From unknown Sun Jun 22 17:13:23 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#68894 <68894@debbugs.gnu.org> To: bug#68894 <68894@debbugs.gnu.org> Subject: Status: Prosody guix service required fixes. Reply-To: bug#68894 <68894@debbugs.gnu.org> Date: Mon, 23 Jun 2025 00:13:23 +0000 retitle 68894 Prosody guix service required fixes. reassign 68894 guix submitter 68894 "email@msavoritias.me" severity 68894 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Fri Feb 02 10:46:54 2024 Received: (at submit) by debbugs.gnu.org; 2 Feb 2024 15:46:54 +0000 Received: from localhost ([127.0.0.1]:45451 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rVvkk-0001mF-9Q for submit@debbugs.gnu.org; Fri, 02 Feb 2024 10:46:54 -0500 Received: from lists.gnu.org ([2001:470:142::17]:38148) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rVvkh-0001m1-Fp for submit@debbugs.gnu.org; Fri, 02 Feb 2024 10:46:52 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVvkQ-0007gk-Nq for bug-guix@gnu.org; Fri, 02 Feb 2024 10:46:34 -0500 Received: from mail.webarch.email ([81.95.52.48]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVvkN-0006Rh-Ja for bug-guix@gnu.org; Fri, 02 Feb 2024 10:46:33 -0500 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id BA13C1A8D8A8 for ; Fri, 2 Feb 2024 15:46:18 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msavoritias.me; s=20210930; t=1706888781; h=from:subject:date:message-id:to:mime-version:content-type: content-language; bh=EsPfG0UJ2fTG4FPuWPDv8X2YkcG6OVp6x8Lv/WMEBfc=; b=g7ggkRN9CoKvmhlU/qEMZ8xzHCT+n3bEZfy76Zszlfn4LVJafzSUNhcqgD8bOwKKgapnJt eNZTx6anxLu5jxvjLoiTdNunbPdGIg1+fYLBBAnSx84r0LmSKm+2zD2xe+mMJdKqtH5hUH sykSv8TxPrFyXvcvzqN/0Tw1YzyJthWkhYq3XW1k4bchpt85MopA1OUZSoYwQXJGxP2Esy D8KZCuBP5smEiQKRkyosBbJrwNwJkkowBnbfPsqTsLainNsGv3bY5MksPeTbaoUJJNpi8b 1rhG5i8/stx3c8twtJ8NzPuwrnTKfpn+eIjXEorHb9k9wmIJRnxFD3EuT9PUIA== Content-Type: multipart/alternative; boundary="------------8c4fUGcDEhyc0Rk208H4b5yJ" Message-ID: <41a23fb5-7698-bc69-8c22-80c5433b53cd@fannys.me> Date: Fri, 2 Feb 2024 17:46:11 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.0 Content-Language: en-US To: bug-guix@gnu.org From: "email@msavoritias.me" Subject: Prosody guix service required fixes. X-Last-TLS-Session-Version: TLSv1.3 Received-SPF: pass client-ip=81.95.52.48; envelope-from=email@msavoritias.me; helo=mail.webarch.email X-Spam_score_int: -16 X-Spam_score: -1.7 X-Spam_bar: - X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) This is a multi-part message in MIME format. --------------8c4fUGcDEhyc0Rk208H4b5yJ Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Tried to write a system declaration that includes a prosody server. This bug aims to collect some bugs that were found and some features that were needed during writing. 1. The opaque-prosody-configuration as used in this example https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua is broken. A workaround for now is adding raw-content as a field inside prosody-configuration. 2. Prosody Includes a plugin installer now https://prosody.im/doc/installing_modules#using-the-installer so the plugin-directory here https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths needs to be changed to wrap the module installer instead. since its easier to do that than manually copying modules. This is for modules that are not part of guix yet. Ideally imo an xmpp package file would be ideal to host any module that are packaged plus all related software. 3. The modules enabled by default is outdated https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled A simple example vcard is deprecated now. also not sure if register should be default now since we have invites. 4. Security should be the default at this point https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f should be turned to true by default. all are already true by default upstream https://prosody.im/doc/s2s#security 5. The internal authentication here https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication |should be internal_hashed as per default. https://prosody.im/doc/authentication it should never be plain.| |6. Also a field for http_file_share is mandatory nowadays. see https://prosody.im/doc/modules/mod_http_file_share| |7. room creation should be local for safety reasons https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation| |nobody allows non local anymore.| I plan to get to do this btw after i am done with the joinjabber server at some point. :) |Regards,| |MSavoritias| --------------8c4fUGcDEhyc0Rk208H4b5yJ Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Tried to write a system declaration that includes a prosody server.

This bug aims to collect some bugs that were found and some features that were needed during writing.


1. The opaque-prosody-configuration as used in this example https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua

is broken. A workaround for now is adding raw-content as a field inside prosody-configuration.


2. Prosody Includes a plugin installer now https://prosody.im/doc/installing_modules#using-the-installer

so the plugin-directory here https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths needs to be changed to wrap the module installer instead. since its easier to do that than manually copying modules.

This is for modules that are not part of guix yet. Ideally imo an xmpp package file would be ideal to host any module that are packaged plus all related software.


3. The modules enabled by default is outdated https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled

A simple example vcard is deprecated now. also not sure if register should be default now since we have invites.


4. Security should be the default at this point

https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f

https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f

https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f

should be turned to true by default. all are already true by default upstream https://prosody.im/doc/s2s#security


5. The internal authentication here https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication

should be internal_hashed as per default. https://prosody.im/doc/authentication it should never be plain.


6. Also a field for http_file_share is mandatory nowadays. see https://prosody.im/doc/modules/mod_http_file_share


7. room creation should be local for safety reasons https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation

nobody allows non local anymore.


I plan to get to do this btw after i am done with the joinjabber server at some point. :)


Regards,

MSavoritias

--------------8c4fUGcDEhyc0Rk208H4b5yJ-- From debbugs-submit-bounces@debbugs.gnu.org Fri Feb 02 12:00:03 2024 Received: (at 68894) by debbugs.gnu.org; 2 Feb 2024 17:00:04 +0000 Received: from localhost ([127.0.0.1]:45498 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rVwtX-0006YS-GB for submit@debbugs.gnu.org; Fri, 02 Feb 2024 12:00:03 -0500 Received: from out5-smtp.messagingengine.com ([66.111.4.29]:39725) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rVwtU-0006XO-C7 for 68894@debbugs.gnu.org; Fri, 02 Feb 2024 12:00:02 -0500 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id DCAEA5C0040; Fri, 2 Feb 2024 11:59:43 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Fri, 02 Feb 2024 11:59:43 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lassieur.org; h= cc:cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm2; t=1706893183; x=1706979583; bh=Iv71jqKjE2DlmZbFffuz/J3cLgDRbRWWn//iDAcYS7s=; b= gUuDPCYKLJ4++tblIXSVhqOJ+Um8CcAFP651rgUpP2+WJIqtrIqFXbkVhK3gBp/1 D5abyUYct+TKMuxIeDKjrJl8fCJ8Bx2yyma0kJgupGMcUIYagwjrhT9dGn+rH7tv 3CSRuEC/Z+y+h3KhPZI6aligiQINjtrl0RJl2L/4sOfqeoPN8vCu2GWYFJLgMy50 5YdI1W2UaXjDNQ6Rn6yFpSnri1EgT9AorMpk8TpgjpXib2MhkzKalBJBqhwzYOLL oAoemDswrgx6WSpzO6/zL5oU9uXGM4DnjhxYgfpbB0BuOwYW4H0PlNGs2cMoyxc+ aNk79F2sB/heDJeF11ESIw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1706893183; x= 1706979583; bh=Iv71jqKjE2DlmZbFffuz/J3cLgDRbRWWn//iDAcYS7s=; b=R RY46tgGhhhPnnY0uyZwZH8yOLWisstruRggT5QLBBygVmW/LfyWlcdT9M9B76+6J cioDIq77pvCYXeB9/M88XbJauPfuEDwJHll+rbnumZzvHPZm3j4F5hj1xp5efw+i Z2sMVaivvQnaJgx1IJUlUu3tz9RuAfc6+oHwp+alsd6JUTbRz2sXk/7L8JFx9kHt E8DEY11igvMSSTENIVDlI9WAfXrfoJszKz8QVvYhIaT1iqi3CvdvQQkQVpt1Sw0A qN6S/5PLylkvXi3J/RXGDPsLWBOOs/cot1u1DQO913C66ydiKdUraJ0K7vx/SNBn ZGo7qG+KKFoXcQPH9amrQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrfedugedgleegucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefhvfevufgjfhffkfgfgggtgfesth hqredttderjeenucfhrhhomhepvehlrohmvghnthcunfgrshhsihgvuhhruceotghlvghm vghntheslhgrshhsihgvuhhrrdhorhhgqeenucggtffrrghtthgvrhhnpeevueevvdejgf dutdffveehgffhteeujeetffegveffheelhfegieeuieejleevueenucffohhmrghinhep ghhnuhdrohhrghdpphhrohhsohguhidrihhmnecuvehluhhsthgvrhfuihiivgeptdenuc frrghrrghmpehmrghilhhfrhhomheptghlvghmvghntheslhgrshhsihgvuhhrrdhorhhg X-ME-Proxy: Feedback-ID: i4c21472a:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri, 2 Feb 2024 11:59:42 -0500 (EST) From: =?utf-8?Q?Cl=C3=A9ment_Lassieur?