boundary="000000000000affb320605cb4c03" Received-SPF: pass client-ip=2607:f8b0:4864:20::b2b; envelope-from=nchatz314@gmail.com; helo=mail-yb1-xb2b.google.com X-Spam_score_int: -17 X-Spam_score: -1.8 X-Spam_bar: - X-Spam_report: (-1.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.2 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Just adding some clarifying comments on the bare-bones configuration. When I first used the bare-bones configuration I had TLS issues, but thankfully I was aided by the IRC support channel. On my own [...] Content analysis details: (1.2 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (nchatz314[at]gmail.com) 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (nchatz314[at]gmail.com) -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.2 (/) --000000000000affb320605cb4c03 Content-Type: text/plain; charset="UTF-8" Just adding some clarifying comments on the bare-bones configuration. When I first used the bare-bones configuration I had TLS issues, but thankfully I was aided by the IRC support channel. On my own I would've been lost because I wouldn't be able to guess there were CA certificates I was missing. Because truly bare-bones setups may want to avoid both an NTP service and Mozilla's CA certificates, I decided to only add them as comment suggestions. Regards, Nikolaos Chatzikonstantinou --000000000000affb320605cb4c03 Content-Type: text/x-patch; charset="US-ASCII"; name="0001-system-bare-bones-Add-comments-about-nss-cert-and-NT.patch" Content-Disposition: attachment; filename="0001-system-bare-bones-Add-comments-about-nss-cert-and-NT.patch" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_lmruf34g0 RnJvbSA3ZmViNTQyYjUwYWQyOWU1ZGU1MjA4YzUwM2Y5Mjk5M2U0Yjg2YTAxIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBOaWtvbGFvcyBDaGF0emlrb25zdGFudGlub3UgPG5jaGF0ejMx NEBnbWFpbC5jb20+CkRhdGU6IFdlZCwgMjAgU2VwIDIwMjMgMTc6MTM6MTEgKzAzMDAKU3ViamVj dDogW1BBVENIXSBzeXN0ZW06IGJhcmUtYm9uZXM6IEFkZCBjb21tZW50cyBhYm91dCBuc3MtY2Vy dCBhbmQgTlRQCiBzZXJ2aWNlLgoKVExTIGVycm9ycyBtYXkgYmUgY29uZnVzaW5nIHRvIHNvbWUg dXNlcnMuICBUd28gY29tbWVudHMgYXJlIGFkZGVkOiBvbmUKY29tbWVudCBzaG91bGQgaGVscCBj bGFyaWZ5IHRoZSBleHRyYSBzdGVwIHJlcXVpcmVkIGZvciByb290IENBIGNlcnRpZmljYXRlcwp0 byBiZSBpbnN0YWxsZWQsIHdoaWxlIHRoZSBvdGhlciB3aWxsIGhlbHAgdXNlcnMga2VlcCB0aGVp ciBjbG9ja3MKc3luY2hyb25pemVkLCBhbm90aGVyIHNvdXJjZSBvZiBUTFMgZXJyb3JzIGR1ZSB0 byBjbG9jayBkcmlmdC4KCiogZ251L3N5c3RlbS9leGFtcGxlcy9iYXJlLWJvbmVzLnRtcGw6IEFk ZCBuc3MtY2VydCBhbmQgTlRQIHNlcnZpY2UgY29tbWVudHMuCgpTaWduZWQtb2ZmLWJ5OiBOaWtv bGFvcyBDaGF0emlrb25zdGFudGlub3UgPG5jaGF0ejMxNEBnbWFpbC5jb20+Ci0tLQogZ251L3N5 c3RlbS9leGFtcGxlcy9iYXJlLWJvbmVzLnRtcGwgfCA5ICsrKysrKystLQogMSBmaWxlIGNoYW5n ZWQsIDcgaW5zZXJ0aW9ucygrKSwgMiBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9nbnUvc3lz dGVtL2V4YW1wbGVzL2JhcmUtYm9uZXMudG1wbCBiL2dudS9zeXN0ZW0vZXhhbXBsZXMvYmFyZS1i b25lcy50bXBsCmluZGV4IDQ1YjQ5OTU1NzQuLmRjNmFmZjUyNzMgMTAwNjQ0Ci0tLSBhL2dudS9z eXN0ZW0vZXhhbXBsZXMvYmFyZS1ib25lcy50bXBsCisrKyBiL2dudS9zeXN0ZW0vZXhhbXBsZXMv YmFyZS1ib25lcy50bXBsCkBAIC00LDYgKzQsOSBAQAogCiAodXNlLW1vZHVsZXMgKGdudSkpCiAo dXNlLXNlcnZpY2UtbW9kdWxlcyBuZXR3b3JraW5nIHNzaCkKKzs7IElmIHlvdSB3YW50IHRvIHVz ZSBIVFRQUywgeW91IG1vc3QgbGlrZWx5IHdhbnQgdG8gaW5jbHVkZQorOzsgImNlcnRzIiBpbiB0 aGUgbGluZSBiZWxvdy4gIEFsc28gcmVhZCB0aGUgY29tbWVudCBhYm91dAorOzsgIm5zcy1jZXJ0 cyIgbGF0ZXIgaW4gdGhpcyBmaWxlLgogKHVzZS1wYWNrYWdlLW1vZHVsZXMgc2NyZWVuIHNzaCkK