From unknown Sun Aug 10 07:40:34 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#67288 <67288@debbugs.gnu.org> To: bug#67288 <67288@debbugs.gnu.org> Subject: Status: [PATCH] services: laminar: Add configuration option for supplementary groups Reply-To: bug#67288 <67288@debbugs.gnu.org> Date: Sun, 10 Aug 2025 14:40:34 +0000 retitle 67288 [PATCH] services: laminar: Add configuration option for suppl= ementary groups reassign 67288 guix-patches submitter 67288 "Thompson, David" severity 67288 normal tag 67288 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Sun Nov 19 14:58:57 2023 Received: (at submit) by debbugs.gnu.org; 19 Nov 2023 19:58:57 +0000 Received: from localhost ([127.0.0.1]:52140 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r4nwW-0002Rl-TB for submit@debbugs.gnu.org; Sun, 19 Nov 2023 14:58:57 -0500 Received: from lists.gnu.org ([2001:470:142::17]:33948) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r4nwT-0002RO-0N for submit@debbugs.gnu.org; Sun, 19 Nov 2023 14:58:55 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r4nwL-0007GU-C8 for guix-patches@gnu.org; Sun, 19 Nov 2023 14:58:45 -0500 Received: from mail-qt1-x831.google.com ([2607:f8b0:4864:20::831]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1r4nwJ-00014W-E3 for guix-patches@gnu.org; Sun, 19 Nov 2023 14:58:45 -0500 Received: by mail-qt1-x831.google.com with SMTP id d75a77b69052e-41cc75c55f0so41550341cf.1 for ; Sun, 19 Nov 2023 11:58:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=worcester-edu.20230601.gappssmtp.com; s=20230601; t=1700423921; x=1701028721; darn=gnu.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=R6bz4ZAiI1p6YPshkQUbh6uUWzRp4avcqgFVeubp3zk=; b=mm10gtEksytP5/fJVKMKVw1CNa/QpABYSXVqmcPyFmWn4Xd9qjs6TeK0IDC5t6iKqF Vhjp/O9h1+akkbw1CqFDtDiNim27FzbkwsOWr+nwUtjeZ0q29XtwJgAxXxgmWIJtWZ+9 GF1AwnVLm9GWDu3P3bKTB6sTFYfuX30EiWn/MlHX8PFFIVSdrck/ll6LJACyGsWw1LBN fy1Bz6y2L8h/ITRaFxbzaXf0T7j6WT888fvt4oM/bohPgsKRrX8yLohE5kIJ4Z/egfiN blddeP4DzKmE2xy2dwi1NT6ugjUJ9rjAzPMFFdygRdv467WkbQfzyZ+oBVsFDdqyQJJD 53bA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1700423921; x=1701028721; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=R6bz4ZAiI1p6YPshkQUbh6uUWzRp4avcqgFVeubp3zk=; b=aDpus48ubwwc6UtdUFxhxsgfbDq/E1o+3p+QpHjRwKGl8EbnQKu5ZxYN2HkQvZ3nzN aYalokeEr6iY6VJ7dOVJJXmZ25olmj6YMpk8HCHb/GMPiftV5+1kPaygT2PYs7ADJZkp R90BtzQ/WpArZ1dGQxO1UckfSIALbj5Lpq3SYtPpm2SRnKHQRb81PjCpruTRLuKkJ2JB haitmKAzqWUzdmBQMchOigf6Mv9TFM2gOIO/gi+L4kvGX+bpqtVp6P894ArxDOyXypPU YlAbIJVePkapuCcAZ7f2ZmXxVoj/x8S5C5iK+QYceOP8iy65KsI1hEt+PBq31OgR5II7 hj1w== X-Gm-Message-State: AOJu0YzyQiAo9bE+VpyawcR2tv02my5VFP5WDzn1Hoor4hmau5JVHpzu LL1T3BE8JYP6xfTqXsbSYpIzSQrFDIWACJgZxhFz251U5vVCle5n X-Google-Smtp-Source: AGHT+IGKqwttLD4ONSad3Ty1Yw4hRHDsccx8MsHGI8YMVQhfGFJq0V7ZbxoEfE1a042s1T1t8zlta8ZOvSeUcciHoKM= X-Received: by 2002:a05:622a:5d3:b0:418:1437:303b with SMTP id d19-20020a05622a05d300b004181437303bmr15441702qtb.27.1700423921105; Sun, 19 Nov 2023 11:58:41 -0800 (PST) MIME-Version: 1.0 From: "Thompson, David" Date: Sun, 19 Nov 2023 14:58:30 -0500 Message-ID: Subject: [PATCH] services: laminar: Add configuration option for supplementary groups To: Ryan Prior via Guix-patches Content-Type: multipart/mixed; boundary="000000000000c9641d060a86cbd2" Received-SPF: pass client-ip=2607:f8b0:4864:20::831; envelope-from=dthompson2@worcester.edu; helo=mail-qt1-x831.google.com X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) --000000000000c9641d060a86cbd2 Content-Type: text/plain; charset="UTF-8" Hey everyone, I started using Laminar CI for my personal server, but I had trouble with the current system service. My server is configured to only allow members of the "git" group access to the Git repositories, so the CI job running as the "laminar" user couldn't do anything useful. This patch adds a new configuration field for a list of supplementary groups to be used for the "laminar" user and the service process. - Dave --000000000000c9641d060a86cbd2 Content-Type: text/x-patch; charset="US-ASCII"; name="0001-services-laminar-Add-configuration-option-for-supple.patch" Content-Disposition: attachment; filename="0001-services-laminar-Add-configuration-option-for-supple.patch" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_lp5wgyih0 RnJvbSBlZDYyZDg4NWE1NDkzZjY0Nzc5YmM5YzJhOWI5OTc4YWY4ZjYxODI0IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpNZXNzYWdlLUlEOiA8ZWQ2MmQ4ODVhNTQ5M2Y2NDc3OWJjOWMyYTliOTk3 OGFmOGY2MTgyNC4xNzAwNDIzNjEwLmdpdC5kdGhvbXBzb24yQHdvcmNlc3Rlci5lZHU+CkZyb206 IERhdmlkIFRob21wc29uIDxkdGhvbXBzb24yQHdvcmNlc3Rlci5lZHU+CkRhdGU6IFN1biwgMTkg Tm92IDIwMjMgMTQ6NDY6NTIgLTA1MDAKU3ViamVjdDogW1BBVENIXSBzZXJ2aWNlczogbGFtaW5h cjogQWRkIGNvbmZpZ3VyYXRpb24gb3B0aW9uIGZvciBzdXBwbGVtZW50YXJ5CiBncm91cHMuCgoq IGdudS9zZXJ2aWNlcy9jaSAoPGxhbWluYXItY29uZmlndXJhdGlvbj4pW3N1cHBsZW1lbnRhbC1n cm91cHNdOiBOZXcgZmllbGQuCihsYW1pbmFyLXNoZXBoZXJkLXNlcnZpY2UpOiBFeGVjIGxhbWlu YXJkIHdpdGggc3VwcGxlbWVudGFyeSBncm91cHMuCihsYW1pbmFyLWFjY291bnQpOiBBZGQgc3Vw cGxlbWVudGFyeSBncm91cHMgdG8gbGFtaW5hciB1c2VyLgoqIGRvYy9ndWl4LnRleGkgKExhbWlu YXIpOiBEb2N1bWVudCBuZXcgY29uZmlndXJhdGlvbiBmaWVsZC4KCkNoYW5nZS1JZDogSWViZmRi YjU4ZWE4YzZkZmEyMmJiOGY2NGY2NDYzZTNhZDEzM2QyZjkKLS0tCiBkb2MvZ3VpeC50ZXhpICAg ICAgIHwgIDMgKysrCiBnbnUvc2VydmljZXMvY2kuc2NtIHwgNDIgKysrKysrKysrKysrKysrKysr KysrKysrLS0tLS0tLS0tLS0tLS0tLS0tCiAyIGZpbGVzIGNoYW5nZWQsIDI3IGluc2VydGlvbnMo KyksIDE4IGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL2RvYy9ndWl4LnRleGkgYi9kb2MvZ3Vp eC50ZXhpCmluZGV4IDk0OTAzZmI1ZTIuLjg1NDQ4NmMzZWEgMTAwNjQ0Ci0tLSBhL2RvYy9ndWl4 LnRleGkKKysrIGIvZG9jL2d1aXgudGV4aQpAQCAtMzM5NTUsNiArMzM5NTUsOSBAQCBDb250aW51 b3VzIEludGVncmF0aW9uCiBAaXRlbSBAY29kZXtob21lLWRpcmVjdG9yeX0gKGRlZmF1bHQ6IEBj b2RleyIvdmFyL2xpYi9sYW1pbmFyIn0pCiBUaGUgZGlyZWN0b3J5IGZvciBqb2IgY29uZmlndXJh dGlvbnMgYW5kIHJ1biBkaXJlY3Rvcmllcy4KIAorQGl0ZW0gQGNvZGV7c3VwcGxlbWVudGFyeS1n cm91cHN9IChkZWZhdWx0OiBAY29kZXsoKX0pCitTdXBwbGVtZW50YXJ5IGdyb3VwcyBmb3IgdGhl IExhbWluYXIgdXNlciBhY2NvdW50LgorCiBAaXRlbSBAY29kZXtiaW5kLWh0dHB9IChkZWZhdWx0 OiBAY29kZXsiKjo4MDgwIn0pCiBUaGUgaW50ZXJmYWNlL3BvcnQgb3IgdW5peCBzb2NrZXQgb24g d2hpY2ggbGFtaW5hcmQgc2hvdWxkIGxpc3RlbiBmb3IKIGluY29taW5nIGNvbm5lY3Rpb25zIHRv IHRoZSB3ZWIgZnJvbnRlbmQuCmRpZmYgLS1naXQgYS9nbnUvc2VydmljZXMvY2kuc2NtIGIvZ251 L3NlcnZpY2VzL2NpLnNjbQppbmRleCAxNzJmODVmZThlLi4wMWNjN2M3ZDg2IDEwMDY0NAotLS0g YS9nbnUvc2VydmljZXMvY2kuc2NtCisrKyBiL2dudS9zZXJ2aWNlcy9jaS5zY20KQEAgLTMxLDYg KzMxLDcgQEAgKGRlZmluZS1tb2R1bGUgKGdudSBzZXJ2aWNlcyBjaSkKICAgIzpleHBvcnQgKGxh bWluYXItY29uZmlndXJhdGlvbgogICAgICAgICAgICAgbGFtaW5hci1jb25maWd1cmF0aW9uPwog ICAgICAgICAgICAgbGFtaW5hci1jb25maWd1cmF0aW9uLWhvbWUtZGlyZWN0b3J5CisgICAgICAg ICAgICBsYW1pbmFyLWNvbmZpZ3VyYXRpb24tc3VwcGxlbWVudGFyeS1ncm91cHMKICAgICAgICAg ICAgIGxhbWluYXItY29uZmlndXJhdGlvbi1iaW5kLWh0dHAKICAgICAgICAgICAgIGxhbWluYXIt Y29uZmlndXJhdGlvbi1iaW5kLXJwYwogICAgICAgICAgICAgbGFtaW5hci1jb25maWd1cmF0aW9u LXRpdGxlCkBAIC01MCwyNiArNTEsMjggQEAgKGRlZmluZS1tb2R1bGUgKGdudSBzZXJ2aWNlcyBj aSkKIChkZWZpbmUtcmVjb3JkLXR5cGUqIDxsYW1pbmFyLWNvbmZpZ3VyYXRpb24+CiAgIGxhbWlu YXItY29uZmlndXJhdGlvbiBtYWtlLWxhbWluYXItY29uZmlndXJhdGlvbgogICBsYW1pbmFyLWNv bmZpZ3VyYXRpb24/Ci0gIChsYW1pbmFyICAgICAgICAgIGxhbWluYXJzLWNvbmZpZ3VyYXRpb24t bGFtaW5hcgotICAgICAgICAgICAgICAgICAgICAoZGVmYXVsdCBsYW1pbmFyKSkKLSAgKGhvbWUt ZGlyZWN0b3J5ICAgbGFtaW5hci1jb25maWd1cmF0aW9uLWhvbWUtZGlyZWN0b3J5Ci0gICAgICAg ICAgICAgICAgICAgIChkZWZhdWx0ICIvdmFyL2xpYi9sYW1pbmFyIikpCi0gIChiaW5kLWh0dHAg ICAgICAgIGxhbWluYXItY29uZmlndXJhdGlvbi1iaW5kLWh0dHAKLSAgICAgICAgICAgICAgICAg ICAgKGRlZmF1bHQgIio6ODA4MCIpKQotICAoYmluZC1ycGMgICAgICAgICBsYW1pbmFyLWNvbmZp Z3VyYXRpb24tYmluZC1ycGMKLSAgICAgICAgICAgICAgICAgICAgKGRlZmF1bHQgInVuaXgtYWJz dHJhY3Q6bGFtaW5hciIpKQotICAodGl0bGUgICAgICAgICAgICBsYW1pbmFyLWNvbmZpZ3VyYXRp b24tdGl0bGUKLSAgICAgICAgICAgICAgICAgICAgKGRlZmF1bHQgIkxhbWluYXIiKSkKLSAgKGtl ZXAtcnVuZGlycyAgICAgbGFtaW5hci1rZWVwLXJ1bmRpcnMKLSAgICAgICAgICAgICAgICAgICAg KGRlZmF1bHQgMCkpCi0gIChhcmNoaXZlLXVybCAgICAgIGxhbWluYXItYXJjaGl2ZS11cmwKLSAg ICAgICAgICAgICAgICAgICAgKGRlZmF1bHQgI2YpKQotICAoYmFzZS11cmwgICAgICAgICBsYW1p bmFyLWJhc2UtdXJsCi0gICAgICAgICAgICAgICAgICAgIChkZWZhdWx0ICNmKSkpCisgIChsYW1p bmFyICAgICAgICAgICAgICBsYW1pbmFycy1jb25maWd1cmF0aW9uLWxhbWluYXIKKyAgICAgICAg ICAgICAgICAgICAgICAgIChkZWZhdWx0IGxhbWluYXIpKQorICAoaG9tZS1kaXJlY3RvcnkgICAg ICAgbGFtaW5hci1jb25maWd1cmF0aW9uLWhvbWUtZGlyZWN0b3J5CisgICAgICAgICAgICAgICAg ICAgICAgICAoZGVmYXVsdCAiL3Zhci9saWIvbGFtaW5hciIpKQorICAoc3VwcGxlbWVudGFyeS1n cm91cHMgbGFtaW5hci1jb25maWd1cmF0aW9uLXN1cHBsZW1lbnRhcnktZ3JvdXBzCisgICAgICAg ICAgICAgICAgICAgICAgICAoZGVmYXVsdCAnKCkpKQorICAoYmluZC1odHRwICAgICAgICAgICAg bGFtaW5hci1jb25maWd1cmF0aW9uLWJpbmQtaHR0cAorICAgICAgICAgICAgICAgICAgICAgICAg KGRlZmF1bHQgIio6ODA4MCIpKQorICAoYmluZC1ycGMgICAgICAgICAgICAgbGFtaW5hci1jb25m aWd1cmF0aW9uLWJpbmQtcnBjCisgICAgICAgICAgICAgICAgICAgICAgICAoZGVmYXVsdCAidW5p eC1hYnN0cmFjdDpsYW1pbmFyIikpCisgICh0aXRsZSAgICAgICAgICAgICAgICBsYW1pbmFyLWNv bmZpZ3VyYXRpb24tdGl0bGUKKyAgICAgICAgICAgICAgICAgICAgICAgIChkZWZhdWx0ICJMYW1p bmFyIikpCisgIChrZWVwLXJ1bmRpcnMgICAgICAgICBsYW1pbmFyLWtlZXAtcnVuZGlycworICAg ICAgICAgICAgICAgICAgICAgICAgKGRlZmF1bHQgMCkpCisgIChhcmNoaXZlLXVybCAgICAgICAg ICBsYW1pbmFyLWFyY2hpdmUtdXJsCisgICAgICAgICAgICAgICAgICAgICAgICAoZGVmYXVsdCAj ZikpCisgIChiYXNlLXVybCAgICAgICAgICAgICBsYW1pbmFyLWJhc2UtdXJsCisgICAgICAgICAg ICAgICAgICAgICAgICAoZGVmYXVsdCAjZikpKQogCiAoZGVmaW5lIGxhbWluYXItc2hlcGhlcmQt c2VydmljZQogICAobWF0Y2gtbGFtYmRhCi0gICAgKCgkIDxsYW1pbmFyLWNvbmZpZ3VyYXRpb24+ IGxhbWluYXIgaG9tZS1kaXJlY3RvcnkKKyAgICAoKCQgPGxhbWluYXItY29uZmlndXJhdGlvbj4g bGFtaW5hciBob21lLWRpcmVjdG9yeSBzdXBwbGVtZW50YXJ5LWdyb3VwcwogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBiaW5kLWh0dHAgYmluZC1ycGMKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgdGl0bGUga2VlcC1ydW5kaXJzIGFyY2hpdmUtdXJsCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIGJhc2UtdXJsKQpAQCAtMTAyLDcgKzEwNSw4IEBAIChkZWZp bmUgbGFtaW5hci1zaGVwaGVyZC1zZXJ2aWNlCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIyRiYXNlLXVybCkpCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAnKCkpKQogICAgICAgICAgICAgICAgICAgICAgICM6dXNlciAibGFtaW5hciIKLSAgICAg ICAgICAgICAgICAgICAgICAjOmdyb3VwICJsYW1pbmFyIikpCisgICAgICAgICAgICAgICAgICAg ICAgIzpncm91cCAibGFtaW5hciIKKyAgICAgICAgICAgICAgICAgICAgICAjOnN1cHBsZW1lbnRh cnktZ3JvdXBzICcjJHN1cHBsZW1lbnRhcnktZ3JvdXBzKSkKICAgICAgICAgICAgIChzdG9wICN+ KG1ha2Uta2lsbC1kZXN0cnVjdG9yKSkpKSkpKQogCiAoZGVmaW5lIChsYW1pbmFyLWFjY291bnQg Y29uZmlnKQpAQCAtMTEzLDYgKzExNyw4IEBAIChkZWZpbmUgKGxhbWluYXItYWNjb3VudCBjb25m aWcpCiAgICAgICAgICh1c2VyLWFjY291bnQKICAgICAgICAgIChuYW1lICJsYW1pbmFyIikKICAg ICAgICAgIChncm91cCAibGFtaW5hciIpCisgICAgICAgICAoc3VwcGxlbWVudGFyeS1ncm91cHMK KyAgICAgICAgICAobGFtaW5hci1jb25maWd1cmF0aW9uLXN1cHBsZW1lbnRhcnktZ3JvdXBzIGNv bmZpZykpCiAgICAgICAgICAoc3lzdGVtPyAjdCkKICAgICAgICAgIChjb21tZW50ICJMYW1pbmFy IHByaXZpbGVnZSBzZXBhcmF0aW9uIHVzZXIiKQogICAgICAgICAgKGhvbWUtZGlyZWN0b3J5IChs YW1pbmFyLWNvbmZpZ3VyYXRpb24taG9tZS1kaXJlY3RvcnkgY29uZmlnKSkKCmJhc2UtY29tbWl0 OiAyYWI1ZTQ0OTI0NmY5OGIwNDk4ODhkZGUzYzMxMGY1YjRhMGE2NGEyCnByZXJlcXVpc2l0ZS1w YXRjaC1pZDogMjBlMGJkNWQxZjNjODgzNTFjNDk5MWVmOWM2NTJkYmRlZDUzYmY5YQotLSAKMi40 MS4wCgo= --000000000000c9641d060a86cbd2-- From debbugs-submit-bounces@debbugs.gnu.org Sat Nov 25 10:25:41 2023 Received: (at 67288) by debbugs.gnu.org; 25 Nov 2023 15:25:42 +0000 Received: from localhost ([127.0.0.1]:40026 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r6uXN-00035z-CH for submit@debbugs.gnu.org; Sat, 25 Nov 2023 10:25:41 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:56146) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r6uXL-00035i-CK