bug#46186: Some substitutes are broken (TLS error)

bug#46186: Some substitutes are broken (TLS error)

[Maxime Devos]

[-- Attachment #1.1: Type: text/plain, Size: 276 bytes --]

Hi Guix,

When running "guix package -u libreoffice", substituting libreoffice
is fast at first, then it hangs at ~50%, then after a while it seems
to get unstuck, going to 50.6% or so (the exact percentage varies
with each attempt).

Output of "guix package -u libreoffice":

[-- Attachment #1.2: Type: text/plain, Size: 497 bytes --]

The following package will be upgraded:
   libreoffice (dependencies or package changed)
substitute: guix substitute: warning: twinkling-star.local: host not found: System error
downloading from https://ci.guix.gnu.org/nar/lzip/hrdzapsn1sxsybl1x2yfjj31lp84wi4s-libreoffice-6.4.7.2 ...
 libreoffice-6.4.7.2  117.1MiB                                 2.5MiB/s 00:23 [########          ]  50.0%
 libreoffice-6.4.7.2  117.1MiB                                 486KiB/s 02:08 [#########         ]  51.8%

[-- Attachment #1.3: Type: text/plain, Size: 137 bytes --]


This time, it seems like "guix package -u libreoffice" is just going on
forever, but in the past, I've got the following error message:

[-- Attachment #1.4: Type: text/plain, Size: 449 bytes --]

guix substitute: error: TLS error in procedure 'read_from_session_record_port': Error decoding the received TLS packet.
substitution of /gnu/store/hrdzapsn1sxsybl1x2yfjj31lp84wi4s-libreoffice-6.4.7.2 failed
guix package: error: some substitutes for the outputs of derivation `/gnu/store/h53qbz8hnam2nd99byi4kzwy20fjy0pz-libreoffice-6.4.7.2.drv' failed (usually happens due to networking issues); try `--fallback' to build derivation from source 

[-- Attachment #1.5: Type: text/plain, Size: 394 bytes --]


Oddly, downloading
<https://ci.guix.gnu.org/nar/lzip/hrdzapsn1sxsybl1x2yfjj31lp84wi4s-libreoffice-6.4.7.2>
with the browser (IceCat) or `guix download` works just fine
(fast and 100% completion).

To reproduce:
guix time-machine --commit=23a5dcce1d893b8f5c5301ae3c1af863776ed3cf \
  build libreoffice

Some other packages seem to be affected as well, but I don't recall
exactly which.

Maxime

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 259 bytes --]

bug#46186: Some substitutes are broken (TLS error)

[Ludovic Courtès]

Hi,

Maxime Devos <maximedevos@telenet.be> skribis:

> When running "guix package -u libreoffice", substituting libreoffice
> is fast at first, then it hangs at ~50%, then after a while it seems
> to get unstuck, going to 50.6% or so (the exact percentage varies
> with each attempt).
>
> Output of "guix package -u libreoffice":
>
> The following package will be upgraded:
>    libreoffice (dependencies or package changed)
> substitute: guix substitute: warning: twinkling-star.local: host not found: System error
> downloading from https://ci.guix.gnu.org/nar/lzip/hrdzapsn1sxsybl1x2yfjj31lp84wi4s-libreoffice-6.4.7.2 ...
>  libreoffice-6.4.7.2  117.1MiB                                 2.5MiB/s 00:23 [########          ]  50.0%
>  libreoffice-6.4.7.2  117.1MiB                                 486KiB/s 02:08 [#########         ]  51.8%
>
>
> This time, it seems like "guix package -u libreoffice" is just going on
> forever, but in the past, I've got the following error message:
>
> guix substitute: error: TLS error in procedure 'read_from_session_record_port': Error decoding the received TLS packet.
> substitution of /gnu/store/hrdzapsn1sxsybl1x2yfjj31lp84wi4s-libreoffice-6.4.7.2 failed
> guix package: error: some substitutes for the outputs of derivation `/gnu/store/h53qbz8hnam2nd99byi4kzwy20fjy0pz-libreoffice-6.4.7.2.drv' failed (usually happens due to networking issues); try `--fallback' to build derivation from source 

This could related to <https://issues.guix.gnu.org/46330>.

Is it still happening, consistently?  Or did you eventually manage to
download that substitute?

> To reproduce:
> guix time-machine --commit=23a5dcce1d893b8f5c5301ae3c1af863776ed3cf \
>   build libreoffice

I tried just in case but couldn’t reproduce it.  What matters here is
the guix-daemon in use (which store item?), but I suspect it’s
non-deterministic anyway.