IAogKG9wZXJhdGluZy1zeXN0ZW0KQEAgLTQzLDEwICs0NiwxMiBAQAogICAgICAgICAgICAgICAg JWJhc2UtdXNlci1hY2NvdW50cykpCiAKICAgOzsgR2xvYmFsbHktaW5zdGFsbGVkIHBhY2thZ2Vz LgorICA7OyBBZGQgIm5zcy1jZXJ0cyIgZm9yIE1vemlsbGEncyBhcHByb3ZlZCBDQSBjZXJ0cy4g IFlvdSB3b3VsZAorICA7OyBoYXZlIHRvIGhhdmUgaW5jbHVkZWQgImNlcnRzIiBpbiB1c2UtcGFj a2FnZS1tb2R1bGVzIGFib3ZlLgogICAocGFja2FnZXMgKGNvbnMgc2NyZWVuICViYXNlLXBhY2th Z2VzKSkKIAotICA7OyBBZGQgc2VydmljZXMgdG8gdGhlIGJhc2VsaW5lOiBhIERIQ1AgY2xpZW50 IGFuZAotICA7OyBhbiBTU0ggc2VydmVyLgorICA7OyBBZGQgc2VydmljZXMgdG8gdGhlIGJhc2Vs aW5lOiBhIERIQ1AgY2xpZW50IGFuZCBhbiBTU0gKKyAgOzsgc2VydmVyLiAgWW91IG1heSB3aXNo IHRvIGFkZCBhbiBOVFAgc2VydmljZSBoZXJlLgogICAoc2VydmljZXMgKGFwcGVuZCAobGlzdCAo c2VydmljZSBkaGNwLWNsaWVudC1zZXJ2aWNlLXR5cGUpCiAgICAgICAgICAgICAgICAgICAgICAg ICAgIChzZXJ2aWNlIG9wZW5zc2gtc2VydmljZS10eXBlCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIChvcGVuc3NoLWNvbmZpZ3VyYXRpb24KLS0gCjIuMzkuMgoK --000000000000affb320605cb4c03-- From debbugs-submit-bounces@debbugs.gnu.org Thu Oct 05 10:12:08 2023 Received: (at 66121-done) by debbugs.gnu.org; 5 Oct 2023 14:12:08 +0000 Received: from localhost ([127.0.0.1]:48031 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qoP5D-0007so-OH for submit@debbugs.gnu.org; Thu, 05 Oct 2023 10:12:07 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:47472) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qoP5C-0007sG-EN for 66121-done@debbugs.gnu.org; Thu, 05 Oct 2023 10:12:07 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qoP4n-0006vM-Kz; Thu, 05 Oct 2023 10:11:42 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=U8M4bOcfDc98CaJ5D9/tz97QDKW9pcluj+duYBQvfAQ=; b=BhE9D+wmgizW198bq69I 6XvlsvNGUNWcTuM36kzSk4Z/iAq5LdNRgps5mk7OupkncLTuznjq3kTsVuaOIUeeQwgNfcTYgYSzl tPdUSoQKVs4Z411QBuHWD8R7TBOUaBfKeQxYC4pxrXaXYjfusbOx3V+Lm0AmqegoJFfzVPs/1WkgJ odgPklgXnVDaGER2K0CJNEQk0pXli4g8Y+Is10hjiSNdeKAGCaNVGaluZfAFA6HuqVcxvp1tcuP+J BLR7zlywzST2iw9P35eqKP5nBC/AbMWGjssqmnUD0+xA+Of7SQKsStSNdmR05cJMhIh4IEa4w05JU dSLZ1PH9S9XrhA==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Nikolaos Chatzikonstantinou Subject: Re: bug#66121: [PATCH] system: bare-bones: Add comments about nss-cert and NTP service. In-Reply-To: (Nikolaos Chatzikonstantinou's message of "Wed, 20 Sep 2023 17:36:12 +0300") References: Date: Thu, 05 Oct 2023 16:11:37 +0200 Message-ID: <87h6n55fc6.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 66121-done Cc: 66121-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, Nikolaos Chatzikonstantinou skribis: > From 7feb542b50ad29e5de5208c503f92993e4b86a01 Mon Sep 17 00:00:00 2001 > From: Nikolaos Chatzikonstantinou > Date: Wed, 20 Sep 2023 17:13:11 +0300 > Subject: [PATCH] system: bare-bones: Add comments about nss-cert and NTP > service. > > TLS errors may be confusing to some users. Two comments are added: one > comment should help clarify the extra step required for root CA certifica= tes > to be installed, while the other will help users keep their clocks > synchronized, another source of TLS errors due to clock drift. > > * gnu/system/examples/bare-bones.tmpl: Add nss-cert and NTP service comme= nts. > > Signed-off-by: Nikolaos Chatzikonstantinou Applied, thanks! Ludo=E2=80=99. From unknown Fri Jun 20 18:11:11 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 03 Nov 2023 11:24:06 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator