From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id wB7iJSMPI2Y58QAAe85BDQ:P1 (envelope-from ) for ; Sat, 20 Apr 2024 02:41:07 +0200 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id wB7iJSMPI2Y58QAAe85BDQ (envelope-from ) for ; Sat, 20 Apr 2024 02:41:07 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=EToU7RAC; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1713573667; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=hEp2+liNJ833KFO49/Zc9ifqMK/23EwhKufjna9UDeQ=; b=nicykDDrFjriGwZOojdIQM6NiTGitDedmG0udhDaQLGLgXUONhx2sEiDTPH6+8XhABDstu NBDx5cct74n5mM1IhleUuoiLsiRd3mSNgcrFRUQRPouEQ4/AlXkeD4eoFf/D47J+JAc/O0 m99DUKk+KiV8ZqCzWWD5f71TWEL2zMsrIx71YuZSFsljRt4ClApr7BK5hfwutYq1ul8Z+O Ny42kUxd+haU/Xes8fdal9ZAqL4orwWoGnOk1JovfFhkGrrPbMLQbSMwJU87n24EdCfyVS 698QI7Sec/5W1i4byEldEt11yURuX2+l0E/OnOY4qTC0k2aZ6aWcdmmt3oSGXg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1713573667; a=rsa-sha256; cv=none; b=dPwoezY0I264gQaRS11iDOSlHDbRW1jTxk5zI631gzSRbbOMQlHZc1ejplXwTUdhbg1TlC UxRJE6pCxXVQ9lQtvK5F7RzRoleh2pD+R249zj2lP504P6UNos5Rr36DBLiqhXvXGt0QP2 v75aMcyjHjqga7X5cXW6riTw1KdflI4LXod47DDSl4X1euBfampMHDtnXYzjC/661dx4do Y34rCogMsdiQfNosZ2+gQgsrxvU8LeLS4JocLfukE3sdiPVPHnbe1C+QmWvIMopLgMPkJa aFHAaDJUEOJ2Gil2gWyTScCccS6cmGiesr7/hRyox7shGgF9G4baR2xNHvoeGQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=EToU7RAC; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none) Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 5DF646F9D9 for ; Sat, 20 Apr 2024 02:41:07 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rxymk-0005Z5-G3; Fri, 19 Apr 2024 20:40:58 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rxyme-0005Yl-8e for guix-patches@gnu.org; Fri, 19 Apr 2024 20:40:48 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1rxyme-0000fq-0Z for guix-patches@gnu.org; Fri, 19 Apr 2024 20:40:48 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1rxyms-0005EM-2r for guix-patches@gnu.org; Fri, 19 Apr 2024 20:41:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#70446] [PATCH v3] gnu: webkitgtk: Add locale and dri access to gtk sandbox in order to silence gtk locale warnings and enable hardware accelerated video, respectively. Adjust bubblewrap wrapper to add user profile locale and dri directories. Resent-From: Liliana Marie Prikler Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 20 Apr 2024 00:41:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 70446 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: Abhishek Cherath Cc: Vivien Kraus , Maxim Cournoyer , 70446@debbugs.gnu.org Received: via spool by 70446-submit@debbugs.gnu.org id=B70446.171357365019997 (code B ref 70446); Sat, 20 Apr 2024 00:41:02 +0000 Received: (at 70446) by debbugs.gnu.org; 20 Apr 2024 00:40:50 +0000 Received: from localhost ([127.0.0.1]:33007 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rxymf-0005CT-GN for submit@debbugs.gnu.org; Fri, 19 Apr 2024 20:40:49 -0400 Received: from mail-lf1-x143.google.com ([2a00:1450:4864:20::143]:49166) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rxymc-0005CN-R0 for 70446@debbugs.gnu.org; Fri, 19 Apr 2024 20:40:47 -0400 Received: by mail-lf1-x143.google.com with SMTP id 2adb3069b0e04-516d1ecaf25so3381390e87.2 for <70446@debbugs.gnu.org>; Fri, 19 Apr 2024 17:40:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1713573626; x=1714178426; darn=debbugs.gnu.org; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:from:to:cc:subject :date:message-id:reply-to; bh=hEp2+liNJ833KFO49/Zc9ifqMK/23EwhKufjna9UDeQ=; b=EToU7RAC5Z1wDh4VNzuwK5qSefPuR0bBrGM00woAXvP2Tz2udNGvd7rJQRtyt4Zdi1 KtxPXmnrtrblp561RDi3mCjQTYmhOkmyRbXcxGm7Ew95MqDL55+/H3xBNxmHt8Amlsz2 KNnyM/d5/BItaIuN/H7VoGkNcVpqGJmgCNzJVRbZsYJAl9tSh5eihlXXA/xzRdHImxfe I2jqP+Q+PWNA1g8/CmbOAU/LEH2kcR5lUvO3EFBxZ9wylzgi0fNgUe6F67XRufh7O/9U A+N/erIOTpv/dQBL3FKRJkRQMgWYLX+DO0EnvYNUpqRO7wI3KMhTCLmcQjuFmhqjI+sE 