How to debug failing guix pull?

How to debug failing guix pull?

[Tomas Volf]

[-- Attachment #1: Type: text/plain, Size: 1318 bytes --]

Hello,

I am trying to install Guix on a new system from a Debian based installer.  I
installed the guix package:

  apt-get install guix -y

Created /etc/guix/channels.scm to indicate what channels to pull:

  (list (channel
          (name 'guix)
          (url "https://git.wolfsden.cz/.git/guix")
          (branch "master")
          (commit
            "83068bdf13ea8562e7c5ff94a194846a0127fa73")
          (introduction
            (make-channel-introduction
              "028e445a2028068e3c83996daa281057f19141a0"
              (openpgp-fingerprint
                "B783 49B3 8C14 7D36 2988  68A4 2FBF EE7D B67F C1A9")))))

However when I try to actually pull, I get this error:

  $ guix pull --verbosity=44 --debug=44
  Updating channel 'guix' from Git repository at 'https://git.wolfsden.cz/.git/guix'...
  guix pull: error: Git error: SSL error: 0xffff8880 - SSL - A fatal alert message was received from our peer

The interesting part it that just running `git clone' against the repository
does work fine, so the failure is Guix-specific.

Would anyone be so kind and advice me regarding how to debug this?  I am not
really sure how to proceed...

Thank you and have a nice day,
Tomas Volf

--
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: How to debug failing guix pull?

[Felix Lechner via]

Hi Thomas,

On Thu, May 02 2024, Tomas Volf wrote:

>   Updating channel 'guix' from Git repository at 'https://git.wolfsden.cz/.git/guix'...
>   guix pull: error: Git error: SSL error: 0xffff8880 - SSL - A fatal alert message was received from our peer

Would you please try that again?

On Thu May 2 04:22:58 AM UTC 2024, I ran this command

    $ openssl s_client -connect git.wolfsden.cz:443 2>/dev/null | openssl x509 -noout -dates

and saw this output

    notBefore=May  2 03:00:16 2024 GMT
    notAfter=Jul 31 03:00:15 2024 GMT

By my math, you possibly wrote your message before the certificate was
valid, namely on or about Thu May 2 00:08:00 AM UTC 2024.

Maybe Guix cared but Git didn't?

Kind regards
Felix

Re: How to debug failing guix pull?

[Tomas Volf]

[-- Attachment #1: Type: text/plain, Size: 1450 bytes --]

On 2024-05-01 21:33:05 -0700, Felix Lechner via wrote:
> Hi Thomas,
>
> On Thu, May 02 2024, Tomas Volf wrote:
>
> >   Updating channel 'guix' from Git repository at 'https://git.wolfsden.cz/.git/guix'...
> >   guix pull: error: Git error: SSL error: 0xffff8880 - SSL - A fatal alert message was received from our peer
>
> Would you please try that again?
>
> On Thu May 2 04:22:58 AM UTC 2024, I ran this command
>
>     $ openssl s_client -connect git.wolfsden.cz:443 2>/dev/null | openssl x509 -noout -dates
>
> and saw this output
>
>     notBefore=May  2 03:00:16 2024 GMT
>     notAfter=Jul 31 03:00:15 2024 GMT
>
> By my math, you possibly wrote your message before the certificate was
> valid, namely on or about Thu May 2 00:08:00 AM UTC 2024.
>
> Maybe Guix cared but Git didn't?

Ha, if that would be the cause it would nicely sit on the top of the pile of bad
luck I had this week.  Alas, it was not the cause.  I tried again and it still
fails with the same error.

What I did discover however is that the failure is specific to the debian
version of Guix.  When I time-machine to 1.4.0, the pull does work.  After doing
pull from the Guix upstream, the pull (from my repository) also works.  Only the
debian version is affected.

Therefore I will try reporting it to debian bug tracker.

Thanks for the help :)

Tomas Volf

--
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]