for 67288@debbugs.gnu.org; Sat, 25 Nov 2023 10:25:39 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r6uX9-0008J0-6I; Sat, 25 Nov 2023 10:25:27 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=KSFkbicdUKN/NlNRlUl+8UGw/Lr4ol0b6xIYMuQGp68=; b=Fcd5/bOzaHe712OGTt6S WTEb48cqrOslO/CffygiXOJ3xFGtQAW/Zll4qHxbbaFFIWXIZw7VZO14PJtOPlWvoKXcxOMfK/iCh 9SxS+ovuxGUh/ucgtWEH/4dBePBE3cHv65bIGR+I/SBn2Tu3GG+alj8oaeBJLKpxLb8f06VBjCHSC pOR0UVPcoxJQh2PTcdKTFXt7hJFre5CGWfoPZIbsUADcDk97lPtHtRnQt3IABi5rqbQ9VSD/qd953 qHA/w+MEPf8rwhjyod1LJi1+jn+HinfLkUX77YQTwlTlDompZrt2CdqjMiOJABShnDrB7fIC5DQOY TxHllC5BLv/RDQ==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: "Thompson, David" Subject: Re: [bug#67288] [PATCH] services: laminar: Add configuration option for supplementary groups In-Reply-To: (David Thompson's message of "Sun, 19 Nov 2023 14:58:30 -0500") References: Date: Sat, 25 Nov 2023 16:25:22 +0100 Message-ID: <87leal4zz1.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 67288 Cc: Christopher Baines , 67288@debbugs.gnu.org, Arun Isaac X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, "Thompson, David" skribis: > I started using Laminar CI for my personal server, but I had trouble > with the current system service. My server is configured to only allow > members of the "git" group access to the Git repositories, so the CI > job running as the "laminar" user couldn't do anything useful. This > patch adds a new configuration field for a list of supplementary > groups to be used for the "laminar" user and the service process. Cc=E2=80=99ing Arun and Chris, who know better than me. Is this a problem = they worked around so far? > From ed62d885a5493f64779bc9c2a9b9978af8f61824 Mon Sep 17 00:00:00 2001 > Message-ID: > From: David Thompson > Date: Sun, 19 Nov 2023 14:46:52 -0500 > Subject: [PATCH] services: laminar: Add configuration option for suppleme= ntary > groups. > > * gnu/services/ci ()[supplemental-groups]: New fie= ld. > (laminar-shepherd-service): Exec laminard with supplementary groups. > (laminar-account): Add supplementary groups to laminar user. > * doc/guix.texi (Laminar): Document new configuration field. [...] > +@item @code{supplementary-groups} (default: @code{()}) > +Supplementary groups for the Laminar user account. Perhaps mention the =E2=80=9Cgit=E2=80=9D group example you gave above? Otherwise looks pretty harmless to me. Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Sat Nov 25 19:01:02 2023 Received: (at 67288) by debbugs.gnu.org; 26 Nov 2023 00:01:03 +0000 Received: from localhost ([127.0.0.1]:40473 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r72a6-0002uU-IO for submit@debbugs.gnu.org; Sat, 25 Nov 2023 19:01:02 -0500 Received: from mugam.systemreboot.net ([139.59.75.54]:59292) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r72a3-0002tw-22 for 67288@debbugs.gnu.org; Sat, 25 Nov 2023 19:01:00 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=systemreboot.net; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Message-ID:Date:References:In-Reply-To:Subject:Cc:To:From:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=ydJi5/bRUFkH1mcWB8EhiSYMtoBMcRExdGqhs9TaPU0=; b=ijJ6OM2ej6iv4RRA6efMbtvqti Uhye25HPthP3d5QX6hljdg0GTijdyO5kiOtC0XPMlm4VyjhD1wArPlqom0f9FCSu/6n8t+wIUJGGv VUD5GT7Onr5Saxm6Db9VCM2ygAGBrl08GPtsp8RUeL+dZ8mp4CcJBoMHEfrS1T4XRYM/3BQa5/JcW qZBBg+9VU8J53yts/bmV+Xrs6nxUbDhXRHBx8LWAsFE1aK6tqJbQiAQph1TgPuGBaARiF2ItHa6R/ yLd7U1C3omIzRWM43aihRdWwGlLoNq66LWEThplebo/dShllxs6CjuzmjUTgt2u/bbN1YeKcgs3He IRyf92BA==; Received: from [192.168.2.1] (port=51708 helo=localhost) by systemreboot.net with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1r72Zm-00236Z-2F; Sun, 26 Nov 2023 00:00:43 +0000 From: Arun Isaac To: Ludovic =?utf-8?Q?Court=C3=A8s?