From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:306:2d92::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms9.migadu.com with LMTPS id 2HQuAmfy7GRhWgEAauVa8A:P1 (envelope-from ) for ; Mon, 28 Aug 2023 21:15:51 +0200 Received: from aspmx1.migadu.com ([2001:41d0:306:2d92::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id 2HQuAmfy7GRhWgEAauVa8A (envelope-from ) for ; Mon, 28 Aug 2023 21:15:51 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D136030C03 for ; Mon, 28 Aug 2023 21:15:49 +0200 (CEST) Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=laesvuori.fi header.s=mail header.b="qnnYTnE/"; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=reject) header.from=laesvuori.fi ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1693250150; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=ymd6GTDo86toJrK8dk2CKWSRpII9Lt/ZdU8wRFGogHo=; b=pvTQPUVEI4+lp1mQ+C1Ho+I9qSF5Gz8w3sYOioEI/GaZ5HdisiO/93Y+GcXoKAwSBpnAnK jz5d6M5v2wou8Np1hJ2PwTMdssLIZxQrYEA6t4Qfhd9LxyPYZ5r4DZGb1z4l4Jw4zJNpPd SfjPiKdISEXxbUy8vUL8dNCF5hDx1WvXJ4HHSTU+tLjck5gKGUDf9s+5BkRafMZs3hJbGj nTF6Te5D/d75qkUE5OdR8L2miFVGtZC+b4AIVA2xGMhsqEbL9yBv+jrZmG0kkZJQCvIZ6r ex9olGCjhk7g9lPt0PUk2GmiAyK62yMnqZlga9eb0RNlzRSPtieKp9w1dC9kqw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=laesvuori.fi header.s=mail header.b="qnnYTnE/"; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=reject) header.from=laesvuori.fi ARC-Seal: i=1; s=key1; d=yhetil.org; t=1693250150; a=rsa-sha256; cv=none; b=nzvhTVmWAK5MrtBHLBSZC9HzWSzrMhyxeRwhFgNKunH1vE46gKaX8a9v/qn/i7mwu35PUJ h+TNIYajyveVqCmRR9kLQ9rKkSAqTzPoQSEtKgJafvBoCbMD1DGtMH16nAP0rUoTiYWsO9 8/CZFuZPDkKhltRDoJgVYitnEgNfCBnLkWNv4V+8qYj8GA4TiOxDZCKJyO0ubvuG5bZQ4U Rf0Cat4kDjw8rlrNYLEfGyl74H9W1Pyt83G12NfaWJWg2mWN6lesYgoidMuNEiiDyuevRe Equy3IcEdvTLmrt+3S7gq+qiwbu58cyiELbAsj29fUWk45qxzosBAuOzl2GL7g== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qahhw-0002VU-0A; Mon, 28 Aug 2023 15:15:28 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qahhu-0002V5-Ll for help-guix@gnu.org; Mon, 28 Aug 2023 15:15:26 -0400 Received: from vmi571514.contaboserver.net ([75.119.130.101] helo=mail.laesvuori.fi) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qahhq-0005q8-JC for help-guix@gnu.org; Mon, 28 Aug 2023 15:15:26 -0400 Received: from X-kone (88-113-24-127.elisa-laajakaista.fi [88.113.24.127]) by mail.laesvuori.fi (Postfix) with ESMTPSA id B89003401A8; Mon, 28 Aug 2023 21:15:37 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=laesvuori.fi; s=mail; t=1693250138; bh=7v5nBQIWrr8cpxGFLGjSidIFAbTNV8FlaG0YbkOO3xg=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=qnnYTnE/xb3MEY9Ad6HoqE1CuSGpKgEtVIKp7E1mXmmgpWtCyE9Ah5mwIu46IL/La AtNl//ffYUWemUhQ+nQX10ycfKCYWyh53dUQfUefYi65kqqqg5+vT5Km62b8g3O1yP gFNaHPAalUytVxe1GiNW7jZRTxqZUc+BLYVzGOdk= Date: Mon, 28 Aug 2023 22:15:08 +0300 From: Saku Laesvuori To: Simon Tournier Cc: help-guix@gnu.org, Lars-Dominik Braun Subject: Re: GHC packages' inputs leak in guix shell Message-ID: <20230828191508.bnscnwecoszkyqvk@X-kone> References: <20230815065150.5joaxyts646mnpex@X-kone> <86r0nsztxu.fsf@gmail.com> <20230824161653.vha6sk7ot34nixpe@X-kone> <874jkjqtsx.