From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id OLFKF0PwTWF9bQAAgWs5BA (envelope-from ) for ; Fri, 24 Sep 2021 17:35:31 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id ALMCE0PwTWEoWgAAbx9fmQ (envelope-from ) for ; Fri, 24 Sep 2021 15:35:31 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 9A318D2C1 for ; Fri, 24 Sep 2021 17:35:30 +0200 (CEST) Received: from localhost ([::1]:32970 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mTnEX-0005ug-OO for larch@yhetil.org; Fri, 24 Sep 2021 11:35:29 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:32774) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mTnDV-0005Oq-0a for help-guix@gnu.org; Fri, 24 Sep 2021 11:34:25 -0400 Received: from mail-io1-xd44.google.com ([2607:f8b0:4864:20::d44]:33590) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1mTnDS-0005Gw-Ou for help-guix@gnu.org; Fri, 24 Sep 2021 11:34:24 -0400 Received: by mail-io1-xd44.google.com with SMTP id n71so13258971iod.0 for ; Fri, 24 Sep 2021 08:34:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=beadling-co-uk.20210112.gappssmtp.com; s=20210112; h=mime-version:from:date:message-id:subject:to; bh=i8nen2Z2PXGS2iId1vMM1L403XoH+llMX/ARq3Uuyas=; b=Qnn0qC0K6GOiabr/koFt1TRIMPkaUlV8uCKemEuFYEpH4roftxu6fteIntwei/PprY /vjLlNLdjlM+QM9CI3MEpw+CQp9IozsMWDB6AcMn8PpFZLEhromAoq+GfW1NuVmZ9xJV q+QMHCMDiHMXAf/WLZrVFyEnGxVqOMo9o/OFbJnUJqwqX7Z4eoDN7DBFXUWWWq1Kxq7k lfM9qCtW3j4oi1HiPiD4kSILvjvvYvV0HVWhmv6CZFv+8K3+QjFUFP4vGiDoy6ldN8Dg 4oxMdP5JtrbNx6g+BoQ7nvQ6eGOCkYQ00CPQnx/0O9VFEpZ5MN5s72v/KgIXX9gPHNJB 93og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=i8nen2Z2PXGS2iId1vMM1L403XoH+llMX/ARq3Uuyas=; b=5czMDRvFJmgwCPpbUZXFZ/NB0jKrp2sEDCPQ+37FVHKL4Nhq6tM2ItOdIFpqF6cKrK 8qTXtwppblJVXSiKh8EQebjcw44gcx/auJMRiOUV62YyivbSXzO/7HMmMq6R1qskwbUg TaVdzPCEdB7mNXkN3+azuIzUa4k3beokvxlxks31HqbRKdqnKlaDVU4KXuh9zysgxCGa FGAi4vvceEVkzik1YRw8MFgZ6GP5fs+zoK3atrGCOegeUut5LhDzFd17QlhZiAM/z3uf tTTHiC2/V5mGowTQlsPNjystGDgfJpzU9GNhF1AhtIhks+PRBdA2KjOZdoX1JLvrf24v 7WnA== X-Gm-Message-State: AOAM532YTK1ybd6DeuUv3CwFGXEzEMt/UklmhMbYlUm0ArCRtUUU6rLq MCpCh4BTrTSbgqqOH+VV97kJUuWvvGrtI8gWfkxB9pon1ioOmd8Mqn9dRQ== X-Google-Smtp-Source: ABdhPJyazOiltMJrKiWGIBZAUgob3KazX3KQgt36NLKXZwgIqW4Js5uSwFNiq5F/l9AuS87NYST1PF0tOjdmZgQkwi8= X-Received: by 2002:a5d:9051:: with SMTP id v17mr9600813ioq.134.1632497659734; Fri, 24 Sep 2021 08:34:19 -0700 (PDT) MIME-Version: 1.0 From: Phil Beadling Date: Fri, 24 Sep 2021 16:34:09 +0100 Message-ID: Subject: Subtituting location of ca-certificates.crt To: help-guix Received-SPF: none client-ip=2607:f8b0:4864:20::d44; envelope-from=phil@beadling.co.uk; helo=mail-io1-xd44.google.com X-Spam_score_int: -4 X-Spam_score: -0.5 X-Spam_bar: / X-Spam_report: (-0.5 / 5.0 requ) BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1632497730; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=W0w3Z1PIF/SGVYGs/4yK96QHqARMks7z4WfmFeRSt6g=; b=RMfuJVWE0yWrejq+lzPBnxhYdN6WHBimdkCy9S/thmGLJmoC6EGzR3MzWN1ZaqHNl0ZzRD gb76Uyjdn8HvVBn44s/xdzL9xSFiJcyH3hkJI7/dUwNad8FQYObHK3AGg+wHvG7qApOtsN TWwTsQ9EWKyAYpd4IwJJP4F1n3asKQ5TUvtpEfivIGt68O39jRDfZ0YLJiSaDGtcQJreYl rPrqh0CcCe4OLtaPDuo5iYWzF9z4tn1qzUnFGeu2g5lJU4X0uaXTBOzbsT7TSGT/uxx2iw yTC3QxWgCLViU1DT5u3cK9wwZAZbtvpDR9E51PuYxpMBsVZZ4uQ+Z/R6t8ZnpQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1632497730; a=rsa-sha256; cv=none; b=pIrLu+HTu62DyngRLzBYEWKKCWF0bBOqV7XgzF7HO7EeHlT8kko/CuAM2F1Hw5wJKYq2ql ICpKFGbl7bgDZiKUMcgP4NfGn8qJjBHgrAXHO/37WnNMgH6Gp1e10SJTLZMvXMz1fK1mmt FoiSdy1kWrVYDM1Jfllese3JjnPHyOe8yckBstGwq50RL1VsVLw3ZKO+3e6KUxhT6epypb UdOR6i7chnmdOC4qQP4c8i4P06CausfIJ7zVAjxHzzz07ukckKkYGPFDQkNzUW13tscViK kJCLwPRbnK3l7rNYlJv26ZU+lSd2IekTcjUWyGVKICvFdNrJBEAzQVoPrak/Rw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=beadling-co-uk.20210112.gappssmtp.com header.s=20210112 header.b=Qnn0qC0K; dmarc=none; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Spam-Score: -1.39 Authentication-Results: aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=beadling-co-uk.20210112.gappssmtp.com header.s=20210112 header.b=Qnn0qC0K; dmarc=none; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Migadu-Queue-Id: 9A318D2C1 X-Spam-Score: -1.39 X-Migadu-Scanner: scn0.migadu.com X-TUID: rjbdlAe7Ifon Hi all, I have a package defintion that needs to the know the location of ca-certificates.crt at build time. I've resolved similar problems before by patching the location of certs after the unpack stage to match the location of nss-certs (see below). However, it looks like the actual cert bundle file is not part of nss-certs package: ca-certificates.crt -> /gnu/store/ml3ljnqavqpgsvw2486l5rs11zc0yf16-ca-certificate-bundle/etc/ssl/certs/ca-certificates.crt ca-certificate-bundle isn't a regular package that I can reference like nss-certs. I can find it defined in the source code here: https://github.com/guix-mirror/guix/blob/0f2a17de06a52ca56c90368e29644036c14abad2/guix/profiles.scm#L1054 If this file only exists in a profile how can I know it's location at build time? Thanks, Phil. Approach taken when the directory is required rather than the bundle: (arguments '(#:phases (modify-phases %standard-phases ;; Patch SSL Certs to use nss-certs location (add-after 'unpack 'patch-certs (lambda* (#:key inputs #:allow-other-keys) (substitute* "app/foo/main.cpp" (("/etc/ssl/certs") ;; by default app runs off Ubuntu location (string-append (assoc-ref inputs "nss-certs") "/etc/ssl/certs")))