= , "Thompson, David" Subject: Re: [bug#67288] [PATCH] services: laminar: Add configuration option for supplementary groups In-Reply-To: <87leal4zz1.fsf@gnu.org> References: <87leal4zz1.fsf@gnu.org> Date: Sun, 26 Nov 2023 00:00:23 +0000 Message-ID: <87il5pcrjc.fsf@systemreboot.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 67288 Cc: Christopher Baines , 67288@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, >> I started using Laminar CI for my personal server, but I had trouble >> with the current system service. My server is configured to only allow >> members of the "git" group access to the Git repositories, so the CI >> job running as the "laminar" user couldn't do anything useful. This >> patch adds a new configuration field for a list of supplementary >> groups to be used for the "laminar" user and the service process. > > Cc=E2=80=99ing Arun and Chris, who know better than me. Is this a proble= m they > worked around so far? This kind of problem requiring supplementary groups exists with many of our services, not just the laminar service. I don't run into trouble with the laminar service because git repos on my servers are usually publicly readable by all users (including the laminar user). To provide another example, I have similar trouble with our nginx service not being able to access Unix sockets created by our fcgiwrap service. Now, I work around this by having a special fcgiwrap service in guix-forge[1]. This special guix-forge fcgiwrap service differs from the guix fcgiwrap service in that it creates separate fcgiwrap instances for each web application each with its own explicitly specified permissions. [1]: https://git.systemreboot.net/guix-forge/tree/guix/forge/fcgiwrap.scm I don't think the solution to this problem is to add a `supplementary-groups' field to all our services. I'm not sure how, but we need to compose things better. If we don't, we may find we need to add some other field in the future and quickly be in a combinatorial explosion. Thinking out loud, the Guix service configuration system is really a propagator network. So, maybe, the solution is to allow one service to *extend* another service by specifying what supplementary groups it should be a part of. This is more flexible than simply adding a configuration field. Sorry to be quite vague here. Does this make any sense? Happy to chat more. Regards, Arun From debbugs-submit-bounces@debbugs.gnu.org Sat Nov 25 19:17:12 2023 Received: (at 67288) by debbugs.gnu.org; 26 Nov 2023 00:17:12 +0000 Received: from localhost ([127.0.0.1]:40488 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r72pj-0003J6-NV for submit@debbugs.gnu.org; Sat, 25 Nov 2023 19:17:12 -0500 Received: from mail-qt1-x82e.google.com ([2607:f8b0:4864:20::82e]:54504) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r72ph-0003Ip-7h for 67288@debbugs.gnu.org; Sat, 25 Nov 2023 19:17:09 -0500 Received: by mail-qt1-x82e.google.com with SMTP id d75a77b69052e-41eb4210383so15910881cf.0 for <67288@debbugs.gnu.org>; Sat, 25 Nov 2023 16:17:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=worcester-edu.20230601.gappssmtp.com; s=20230601; t=1700957818; x=1701562618; darn=debbugs.gnu.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=Fkh07zynDn9f6DZki2P2y4MAFFTkJWInZ+Xbf13fSWk=; b=JvSRtYz81kaK6Oi7PHjcU49OnpkvqH0fwODHkRafkqk3iCO6eIWHk5yj6NGwUoFxRH K89rXo16MKGAjpkyWioyuIQlSVidTCyxDT8NXckuVtoHNl0BpIAfO3vpXAnStQ+Xxl45 3n33uhx/J6EZY13JXiLiTxp9tYHpBkeGoRLiTEWUCGl32dnzOW0R4WSforw2PaXRT3DP 83rtTN5eVxqD3JcmMBBPTm9mmnSyDCmtRQoH0Ic4zavs6VhilbYqqYnn91EwKhUCho4f 2wH05ZpwPjXMzUHH1TNoF/y65nsGxyhV1au/JKaMeQKzew3X6qRtNwSIHKHOYYGMoMTE dDEg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1700957818; x=1701562618; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Fkh07zynDn9f6DZki2P2y4MAFFTkJWInZ+Xbf13fSWk=; b=um9O00CZQ6yDJqLVQfoIYgW6HFqURT372f1j7jBlSeLVlpBbXYHVF4ah/ls72FL8C6 