= To: email@msavoritias.me Subject: Re: bug#68894: Prosody guix service required fixes. In-Reply-To: <41a23fb5-7698-bc69-8c22-80c5433b53cd@fannys.me> (email@msavoritias.me's message of "Fri, 2 Feb 2024 17:46:11 +0200") References: <41a23fb5-7698-bc69-8c22-80c5433b53cd@fannys.me> Date: Fri, 02 Feb 2024 17:59:40 +0100 Message-ID: <87mssidcoz.fsf@lassieur.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 68894 Cc: 68894@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) On Fri, Feb 02 2024, email@msavoritias.me wrote: > Tried to write a system declaration that includes a prosody server. > > This bug aims to collect some bugs that were found and some features that= were needed during writing. > > 1. The opaque-prosody-configuration as used in this example > https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_0= 02elua > > is broken. A workaround for now is adding raw-content as a field inside p= rosody-configuration. Indeed it seems like it's never worked. The issue is: how do we know the pid-file if the user is using the raw config. Sounds like we need a service, in that case, that works without pid-file. > 2. Prosody Includes a plugin installer now https://prosody.im/doc/install= ing_modules#using-the-installer > > so the plugin-directory here https://guix.gnu.org/en/manual/devel/en/guix= .html#index-plugin_002dpaths needs to be changed to wrap the > module installer instead. since its easier to do that than manually copyi= ng modules. > > This is for modules that are not part of guix yet. Ideally imo an xmpp pa= ckage file would be ideal to host any module that are packaged plus all > related software. > > 3. The modules enabled by default is outdated https://guix.gnu.org/en/man= ual/devel/en/guix.html#index-modules_002denabled > > A simple example vcard is deprecated now. also not sure if register shoul= d be default now since we have invites. > > 4. Security should be the default at this point=20 > > https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_0= 02dencryption_003f > > https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_0= 02dencryption_003f > > https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_00= 2dauth_003f > > should be turned to true by default. all are already true by default upst= ream https://prosody.im/doc/s2s#security > > 5. The internal authentication here https://guix.gnu.org/en/manual/devel/= en/guix.html#index-authentication > > should be internal_hashed as per default. https://prosody.im/doc/authenti= cation it should never be plain. > > 6. Also a field for http_file_share is mandatory nowadays. see https://pr= osody.im/doc/modules/mod_http_file_share > > 7. room creation should be local for safety reasons > https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom= _002dcreation > > nobody allows non local anymore. > > I plan to get to do this btw after i am done with the joinjabber > server at some point. :) Cool, I'd be happy to review. Thanks for this email. It's a long time I haven't been using Prosody and unfortunately this Guile wrapper is a maintenance burden. Even more so now that XMPP is less and less used. I wonder if it would be better to just support a minimal raw config. Cl=C3=A9ment From debbugs-submit-bounces@debbugs.gnu.org Sat Feb 03 02:57:13 2024 Received: (at 68894) by debbugs.gnu.org; 3 Feb 2024 07:57:13 +0000 Received: from localhost ([127.0.0.1]:45817 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rWAtk-0007zp-Ry for submit@debbugs.gnu.org; Sat, 03 Feb 2024 02:57:13 -0500 Received: from mail.webarch.email ([81.95.52.48]:42870) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rWAth-0007zg-Kk for 68894@debbugs.gnu.org; Sat, 03 Feb 2024 02:57:11 -0500 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 4D7471A8D776; Sat, 3 Feb 2024 07:56:57 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msavoritias.me; s=20210930; t=1706947017; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-language:in-reply-to:references; bh=eHQLrlIz18sE/EaxWIoFGYokcbuC11N6wLV+Hcm50H8=; b=oFpNy/pO2K+qzaHCX4IEi2z0m2uqnnZw4j3snTFtsxOtVB9m6uZ1cWrhWbBXZx9OROrEzU GEg39TqsdvyTkeKM8TXBjNyWzCPrhugxycNMPZZ9qBhVuWyWeYhjfdywjIeB2bwBwIisQs MLjjn/Yk8dEgIXHK0EqwQFyvo1k9/bzSZc8OmE+b8iVKV95f9LRFyl/KSJqZBnW4f+DSYz BOBIivG5cnQWmIEPJhTcE2sLZtdPebocJnHhu5hZ3W4bmF5idCetdgd4FdF28yYzhdvOWU HSYtyUO3Qn2nMhvpmg2QHln/uX1cSVcoAZFNVuFJDpffH3Xea+I4oD3MKsV9iA== Content-Type: multipart/alternative; boundary="------------XFiOmfkBRNWdx7tY8QW4hR0V" Message-ID: Date: Sat, 3 Feb 2024 09:56:56 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.0 Subject: Re: bug#68894: Prosody guix service required fixes. Content-Language: en-US To: =?UTF-8?Q?Cl=c3=a9ment_Lassieur?