From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id ACCJCwWoV2KJZgAAgWs5BA (envelope-from ) for ; Thu, 14 Apr 2022 06:50:13 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id oDquCAWoV2LhqQAA9RJhRA (envelope-from ) for ; Thu, 14 Apr 2022 06:50:13 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 23D6419ADD for ; Thu, 14 Apr 2022 06:50:12 +0200 (CEST) Received: from localhost ([::1]:33994 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nerQp-0002Yz-3p for larch@yhetil.org; Thu, 14 Apr 2022 00:50:11 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33074) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nerQg-0002Ym-GH for bug-guix@gnu.org; Thu, 14 Apr 2022 00:50:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:60749) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1nerQg-0005nO-7J for bug-guix@gnu.org; Thu, 14 Apr 2022 00:50:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1nerQg-00056b-3y for bug-guix@gnu.org; Thu, 14 Apr 2022 00:50:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#54923: more than one target service of type 'account' Resent-From: raingloom Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 14 Apr 2022 04:50:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 54923 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 54923@debbugs.gnu.org X-Debbugs-Original-To: Guix Bugs Received: via spool by submit@debbugs.gnu.org id=B.164991177619583 (code B ref -1); Thu, 14 Apr 2022 04:50:01 +0000 Received: (at submit) by debbugs.gnu.org; 14 Apr 2022 04:49:36 +0000 Received: from localhost ([127.0.0.1]:54646 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nerQF-00055m-QL for submit@debbugs.gnu.org; Thu, 14 Apr 2022 00:49:36 -0400 Received: from lists.gnu.org ([209.51.188.17]:49560) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1nerQE-00055f-Or for submit@debbugs.gnu.org; Thu, 14 Apr 2022 00:49:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:33012) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nerQE-0002PQ-Ar for bug-guix@gnu.org; Thu, 14 Apr 2022 00:49:34 -0400 Received: from mx1.riseup.net ([198.252.153.129]:54722) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nerQC-0005ki-Cq for bug-guix@gnu.org; Thu, 14 Apr 2022 00:49:33 -0400 Received: from fews2.riseup.net (fews2-pn.riseup.net [10.0.1.84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mail.riseup.net", Issuer "R3" (not verified)) by mx1.riseup.net (Postfix) with ESMTPS id 4Kf6SV4YxyzDrql for ; Wed, 13 Apr 2022 21:49:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1649911770; bh=qrbXP3lA+6NJEjHnnYn9JitEwkJ9s0isFCMwY7VmXVk=; h=Date:From:To:Subject:From; b=nj4da58vjP0fmmYwrjmX19wumkoPNhEZ7LjM+R9pl3WN6QOTifCxwVveyDNESiHYj ALv92tweIQ0xCzX6YDqs3vRIhZT4HfJA95OrJw5lIXmy83kiW04fC0qLcs9XGNhMFP TcfMrFAd37R1FMNwYrtDVsT0N/JArnzvuRt9h39o= X-Riseup-User-ID: 08CCAD6996B5E04C05982DEE3ABC22895DB0C7788C19819AF0B97AC4EAE278BB Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews2.riseup.net (Postfix) with ESMTPSA id 4Kf6SV03lzz218y for ; Wed, 13 Apr 2022 21:49:29 -0700 (PDT) Date: Thu, 14 Apr 2022 06:49:18 +0200 From: raingloom Message-ID: <20220414064918.366daeb3@riseup.net> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="MP_/88XpjA2tmlyqtq+Zp1+I7nc" Received-SPF: pass client-ip=198.252.153.129; envelope-from=raingloom@riseup.net; helo=mx1.riseup.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1649911813; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:list-id:list-help:list-unsubscribe:list-subscribe: list-post:dkim-signature; bh=JZer656tTIbiPk8CqKdjDckSEQ0uTyIG7JYhUDvKOA4=; b=YGN06e+yFxPZxaRMMzKfYE0ULg4tYnn3tzMG4JOiQktLC+VfaaHqDkgSpGc2lQogbUv66o H9RlshnPU6J51QDRrcdofHoNIWD2wmOhmCMTQYpxO4VrZFcue0vwzOAuRVoFGH5RdF3xn4 lnNP837jmcHY6A+uGDKWDRlXuzxkG5EUW10R+9h9ETBDIEKq/DknBIYV7ShYJb4PAarkba j/fM3kZmCEdiq99NoDW910U4NRLUJ/w6b7MoTbLmcbamOG1jPEyXlr7rs61yvJSGIsH+HN mycdNV+hVl4Sc6/S8mG3r6KGZFv1ijeXF6ObB3NqiG6e+CgHD0mmLmvQ+S0/2w== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1649911813; a=rsa-sha256; cv=none; b=rvKgytYKXkH95M6OfAAd7mAcg21l40TxmZZra7xrLZ5bTt3K4KNXCLYwc/86CiJE1GkZIZ 3HeOHCdIPNfu2yvriYKVTKWEm0VoRp8md59xk4P+YMJ6A2xBqZbuL9U6y2CLmMa49Euz6w pu63CoL2JBZuMoEJbd8Q/CgeGtYDK+wU3n3k5/mrjX9xpRY82mV+Ug+cgJXFtlH21RxuOB 0rU+w6ppEuNPTWWIWqKvVBHYidtNgTRGVFXjUa7G8PINGAcb8yRlFOajVceZhvTFKnu0Ww yisDJGTrHiUswXRocrZiiWJi0vF9E0uiwFk3LEYovKuLvqw1i9WB5w2a6S12bQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b=nj4da58v; dmarc=fail reason="SPF not aligned (relaxed)" header.from=riseup.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 4.75 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b=nj4da58v; dmarc=fail reason="SPF not aligned (relaxed)" header.from=riseup.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 23D6419ADD X-Spam-Score: 4.75 X-Migadu-Scanner: scn0.migadu.com X-TUID: q/cy0FZvhABA --MP_/88XpjA2tmlyqtq+Zp1+I7nc Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Disposition: inline > more than one target service of type 'account' I did not add any new service, I just modified openssh-service-type. ``` (operating-system (inherit os) (services (modify-services (operating-system-services os) (openssh-service-type config => (openssh-configuration (inherit config) (permit-root-login 'without-password)))))) ``` Full system description in attachment. --MP_/88XpjA2tmlyqtq+Zp1+I7nc Content-Type: text/x-scheme Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=installer.scm ;; TODO convert to R6RS module syntax? (use-modules (gnu packages android) (gnu packages bootloaders) (gnu packages certs) (gnu packages cups) (gnu packages ghostscript) (gnu packages gnome) (gnu packages linux) (gnu packages networking) (gnu packages package-management) (gnu packages shells) (gnu packages suckless) (gnu packages wm) (gnu packages xdisorg) (gnu packages xorg) (gnu services cups) (gnu services desktop) (gnu services linux) (gnu services networking) (gnu services ssh) (gnu services virtualization) (gnu services xorg) (gnu services) (gnu system install) (gnu system nss) (gnu system shadow)) ;; this is for devices with no screen, or UART, or anything of the sort ;; the name is apt though, because this completely ruins security! ;; DO NOT USE THIS FOR THE FINAL SYSTEM ;; use it only for the inital setup, then reconfigure with a proper config (define-public (backdoor-os os) (operating-system (inherit os) (services (modify-services (operating-system-services os) (openssh-service-type config => (openssh-configuration (inherit config) (permit-root-login 'without-password))))))) (define-public backdoored-installation-os (backdoor-os installation-os)) ;; guix system: error: more than one target service of type 'account' backdoored-installation-os --MP_/88XpjA2tmlyqtq+Zp1+I7nc--