From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:bcc0::]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id WJU5ATSqgWAyGwAAgWs5BA (envelope-from ) for ; Thu, 22 Apr 2021 18:54:12 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id 2DeAODOqgWA3XwAAB5/wlQ (envelope-from ) for ; Thu, 22 Apr 2021 16:54:11 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 6D9FA15E91 for ; Thu, 22 Apr 2021 18:54:11 +0200 (CEST) Received: from localhost ([::1]:50308 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lZcag-0003Y1-Gp for larch@yhetil.org; Thu, 22 Apr 2021 12:54:10 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:59692) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lZcXf-0000JA-7c for bug-guix@gnu.org; Thu, 22 Apr 2021 12:51:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:52106) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lZcXe-0004TG-JR for bug-guix@gnu.org; Thu, 22 Apr 2021 12:51:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lZcXe-00069d-IB for bug-guix@gnu.org; Thu, 22 Apr 2021 12:51:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#46297: nix-service-configuration is missing the default /bin/sh Resent-From: Oleg Pykhalov Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 22 Apr 2021 16:51:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 46297 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: pukkamustard Received: via spool by 46297-submit@debbugs.gnu.org id=B46297.161911023723610 (code B ref 46297); Thu, 22 Apr 2021 16:51:02 +0000 Received: (at 46297) by debbugs.gnu.org; 22 Apr 2021 16:50:37 +0000 Received: from localhost ([127.0.0.1]:35416 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lZcXF-00068k-1H for submit@debbugs.gnu.org; Thu, 22 Apr 2021 12:50:37 -0400 Received: from mail-lf1-f42.google.com ([209.85.167.42]:40778) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lZcXD-00068W-R3 for 46297@debbugs.gnu.org; Thu, 22 Apr 2021 12:50:36 -0400 Received: by mail-lf1-f42.google.com with SMTP id h36so19042857lfv.7 for <46297@debbugs.gnu.org>; Thu, 22 Apr 2021 09:50:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=o73QoLfndWTNL6t1dsoZOWvUTcRv0SwOFjhusQR0VpY=; b=Zouw5Dl5n065mPtNnaO1vFd+ZO+D5d8Sqgjg6odMjH+J+pkQgvu1klfk5WoAxn4mGg VbH8FktzppFi0QXpXa5dDcGwqQhLxyspJeH8mDbwQ/SqBPsDdjLD8i/qo0pbXZLtAOyH URvbe8aix6QKH29swi/MJRqwuLhia0/wA+DrHG/+P6+Kv5gS2wkA6N8khC5ym++0SQHI 0zlUAXSpKqZzLTKqRirFW559rmTxhi6YvWGTZAwVaWtbFh2JmmMVP5tL31TbpqRck3aA s7B5SXICf7XOBDdFKpYF/NnJERDZo1XQq53jw0oft4Ykej6Qepqs0jTE63ABnLtJ1REL 91yw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=o73QoLfndWTNL6t1dsoZOWvUTcRv0SwOFjhusQR0VpY=; b=LJ1/dcNnQH//edaZ8ZSA1Izy3f8hdxER/vTf4En6i6kbbYXa1yeKbKfNB2RaEht73p pFZrPnPNmRgFemUBGoFjWOADGgau2yOlCEQScwRCr1cTwnYBOiLTuZWwaNINNgkoz+sJ yip/KJaDP2rG43wkQX0VY9cBned6RlE7rjxkDO0BGKLesB2xWbyu4XX27HVCScfUM+96 dHlKJ/2LTTWyNxZliR2Xk2PjKUAo3esc+w27NrLQHCuFP7FwZF8ZssNZ773TkV2iHrQI 5G6pIugCS3pPyZBDCbE6fTnltNDOUVwQLF2KPa3/Czd2TGYO9fTwQ12LBmrTDxO5YQdj Hyww== X-Gm-Message-State: AOAM5315B48MF0JTTok//r9ALhi8Vmi3f66lUmLWxB3DSgDOYRJ/iHrm /j+ZXCE2NqGjzS09MOFR7kDT3GuPeVg= X-Google-Smtp-Source: ABdhPJykJvA5qrsfO78wGo/OAWtc1vgNWDJ30/MM28vdkrLiyP2vWvC6pyOIvoh5vJEe0WM+Pa7ZVA== X-Received: by 2002:ac2:5feb:: with SMTP id s11mr3033697lfg.558.1619110229285; Thu, 22 Apr 2021 09:50:29 -0700 (PDT) Received: from guixsd ([88.201.161.72]) by smtp.gmail.com with ESMTPSA id u6sm324698ljj.82.2021.04.22.09.50.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 22 Apr 2021 09:50:28 -0700 (PDT) From: Oleg Pykhalov References: <5112f89b-ac41-45bd-931c-bd8a9bde4836@Johns-iPhone> <87im77pssd.fsf@asu.edu> <864kfzir0q.fsf@posteo.net> <874kfy7qkf.fsf@gmail.com> <8635viiwcs.fsf@posteo.net> Date: Thu, 22 Apr 2021 19:50:25 +0300 In-Reply-To: <8635viiwcs.fsf@posteo.net> (pukkamustard@posteo.net's message of "Thu, 22 Apr 2021 07:30:58 +0000") Message-ID: <87zgxquuum.fsf@gmail.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="==-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: John Soo , 46297@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1619110451; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=o73QoLfndWTNL6t1dsoZOWvUTcRv0SwOFjhusQR0VpY=; b=Hc9V5sdSvsbAXaAqI5erPwqfKl+uPR0xucJ2Gvgl/7Gra1bHm630YEwePmdwF+5bKYsWV5 GLajS6GmY122Hp1MS1TMpFM0fsHma27bnpKYGtaqdzJIW0fg72JauRNZgaIkrG2mkxX0MM cMvBz+wGI5jHNnuDioGXIMv+rhl4krIGyfI16j86ieTWk0lSvu+Aadzc4SOsqy2NCYaNgu 3vw11sT66ViB/Ity5Jx57s/YEnXgjRXjIRD3UZr+sHqE4aI1q1T1uKdKvYeV4Rva84a7vV Zu8dSD5R9ztCIonT0kMrVFToY7Qd+pi6f8QbsIDXejeVw+lHHI6yvyeRgyOHaA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1619110451; a=rsa-sha256; cv=none; b=KW4RJvxAfD3KCtj4LuESFvtkBkZJFTgUpxn9Usn8VH3o8Q7BqKrNGPCC0f4zx18ITVRS3m Q8wtwmdQiBSXQllfeF1qEBPRkhUXcjqFlFsd9AJtpd4mUJqG5dpI8H38bVkFowta3X6bx2 cFcgDLnGIKaPQJcFskVlHiNu4PX13TvGKtmuJvrYm2eOSCBa4e39JhKq7poR/X4N/6LV0N YbUy2bzlfNEZJskTOR3w4Cza4n5MC44McbxOyJEYfixFDu1x77SmNUdyDAd28KIh5Hil0w Tp35OsCiQtnJ9o//jA2lnBrTgASu+Fj7j5cM26ro5sKF+L0JZPGm4jLRkHIGYg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20161025 header.b=Zouw5Dl5; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -3.44 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20161025 header.b=Zouw5Dl5; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 6D9FA15E91 X-Spam-Score: -3.44 X-Migadu-Scanner: scn0.migadu.com X-TUID: k3kIYI+E9wl+ --==-=-= Content-Type: multipart/mixed; boundary="=-=-=" --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable pukkamustard writes: [=E2=80=A6] > The build succeeds if I do following: > > ``` > $ sudo nix-build nixpkgs/ -A ocaml-ng.ocamlPackages_4_11.ocaml --option > build-sandbox-paths > "/bin/sh=3D//nix/store/0xrjvxvh3wvdbf8pc2850jry1fcx292g-busybox-1.32.1/bi= n/busybox" Could you apply the following patch on 13c4a377f5a2e1240790679f3d5643385b6d7635 and run the command again, please? --=-=-= Content-Type: text/x-patch; charset=utf-8 Content-Disposition: inline; filename=0001-services-nix-Add-bin-sh-to-build-sandbox-paths.patch Content-Transfer-Encoding: quoted-printable Content-Description: [PATCH] services: nix: Add /bin/sh to build-sandbox-paths. From=201aa675482fa1aaba02ac1d8599198ec0aa8c2201 Mon Sep 17 00:00:00 2001 From: Oleg Pykhalov Date: Thu, 22 Apr 2021 19:46:23 +0300 Subject: [PATCH] services: nix: Add /bin/sh to build-sandbox-paths. * gnu/services/nix.scm (nix-service-etc): Add /bin/sh to build-sandbox-path= s. =2D-- gnu/services/nix.scm | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/gnu/services/nix.scm b/gnu/services/nix.scm index 1aef47db0a..619e3cae54 100644 =2D-- a/gnu/services/nix.scm +++ b/gnu/services/nix.scm @@ -1,5 +1,5 @@ ;;; GNU Guix --- Functional package management for GNU =2D;;; Copyright =C2=A9 2019, 2020 Oleg Pykhalov +;;; Copyright =C2=A9 2019, 2020, 2021 Oleg Pykhalov ;;; Copyright =C2=A9 2020 Peng Mei Yu ;;; ;;; This file is part of GNU Guix. @@ -19,6 +19,7 @@ =20 (define-module (gnu services nix) #:use-module (gnu packages admin) + #:use-module (gnu packages bash) #:use-module (gnu packages package-management) #:use-module (gnu services base) #:use-module (gnu services configuration) @@ -121,7 +122,8 @@ GID." (format #t "sandbox =3D ~a~%" (if #$sandbox "true" "fa= lse")) ;; config.nix captures store file names. (format #t "build-sandbox-paths =3D ~{~a ~}~%" =2D (append internal-sandbox-paths + (append (list (string-append "/bin/sh=3D" #$ba= sh-minimal "/bin/sh")) + internal-sandbox-paths '#$build-sandbox-items)) (for-each (cut display <>) '#$extra-config))))))))))) =20 =2D-=20 2.31.1 --=-=-=-- --==-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEcjhxI46s62NFSFhXFn+OpQAa+pwFAmCBqVEUHGdvLndpZ3Vz dEBnbWFpbC5jb20ACgkQFn+OpQAa+py2Fg//U6jv44y65KbTZIckvPN2IIiQzXxh cZA9BUvAmLY9RXHZBlM2bPHLzfNVp22m8dsVcqxt/cjwKbeOpiG1ATJbx6h/XVHT MzhIln2HnF/fLAvxU2RrdJ3Z4yu9O87+WNcCA12DfUOXDOy6JskNlAQphTCIlX/c PQCb1GSmIkF8mLvuEGUUxREnWwdo0Eiw64JUVRFpcRMWKIBhTrM2jkRHEPPOUl7I 20AtcOnnzC/z+PS7ulJpVU46taNbRQUiIHZ/RfnwOKbj6DdJfkc6+lbm1jRvicCS jhuSzIWmMrU3NaP72J0WFnobdeddfY6X5p01YJWVE1Wbmb7EDZ7JRfRtxDM5RBzF ePG8YPyHyOII1ssI6WkCY5kk0QridEJIjmMUnorVOYSNtfFFlpDDEHtuqvLVtU9B Pq5dakpjWKiI4fznyRWo2QBi8fq0NjdeRR7v68bZs/JPX8G2MozI7NnCC9iMAsrm z8rL/ImdK/VieYCa9R8nUBqHiWB4Xp7mjaU/5fBXCikWrXwdKCsvIvf60IDuxHfH XxFPH5QwmMHT1wPDgVwubVbNgAiDk9yJMkULv2MXNNlNGSX/vFexqe/FfAHVl/1v Wq/s43lLVGcDJgaQvkyX55vFtOcpsRICs5Olr/7DuzDuNqOMXogYGFud/+nBsgcm gNONUc76292hPRI= =8AKo -----END PGP SIGNATURE----- --==-=-=--