From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms1.migadu.com with LMTPS id OG70AKLzSWbNXAEAe85BDQ:P1 (envelope-from ) for ; Sun, 19 May 2024 14:42:10 +0200 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id OG70AKLzSWbNXAEAe85BDQ (envelope-from ) for ; Sun, 19 May 2024 14:42:10 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=alternativebit.fr header.s=gm1 header.b="SDm8PE/D"; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1716122529; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=hddpfv17G1bEo2+9RaSJX7VXIqtfxmQxD7w7WeRto7E=; b=r9YMwacK1agOuJFbsSc8g/wkKqvd29kPz15UWbXk5/mM3DYX2c3rWE4l/8XwXJlZ7ChxUp 4yIoORpifo/Idn1DFClD3VTOQNXjTubKzhi/PUPPqdy+CVQhvDzfobgKwONOlAPWcg6GBe gV5sdQIgP14z8f3DQuFgyv7Dsa2DPA+odaO66yhcADu8KZAJZfeS9ryfIOiRB/UUp3ZrTk VYyDtV+bBg+zFdtfzRBsFWt4uDSvf4/51oQThL5kQVDGt9KyBCzMBCBMB8RBbCmqvDeLtu VFecM746YvdFila7p4LYS6y2qWam/mq4FZ60faCLsP339WItAfBiRlSxC2pLlA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=alternativebit.fr header.s=gm1 header.b="SDm8PE/D"; spf=pass (aspmx1.migadu.com: domain of "guix-patches-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-patches-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1716122529; a=rsa-sha256; cv=none; b=b3u6hH5BC3mpalxSJgKd1TC2jWQ+gWikWiwJOVbfdNxM6DRiJHHTnJmtRHz0NXVHO5FQ4M Oi+0EWXKFTFjyngWpLypyGpTszx8zeZFvj1pmKKLnPEbTmpnFCfM0gD3IUekWHiTSZES5a ICHZTB1YMgir28w9ZxomZeUjKZs67yovjgQnqNbQmgcs/f7KwdMhCHsaA5b6BaqgWQt48p r/HjxDfelVVB0EQAmu2iPA08CCyveBfvGeNCAUhYnii7XrBf65VBS20d7+OaQok40/ffym ddGPhH+2kDrjYPpq62kLPE+TqBTUlUbXavlkCAnKcvo9z+WPtfJTKkO0nCIU1w== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id DEAB020D19 for ; Sun, 19 May 2024 14:42:09 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1s8frU-0007mg-4s; Sun, 19 May 2024 08:42:00 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s8frS-0007mE-DD for guix-patches@gnu.org; Sun, 19 May 2024 08:41:58 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1s8frS-0004vx-4k for guix-patches@gnu.org; Sun, 19 May 2024 08:41:58 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1s8frW-0008Jh-3U for guix-patches@gnu.org; Sun, 19 May 2024 08:42:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#71064] [PATCH 0/7] Nsncd: Introduce package + nscd service update Resent-From: picnoir@alternativebit.fr Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sun, 19 May 2024 12:42:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 71064 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 71064@debbugs.gnu.org Cc: Picnoir X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.171612249131949 (code B ref -1); Sun, 19 May 2024 12:42:02 +0000 Received: (at submit) by debbugs.gnu.org; 19 May 2024 12:41:31 +0000 Received: from localhost ([127.0.0.1]:36155 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1s8fr0-0008JF-VK for submit@debbugs.gnu.org; Sun, 19 May 2024 08:41:31 -0400 Received: from lists.gnu.org ([209.51.188.17]:44974) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <*@alternativebit.fr>) id 1s8fqy-0008J7-Rw for submit@debbugs.gnu.org; Sun, 19 May 2024 08:41:29 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <*@alternativebit.fr>) id 1s8fom-0006jA-Si for guix-patches@gnu.org; Sun, 19 May 2024 08:39:13 -0400 Received: from mslow1.mail.gandi.net ([217.70.178.240]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <*@alternativebit.fr>) id 1s8fol-0004Jr-4A for guix-patches@gnu.org; Sun, 19 May 2024 08:39:12 -0400 Received: from relay8-d.mail.gandi.net (unknown [217.70.183.201]) by mslow1.mail.gandi.net (Postfix) with