From mboxrd@z Thu Jan 1 00:00:00 1970 From: Julien Lepiller Subject: Re: Guix on Android, getaddrinfo, failure in name resolution Date: Tue, 15 Jan 2019 19:03:57 +0100 Message-ID: <04070b312703ef340615452fc2d56e2f@lepiller.eu> References: <7DD810A8-FBFF-4609-981B-AD6169C384AB@sumou.com> <7A2A3304-5B19-47D6-91A8-960D60294C3B@sumou.com> <52019D8B-FA10-413E-8776-6B594BABFFA1@sumou.com> <7f97029168c04559580e64d55b29ca6e@lepiller.eu> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([209.51.188.92]:43309) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gjT4J-0006Nu-Pn for help-guix@gnu.org; Tue, 15 Jan 2019 13:04:09 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gjT4F-0004Yr-EX for help-guix@gnu.org; Tue, 15 Jan 2019 13:04:04 -0500 Received: from lepiller.eu ([2a00:5884:8208::1]:40122) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1gjT4F-0004V6-5Z for help-guix@gnu.org; Tue, 15 Jan 2019 13:04:03 -0500 In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: =?UTF-8?Q?=E7=99=BD=E3=81=84=E7=86=8A?= Cc: help-guix@gnu.org Le 2019-01-15 18:53, 白い熊 a écrit : > -- > 白い熊 > > On January 15, 2019 5:24:30 PM UTC, Julien Lepiller > wrote: > >> If you use ping from the system (android), it uses bionic, which guix >> doesn't use. You have to test with a tool that uses glibc. > > Oh yes — obviously you are right! It didn't occur to me I'm using the > android ping — busybox binary for testing… >>> >>> Is this possible? Can it be tested? I don't think you can nslookup or >>> whatever an https:// location right? What if guix can't access secure >>> sites? Is that possible? >> >> I don't think it's possible: nslookup doesn't care about the protocol >> that's going to be used, it only needs the domain part. Maybe you can >> try to check that you can actually access the name servers? > > Access meaning how? I have 8.8.8.8 and 8.8.4.4 set as nameservers… I mean, can you connect to these servers on UDP port 53? According to the rest of your answer, I guess guix cannot for some reason... So here's what I think is happening: you guix cannot connect to the internet, so it failed to connect to the name server. That failure triggered the name resolution error you saw. So we have to understand why guix cannot connect to the internet. > >> If that doesn't work, as a workaround, you can resolve the names that >> guix tries to reach, and put this in /etc/hosts: >> >> 23.38.13.120 letsencrypt.org >> >> Whether it works or not will tell us more about where the issue could >> be. > > Yes! This is getting somewhere — now on the letsencrypt line it fails > with: > In procedure socket: Permission denied > > This reminds me of ping socket errors when elevated privileges have > not been given to the ping binary. :@) > > It fails with the same error even as root though. Hmm… Here, I think it's the daemon calling the download code... Did you run guix-daemon as root? Do you have a backtrace that you could send? > -- > 白い熊