Setting up plug and print on GuixSD?

Setting up plug and print on GuixSD?

[swedebugia]

Hi

I installed cups and xfce. What more do I need?

In https://gnu.org/software/guix/manual/html_node/Services.html#Services 
I did not find a service declaration for CUPS.

What is the next step?

Cheers
sdb

Re: Setting up plug and print on GuixSD?

[Ludovic Courtès]

swedebugia@riseup.net skribis:

> I installed cups and xfce. What more do I need?

For printers available on the network as in a typical “enterprise”
setup, nothing more: the “print” dialog in Evince and similar tools will
discover it and do the right thing.

> In
> https://gnu.org/software/guix/manual/html_node/Services.html#Services
> I did not find a service declaration for CUPS.
>
> What is the next step?

For a locally-connected printer you’ll certainly need a CUPS daemon
running, indeed.  I’m not sure exactly what it takes, but it would
clearly be a worthwhile addition!

Ludo’.

Re: Setting up plug and print on GuixSD?

[swedebugia]

On 2016-02-01 14:43, ludo@gnu.org wrote:
> swedebugia@riseup.net skribis:
> 
>> I installed cups and xfce. What more do I need?
> 
> For printers available on the network as in a typical “enterprise”
> setup, nothing more: the “print” dialog in Evince and similar tools 
> will
> discover it and do the right thing.
> 
>> In
>> https://gnu.org/software/guix/manual/html_node/Services.html#Services
>> I did not find a service declaration for CUPS.
>> 
>> What is the next step?
> 
> For a locally-connected printer you’ll certainly need a CUPS daemon
> running, indeed.  I’m not sure exactly what it takes, but it would
> clearly be a worthwhile addition!

OK. I gave it a try and this is how far I got:
The manpages and documentation on cups.org is rather useless regarding 
installation and formatting of the config-files.

The package installs corrupt config-files according to
$ cupsd -t
"/gnu/store/qs3xymcsgxa68i8m188261rhxsszx7za-cups-2.1.0/etc/cups/cups-files.conf" 
contains errors.

I have a running working installation of cups 1.7 on my trisquel 7 
machine. I tried copying the working (very similar) configs from there 
which the trisquel-cupsd report as 'OK'.
=> It did not help and the error is not as detailed as I would like and 
there is no debug option is seems.

Is there a good free non-apple-owned alternative to CUPS I could try 
instead?

Re: Setting up plug and print on GuixSD?

[swedebugia]

[-- Attachment #1: Type: text/plain, Size: 2021 bytes --]

On 2016-02-02 11:45, swedebugia@riseup.net wrote:
> On 2016-02-01 14:43, ludo@gnu.org wrote:
>> swedebugia@riseup.net skribis:
>> 
>>> I installed cups and xfce. What more do I need?
>> 
>> For printers available on the network as in a typical “enterprise”
>> setup, nothing more: the “print” dialog in Evince and similar tools 
>> will
>> discover it and do the right thing.
>> 
>>> In
>>> https://gnu.org/software/guix/manual/html_node/Services.html#Services
>>> I did not find a service declaration for CUPS.
>>> 
>>> What is the next step?
>> 
>> For a locally-connected printer you’ll certainly need a CUPS daemon
>> running, indeed.  I’m not sure exactly what it takes, but it would
>> clearly be a worthwhile addition!
> 
> OK. I gave it a try and this is how far I got:
> The manpages and documentation on cups.org is rather useless regarding
> installation and formatting of the config-files.
> 
> The package installs corrupt config-files according to
> $ cupsd -t
> "/gnu/store/qs3xymcsgxa68i8m188261rhxsszx7za-cups-2.1.0/etc/cups/cups-files.conf"
> contains errors.
> 
> I have a running working installation of cups 1.7 on my trisquel 7
> machine. I tried copying the working (very similar) configs from there
> which the trisquel-cupsd report as 'OK'.
> => It did not help and the error is not as detailed as I would like
> and there is no debug option is seems.
> 
> Is there a good free non-apple-owned alternative to CUPS I could try 
> instead?

