From: "Cook, Malcolm" <MEC@stowers.org>
To: "'Ludovic Courtès'" <ludo@gnu.org>
Cc: 'Guix-devel' <guix-devel@gnu.org>,
"'bio-packaging@mailman.open-bio.org'"
<bio-packaging@mailman.open-bio.org>,
'Pjotr Prins' <pjotr.public66@thebird.nl>
Subject: RE: Using a shared Guix store (was RE: [Bio-packaging] testing out guix)
Date: Mon, 20 Jul 2015 22:37:58 +0000 [thread overview]
Message-ID: <9c5d12f7edb841b892c0a06dbf9c64f0@exchsrv2.sgc.loc> (raw)
In-Reply-To: <87fv4lo5xc.fsf@gnu.org>
> > However
> >
> > ./pre-inst-env guix package -i hello
> >
> > Gives me
> >
> > guix package: error: build failed: the build users group
> > `guix-builder' has no members
> >
> > But, but, I do have a group `guix-builder`
> >
> > I think the problem may be that my guix-builder group was defined in NIS
> whereas its members are not in NIS.
>
> What does ‘getenv group guix-builder’ return? It should show something
> like:
> guixbuild:x:30000:guixbuilder01,guixbuilder02,guixbuilder03,guixbuilder04,gu
> ixbuilder05,guixbuilder06,guixbuilder07,guixbuilder08,guixbuilder09,guixbuild
> er10
Answered below....
> Each build account must have ‘guix-builder’ in its supplementary group list.
>
> > The daemon is running as user `guix` on host ${GUIXHOST}
>
> The daemon really needs to run as root, if possible:
>
> http://www.gnu.org/software/guix/manual/html_node/Build-
> Environment-Setup.html
I guess my issues are arising from challenging this (soft?) requirement.
My SA has provided me /gnu as NFS network share owned by network user `guix` and group owned by `guix-builder`.
However it is 'root squashed' on all servers, including my GUIX_HOST. In other works, the root account cannot write to it.
For this reason, I have tried
./configure --prefix=/gnu
rather than the suggested
./configure --localstatedir=/gnu/var --exec-prefix=/gnu
Since this suggestion results in `make install` needed to write to both the root-squashed network share and /usr/local which can only be done by root, an impossibility.
Or am I thinking about this wrong?
--prefix=/gnu has some additional advantage of getting the /share directory network wide, as presumably should be /etc/bashy_completion.d
I am making guix from fresh `git pull` master passing all tests (except for SKIPPING the container test thanks to recent commit - last week it was failing this one)
However, with this configuration, after install, and running the daemon as user 'guix', I now get:
bash-4.2$ guix build hello
guix build: error: build failed: acquiring/releasing lock: No locks available
Oh, right, and, I am still doing by hand:
su -c 'mkdir /gnu/var/guix/profiles/per-user; chmod a+rwx /gnu/var/guix/profiles/per-user' - guix
So, I think if I knew a little more about guix internals, I would expect that I could figure out a ./configuration that allows /gnu to reside on root-squashed network share.
Ricardo, you seem to have something _like_ this working. I'm guessing that your /gnu was local to your GUIXHOST, and so you did not need to solve this root squash issue.
Ricard & Ludo, do you mind thinking this through a little further with me?
Here is current my account setup
getent group guix-builder
guix-builder:!:20302:guix-builder1,guix-builder2,guix-builder3,guix-builder4,guix-builder5,guix-builder6,guix-builder7,guix-builder8,guix-builder9,guix-builder10
getent passwd guix
guix:$1$E5Ru3NpE$wZZY.cM8TwbRMHBI1UP110:3036:20302:Guix build user:/var/empty:/bin/bash
getent passwd guix-builder1 ## and all the other guix-builder
guix-builder1:!!:3048:20302:Guix build user 1:/var/empty:/sbin/nologin
~Malcolm
>
> > However trying to --install is not successful
> >
> > /gnu/bin/guix package --install hello
> > accepted connection from pid 26597, uid 1232
> > error: while creating directory `/gnu/var/guix/profiles/per-
> user/mec': Permission denied
> > Please create the `/gnu/var/guix/profiles/per-user/mec' directory,
> with you as the owner.
> > Try "info '(guix) Invoking guix package'" for more information.
> >
> > Which leads me to think the documentation is in error where it says "The
> per-user directory is created when guix-daemon is started".
>
> Well, /var/guix/profiles/per-user is created by the daemon, but .../mec is
> created by ‘guix package’.
>
> > Creating it by hand (owned by guix, with write access to all) :
> >
> > mkdir /gnu/var/guix/profiles/per-user ## the doc says this should
> happen by the daemon but not! FIXME! BUG?
> > chmod a+rwx /gnu/var/guix/profiles/per-user
>
> Perfect.
>
> The daemon really does create /gnu/var/guix/profiles/per-user, making it
> world-writable (see nix/libstore/local-store.cc:254.)
>
> However, you mentioned guix-daemon was *not* running as root, in which
> case it does not attempt to create this directory. That could be the reason.
>
> Thanks for your report,
> Ludo’.
next prev parent reply other threads:[~2015-07-20 22:38 UTC|newest]
Thread overview: 28+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-06-18 20:22 Using a shared Guix store (was RE: [Bio-packaging] testing out guix) Cook, Malcolm
2015-06-19 8:06 ` Ricardo Wurmus
2015-06-19 11:34 ` Ludovic Courtès
2015-06-25 6:40 ` Ricardo Wurmus
2015-06-19 11:40 ` Ludovic Courtès
2015-07-08 19:20 ` Cook, Malcolm
2015-07-08 19:43 ` Ricardo Wurmus
2015-06-19 17:48 ` Cook, Malcolm
2015-06-24 19:57 ` Ludovic Courtès
2015-07-08 18:03 ` Cook, Malcolm
2015-07-08 19:53 ` Ricardo Wurmus
2015-07-10 8:39 ` Ludovic Courtès
2015-07-11 0:48 ` Cook, Malcolm
2015-07-13 16:45 ` Test suite failures Ludovic Courtès
2015-07-18 3:04 ` Cook, Malcolm
2015-07-18 15:02 ` Ludovic Courtès
2015-07-11 0:54 ` Using a shared Guix store (was RE: [Bio-packaging] testing out guix) Cook, Malcolm
2015-07-15 15:45 ` Ricardo Wurmus
2015-07-15 19:49 ` Cook, Malcolm
2015-07-15 20:28 ` Pjotr Prins
2015-07-18 9:26 ` Cook, Malcolm
2015-07-18 15:13 ` Ludovic Courtès
2015-07-19 9:18 ` Claes Wallin (韋嘉誠)
2015-07-19 9:33 ` Andreas Enge
2015-07-20 22:37 ` Cook, Malcolm [this message]
2015-07-21 20:23 ` Cook, Malcolm
2015-07-21 20:29 ` Ricardo Wurmus
2015-07-23 22:52 ` Ludovic Courtès
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://guix.gnu.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=9c5d12f7edb841b892c0a06dbf9c64f0@exchsrv2.sgc.loc \
--to=mec@stowers.org \
--cc=bio-packaging@mailman.open-bio.org \
--cc=guix-devel@gnu.org \
--cc=ludo@gnu.org \
--cc=pjotr.public66@thebird.nl \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).