83yw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1713573626; x=1714178426; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=hEp2+liNJ833KFO49/Zc9ifqMK/23EwhKufjna9UDeQ=; b=w/B1zv1GHDHFEplQbOD/1a/GRdPdWXD9yJ2WyXH+zyRTjGcmPfPdOWTp4/TSJZ2W0v 09lmuajqzZK3QeJRLIPFlpF77kQ+8JSjR4LBfr76M7fA0vSy3yjjmXdKEaVmgEVJYXvA Xxv4AUfnAiW9AtqiL2+qZUtv/Wo9xevAdCN5e5c44zY6a/jqhndZo2T7vPxL25elKPEB yP61YUT5PxrdAq5AzQ9AkpPyT1qDN08FSOgrIkPTYVziMhyaQuAUmzBvMq6qERJ/FAwH n1TAc/pDntWv0pK3v6Jeiwjmt2biSH3iBlCIPHm2Pq4V3HBbCnDGdp/knc93r9p8DKCj SwaA== X-Gm-Message-State: AOJu0YwUkWNK17Cv6S/jhnkQKfiHYGg26JCmvagW6UmXFtNxtB5sOvIj mQvAbwNZUq5zN80jL0A6IPEQmZLibt6X7Q6LLUa1MqTrxuN/khPj X-Google-Smtp-Source: AGHT+IEWAJKDgiRHZKvdFC89M/FPwaBYgAHaV/uDe5820S3B5hlIqLnyfWi3wj97y6HV7DNye87h/A== X-Received: by 2002:a19:ca4c:0:b0:513:cfbc:970a with SMTP id h12-20020a19ca4c000000b00513cfbc970amr2105084lfj.2.1713573626065; Fri, 19 Apr 2024 17:40:26 -0700 (PDT) Received: from lumine.fritz.box (85-127-52-93.dsl.dynamic.surfer.at. [85.127.52.93]) by smtp.gmail.com with ESMTPSA id qu20-20020a170907111400b00a5242ec4573sm2732051ejb.29.2024.04.19.17.40.25 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 19 Apr 2024 17:40:25 -0700 (PDT) Message-ID: From: Liliana Marie Prikler Date: Sat, 20 Apr 2024 02:40:23 +0200 In-Reply-To: <871q70993j.fsf@quic.us> References: <34830675a6123b15bd652b2aae0922ff95d15f54.1713408724.git.abhi@quic.us> <0c1de95d697742f7ede4d8e967b5bc272ea40004.camel@gmail.com> <871q70993j.fsf@quic.us> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.48.4 MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -1.84 X-Spam-Score: -1.84 X-Migadu-Queue-Id: 5DF646F9D9 X-Migadu-Scanner: mx13.migadu.com X-TUID: escd3VZj1ZIU Am Freitag, dem 19.04.2024 um 20:22 -0400 schrieb Abhishek Cherath: > Hello, >=20 > > > ++=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "--ro-bind-try", userLoc= aleDir, userLocaleDir, > > > ++ > > > ++=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 // Bind mount the dri di= r in profile > > > ++=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "--ro-bind-try", userDri= Dir, userDriDir, > > For reference, why are these two needed here?=C2=A0 Can't we do this > > with the locales and drivers referenced below?=C2=A0 Should we perhaps > > expand GUIX_LOCPATH here? >=20 > Initially, I only had the system paths below those. I added these > so that people could have hardware accel by only installing the > required drivers in their local profiles (as recommended in 69971, > unless I entirely misunderstood) Ah, yes, Maxim did mention this, but yeah, non-static paths are NG (nogood) here. There really is no reason that those paths ought to exist or be useful in a container, for example. > I'm afraid I don't really know what adding stuff to GUIX_LOCPATH > would do. That's for foreign distros, correct? To reiterate, The > locale problem here is that the bubblewrapped process doesn't have > access to the locales, without which it throws warnings. Adding stuff *from* GUIX_LOCPATH, the idea being that this is where we already advocate locales be put. > > Note that any item you add here which references the user home will > > fail to be loaded correctly when using `guix shell' in a way that > > hides it; or even just using `guix shell' normally with a user who > > doesn't have the hardware-accelerated drivers in their home.=C2=A0 For > > system paths, this is somewhat different, since we can more or less > > expect them to exist and mirror the layout of other distros to some > > extent. >=20 > Hmm, since it's in an ro-bind-try, that'll cause the drivers not to > work, and fall back to trying the system drivers. Is there a better > solution you could recommend? Unless a hard dependency on Mesa is appropriate (which we'd have to confirm), I think just rolling with the system ones is okay. Cheers=20