guix system reconfigure errors

guix system reconfigure errors

[Oleander via]

Hello Guix,
after a `guix system reconfigure` I'm getting this:

```
Backtrace:
19 (primitive-load "/home/user/.config/guix/current/bin/gu…")
In guix/ui.scm:
2324:7 18 (run-guix . _)
2287:10 17 (run-guix-command _ . _)
In ice-9/boot-9.scm:
1752:10 16 (with-exception-handler _ _ #:unwind? _ # _)
In guix/status.scm:
859:3 15 (_)
839:4 14 (call-with-status-report _ _)
In guix/scripts/system.scm:
1305:4 13 (_)
In ice-9/boot-9.scm:
1752:10 12 (with-exception-handler _ _ #:unwind? _ # _)
In guix/store.scm:
661:37 11 (thunk)
1300:8 10 (call-with-build-handler #<procedure 7fd4f0ba8ae0 at g…> …)
2180:25 9 (run-with-store #<store-connection 256.100 7fd5066aca00> …)
In guix/scripts/system.scm:
1329:15 8 (_ _)
832:5 7 (perform-action reconfigure #<<image> name: #f format:…> …)
In guix/scripts/system/reconfigure.scm:
347:3 6 (check-forward-update _ #:current-channels _)
In srfi/srfi-1.scm:
691:23 5 (filter-map #<procedure 7fd4eacefc60 at guix/scripts…> . #)
In guix/scripts/system/reconfigure.scm:
354:39 4 (_ #<<channel> name: guix url: "https://git.savannah.gn…>)
In guix/git.scm:
515:7 3 (update-cached-checkout _ #:ref _ #:recursive? _ # _ # _ …)
In git/bindings.scm:
77:2 2 (raise-git-error _)
In ice-9/boot-9.scm:
1685:16 1 (raise-exception _ #:continuable? _)
1685:16 0 (raise-exception _ #:continuable? _)

ice-9/boot-9.scm:1685:16: In procedure raise-exception:
Git error: the SSL certificate is invalid
```

This happened after trying (for my first time) a few reconfigurations with the home-manager which worked. I moved some packages from my system config to the home config.

I tried a `guix system reconfigure` with a previously working config but I keep getting the same errors.

My system.scm:
```
;; System config

(use-modules
(gnu) (gnu system nss))
(use-service-modules
dbus desktop networking sound ssh)
(use-package-modules
admin certs glib pulseaudio screen ssh)

(operating-system
(host-name "laptop")
(timezone "Europe/Rome")
(locale "en_US.utf8")

;; Keyboard layout.
(keyboard-layout (keyboard-layout "us"))

;; Bootloader
(bootloader (bootloader-configuration
(bootloader grub-bootloader)
(terminal-outputs '(console))
(targets (list "/dev/sda"))
(keyboard-layout keyboard-layout)))

;; Specify a mapped device for the encrypted root partition.
;; The UUID is that returned by 'cryptsetup luksUUID'.
(mapped-devices
(list (mapped-device
(source (uuid "8022876e-e0cc-4ec5-8363-0f07c590cdbc"))
(targets (list "guix-root"))
(type luks-device-mapping))))

(file-systems
(append
(list (file-system
(device (file-system-label "guix-root"))
(mount-point "/")
(type "ext4")
(dependencies mapped-devices)))
%base-file-systems))

(swap-devices (list
(swap-space (target "/swapfile"))))

;; Define users and groups.
(users
(cons (user-account
(name "oleander")
(comment "")
(group "users")
(home-directory "/home/oleander")
(supplementary-groups '("wheel" "netdev"
"audio" "video" "input")))
%base-user-accounts))

;; System-wide packages.
(packages
(append
(list
dbus nss-certs openssh-sans-x pulseaudio screen wpa-supplicant)
%base-packages))

;; Services
(services
(cons*
(service alsa-service-type
(alsa-configuration
(pulseaudio? #t)))
(service dbus-root-service-type)
(service elogind-service-type)
(service openssh-service-type
(openssh-configuration
(openssh openssh-sans-x)
(port-number 22)
(password-authentication? #f)
(permit-root-login 'prohibit-password)
(authorized-keys
`(("oleander" ,(local-file "/home/oleander/.ssh/authorized_keys"))))))
(service ntp-service-type
(ntp-configuration
(servers (map (lambda (server)
(ntp-server (address server)))
'("0.europe.pool.ntp.org"
"1.europe.pool.ntp.org"
"2.europe.pool.ntp.org"
"3.europe.pool.ntp.org")))))
(service polkit-service-type)
(service screen-locker-service-type
(screen-locker-configuration
(name "swaylock")
(program (file-append swaylock-effects "/bin/swaylock"))
(using-pam? #t)
(using-setuid? #f)))
(service static-networking-service-type
(list (static-networking
(addresses
(list (network-address
(device "wlp1s0")
(value "192.168.1.200/24"))))
(routes
(list (network-route
(destination "default")
(gateway "192.168.1.1"))))
(name-servers '("1.1.1.1" "1.0.0.1")))))
(service wpa-supplicant-service-type
(wpa-supplicant-configuration
(config-file (local-file "/home/oleander/.wpa_supplicant.conf"))
(interface "wlp1s0")))
%base-services))

;; Allow resolution of '.local' host names with mDNS.
(name-service-switch %mdns-host-lookup-nss))
```