= References: <41a23fb5-7698-bc69-8c22-80c5433b53cd@fannys.me> <87mssidcoz.fsf@lassieur.org> From: "email@msavoritias.me" In-Reply-To: <87mssidcoz.fsf@lassieur.org> X-Last-TLS-Session-Version: TLSv1.3 X-Spam-Score: -3.1 (---) X-Debbugs-Envelope-To: 68894 Cc: 68894@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.1 (----) This is a multi-part message in MIME format. --------------XFiOmfkBRNWdx7tY8QW4hR0V Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit On 2/2/24 6:59 PM, Clément Lassieur wrote: > On Fri, Feb 02 2024, email@msavoritias.me wrote: > >> Tried to write a system declaration that includes a prosody server. >> >> This bug aims to collect some bugs that were found and some features >> that were needed during writing. >> >> 1. The opaque-prosody-configuration as used in this example >> https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua >> >> >> is broken. A workaround for now is adding raw-content as a field >> inside prosody-configuration. > Indeed it seems like it's never worked.  The issue is: how do we know > the pid-file if the user is using the raw config.  Sounds like we need a > service, in that case, that works without pid-file. > >> 2. Prosody Includes a plugin installer now >> https://prosody.im/doc/installing_modules#using-the-installer >> >> so the plugin-directory here >> https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths >> needs to be changed to wrap the >> module installer instead. since its easier to do that than manually >> copying modules. >> >> This is for modules that are not part of guix yet. Ideally imo an >> xmpp package file would be ideal to host any module that are packaged >> plus all >> related software. >> >> 3. The modules enabled by default is outdated >> https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled >> >> >> A simple example vcard is deprecated now. also not sure if register >> should be default now since we have invites. >> >> 4. Security should be the default at this point >> >> https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f >> >> >> https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f >> >> >> https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f >> >> >> should be turned to true by default. all are already true by default >> upstream https://prosody.im/doc/s2s#security >> >> 5. The internal authentication here >> https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication >> >> should be internal_hashed as per default. >> https://prosody.im/doc/authentication it should never be plain. >> >> 6. Also a field for http_file_share is mandatory nowadays. see >> https://prosody.im/doc/modules/mod_http_file_share >> >> 7. room creation should be local for safety reasons >> https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation >> >> >> nobody allows non local anymore. >> >> I plan to get to do this btw after i am done with the joinjabber >> server at some point. 😄 > Cool, I'd be happy to review.  Thanks for this email.  It's a long time > I haven't been using Prosody and unfortunately this Guile wrapper is a > maintenance burden.  Even more so now that XMPP is less and less used. > > I wonder if it would be better to just support a minimal raw config. > > Clément We could simplify it by a lot i think either way. Some ways could be: 1. Remove the opaque-configuration since it never worked for raw content which does already. 2. Remove the ssl config section here https://guix.gnu.org/en/manual/devel/en/guix.html#index-ssl nobody should be touching these settings either way. Personally I would prefer to have a scheme config but could go either way. I use xmpp as my only-full time messaging and own the xmpp guix room. This prosody service is going to be used for joinjabber which you can see here btw https://codeberg.org/joinjabber/Infra I also have talked about a guix self hosted xmpp server for a guix room so prosody would be used for that. My thinking is that yeah the xmpp support in guix is not great and should be better. To that end in the short term I would be interested in updating/maintaining/adding xmpp software/services to guix. Longer term as i wrote maybe also putting all xmpp stuff in a single file. but that can come later 😄 An xmpp team would also be something that could be done at some point. Regards, MSavoritias --------------XFiOmfkBRNWdx7tY8QW4hR0V Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit On 2/2/24 6:59 PM, Clément Lassieur wrote:
On Fri, Feb 02 2024, email@msavoritias.me wrote:

Tried to write a system declaration that includes a prosody server.

This bug aims to collect some bugs that were found and some features that were needed during writing.

1. The opaque-prosody-configuration as used in this example
https://guix.gnu.org/en/manual/devel/en/guix.html#index-prosody_002ecfg_002elua

is broken. A workaround for now is adding raw-content as a field inside prosody-configuration.
Indeed it seems like it's never worked.  The issue is: how do we know
the pid-file if the user is using the raw config.  Sounds like we need a
service, in that case, that works without pid-file.

2. Prosody Includes a plugin installer now https://prosody.im/doc/installing_modules#using-the-installer

so the plugin-directory here https://guix.gnu.org/en/manual/devel/en/guix.html#index-plugin_002dpaths needs to be changed to wrap the
module installer instead. since its easier to do that than manually copying modules.

This is for modules that are not part of guix yet. Ideally imo an xmpp package file would be ideal to host any module that are packaged plus all
related software.

3. The modules enabled by default is outdated https://guix.gnu.org/en/manual/devel/en/guix.html#index-modules_002denabled

A simple example vcard is deprecated now. also not sure if register should be default now since we have invites.

4. Security should be the default at this point

https://guix.gnu.org/en/manual/devel/en/guix.html#index-c2s_002drequire_002dencryption_003f

https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002drequire_002dencryption_003f

https://guix.gnu.org/en/manual/devel/en/guix.html#index-s2s_002dsecure_002dauth_003f

should be turned to true by default. all are already true by default upstream https://prosody.im/doc/s2s#security

5. The internal authentication here https://guix.gnu.org/en/manual/devel/en/guix.html#index-authentication

should be internal_hashed as per default. https://prosody.im/doc/authentication it should never be plain.

6. Also a field for http_file_share is mandatory nowadays. see https://prosody.im/doc/modules/mod_http_file_share

7. room creation should be local for safety reasons
https://guix.gnu.org/en/manual/devel/en/guix.html#index-restrict_002droom_002dcreation

nobody allows non local anymore.

I plan to get to do this btw after i am done with the joinjabber
server at some point. 😄
Cool, I'd be happy to review.  Thanks for this email.  It's a long time
I haven't been using Prosody and unfortunately this Guile wrapper is a
maintenance burden.  Even more so now that XMPP is less and less used.

I wonder if it would be better to just support a minimal raw config.

Clément

We could simplify it by a lot i think either way. Some ways could be:

1. Remove the opaque-configuration since it never worked for raw content which does already.

2. Remove the ssl config section here https://guix.gnu.org/en/manual/devel/en/guix.html#index-ssl

nobody should be touching these settings either way.


Personally I would prefer to have a scheme config but could go either way. I use xmpp as my only-full time messaging and own the xmpp guix room.

This prosody service is going to be used for joinjabber which you can see here btw https://codeberg.org/joinjabber/Infra

I also have talked about a guix self hosted xmpp server for a guix room so prosody would be used for that.

My thinking is that yeah the xmpp support in guix is not great and should be better. To that end in the short term I would be interested in updating/maintaining/adding xmpp software/services to guix.

Longer term as i wrote maybe also putting all xmpp stuff in a single file. but that can come later 😄 An xmpp team would also be something that could be done at some point.