The cupsd.conf I tried is attached. I now also tried this as root and 
testing with cupsd afterward without any succes:
cp -r /gnu/store/qs3xymcsgxa68i8m188261rhxsszx7za-cups-2.1.0/var/* /var/

Maybe the error is that the socket referenced in cupsd.conf is missing:
"# Only listen for connections from the local machine.
Listen localhost:631
Listen /var/run/cups/cups.sock"

The socket is missing in the store and from the path above. I have no 
idea yet how to create it manually.

cheers
sdb

[-- Attachment #2: cupsd.conf --]
[-- Type: text/plain, Size: 4373 bytes --]

#
# Configuration file for the CUPS scheduler.  See "man cupsd.conf" for a
# complete description of this file.
#

# Log general information in error_log - change "warn" to "debug"
# for troubleshooting...
LogLevel warn
#PageLogFormat

# Only listen for connections from the local machine.
Listen localhost:631
Listen /var/run/cups/cups.sock

# Show shared printers on the local network.
Browsing Off
BrowseLocalProtocols dnssd

# Default authentication type, when authentication is required...
DefaultAuthType Basic

# Web interface setting...
WebInterface Yes

# Restrict access to the server...
<Location />
  Order allow,deny
</Location>

# Restrict access to the admin pages...
<Location /admin>
  Order allow,deny
</Location>

# Restrict access to configuration files...
<Location /admin/conf>
  AuthType Default
  Require user @SYSTEM
  Order allow,deny
</Location>

# Set the default printer/job policies...
<Policy default>
  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default

  # Job-related operations must be done by the owner or an administrator...
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    Order deny,allow
  </Limit>

  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default CUPS-Get-Devices>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

# Set the authenticated printer/job policies...
<Policy authenticated>
  # Job/subscription privacy...
  JobPrivateAccess default
  JobPrivateValues default
  SubscriptionPrivateAccess default
  SubscriptionPrivateValues default

  # Job-related operations must be done by the owner or an administrator...
  <Limit Create-Job Print-Job Print-URI Validate-Job>
    AuthType Default
    Order deny,allow
  </Limit>

  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Get-Document>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  # All administration operations require an administrator to authenticate...
  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # All printer operations require a printer operator to authenticate...
  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Accept-Jobs CUPS-Reject-Jobs>
    AuthType Default
    Require user @SYSTEM
    Order deny,allow
  </Limit>

  # Only the owner or an administrator can cancel or authenticate a job...
  <Limit Cancel-Job CUPS-Authenticate-Job>
    AuthType Default
    Require user @OWNER @SYSTEM
    Order deny,allow
  </Limit>

  <Limit All>
    Order deny,allow
  </Limit>
</Policy>

Re: Setting up plug and print on GuixSD?

[Ludovic Courtès]

swedebugia@riseup.net skribis:

> On 2016-02-02 11:45, swedebugia@riseup.net wrote:
>> On 2016-02-01 14:43, ludo@gnu.org wrote:
>>> swedebugia@riseup.net skribis:
>>>
>>>> I installed cups and xfce. What more do I need?
>>>
>>> For printers available on the network as in a typical “enterprise”
>>> setup, nothing more: the “print” dialog in Evince and similar tools
>>> will
>>> discover it and do the right thing.
>>>
>>>> In
>>>> https://gnu.org/software/guix/manual/html_node/Services.html#Services
>>>> I did not find a service declaration for CUPS.
>>>>
>>>> What is the next step?
>>>
>>> For a locally-connected printer you’ll certainly need a CUPS daemon
>>> running, indeed.  I’m not sure exactly what it takes, but it would
>>> clearly be a worthwhile addition!
>>
>> OK. I gave it a try and this is how far I got:
>> The manpages and documentation on cups.org is rather useless regarding
>> installation and formatting of the config-files.
>>
>> The package installs corrupt config-files according to
>> $ cupsd -t
>> "/gnu/store/qs3xymcsgxa68i8m188261rhxsszx7za-cups-2.1.0/etc/cups/cups-files.conf"
>> contains errors.

Yeah, I have the same error, which is interesting given that this file
comes straight from upstream.

>> I have a running working installation of cups 1.7 on my trisquel 7
>> machine. I tried copying the working (very similar) configs from there
>> which the trisquel-cupsd report as 'OK'.
>> => It did not help and the error is not as detailed as I would like
>> and there is no debug option is seems.
>>
>> Is there a good free non-apple-owned alternative to CUPS I could try
>> instead?
>
> The cupsd.conf I tried is attached. I now also tried this as root and
> testing with cupsd afterward without any succes:
> cp -r /gnu/store/qs3xymcsgxa68i8m188261rhxsszx7za-cups-2.1.0/var/* /var/

I see that our CUPS is *not* built with --localstatedir=/var, so it will
try to access and maybe modify stuff in /gnu/store/…-cups-2.1.0, which
is not good.  We should fix it.

In the meantime, you can run:

  cupsd -c /path/to/your/cupsd.conf

(It’s still won’t be able to write its log files, though, since it’ll
want to write them to /gnu/store, which is immutable on GuixSD.)

> Maybe the error is that the socket referenced in cupsd.conf is missing:
> "# Only listen for connections from the local machine.
> Listen localhost:631
> Listen /var/run/cups/cups.sock"
>
> The socket is missing in the store and from the path above. I have no
> idea yet how to create it manually.

It’s probably enough to do “mkdir -p /var/run/cups”, but I’m not sure
this named socket is actually used.

HTH,
Ludo’.

Re: Setting up plug and print on GuixSD?

[myglc2]

I installed cups package on my headless GuixSD server. lpr works fine as
long as the config is specified on the command line,e.g.,

/run/current-system/profile/bin/lpr -H 192.168.1.6 -P C5200n

I don't need cupsd for my purposes, but I looked at it a bit. Notes on
what I discovered on the chance it could be useful to others...

ludo@gnu.org (Ludovic Courtès) writes:

> swedebugia@riseup.net skribis:
>
>> On 2016-02-02 11:45, swedebugia@riseup.net wrote:
>>> On 2016-02-01 14:43, ludo@gnu.org wrote:
>>>> swedebugia@riseup.net skribis:
[...]
>>> The package installs corrupt config-files according to
>>> $ cupsd -t
>>> "/gnu/store/qs3xymcsgxa68i8m188261rhxsszx7za-cups-2.1.0/etc/cups/cups-files.conf"
>>> contains errors.
>
> Yeah, I have the same error, which is interesting given that this file
> comes straight from upstream.
>

This is because the cups-files.conf file contains the line ...

SystemGroup lpadmin sys system root

... w/ groups that don't exist.

> I see that our CUPS is *not* built with --localstatedir=/var, so it will
> try to access and maybe modify stuff in /gnu/store/…-cups-2.1.0, which
> is not good.  We should fix it.
>
> In the meantime, you can run:
>
>   cupsd -c /path/to/your/cupsd.conf
>

Things I did ...

cp -R /gnu/store/1mffhgz5xdrn3ylb5hfqx3vq45jqf8q1-cups-minimal-2.1.0/etc/cups /etc

### replace "/gnu/store/1mffhgz5xdrn3ylb5hfqx3vq45jqf8q1-cups-minimal-2.1.0" with "" 
### in 
### /etc/cups/cupsd.conf &
### /etc/cups/cups-files.conf

mkdir /var/log/cups

### remove unknown Groups from /etc/cups/cupsd.conf

cupsd -t -f -c /etc/cups/cupsd.conf
"/etc/cups/cups-files.conf" is OK.
"/etc/cups/cupsd.conf" is OK.

cupsd -f -c /etc/cups/cupsd.conf

### produced the attached /var/log/cups/error_log

The bottom line is that it looks to me like this might work if the
--localstatedir=/var problem is fixed.

HTH - George


E [23/Jul/2016:19:06:30 -0400] Unable to change ownership of "/gnu/store/nzn63rp7vzzgy85vnxrcj70a9xiz96h1-cups-2.1.0/var/spool/cups" - Read-only file system
E [23/Jul/2016:19:06:30 -0400] Unable to change ownership of "/gnu/store/nzn63rp7vzzgy85vnxrcj70a9xiz96h1-cups-2.1.0/var/cache/cups" - Read-only file system
E [23/Jul/2016:19:06:30 -0400] Unable to change ownership of "/gnu/store/nzn63rp7vzzgy85vnxrcj70a9xiz96h1-cups-2.1.0/var/cache/cups/rss" - Read-only file system
E [23/Jul/2016:19:06:30 -0400] Unable to change ownership of "/gnu/store/nzn63rp7vzzgy85vnxrcj70a9xiz96h1-cups-2.1.0/var/run/cups" - Read-only file system
E [23/Jul/2016:19:06:30 -0400] Unable to change ownership of "/gnu/store/nzn63rp7vzzgy85vnxrcj70a9xiz96h1-cups-2.1.0/var/run/cups/certs" - Read-only file system
E [23/Jul/2016:19:06:30 -0400] Unable to change ownership of "/gnu/store/nzn63rp7vzzgy85vnxrcj70a9xiz96h1-cups-2.1.0/var/spool/cups/tmp" - Read-only file system
E [23/Jul/2016:19:06:30 -0400] Filter "pstopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "pdftopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "texttopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "texttopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "texttopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "texttopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "texttopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "texttopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "rastertopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "bannertopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "urftopdf" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "pdftops" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "gstoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "gstoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "pdftoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Filter "imagetoraster" not found.
E [23/Jul/2016:19:06:30 -0400] Unable to create certificate file /gnu/store/nzn63rp7vzzgy85vnxrcj70a9xiz96h1-cups-2.1.0/var/run/cups/certs/0 - Read-only file system

Re: Setting up plug and print on GuixSD?

[Tobias Geerinckx-Rice]

George,

On 24/07/2016 1:35, myglc2 wrote:
> I don't need cupsd for my purposes, but I looked at it a bit. Notes on
> what I discovered on the chance it could be useful to others...

Summer project #483 is moving the ol' home server to Guix. Print
spooling is definitely a requirement, so thanks for sharing!

Kind regards,

T G-R

Re: Setting up plug and print on GuixSD?

[Leo Famulari]

On Sat, Jul 23, 2016 at 07:35:52PM -0400, myglc2 wrote:
> The bottom line is that it looks to me like this might work if the
> --localstatedir=/var problem is fixed.

So, you think we should set that option while configuring the cups
build?

Re: Setting up plug and print on GuixSD?

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 512 bytes --]

On Sat, Jul 23, 2016 at 08:30:47PM -0400, Leo Famulari wrote:
> On Sat, Jul 23, 2016 at 07:35:52PM -0400, myglc2 wrote:
> > The bottom line is that it looks to me like this might work if the
> > --localstatedir=/var problem is fixed.
> 
> So, you think we should set that option while configuring the cups
> build?

I tried to set that option with the attached patch, but the cups build
process tries to write to localstatedir at build time, so it fails.

Can't it be configured by the user, after installation?

[-- Attachment #2: 0001-gnu-cups-Set-localstatedir.patch --]
[-- Type: text/x-diff, Size: 852 bytes --]

From e11cca7df853654a398d66197e7fcba92cef72f8 Mon Sep 17 00:00:00 2001
From: Leo Famulari <leo@famulari.name>
Date: Sun, 24 Jul 2016 15:23:43 -0400
Subject: [PATCH] gnu: cups: Set localstatedir.

* gnu/packages/cups.scm (cups)[arguments]: Add '--localstatedir=/var'
to #:configure-flags.
---
 gnu/packages/cups.scm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/gnu/packages/cups.scm b/gnu/packages/cups.scm
index 51c7fd1..eda57c1 100644
--- a/gnu/packages/cups.scm
+++ b/gnu/packages/cups.scm
@@ -179,7 +179,8 @@ device-specific programs to convert and print many types of files.")
        #:tests? #f
        #:configure-flags
        '("--disable-launchd"
-         "--disable-systemd")
+         "--disable-systemd"
+         "--localstatedir=/var")
        #:phases
        (alist-cons-before
         'configure
-- 
2.9.2

Re: Setting up plug and print on GuixSD?

[myglc2]

Leo Famulari <leo@famulari.name> writes:

> On Sat, Jul 23, 2016 at 08:30:47PM -0400, Leo Famulari wrote:
>> On Sat, Jul 23, 2016 at 07:35:52PM -0400, myglc2 wrote:
>> > The bottom line is that it looks to me like this might work if the
>> > --localstatedir=/var problem is fixed.
>> 
>> So, you think we should set that option while configuring the cups
>> build?
>
> I tried to set that option with the attached patch, but the cups build
> process tries to write to localstatedir at build time, so it fails.
>
> Can't it be configured by the user, after installation?

Are you asking me to try this? If so, please explain what to do.

TIA - George

Re: Setting up plug and print on GuixSD?

[Leo Famulari]

On Sun, Jul 24, 2016 at 11:08:06PM -0400, myglc2 wrote:
> Are you asking me to try this? If so, please explain what to do.

I don't know what to do, I've never used cups. I was just trying what
you suggested in your earlier message :)

I would check the cups documentation for an explanation of how to set
the localstatedir at runtime. And I would also check what Nixpkgs does.
Maybe they've already solved this.

Re: Setting up plug and print on GuixSD?

[myglc2]

Leo Famulari <leo@famulari.name> writes:

> On Sun, Jul 24, 2016 at 11:08:06PM -0400, myglc2 wrote:
>> Are you asking me to try this? If so, please explain what to do.
>
> I don't know what to do, I've never used cups. I was just trying what
> you suggested in your earlier message :)

OK so the blind leading the blind ;-)

> I would check the cups documentation for an explanation of how to set
> the localstatedir at runtime. And I would also check what Nixpkgs does.
> Maybe they've already solved this.

OK will do.