ESMTP id BEEAEC3DCC for ; Sun, 19 May 2024 12:35:14 +0000 (UTC) Received: by mail.gandi.net (Postfix) with ESMTPSA id 4D38B1BF204; Sun, 19 May 2024 12:35:07 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alternativebit.fr; s=gm1; t=1716122107; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=hddpfv17G1bEo2+9RaSJX7VXIqtfxmQxD7w7WeRto7E=; b=SDm8PE/Dd6maF7iZOppO+HqD3bQM7z6oqkbs1ZbNR3YywasG0sLoqr29e1ep37fdoVFFpi /HqccOerCLJLUt00d7nhVlAABpI9rB7OxYooG99y9i1XtqJ9IKudhIbU32VDX8/mKFl3iu yoEDFQmVvjJ4l4gZzuD5/aXRzdh8Kfg4ZVPkU5x+20Gut3OsyAj+KEp5VQ+VtZj9QHdirK ySAbqDi48iVsqRGS2nHxUlgr0TnoOi7PvJhzGmO+Qt/q+s+6Aa1ro4LfgPj/+ot7u2z+v8 M9WzP6ILzNGwhsHhGijMxK4lEMsu5Ez70G4IlxwVFon5+JfJY9Tlxdc7bnXDuA== From: picnoir@alternativebit.fr Date: Sun, 19 May 2024 14:34:47 +0200 Message-ID: X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-GND-Sasl: felix@alternativebit.fr Received-SPF: pass client-ip=217.70.178.240; envelope-from=*@alternativebit.fr; helo=mslow1.mail.gandi.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+larch=yhetil.org@gnu.org Sender: guix-patches-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -1.76 X-Migadu-Queue-Id: DEAB020D19 X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -1.76 X-TUID: zlxsneT+yNxt From: Picnoir Hey Guix, Some context first. Nscd is a daemon distributed through Glibc originally used to cache the potentially expensive NSS requests. NSS modules are usually distributed as shared libraries that are DL-opened at runtime by the programs linked against glibc. This interface is unstable, Glibc advise to always build the NSS modules with the same Glibc version the host system uses. This is obviously an issue for us: a single system closure can contain programs built against different Glibc versions. In Guix, we're mis-using Nscd to provide a ABI compatibility layer to load NSS modules for programs built against a different GLIBC version than the system one. Nscd is set with a TTL to 0 to disable the caching feature of the original tool. While this works fine most of the times, it sometimes still caches failed domain names resolution. It happens quite often While switching between wifi networks for instance. Nsncd is a non-caching Nscd replacement. It was originally written NixOS adopted this Nscd replacement last year. This migration solved the unwanted caching issues there. This patch introduces the Nsnncd package and modifies the current Nscd service adding a flag to use Nsncd instead of Nscd. This flag is disabled by default. Package-wise: I had to introduce a bunch of packages to please the Cargo version resolver. I'm a upstream contributor, I can probably relax those later on. I was a bit shy to bump rust-nix for all the packages, I just introduced a new version of it. Service-wise: I introduced a new flag in the Nscd service instead of creating a new Nsncd service from scratch to keep the existing service dependency graph. It does not make 100% sense because Nsncd does not share the same CLI API with Nscd. Nsncd actually does not support any configuration file. 🤷 Picnoir (7): gnu: Add rust-libc-0.2.153. gnu: Add rust-nix-0.28. gnu: Add rust-dns-lookup-2. gnu: Add rust-temp-env-0.3. gnu: Add rust-slog-async-2-8. gnu: Add nsncd. gnu: services: nscd: add Nsncd optional support. gnu/packages/crates-io.scm | 112 +++++++++++++++++++++++++++++++++++++ gnu/packages/nss.scm | 44 +++++++++++++++ gnu/services/base.scm | 9 ++- 3 files changed, 163 insertions(+), 2 deletions(-) base-commit: cf5f7a8bf9ca2288700fcf351bbca0fc341ec969 -- 2.41.0