From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id aHSKNOzY2GZ4owAAe85BDQ:P1 (envelope-from ) for ; Wed, 04 Sep 2024 22:02:21 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id aHSKNOzY2GZ4owAAe85BDQ (envelope-from ) for ; Thu, 05 Sep 2024 00:02:20 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=HyF0PInu; dkim=fail ("headers rsa verify failed") header.d=riabenko.com header.s=selector header.b="YieG0S/5"; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1725487340; h=from:from:sender:sender:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:in-reply-to:in-reply-to:references:references: list-id:list-help:list-unsubscribe:list-subscribe:list-post: dkim-signature; bh=pp1oeE/FyyjYU4mH9iQ0txNDVpUS1OB7pMLhdZfqRqE=; b=ifDArbhHqxYihn9gR+78C1HAf63Vg+braRdLUbSMbf0INuI6yWGghNKAlnXNiHM8fb2o+2 FC/JSXpmsWThz127TafCe/n8LzM/+VnHYWj4i0hQtdl652OAdGGGcMpwiZWdCHbucg22tx PslcbJhsO7qWl1JjSfwNFM585ilYCF0eXKdTHJRuf4fMqKSVVZxHJ1PSu0up4BesbH5yZ2 qBeZWlLP3XVIb1PZ+cXAOhnt25ApVPEnW+wKVOLZ6yZn2pKpz5dhwOSCNGFHxzs2GEIqR2 akEuf8mNgJDc3XaV5SqiGsSRG5j3A7uxuIcJmrEaFZhAdcP4WAU+rMDAmw++Cw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=debbugs.gnu.org header.s=debbugs-gnu-org header.b=HyF0PInu; dkim=fail ("headers rsa verify failed") header.d=riabenko.com header.s=selector header.b="YieG0S/5"; spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gnu.org ARC-Seal: i=1; s=key1; d=yhetil.org; t=1725487340; a=rsa-sha256; cv=none; b=JpqBUeYVAQlj/y2ZDvF+D4RPHV2lnft7AD7tGyA017+8dpjaWQeC8j6Wk7YGsDCzuMep+N 4owLOs++meFnrlMcxVKXjDZf66l8zGsXFmwgKxm19RTUaJaqUYPqP+ASkISAavAHL8Zq7O HoQhu+2n0jrJgrdrlrQ7YrBMTch4e6UH6/1oMo1Wb3kYA+5FTLlm5qe3GNKTx5hv8sAAd1 ozkQzq/nKE1pKVuktOYE3DEI/KX7Rlxlrh9L7xW7+CUywlB4abcB8qg3i/+eG31zFycR/V ImgleV+WAk0MJXd8ZXCtZNQoBT/eI5cI7YfwXmw/JBW/0misA96Z3/nPe4hNbQ== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 96FA2529ED for ; Thu, 5 Sep 2024 00:02:20 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sly4f-0004xq-NQ; Wed, 04 Sep 2024 18:02:01 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sly4d-0004xK-EG for bug-guix@gnu.org; Wed, 04 Sep 2024 18:01:59 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sly4c-00089c-6R for bug-guix@gnu.org; Wed, 04 Sep 2024 18:01:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:From:To:In-Reply-To:References:Subject; bh=pp1oeE/FyyjYU4mH9iQ0txNDVpUS1OB7pMLhdZfqRqE=; b=HyF0PInuA0d12H6fNSa4iDPsScCoaDwPMeP4LV0X4BerAI+4DpCof1cgwnBZtQjnZde1tcOWlTJqrhREZP4Sr4yr+12tvjNgJYesWPpIatTkhKcx3n6xKbE3sKYvjG9BG1vOcuaHDWdQAKuwA9QrMtTeH8ICTZRXbyjASLDk7dnJIZ/7Qqj9x6iz39pjR77EAKZ6m7J9PeLMUWipdlxXslvjrXxEtKf9A8sKHOldA8Lt8jDgRGqwMPCzKBF9f2+beQ3nIK12G3mJ/0Mr/eZ+F36ngZTVbIl+a/x1iMD9M13RRzG7Jdj16fx7WRQiiq+m4eScYFjSDePK/0rLZdRiuA==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1sly5e-00022r-3x for bug-guix@gnu.org; Wed, 04 Sep 2024 18:03:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#71238: Installer image consistently fails to run system init due to TLS error References: <87plt692ky.fsf@freakingpenguin.com> In-Reply-To: <87plt692ky.fsf@freakingpenguin.com> Resent-From: Roman Riabenko Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Wed, 04 Sep 2024 22:03:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 71238 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 71238@debbugs.gnu.org Received: via spool by 71238-submit@debbugs.gnu.org id=B71238.17254873797851 (code B ref 71238); Wed, 04 Sep 2024 22:03:02 +0000 Received: (at 71238) by debbugs.gnu.org; 4 Sep 2024 22:02:59 +0000 Received: from localhost ([127.0.0.1]:35605 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sly5a-00022Y-OV for submit@debbugs.gnu.org; Wed, 04 Sep 2024 18:02:59 -0400 Received: from lab.riabenko.com ([185.143.146.30]:57348) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sly5Y-00022J-Nt for 71238@debbugs.gnu.org; Wed, 04 Sep 2024 