Arch Linux User Repository

Hi,

Before Guix 1.5.0 was out, I tried to fix some security issues but Guix failed to build due to a Guile version that was too recent in Arch (and Parabola). I've fixed in Parabola by adding a guile and some guile packages specially for Guix which were installed in /opt. Since that added many packages I was too lazy to also contribute back here. I also didn't find the time to fix all the security issues anyway though I managed to add instructions on how to update the guix-daemon on foreign distributions directly in the (latest) version of the Guix manual, so at least users could take the matter in their own hands.

Now that Guix 1.5.0 is out, and that it contains fixes for the security issues, I started updating the package to Guix 1.5.0 in Parabola, and I'll ask to import it after validating that it works well (right now the daemon doesn't start because the default is now rootless mode).

Beside the question of rootless or not rootless (I've not looked into how to put it back in root mode yet, and I was too in a hurry to finally fix security issues that I already shipped a rootless guix daemon without warning users, so my plan is now to point to the official Guix manual to make them migrate to rootless because of that).

At the time of 1.4.0, I've also made changes to reduce the commands required to get something functional (group creations and so on) but they could easily be ditched or re-made if we go rootless.

Another question is licensing. Arch Linux started licensing PKGBUILDs some time ago (https://lwn.net/Articles/998778/). So do you agree to provide all your contributions to guix.install, PKGBUILD and .SRCINFO of https://aur.archlinux.org/cgit/aur.git/tree/?h=guix under the terms of the Zero-Clause BSD license?

I personally agree to that. In Parabola thse were under CC-0 because it predated Arch Linux change but it's easier to have the same license.

I've kept the guix-hook file GPLv3 for compatibility with Guix but I can also change the license to Zero-Clause BSD if you want. I just need to check if it's compatible with the GPLv3+ as I don't want to rule out inclusion of what's in there in Guix proper in case other people than me contribute to it.

edit1: clarify that Guix 1.4.0 had security issues, not Guix 1.5.0

1.5 released. better innstall from giuthib buu his own script has problem.

-> Failed to install the following packages. Manual intervention is required:
guile-ssh - exit status 4
guile-gcrypt - exit status 1
guix - exit status 8
guile-zlib - exit status 1
disarchive - exit status 8
guile-lzlib - exit status 1
guile-lib - exit status 4
guile-zstd - exit status 1

When trying to install I get this:

Updating ./doc/version-zh_CN.texi MAKEINFO doc/guix.zh_CN.info guix.zh_CN.texi:21023: warning: @ should not occur at end of argument to line command guix.zh_CN.texi:21050: warning: @ should not occur at end of argument to line command guix.zh_CN.texi:21086: warning: @ should not occur at end of argument to line command MAKEINFO doc/guix-cookbook.de.info MAKEINFO doc/guix-cookbook.fr.info MAKEINFO doc/guix-cookbook.ko.info MAKEINFO doc/guix-cookbook.sk.info CXX nix/nix-daemon/guix_daemon-nix-daemon.o In file included from ./nix/libstore/local-store.hh:8, from nix/nix-daemon/nix-daemon.cc:3: ./nix/libstore/store-api.hh:92:5: error: ‘uint64_t’ does not name a type 92 | uint64_t narSize = 0; // 0 = unknown | ^~ ./nix/libstore/store-api.hh:9:1: note: ‘uint64_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’ 8 | #include <memory> +++ |+#include <cstdint> 9 | ./nix/libstore/store-api.hh:93:5: error: ‘uint64_t’ does not name a type 93 | uint64_t id; // internal use only | ^~ ./nix/libstore/store-api.hh:93:5: note: ‘uint64_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’ ./nix/libstore/local-store.hh:217:5: error: ‘uint64_t’ does not name a type 217 | uint64_t queryValidPathId(const Path & path); | ^~ ./nix/libstore/local-store.hh:10:1: note: ‘uint64_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’ 9 | #include "util.hh" +++ |+#include <cstdint> 10 | ./nix/libstore/local-store.hh:219:5: error: ‘uint64_t’ does not name a type 219 | uint64_t addValidPath(const ValidPathInfo & info, bool checkOutputs = true); | ^~ ./nix/libstore/local-store.hh:219:5: note: ‘uint64_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’ ./nix/libstore/local-store.hh:221:23: error: ‘uint64_t’ has not been declared 221 | void addReference(uint64_t referrer, uint64_t reference); | ^~ ./nix/libstore/local-store.hh:221:23: note: ‘uint64_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’ ./nix/libstore/local-store.hh:221:42: error: ‘uint64_t’ has not been declared 221 | void addReference(uint64_t referrer, uint64_t reference); | ^~ ./nix/libstore/local-store.hh:221:42: note: ‘uint64_t’ is defined in header ‘<cstdint>’; this is probably fixable by adding ‘#include <cstdint>’ nix/nix-daemon/nix-daemon.cc: In function ‘void performOp(bool, unsigned int, nix::Source&, nix::Sink&, unsigned int)’: nix/nix-daemon/nix-daemon.cc:708:28: error: ‘struct nix::ValidPathInfo’ has no member named ‘narSize’ 708 | writeLongLong(info.narSize, to); | ^ nix/nix-daemon/nix-daemon.cc: In function ‘void sigPollHandler(int)’: nix/nix-daemon/nix-daemon.cc:140:22: warning: ignoring return value of ‘ssize_t write(int, const void, size_t)’ declared with attribute ‘warn_unused_result’ [-Wunused-result] 140 | write(STDERR_FILENO, s, strlen(s)); | ~^ nix/nix-daemon/nix-daemon.cc:144:18: warning: ignoring return value of ‘ssize_t write(int, const void, size_t)’ declared with attribute ‘warn_unused_result’ [-Wunused-result] 144 | write(STDERR_FILENO, s, strlen(s)); | ~^ nix/nix-daemon/nix-daemon.cc:150:14: warning: ignoring return value of ‘ssize_t write(int, const void*, size_t)’ declared with attribute ‘warn_unused_result’ [-Wunused-result] 150 | write(STDERR_FILENO, s.data(), s.size()); | ~^ make[2]: *** [Makefile:4714: nix/nix-daemon/guix_daemon-nix-daemon.o] Error 1 make[2]: Leaving directory '/home/fish/.cache/yay/guix/src/guix-1.4.0' make[1]: *** [Makefile:5929: all-recursive] Error 1 make[1]: Leaving directory '/home/fish/.cache/yay/guix/src/guix-1.4.0' make: *** [Makefile:4043: all] Error 2 ==> ERROR: A failure occurred in build(). Aborting... -> error making: guix-exit status 4 -> Failed to install the following packages. Manual intervention is required: guix - exit status 4