h1CDLs5/iTSjx+CUlbI6EbUWemsfkWAeG4KKRU6A6IgSIzyNkJkha0HZUXSdN/1WBL5J 0Pts5O0tBk/RJ8GD1eMYCxT7sYr+GZ36ejzNvyj9W/tx2RrcWktc8Xjns6F8t8CT9WpH 67kONcvpz/mGxFqDnpBzFKNX2GV18Qkayk+qY8Q3SbEs7xO5aFMXeaQ0aGcCRke+BJR8 4CIGVZHxVFLMVhziq8kIa5oqHKOES2o0GUsGCNPBkQgaD9qYSecw3SfH4GDRC0MnaVwr DJtw== X-Gm-Message-State: AOJu0Yxm4aKAUtRgkg8aIlusU1H+CHD9OavWe6QRX0WOxR5sx5SLsYx1 vuFYWf4blozsGZzHaZoPGQy4teSDHJPySiJ5ajXcBmb3AjXR5tqc X-Google-Smtp-Source: AGHT+IHdOXUfq4+kmXk3da/yUgQShEerBfgAwjVMzxMN/MjDA2aNZA95IzVwlw0COU26QvjbpCQ4KS00O6SGB+DVXJ4= X-Received: by 2002:ac8:5c04:0:b0:412:c2a:eaef with SMTP id i4-20020ac85c04000000b004120c2aeaefmr8476600qti.11.1700957818194; Sat, 25 Nov 2023 16:16:58 -0800 (PST) MIME-Version: 1.0 References: <87leal4zz1.fsf@gnu.org> <87il5pcrjc.fsf@systemreboot.net> In-Reply-To: <87il5pcrjc.fsf@systemreboot.net> From: "Thompson, David" Date: Sat, 25 Nov 2023 19:16:47 -0500 Message-ID: Subject: Re: [bug#67288] [PATCH] services: laminar: Add configuration option for supplementary groups To: Arun Isaac Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 67288 Cc: Christopher Baines , =?UTF-8?Q?Ludovic_Court=C3=A8s?= , 67288@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Arun, On Sat, Nov 25, 2023 at 7:00=E2=80=AFPM Arun Isaac wrote: > > > Hi, > > >> I started using Laminar CI for my personal server, but I had trouble > >> with the current system service. My server is configured to only allow > >> members of the "git" group access to the Git repositories, so the CI > >> job running as the "laminar" user couldn't do anything useful. This > >> patch adds a new configuration field for a list of supplementary > >> groups to be used for the "laminar" user and the service process. > > > > Cc=E2=80=99ing Arun and Chris, who know better than me. Is this a prob= lem they > > worked around so far? > > This kind of problem requiring supplementary groups exists with many of > our services, not just the laminar service. I don't run into trouble > with the laminar service because git repos on my servers are usually > publicly readable by all users (including the laminar user). I figured the existing users of this service had something like this going on. I don't want to make the permissions looser on my own server, though. > To provide another example, I have similar trouble with our nginx > service not being able to access Unix sockets created by our fcgiwrap > service. Now, I work around this by having a special fcgiwrap service in > guix-forge[1]. This special guix-forge fcgiwrap service differs from the > guix fcgiwrap service in that it creates separate fcgiwrap instances for > each web application each with its own explicitly specified permissions. I also hack the nginx service to made the nginx user part of the git group: https://git.dthompson.us/guix-config/tree/takemi-os.scm#n20 This hack causes all sorts of annoying side effects, which is why I didn't want to go through it all again for the laminar service. > [1]: https://git.systemreboot.net/guix-forge/tree/guix/forge/fcgiwrap.scm > > I don't think the solution to this problem is to add a > `supplementary-groups' field to all our services. I'm not sure how, but > we need to compose things better. If we don't, we may find we need to > add some other field in the future and quickly be in a combinatorial > explosion. I agree that this indicates a missing means of composition, but in the short term I think it's fine to do simple things that help people out even though it's not the "right thing". > Thinking out loud, the Guix service configuration system is really a > propagator network. So, maybe, the solution is to allow one service to > *extend* another service by specifying what supplementary groups it > should be a part of. This is more flexible than simply adding a > configuration field. Sorry to be quite vague