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="7u3rubvdlxtz3uyg" Content-Disposition: inline In-Reply-To: <874jkjqtsx.fsf@gmail.com> Received-SPF: pass client-ip=75.119.130.101; envelope-from=saku@laesvuori.fi; helo=mail.laesvuori.fi X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: help-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Scanner: mx2.migadu.com X-Migadu-Spam-Score: -9.86 X-Spam-Score: -9.86 X-Migadu-Queue-Id: D136030C03 X-TUID: 5mEWtEV793kQ --7u3rubvdlxtz3uyg Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Aug 28, 2023 at 01:40:14PM +0200, Simon Tournier wrote: > Hi, >=20 > On Thu, 24 Aug 2023 at 19:16, Saku Laesvuori wrote: > >> > Running `guix shell --pure ghc-esqueleto -D ghc-bytestring-builder` > >> > results in an environment that has the base64-bytestring package (fr= om > >> > ghc-base64-bytestring) visible, even though it is not listed on list= ed > >> > the command line (ghc-bytestring-builder doesn't dependend on it). It > >> > seems to "leak" from the inputs of ghc-esqueleto which does depend on > >> > ghc-base64-bytestring. > >>=20 > >> What do you mean by =E2=80=9Cleak=E2=80=9D? > > > > I would expect packages to keep their (non-propagated) inputs separate > > from the environment I use. Here ghc-esqueleto makes it's haskell inputs > > visible to the ghc in my environment. >=20 > Could you be more explicit? >=20 > The package ghc-base64-bytestring does not seems being propagated; the > store item ghc-base64-bytestring does not appear in the profile > generated by =E2=80=9Cguix shell=E2=80=9D. Yes, it is not propagated but it's still visible to ghc, which is not something I would expect. I'd expect to not be able to import modules =66rom packages that are not in any of the active profiles. > However, >=20 > --8<---------------cut here---------------start------------->8--- > $ guix shell -C ghc-esqueleto ghc gcc-toolchain -- ghci > GHCi, version 9.2.5: https://www.haskell.org/ghc/ :? for help > ghci> import Data.ByteString.Base64.URL.Lazy > ghci> :t encode > encode > :: Data.ByteString.Lazy.Internal.ByteString > -> Data.ByteString.Lazy.Internal.ByteString > --8<---------------cut here---------------end--------------->8--- >=20 > and instead, you would like: >=20 > : error: > Could not find module `Data.ByteString.Base64.URL.Lazy' > It is not a module in the current program, or in any known packag= e. >=20 > Right? Exactly. > Well, I do not know if it is possible. I guess it is because of this > file: >=20 > --8<---------------cut here---------------start------------->8--- > $ find $(guix build ghc-esqueleto) -type f -print | grep base64 > /gnu/store/zqax59v1v537h26g0kypka6klaaahnqf-ghc-esqueleto-3.5.8.1/lib/ghc= -9.2.5/ghc-esqueleto-3.5.8.1.conf.d/base64-bytestring-1.2.1.0-CQYLTs5ShsEFl= 2lwe4hRrI.conf > --8<---------------cut here---------------end--------------->8--- I think that is most likely the reason. I don't think cabal has this problem (I haven't actually used cabal much at all so this is just speculation), so it could be possible to fix. Of course, cabal-install and guix have different ways of packaging so it might also be impossible. --7u3rubvdlxtz3uyg Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEoMkZR3NPB29fCOn/JX0oSiodOjIFAmTs8jwACgkQJX0oSiod OjJRihAAkVxRV1yd4XCHWpCuZdGOK3vvVuZdF6/oJzKwXoZczWlIw56e2f8Wnnn/ mSHQBbb23EYBXFdDYX0yU7TC9ivkgOz+HLDAh3gxqKfj/p+Ezk/0NlzsW09X9D9t o+Nto7u1kor/oJ5lwPH3XCAC9LOk7tnXj0A1CaroqLt0I/7147/AgoYjeGMugU3w NiKD4kLLSc33UGAyBuu4Kk3EyEbeq6mDAhqU8wo5tJiFSZEoeCpJZ4rWxmv0zJb7 U1N+vVYssiipPRAcDbPSp58tYtEhRxTt5UzQLxhi8Ow0RMqVaIra0KQYDsShNZkl rmryX5691xCygUhLOOsQc0gDOdOk/s+JFaj6GNJDMRUTAsmaDvC/dKr2ccrDGIHq y1QSEMD8iDtXKXsBlzzY6a3YoExKn4oQDesokk4SIRcl5ge7vidgvXUUkTtoyfwR GAPwwg0XndP7fu2Ormfipxzmg6yxBYyfu4Hf2NxKUTI3J0G0TKY4gu0gD5BaUt0M +SDVmxahQ/DM4x1fpsWOC+mQAY66asPuesw5POUWxU5qit5T1F/c9jw/xezFfKuE EDuWKyeF0UWeLOgu6gkF0kAHuxJwIl0QnMg/8bLI5qpXuEY14sXFQ3ot7BnKxbhK GiT9D3zw1BJvdH1QI6HbiEyD91/dX1JzIgxDDS4rZaaAqN0IqEU= =Qoga -----END PGP SIGNATURE----- --7u3rubvdlxtz3uyg--