From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id QOJMIp+cwWCsZgAAgWs5BA (envelope-from ) for ; Thu, 10 Jun 2021 07:01:19 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id 0MOAHZ+cwWCHKAAAB5/wlQ (envelope-from ) for ; Thu, 10 Jun 2021 05:01:19 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 71D2210860 for ; Thu, 10 Jun 2021 07:01:18 +0200 (CEST) Received: from localhost ([::1]:57440 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lrCoe-00054W-VP for larch@yhetil.org; Thu, 10 Jun 2021 01:01:16 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:37290) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lrCoR-00053c-02 for guix-patches@gnu.org; Thu, 10 Jun 2021 01:01:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:51840) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lrCoQ-0004Zk-KC for guix-patches@gnu.org; Thu, 10 Jun 2021 01:01:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lrCoQ-0007uj-HB for guix-patches@gnu.org; Thu, 10 Jun 2021 01:01:02 -0400 Subject: bug#48751: [PATCH] services: laminar: Create parent directory for unix socket. Resent-From: Arun Isaac Original-Sender: "Debbugs-submit" Resent-To: guix-patches@gnu.org Resent-Date: Thu, 10 Jun 2021 05:01:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: cc-closed 48751 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Christopher Baines Cc: 48751-done@debbugs.gnu.org Mail-Followup-To: 48751@debbugs.gnu.org, arunisaac@systemreboot.net, arunisaac@systemreboot.net Received: via spool by 48751-done@debbugs.gnu.org id=D48751.162330123430372 (code D ref 48751); Thu, 10 Jun 2021 05:01:02 +0000 Received: (at 48751-done) by debbugs.gnu.org; 10 Jun 2021 05:00:34 +0000 Received: from localhost ([127.0.0.1]:35153 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lrCny-0007to-8V for submit@debbugs.gnu.org; Thu, 10 Jun 2021 01:00:34 -0400 Received: from mugam.systemreboot.net ([139.59.75.54]:38674) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lrCnt-0007ta-WD for 48751-done@debbugs.gnu.org; Thu, 10 Jun 2021 01:00:32 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=systemreboot.net; s=default; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=V2sRnhLa0ap4vOBp4DdfvxtfBWEmbH2YS46hNxP50Sw=; b=d1NATXEvW2HNxL7+yaoGhYzW+L NCzlBenUf1+RpHgM+5UigjhqmGWPK0RJ9t8AB6p28ZDWaZMQal4lkq2DfFAEd6ZNeZPYYsO/ZpIt6 T0csa/XmfgdHdqkcH9ZudWK6GwfVAokGMzmAwJ0BknnLm6z80n4pr9u6/W/VnN6JfaJQHW1EvRgO4 JRjkmfyEfMBWnL3R/qopUAbeZSOdoxGa1fTRebts/+jpNpDkd/u/zeF/SxgkV7siB8QYdJtsr6RWN zofDIFU31h2RnUAalMUqE8rsvfoyQCLkmdmMlrl7n7Ehmj2ULy8HzIJVQugt280fy5QLob8/gM1LF DlbzSiYg==; Received: from [192.168.2.1] (helo=steel) by systemreboot.net with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1lrCnr-0002rK-F8; Thu, 10 Jun 2021 10:30:27 +0530 From: Arun Isaac In-Reply-To: <8735tstln0.fsf@cbaines.net> References: <20210530195952.22708-1-arunisaac@systemreboot.net> <20210530200527.23041-1-arunisaac@systemreboot.net> <8735tstln0.fsf@cbaines.net> Date: Thu, 10 Jun 2021 10:30:12 +0530 Message-ID: <87eedajov7.fsf@systemreboot.