here. Does this make any > sense? Happy to chat more. Providing a way to modify user accounts in services would be great! It's not a problem I can work on solving, though, at least not now. - Dave From debbugs-submit-bounces@debbugs.gnu.org Sun Nov 26 10:47:34 2023 Received: (at 67288) by debbugs.gnu.org; 26 Nov 2023 15:47:34 +0000 Received: from localhost ([127.0.0.1]:42580 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r7HM6-0002dn-66 for submit@debbugs.gnu.org; Sun, 26 Nov 2023 10:47:34 -0500 Received: from mugam.systemreboot.net ([139.59.75.54]:36696) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1r7HM2-0002dW-EP for 67288@debbugs.gnu.org; Sun, 26 Nov 2023 10:47:32 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=systemreboot.net; s=default; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=MGjyNN/MtV09Gs/EMGhGfMvzr3w2qNo4bhK3eTswQwE=; b=jKmeoJB5XmNpgBbSZDrQ1f8D1o f0UVJ2QJIa3Gv8sE9p/iMoVchTa0qkBAtyU//1d1b5jCkknLJYUNsVL7NlwxXKh0cfWVvLQpNSg4O SOt74aX86dv+DPmMA+k0JD9oV71hfC7VPGLHFiKGQcuAlx9FEOzVY9U+RfKZlEOiDOv8sGU8yo2MH v3+vujXk4Cj2CBSrU5Wt5lQRHk58kdWPxm482j+YS4XByfNiGsyje0B8xZiUIECh9Kn6Q7S9i6e5i tN9QPa7G1yn0qfRJSsnuzGejXao4FV0n6iWhc1BDlmkfVSdFqof6A+MrjKX5FqJlKSuctV1XTEgDi xJGgVNuQ==; Received: from [192.168.2.1] (port=50360 helo=localhost) by systemreboot.net with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1r7HLl-002Ah6-2g; Sun, 26 Nov 2023 15:47:14 +0000 From: Arun Isaac To: "Thompson, David" Subject: Re: [bug#67288] [PATCH] services: laminar: Add configuration option for supplementary groups In-Reply-To: References: <87leal4zz1.fsf@gnu.org> <87il5pcrjc.fsf@systemreboot.net> Date: Sun, 26 Nov 2023 15:47:10 +0000 Message-ID: <878r6kcy9t.fsf@systemreboot.net> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 67288 Cc: Christopher Baines , Ludovic =?utf-8?Q?Court=C3=A8s?= , 67288@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi David, > I figured the existing users of this service had something like this > going on. I don't want to make the permissions looser on my own > server, though. In my case, the git repos are for publishing online. So, global read permissions are acceptable. I understand your situation may be different. > but in the short term I think it's fine to do simple things that help > people out even though it's not the "right thing". I agree. Regards, Arun From debbugs-submit-bounces@debbugs.gnu.org Wed Dec 06 08:19:43 2023 Received: (at 67288) by debbugs.gnu.org; 6 Dec 2023 13:19:43 +0000 Received: from localhost ([127.0.0.1]:39089 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rAroV-0002fA-0v for submit@debbugs.gnu.org; Wed, 06 Dec 2023 08:19:43 -0500 Received: from mugam.systemreboot.net ([139.59.75.54]:46538) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rAroP-0002et-UW for 67288@debbugs.gnu.org; Wed, 06 Dec 2023 08:19:42 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=systemreboot.net; s=default; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=jij4xmsPwp6IfN1i/kRkxp3U8CZKYNeYH+OsrrmL4io=; b=cS9yeKRM807tSLCGXOJdUqCSpn 4K4fUaEj9XvFSsN9HTNoz4Qw0N8TGZ5zarZlfIaR0X8S08pl0zwCGzjQIPGAecAG4YWEb+UkYjoHt lmMZtYSb7j3l5EPZsmlTwwvgDd+gqtgV7nL1aLAsBhkijowoticS7RU1+qsruxEE2Xy+FcGZVS491 RaTy2qe4npIjRdVh/xDibkwArnoRTyVvlpbbdgSiF6RoA/ZbvGA0Lga5FvY42Bm9vwxJAxtrikV7Y WtlN0Wqijme6lqqAupiUyoiSg894Rw39XUCJBn+TszUvXd0uDhsq1gvwQN2jWwEbRvWvYiiCMvO6f r7aion7A==; Received: from [192.168.2.1] (port=41032 helo=localhost) by systemreboot.net with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1rAro2-001KB4-2g; Wed, 06 Dec 2023 13:19:15 +0000 From: Arun Isaac To: "Thompson, David" Subject: Re: [bug#67288] [PATCH] services: laminar: Add configuration option for supplementary groups In-Reply-To: <878r6kcy9t.fsf@systemreboot.net> References: <87leal4zz1.fsf@gnu.org> <87il5pcrjc.fsf@systemreboot.net> <878r6kcy9t.fsf@systemreboot.net> Date: Wed, 06 Dec 2023 13:19:10 +0000 Message-ID: <8734wfcvu9.fsf@systemreboot.net> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 67288 Cc: Christopher Baines , Ludovic =?utf-8?Q?Court=C3=A8s?