Regards,

MSavoritias --------------XFiOmfkBRNWdx7tY8QW4hR0V-- From debbugs-submit-bounces@debbugs.gnu.org Sat Feb 03 05:32:04 2024 Received: (at 68894) by debbugs.gnu.org; 3 Feb 2024 10:32:04 +0000 Received: from localhost ([127.0.0.1]:45900 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rWDJc-0003lr-Dg for submit@debbugs.gnu.org; Sat, 03 Feb 2024 05:32:04 -0500 Received: from out5-smtp.messagingengine.com ([66.111.4.29]:50935) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rWDJZ-0003lK-Tu for 68894@debbugs.gnu.org; Sat, 03 Feb 2024 05:32:03 -0500 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id AE2055C00E1; Sat, 3 Feb 2024 05:31:44 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Sat, 03 Feb 2024 05:31:44 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lassieur.org; h= cc:cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm2; t=1706956304; x=1707042704; bh=V51IAC9RpO+i4IDqkfUE0VsXOAh0rnnTXH+x4y7Y50M=; b= dj36emJ+kcyB0OVr6kSjLzPUkMbDU/Mz+DK7l/dQutZHFTdrVs98FfMJHbyBvBcS AI/kiaXeubXDeM+wHK7TEbz2qae7RqVAdW5k3IfYcyPnxau6vAVDyiIcjUuTFb8Z TmTqTJM4qO8aG2xCjj9wGEYrQGBbF4rXtPq3P1m53r5NaVAcDsFmEX1zlzZ49zUt VsuSASjXvpdhgKAZrATMoZwP3hN9PIDJ1z2jJknJ+F9nPvSirspSOJfaMQp2XuqT 45fOoGPczyQ5/O8Z9Uif/caGE+PppDu7e8fmOAREPgO72HAkgQRua2eJ4BDEhZpr k0Qfcz8wHFI4r66Psh3GaA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1706956304; x= 1707042704; bh=V51IAC9RpO+i4IDqkfUE0VsXOAh0rnnTXH+x4y7Y50M=; b=z GtTCL0fGZD0L3+gXHBA4m/QSPZEOnjVh+LZ7Kmq+cVzom4vNZdoOvbwwoZj8XFrO K2KmVXpPWIFv5tWXlnaOI+y2G9/cEDIHQVFeRPouEU1tyMGfmL3hL4xdCtfOW6Ur AtWcCUbVgzibG7BbRaNDFOHaDbtKqcIIRFlzuFN7PX0vkUWXRRO1KLKsPnVrPqJM pA3n8mPJkEUAioaIWhJe6QCF7JDxM+vohcGU5iFb7/PMDpRZLxwPzSBVlkmlRhIV RZL/hnoL6qy5jCSZf3RfBZoaBSvFhG/QDVQ6d7T8xu57I/W57LmBp2/Q5Ua6mJvM o95BsCK+zPmaFxhz3Soiw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrfeduiedgudehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpefhvfevufgjfhffkfgfgggtgfesth hqredttderjeenucfhrhhomhepvehlrohmvghnthcunfgrshhsihgvuhhruceotghlvghm vghntheslhgrshhsihgvuhhrrdhorhhgqeenucggtffrrghtthgvrhhnpeffvdetueeuke fhvdeiheefgeelleevudeiueejgfevuddufeduteffgfehieeuteenucffohhmrghinhep ghhnuhdrohhrghdptghouggvsggvrhhgrdhorhhgnecuvehluhhsthgvrhfuihiivgeptd enucfrrghrrghmpehmrghilhhfrhhomheptghlvghmvghntheslhgrshhsihgvuhhrrdho rhhg X-ME-Proxy: Feedback-ID: i4c21472a:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 3 Feb 2024 05:31:43 -0500 (EST) From: =?utf-8?Q?Cl=C3=A9ment_Lassieur?= To: email@msavoritias.me Subject: Re: bug#68894: Prosody guix service required fixes. In-Reply-To: (email@msavoritias.me's message of "Sat, 3 Feb 2024 09:56:56 +0200") References: <41a23fb5-7698-bc69-8c22-80c5433b53cd@fannys.me> <87mssidcoz.fsf@lassieur.org> Date: Sat, 03 Feb 2024 11:31:41 +0100 Message-ID: <87zfwhon3m.fsf@lassieur.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 68894 Cc: 68894@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) On Sat, Feb 03 2024, email@msavoritias.me wrote: > We could simplify it by a lot i think either way. Some ways could be:=20 > > 1. Remove the opaque-configuration since it never worked for raw > content which does already. > > 2. Remove the ssl config section here > https://guix.gnu.org/en/manual/devel/en/guix.html#index-ssl > > nobody should be touching these settings either way. > > Personally I would prefer to have a scheme config but could go either > way. I use xmpp as my only-full time messaging and own the xmpp guix > room. > > This prosody service is going to be used for joinjabber which you can > see here btw https://codeberg.org/joinjabber/Infra > > I also have talked about a guix self hosted xmpp server for a guix > room so prosody would be used for that. > > My thinking is that yeah the xmpp support in guix is not great and > should be better. To that end in the short term I would be interested > in updating/maintaining/adding xmpp software/services to guix. > > Longer term as i wrote maybe also putting all xmpp stuff in a single > file. but that can come later =F0=9F=98=84 An xmpp team would also be som= ething > that could be done at some point. This all sounds good. I'm glad the service is used and I'll help you or review if you need! Cheers Cl=C3=A9ment