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: "Guix-patches" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1623301279; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-to:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=V2sRnhLa0ap4vOBp4DdfvxtfBWEmbH2YS46hNxP50Sw=; b=OgcCVE2ge5/jJ3DDQEBFn+BGEqGv7B/h9Amr/aQWYw4TOXU/IjRwxP2paaHXhS8V8anaNP lg3CW0IwagHXJ8QSGtdWwvwPnbjZPm3N7cuBYqlkw1nMw6ABINKj2rNJuzd8Kkdz/HZNJm o8zs6WBYehhaH18H+Unpr6uaW0Tbc9MlK2mGXvr31phzxkbyo7A/TNbCtbQ+5ee5zeth9w R/Sf6xYtdfDIAt/+u6MC1h46mZ/+9tdgK/0C7f8293VuUzJ9I4SmkmHcNAAlupf8UJ/2jd A4t6nEBE6bPAuzhMb/tyslVyXq2HKgap0q+iLKnKGSWx2lWepXb6uKbypPMFug== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1623301279; a=rsa-sha256; cv=none; b=sAIY5jEak8C5qmVDZnbNetR7QZ7umNUcZmgbnHMJ8zqk394IXltKb9+wdd1FSal0faVzlE 5ch1W1+PVG0DOrQecNq6z7WsEFLMyvxHazQ5/ZFjjYBVYCuqAoXoI7u6VDLG5HfuxaKz8f 28QXpTwdIVHbQP71Jmjhh8qEsk6VLxb5/99UB7OdzOjlCjA2Jev/XFF6QetVw/H5gMQHCL 3d2Wswf6SG4lWt1CPFK2260Egg/Lz9L1rxF7QD4z++7PF54k8gSQEAYgILwTLXsjl2lPjv dPon1cVlrnb+1p1jxPBhv618UWAUChaO2pBLdobzKZ0lw5ICfLbXj4L/dwjNDA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=systemreboot.net header.s=default header.b=d1NATXEv; dmarc=fail reason="SPF not aligned (relaxed)" header.from=systemreboot.net (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Spam-Score: -3.43 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=systemreboot.net header.s=default header.b=d1NATXEv; dmarc=fail reason="SPF not aligned (relaxed)" header.from=systemreboot.net (policy=none); spf=pass (aspmx1.migadu.com: domain of guix-patches-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-patches-bounces@gnu.org X-Migadu-Queue-Id: 71D2210860 X-Spam-Score: -3.43 X-Migadu-Scanner: scn1.migadu.com X-TUID: 8IJYh26zRuDy --=-=-= Content-Type: text/plain Hi Chris, > This looks good to me. Pushed to master, thanks for the review! > I don't think I've played around too much with different bind options, > so I haven't come across this issue. One problem still remains even after this patch. If the laminar web UI is behind an nginx reverse proxy, the nginx user needs to have read/write permissions to the unix socket. For this, it should be a member of the laminar group. But, short of modifying the nginx service, I don't know of any way to achieve this. Something more composable would be nice. The nginx service being aware of laminar doesn't sound right. Any ideas? Regards, Arun --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQFPBAEBCAA5FiEEf3MDQ/Lwnzx3v3nTLiXui2GAK7MFAmDBnF0bHGFydW5pc2Fh Y0BzeXN0ZW1yZWJvb3QubmV0AAoJEC4l7othgCuz4nIIAK9ISNO+2Ma38odpvDZ4 wxHYf5CT1LmTHovfbGEIGw9lLKiKNv7xkC7XNoMOoBAHxvUJsBjv5TScPTebT20f I4VoxwODOOvQWqh+8a2ZSpaeNnFTTMJNBrQdzrlysJcUkuIewykhvu5IyKbIjrtv sFkb9Xx6gOTJ+2DvowTjWUyLAWg1RJqEr2n9kU0giN1sh7cMBPqa60OHFC09wqvk IhL4jfSy1FH6dEcPS+SWI2BSFWo/5htVyp2XxXpDDy/pBkoFG1X1ThNSaWMH1fQ0 XPuGcxnriqxEa/4lPMmdkMz2S7adOVYoWymTjRZ/Ykit5hshzvU0IvOpLXWA3qI5 ZqI= =4Sih -----END PGP SIGNATURE----- --=-=-=--