Thanks,
Ludo’.

bug#46186: Some substitutes are broken (TLS error)

[Maxime Devos]

[-- Attachment #1: Type: text/plain, Size: 1066 bytes --]

On Sun, 2021-02-07 at 22:12 +0100, Ludovic Courtès wrote:
> Is it still happening, consistently?  Or did you eventually manage to
> download that substitute?

IIRC, I eventually just build libreoffice with --no-substitutes or
--fallback.  I'll have to check if this still happens, though I
don't know how at the moment  (an up-to-date libreoffice and emacs
is currently installed).

> This could related to <https://issues.guix.gnu.org/46330>.

Seems plausible to me.

> > To reproduce:
> > guix time-machine --commit=23a5dcce1d893b8f5c5301ae3c1af863776ed3cf \
> >   build libreoffice
> 
> I tried just in case but couldn’t reproduce it.  What matters here is
> the guix-daemon in use (which store item?), but I suspect it’s
> non-deterministic anyway.

I looked at the "guix pull --list-generations" output, and I couldn't
find the commit 23a5dcce1d893b8f5c5301ae3c1af863776ed3cf, weird.  (I
was trying to find the corresponding date and then look in the closest
guix system generation for the guix-daemon version)

Thanks,
Maxime.

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 260 bytes --]

bug#46186: Some substitutes are broken (TLS error)

[Maxime Devos]

[-- Attachment #1: Type: text/plain, Size: 1554 bytes --]

> I looked at the "guix pull --list-generations" output, and I couldn't
> find the commit 23a5dcce1d893b8f5c5301ae3c1af863776ed3cf, weird.  (I
> was trying to find the corresponding date and then look in the closest
> guix system generation for the guix-daemon version)

Correction: it's between these two guix system generations:

Generation 62   Jan 28 2021 21:21:55
  file name: /var/guix/profiles/system-62-link
  canonical file name: /gnu/store/iqh6ddfsizv0anjpsbwvn9l45i04g2ak-system
  label: GNU with [custom linux package] 5.10.6
  bootloader: grub
  root device: /dev/mapper/cryptroot
  kernel: /gnu/store/[custom linux package]-5.10.6/bzImage
  channels:
    guix:
      repository URL: https://git.savannah.gnu.org/git/guix.git
      branch: master
      commit: c2538db5617032788ac2f140496d00d8107579c8
  configuration file: /gnu/store/ha1lci8g21gv2lg3wsagj112z909b6cl-configuration.scm
Generation 63   Jan 29 2021 21:30:22
  file name: /var/guix/profiles/system-63-link
  canonical file name: /gnu/store/fv2kl8x76n9ygk6673pmk6ss1iyhyxya-system
  label: GNU with [custom linux package] 5.10.6
  bootloader: grub
  root device: /dev/mapper/cryptroot
  kernel: /gnu/store/[custom linux package]-5.10.6/bzImage
  channels:
    guix:
      repository URL: https://git.savannah.gnu.org/git/guix.git
      branch: master
      commit: 23a5dcce1d893b8f5c5301ae3c1af863776ed3cf
  configuration file: /gnu/store/ha1lci8g21gv2lg3wsagj112z909b6cl-configuration.scm

The package for the guix daemon was not customised.

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 260 bytes --]

bug#46186: Some substitutes are broken (TLS error)

[Ludovic Courtès]

Hi,

Maxime Devos <maximedevos@telenet.be> skribis:

> On Sun, 2021-02-07 at 22:12 +0100, Ludovic Courtès wrote:
>> Is it still happening, consistently?  Or did you eventually manage to
>> download that substitute?

[...]

>> This could related to <https://issues.guix.gnu.org/46330>.
>
> Seems plausible to me.

Could you reconfigure your system with the fix for the bug above and let
us know if it ever shows up again?

Thanks,
Ludo’.

bug#46186: Some substitutes are broken (TLS error)

[Maxime Devos]

[-- Attachment #1: Type: text/plain, Size: 287 bytes --]

On Tue, 2021-02-09 at 09:36 +0100, Ludovic Courtès wrote:
> [...]
> Could you reconfigure your system with the fix for the bug above and let
> us know if it ever shows up again?

I'm reconfiguring the system now.  I'll reopen the bug if it
shows up again.

Greetings,
Maxime.

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 260 bytes --]