= , 67288@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi David, >> but in the short term I think it's fine to do simple things that help >> people out even though it's not the "right thing". > > I agree. Please go ahead and push this patch if everything else checks out. I don't mean to block this patch. Thanks, Arun From debbugs-submit-bounces@debbugs.gnu.org Thu Dec 28 12:58:22 2023 Received: (at 67288-done) by debbugs.gnu.org; 28 Dec 2023 17:58:22 +0000 Received: from localhost ([127.0.0.1]:40296 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rIueD-0004ap-RJ for submit@debbugs.gnu.org; Thu, 28 Dec 2023 12:58:22 -0500 Received: from mail-qv1-xf30.google.com ([2607:f8b0:4864:20::f30]:46501) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rIueA-0004ab-UW for 67288-done@debbugs.gnu.org; Thu, 28 Dec 2023 12:58:19 -0500 Received: by mail-qv1-xf30.google.com with SMTP id 6a1803df08f44-67f645f2e3fso52562046d6.1 for <67288-done@debbugs.gnu.org>; Thu, 28 Dec 2023 09:58:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=worcester-edu.20230601.gappssmtp.com; s=20230601; t=1703786294; x=1704391094; darn=debbugs.gnu.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=u0eihO7YMEXi5AcDRecyV8i7e36KpkPqxNpExAo5dd4=; b=YRui3pN8mJqQJIgJtI8HNF6C0eOSFbvf+6y0LIqtAlNKaiwUl6VfTi+VZWuG/i1COo IxM5+JRXyOFYWyHi0Tycaq4Og61RlEyv6VE2aulU07sXgh4A4gxQvCiaFjy1vySWzTo5 1+iElnOI94oK/ne6Aa/6tpNsJjK5y7aTVtfO3WftOqBr4mUAnLwzILhAN4+LxMKxcadn kl+6NjG1vL+oZgWKHxSfN87l+Fp0GvWyq7zUB5GERZGC+aXe+9lGlEpJeS9gbzfC8w36 WipzQGa12UXVTu1VFxGDfgmIEgwL9IMvFQolBiZrS2lz45oEVAgvGuYQQR1Pmyahs4DK cmEg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1703786294; x=1704391094; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=u0eihO7YMEXi5AcDRecyV8i7e36KpkPqxNpExAo5dd4=; b=vW/t6ryT8cQ8SjeKppfVzTpmUiv2YHMbWAwAULPne8giRfDpMy4k0Aold8DRWSSVjb KcQGNhNh5eeKBoFw/yw3zwPi1hOhp9pEl8HZpBe5K4wn3LmLwQVjHWMTgZ7+6Cwxr/rw RSRg2iFQuwkjMmAgWLUsEGh7KDmdqKfpQvgFWarsFCfOAx54/vU1XXqRO8wfkmOlyf/6 nxNFkdgeF1jNjmroLYg9Pk5sRsdlV7jsF1TpkgXAjlJXFQnzaKlY/sJIKsdydL8VyDvd YmjPFSfK8ZhI1ZRy8pcMOM/wyWxF/cMehCdA0FQwaDdgYwFTrBI9AlfxCVsglCLR02OM t6/Q== X-Gm-Message-State: AOJu0YyZzOoQrzIsmGyaDunigUna6L4K0xWafWdWUysGOLYxqhyXaMqa 1qTeiloU4W6AKQBHdoBLw2SSTbI0UKIXCZScYhtOWUeAJTEzPg== X-Google-Smtp-Source: AGHT+IHIyDf46N3MKivr4tFgc7CmePjMfGvcpjgo5MM3WBHNyUFqRZn0l+6k6/P9vOOAfxDAFJkOQNIwnV3pMjd2TYA= X-Received: by 2002:a0c:d646:0:b0:680:6f20:738e with SMTP id e6-20020a0cd646000000b006806f20738emr2010323qvj.62.1703786293895; Thu, 28 Dec 2023 09:58:13 -0800 (PST) MIME-Version: 1.0 References: <87leal4zz1.fsf@gnu.org> <87il5pcrjc.fsf@systemreboot.net> <878r6kcy9t.fsf@systemreboot.net> <8734wfcvu9.fsf@systemreboot.net> In-Reply-To: <8734wfcvu9.fsf@systemreboot.net> From: "Thompson, David" Date: Thu, 28 Dec 2023 12:58:02 -0500 Message-ID: Subject: Re: [EXT] Re: [bug#67288] services: laminar: Add configuration option for supplementary groups To: Arun Isaac Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 67288-done Cc: Christopher Baines , 67288-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Arun, On Wed, Dec 6, 2023 at 8:19=E2=80=AFAM Arun Isaac wrote: > > > Hi David, > > >> but in the short term I think it's fine to do simple things that help > >> people out even though it's not the "right thing". > > > > I agree. > > Please go ahead and push this patch if everything else checks out. I > don't mean to block this patch. Okay, pushed! Thanks! - Dave From unknown Sun Aug 10 07:40:34 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Fri, 26 Jan 2024 12:24:09 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator