From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id wMYDB6724GCAgQEAgWs5BA (envelope-from ) for ; Sun, 04 Jul 2021 01:45:50 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id qKu4Aq724GAadgAAB5/wlQ (envelope-from ) for ; Sat, 03 Jul 2021 23:45:50 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8275621960 for ; Sun, 4 Jul 2021 01:45:49 +0200 (CEST) Received: from localhost ([::1]:36366 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lzpKV-0007se-AW for larch@yhetil.org; Sat, 03 Jul 2021 19:45:47 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:34046) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lzoF1-0006hb-2H for bug-guix@gnu.org; Sat, 03 Jul 2021 18:36:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:56735) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lzoF0-0001vB-RJ for bug-guix@gnu.org; Sat, 03 Jul 2021 18:36:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lzoF0-0000Rm-Lf for bug-guix@gnu.org; Sat, 03 Jul 2021 18:36:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#49369: Duplicated SSL_CERT_DIR value, and the cuirass service Resent-From: Vivien Kraus Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 03 Jul 2021 22:36:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 49369 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 49369@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16253517531700 (code B ref -1); Sat, 03 Jul 2021 22:36:02 +0000 Received: (at submit) by debbugs.gnu.org; 3 Jul 2021 22:35:53 +0000 Received: from localhost ([127.0.0.1]:40048 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lzoEr-0000RL-Hb for submit@debbugs.gnu.org; Sat, 03 Jul 2021 18:35:53 -0400 Received: from lists.gnu.org ([209.51.188.17]:43734) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lzoEo-0000RD-H6 for submit@debbugs.gnu.org; Sat, 03 Jul 2021 18:35:52 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:34006) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lzoEo-0006hM-70 for bug-guix@gnu.org; Sat, 03 Jul 2021 18:35:50 -0400 Received: from planete-kraus.eu ([2a00:5881:4008:2810::309]:48388) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1lzoEm-0001hT-Hm for bug-guix@gnu.org; Sat, 03 Jul 2021 18:35:50 -0400 Received: from planete-kraus.eu (localhost.lan [127.0.0.1]) by planete-kraus.eu (OpenSMTPD) with ESMTP id 01edee39 for ; Sat, 3 Jul 2021 22:35:27 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=planete-kraus.eu; h= message-id:subject:from:to:date:content-type:mime-version :content-transfer-encoding; s=*; bh=kbB7tez1vqWNXEo5lQYtQOYi7h8=; b= msKTTYdqDwGEf3Br7C6dJEXeN/xcv2ossVQLSnrBOWD1XvH4AbtbwWkNbP2h/hmw GHtZShfGMt3rNhpcqZugNcV0olkXEUqW7ovHmHYyotapyQ1L0XT7vJHgxwuHoZMx Q9A7x4sClv4GFwWihZTIYkMlC7FDNld7tuetzhDPxCo= Received: by planete-kraus.eu (OpenSMTPD) with ESMTPSA id cea12773 (TLSv1.3:AEAD-CHACHA20-POLY1305-SHA256:256:NO) for ; Sat, 3 Jul 2021 22:35:25 +0000 (UTC) Message-ID: <1395ae41f9e93ee1c489d1eaa17032b0a640098e.camel@planete-kraus.eu> Date: Sun, 04 Jul 2021 00:35:35 +0200 Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a00:5881:4008:2810::309; envelope-from=vivien@planete-kraus.eu; helo=planete-kraus.eu X-Spam_score_int: -16 X-Spam_score: -1.7 X-Spam_bar: - X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Mailman-Approved-At: Sat, 03 Jul 2021 19:45:35 -0400 X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" Reply-to: Vivien Kraus From: Vivien Kraus via Bug reports for GNU Guix X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1625355949; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=rk4+fZ5zpBei9eambkOshXVeapNX/ntP8HwCo0Oa8Iw=; b=ErpoP2m4JAWgWlW7so2E3YlGIcYLRGrAknW0kSl2MSxOMZd8rzB0Uoe70iwgAq8GTTL6zS S9uPTas/h4fokvYTqSveNBisLlQAtGtwv2nhBzPFWFTieBb5kzSsAwH3RZNE70FBa66+hF dRM0ehmUxlqDQp+ZvSaTVUgc4veDmg8SLy2zaVZz1GmmzoG1uDQZvPAnBMnB/hKSeaAKiJ dends9gCXYfBgmPoZX2aoO0GDqh8UAmCDOBTfwTIzFZ6PEnlTTl/I3BVHz8T9AY4eObxxr t2PWhLWDangCYPpp6DGNakWKChI/YAl/mppQNugsHrX1SZvC8JDr9FO2ZZUvAA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1625355949; a=rsa-sha256; cv=none; b=rlGk5xIFTeoDOB53izuTuWCRVlkR8alOACbD0Ik/FfeLDk34XdpqiLFODjxxsuZK3N4k5R sX8X+vPZ7thS00LS1XLb9g5cq9xLXAUxXSKYXEuUN3GK3Yeyd2V/YHHi3ktBNm2yEZ3ngU rq0lytqUASNQfFzTeg2Q6ba8rHAtuBbow4/o2LX2jjRCOCYgReO8q+KgAvrc4yKBmSuYwT chPMneGNeo0QYi9OeDUX+nUJbgrwbmPMuCaUoL4H/bugGDgMizallnDN6qp25HyOuW/fbP f059qlRiEw0F7HieBYFq4wc3RKE5mRwdHuMDXZiUr7pFTRqWf3mml00c60c9hw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -2.91 Authentication-Results: aspmx1.migadu.com; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 8275621960 X-Spam-Score: -2.91 X-Migadu-Scanner: scn0.migadu.com X-TUID: 16qoUJuaTtc5 Dear guix, When I set up the cuirass service, my /run/current- system/profile/etc/profile file goes from: export SSL_CERT_DIR="${GUIX_PROFILE:- /gnu/store/v7yks560hnm9zkjw1ynsavfdgwbvkq9w- profile}/etc/ssl/certs${SSL_CERT_DIR:+:}$SSL_CERT_DIR" to: export SSL_CERT_DIR="${GUIX_PROFILE:- /gnu/store/4zby6gn6kv92mn4mck4jw3jxcs82821p-profile}/etc/ssl/certs" Notice how with cuirass, the variable is expanded to potentially multiple values. As a result (I don’t fully understand why), with the cuirass service in place, my $SSL_CERT_DIR is set to: /run/current-system/profile/etc/ssl/certs:/run/current- system/profile/etc/ssl/certs (notice the duplicated entry) Due to that, the guile web client is broken because guile does not support a colon-separated path in SSL_CERT_DIR. Attributing the blame to this breakage is tricky, because guile is not 100% clean (it should support a path), it’s not clear to me why cuirass needs to re-define SSL_CERT_DIR, but maybe guix should not consider that cuirass is installed when it is used as a service. Best regards, Vivien