Build is broken. Adding #include <cstdint> to the top of nix/libstore/store-api.hh and applying this (https://issues.guix.gnu.org/78419) patch appears to fix it.

This package also needs manual configuration post-install to set up the build users, as documented here: https://guix.gnu.org/manual/devel/en/guix.html#Daemon-Running-as-Root.

It seems like that method is now dispreferred, as documented here: https://guix.gnu.org/manual/devel/en/guix.html#Daemon-Running-Without-Privileges. Perhaps this package should be updated accordingly?

tests/containers.scm seems to hang forever.

Tests fail. Only showing FAILs and nearby PASSes. Command run is "paru -Syu guix". ==> Starting check()... make check-TESTS check-local PASS: tests/describe.scm - create lightweight tag FAIL: tests/clone.scm - clone-auth-ssh-credentials PASS: tests/describe.scm - describe HEAD, strategy tags PASS: tests/diff.scm - diff filename FAIL: tests/clone.scm - clone-auth-ssh-agent PASS: tests/oid.scm - oid=? PASS: tests/oid.scm - object-lookup FAIL: tests/clone.scm - clone-and-fetch-auth-ssh-credentials PASS: tests/reference.scm - reference-name PASS: tests/proxy.scm - clone with HTTPS proxy FAIL: tests/clone.scm - clone + transfer-progress PASS: tests/reset.scm - reset hard

% uname -a Linux skyvale 6.9.2-arch1-1 #1 SMP PREEMPT_DYNAMIC Sun, 26 May 2024 01:30:29 +0000 x86_64 GNU/Linux

The install fails for me with the following errors

~/dl/aur/guix $ makepkg -sci
==> Making package: guix 1.4.0-1 (Tue 13 Feb 2024 19:45:51 CET)
==> Checking runtime dependencies...
==> Installing missing dependencies...
[sudo] password for port19: 
error: target not found: guile-gcrypt>=0.1.0
error: target not found: guile-gnutls
error: target not found: guile-sqlite3>=0.1.0
error: target not found: guile-zlib>=0.1.0
error: target not found: guile-lzlib
error: target not found: guile-avahi
error: target not found: guile-git-lib>=0.5.0
error: target not found: guile-json>=4.3.0
error: target not found: guile-lzma
error: target not found: disarchive
==> ERROR: 'pacman' failed to install missing dependencies.
==> Missing dependencies:
  -> guile-gcrypt>=0.1.0
  -> guile-gnutls
  -> guile-sqlite3>=0.1.0
  -> guile-zlib>=0.1.0
  -> guile-lzlib
  -> guile-avahi
  -> guile-git-lib>=0.5.0
  -> guile-json>=4.3.0
  -> guile-lzma
  -> disarchive
==> Checking buildtime dependencies...
==> Installing missing dependencies...
error: target not found: guile-ssh>=0.13.0
error: target not found: guile-zstd
error: target not found: guile-semver
error: target not found: guile-lib
==> ERROR: 'pacman' failed to install missing dependencies.
==> Missing dependencies:
  -> guile-ssh>=0.13.0
  -> guile-zstd
  -> guile-semver
  -> guile-lib
  -> bash-completion
  -> fish
  -> help2man
  -> po4a
==> ERROR: Could not resolve all dependencies.

@garid3000 Can you run make with 'V=1' to show the command it runs?