18:02:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=riabenko.com; s=selector; h=MIME-Version:Content-Type:Date:To:From:Subject: Message-ID:From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=pp1oeE/FyyjYU4mH9iQ0txNDVpUS1OB7pMLhdZfqRqE=; b=YieG0S/5mQ6UVIJZvRSzbKCldY NfRmqC8k0ufOFbiYXZcA+dIOTqe13O9dU+ZQ/ZIvOqH9/wBTNMTR4NDXDzprAv2Qzp//H4pSnqYQr 3ctDxbxDBEXbUW7wcp2TWOpchyj84Bp6hJb3JHGdC4T/eGIdD8Aee8loi8i7ndxbVGE8slu3rRyg3 s2tDA6McstKEOHnXbsD8UBHo79IEgLWohDOV76atE6/p8d4A9aEr85iKN0DW/GLGHCMkUWdgZbXo9 ru/gOaC6OWCay+mAwUCwff0R5LZyMVGElAYKFFxmqaylO/pcv8z0iIA5mukYl2GmjIGMdsEMKPMtq v43pm9QQ==; Received: from [192.168.33.1] (helo=[192.168.88.18]) by lab.riabenko.com with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98) (envelope-from ) id 1sly4Q-000000000HC-1HdF for 71238@debbugs.gnu.org; Thu, 05 Sep 2024 01:01:47 +0300 Message-ID: Date: Thu, 05 Sep 2024 01:01:36 +0300 Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-PkvC8z4CcTPW7838dJL9" User-Agent: Evolution 3.38.3-1+deb11u2 MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Roman Riabenko From: Roman Riabenko via Bug reports for GNU Guix Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: bug-guix-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Queue-Id: 96FA2529ED X-Migadu-Scanner: mx13.migadu.com X-Migadu-Spam-Score: -9.09 X-Spam-Score: -9.09 X-TUID: uVY+UGriXebk --=-PkvC8z4CcTPW7838dJL9 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello I had a similar issue with a 6to4 tunnel but I guess that the same cause may be relevant to a VPN or some other type of connection that affects the MTU. The pull operation would fail sporadically, usually on the same package =E2=80=94 most of the time that would be a relatively large package like th= e kernel but not necessarily. The failure would often be a TLS failure but I found it to be a common failure when there is a connectivity issue because it is the TLS that tries to establish or restore the connection. I admit that I had similar issues with connecting to just a few seemingly random websites over the tunnel, but the download of substitutes from the bordeaux server seemed to be the most affected. The tunnel customer support suggested that it is an MTU issue. I tried a lot of different MTU values. Some of the values I tried fixed all my connection issues except for the pull operation until I found how to set up the tunnel in a way that automatically discovers and changes the MTU dynamically. I thought it was too specific to my router, so I posted my findings elsewhere: "How can I set up 6to4 on MikroTik and configure MTU to fix connection failures and update guix?" https://superuser.com/q/1808662/1203531 I recently followed a link to this bug report from a help mailing list thread: "guix pull/guix upgrade often fails over VPN with TLS error message" https://lists.gnu.org/archive/html/help-guix/2024-09/msg00014.html I found the descriptions of the issue familiar, so I am sharing an idea that it might be related to the MTU of the connection to the substitute server. Roman --=-PkvC8z4CcTPW7838dJL9 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEbyuIUwJNVUrtp3hK60bLvjKDmmkFAmbY2MAACgkQ60bLvjKD mmmsEBAAnJ5hoqbTNcoX/cle5W7SjXG1hp4/c0LitAnTC/k7W6piOrH0cJtqeKHp v03HQiy1FSMBa+p4SO73RM82lP2pKEziTqXHkF4wkdw0SmKsZVDDnwazczaCM0yj nMP/yOe3PjJ5k2AkjVhEXeaR3maiLsNslYbXYBnzdP6da0D0L5mQXRSkGGpJif/S RJaefh8kclRWxEyT9M2bvzZZq4ihruYAxqF4NVbWkfgCuSeyhnAEzbHqW3RXXggw wotwIJ6tNtBtgKQkOTZAPS5R2uLcdk6A3bvXSfa1I5QrG6freCZqpNpitn+bjwWO rxWfoLH2uMEyy51dEx4Dmg15npDcZpdtZ+4sh0StbkhjyPOtDrf4yMYBA/DFv1GS xlTG1KCkWlrrBw9qpnGNzQZx/syUhy9kFDL4wFdW/U9TdlWbk7vo3xpK1DMaG5y/ ewnCwOsvpSuUkX0npSqAfUKkLC2ONdQ0RFjI4TDdVHoGukoQ5xplALhy0WHiyp43 wHFnwwzzEsAFhMXBGa29ich5PuTv4KxEn9eMOgYQcQFWf8zEky47a33KVM0IOtkk LniK2zFZgSvlbWiJ7GD4jOymJniY2GMHWKjdgoJSMDGy6neX7nlNcKVewXpyYKFy MjIIj6nZOPxzDgatMsiX0aqyeFhBjQDCHkP3heO55cUCTuEC0dQ= =6W2U -----END PGP SIGNATURE----- --=-PkvC8z4CcTPW7838dJL9--