My home config:

```
(use-modules
(gnu home)
(gnu home services)
(gnu home services shells)
(gnu services)
(guix gexp)
(gnu packages admin)
(gnu packages base)
(gnu packages disk)
(gnu packages emacs)
(gnu packages finance)
(gnu packages fonts)
(gnu packages fontutils)
(gnu packages freedesktop)
(gnu packages glib)
(gnu packages games)
(gnu packages gnome)
(gnu packages gnupg)
(gnu packages gnuzilla)
(gnu packages gtk)
(gnu packages haskell-xyz)
(gnu packages image)
(gnu packages image-viewers)
(gnu packages libreoffice)
(gnu packages linux)
(gnu packages man)
(gnu packages package-management)
(gnu packages password-utils)
(gnu packages pdf)
(gnu packages pulseaudio)
(gnu packages rsync)
(gnu packages screen)
(gnu packages terminals)
(gnu packages tex)
(gnu packages texinfo)
(gnu packages texlive)
(gnu packages tor-browsers)
(gnu packages version-control)
(gnu packages video))

(home-environment
(packages
(list
adwaita-icon-theme alacritty emacs font-awesome fontconfig
font-cormorant font-gnu-unifont font-latin-modern font-libertinus
fzf git gnupg grim gtypist icecat imv keepassxc
ledger libreoffice gnu-make man-db mpv net-tools pandoc
parted pass-otp password-store pavucontrol pinentry pulseaudio
rsync screen slurp stow sway swayidle swaylock-effects waybar testdisk
texlive-babel-english texlive-babel-italian texlive-etoolbox
texlive-garamond-libre texlive-latex-uni8 texlive-latexmk
texlive-libertinus-fonts texlive-lm texlive-scheme-basic
torbrowser wpa-supplicant xdg-utils xorg-server-xwayland
xwininfo zathura zathura-pdf-mupdf))

(services
(list
(service home-bash-service-type
(home-bash-configuration
(aliases
'(("grep" . "grep --color=auto")
("ll" . "ls -l")
("ls" . "ls -p --color=auto")
("rm" . "rm --one-file-system")))
(bashrc
(list (local-file "/home/oleander/src/dotfiles/bash/.bashrc"
"bashrc")))
(bash-profile
(list (local-file
"/home/oleander/src/dotfiles/bash/.bash_profile"
"bash_profile"))))))))
```

Any input?

Thank you,

Re: guix system reconfigure errors

[Felix Lechner via]

Hi Oleander,

On Fri, Mar 29 2024, Oleander via wrote:

> 354:39 4 (_ #<<channel> name: guix url: "https://git.savannah.gn…>)

> Git error: the SSL certificate is invalid

Those log lines are abbreviated, but the certificate error strikes me as
likely to be transient.

Savannah is maintained by volunteers and occasionally experiences
downtimes.  Friday was also a super confusing day for system
adminstrators around the world due to the xz-utils backdoor. [1]

Kind regards
Felix

[1] https://arstechnica.com/security/2024/04/what-we-know-about-the-xz-utils-backdoor-that-almost-infected-the-world/