Hi, I have installed Guix 1.5.0 from the Parabola package in Parabola:
$ guix describe
Git checkout:
repository: #f
branch: #f
commit: #f
$ pacman -sS ^guix$
pcr/guix 1.5.0-24 [installed: 1.5.0-25]
A purely functional package manager for the GNU system
Before the installation, I did a fresh install of guix by removing
the package and doing 'guix-install.sh --uninstall' before installing
Guix again.
My goal here was, as the de-facto maintainer of the Guix package in
Parabola, to backport the latest security fixes in this package and
also fix some small bugs along the way, but I found a more problematic
issue for fresh installations while doing that.
And I'm unsure if this is relevant or not but the Guix package I use
is built against guile 3.0.11-1:
$ pacman -sS ^guile$
core/guile 3.0.11-1 [installed]
Portable, embeddable Scheme implementation written in C
The problem I have is this:
$ guix build adl-submit
substitute: looking for substitutes on 'https://bordeaux.guix.gnu.org'...
100.0%
substitute: looking for substitutes on 'https://ci.guix.gnu.org'... 100.0%
The following derivations will be built:
/gnu/store/y5js8n0qssnlyzppm6imn1j544bwlpay-module-import-compiled.drv
/gnu/store/w2b7ks19giiirw1imbhi5b1wf7bi25cc-nss-certs-for-test-3.101.4.drv
/gnu/store/48ap0j98rfmmdlpyp9ziy8n0hw4f91rv-python-mypy-1.16.1.drv
/gnu/store/aw14rxlp05hhsvp3rh7xvb45lpl3dzb2-python-asgiref-3.8.1.drv
/gnu/store/8xmcqfvad6y251nvhg9fi1wwkpxphsz8-python-numpy-1.26.4.drv
/gnu/store/gi3yzb08hmdf4vn5spb6p4488fjj5g09-python-pytest-randomly-3.16.0.drv
/gnu/store/vkszkf34ppyvy3fx8shx8qn2n64lll0g-python-certifi-2025.06.15.drv
/gnu/store/x5zlcgrvdgr9ic60g9ax8n6syaqkdy3g-python-cryptography-44.0.0.drv
/gnu/store/ivi6ai7g3ghx3vmhnb37xj2098f9glxv-python-pyopenssl-24.3.0.drv
/gnu/store/pijramd96l5nmb3m2a1h6pyz7ca98k7m-python-urllib3-2.5.0.drv
/gnu/store/zvxbss2lmqppa2gadx2xihh708lkl5xk-python-requests-2.32.5.drv
/gnu/store/d8pgbh45ndrqnvhw8ry1hpb95k5plh3k-python-werkzeug-3.1.3.drv
/gnu/store/4asv564fb4s1161sjyicpysc2b64vfb9-python-typeguard-4.4.4.drv
/gnu/store/9ib90qnjyapbqyx4b9phd30s33q86xmm-python-inflect-7.5.0.drv
/gnu/store/8q18lxr0amxxl7b6wj2nk2iys2gfivnd-python-jaraco-text-4.0.0.drv
/gnu/store/akisw5r4dg52a4kk0d95hrgvqwyrb19j-python-jaraco-collections-5.2.1.drv
/gnu/store/prl4msi5ff859gdh2s769vxr6rnlkysi-python-jaraco-test-5.5.1.drv
/gnu/store/jp33v8xc2g115anwl3vs7c5i4bmc811d-python-importlib-metadata-8.7.0.drv
/gnu/store/8088r39vpa2wyglpjl214vjdjmw6fh4x-python-flask-3.1.0.drv
/gnu/store/0cl05vqbqbkvbp70vnvglqv8kdb8w8k7-python-pycurl-7.45.4.drv
/gnu/store/ml3xqq81s1cr12b5w1kpsp672i3l6qaz-adl-submit-1.0-0.f38c7ad.drv
building
/gnu/store/y5js8n0qssnlyzppm6imn1j544bwlpay-module-import-compiled.drv...
[ 1/ 6] Loading './guix/build/utils.scm'...
[ 2/ 6] Loading './rnrs/io/ports.scm'...
Backtrace:
18 (primitive-load "/gnu/store/saa52h95i683v62y4q3b2d6nj9r…")
In ice-9/eval.scm:
619:8 17 (_ #f)
In srfi/srfi-1.scm:
460:18 16 (fold #<procedure 7ffff5faf620 at ice-9/eval.scm:336:1…> …)
460:18 15 (fold #<procedure 7ffff781fd00 at ice-9/eval.scm:336:1…> …)
460:18 14 (fold #<procedure 7ffff781fb00 at ice-9/eval.scm:336:1…> …)
In ice-9/eval.scm:
619:8 13 (_ #(#(#<directory (guix build utils) 7ffff7729320>) # …))
In ice-9/boot-9.scm:
2836:4 12 (save-module-excursion #<procedure 7ffff781f940 at ice-…>)
In unknown file:
11 (primitive-load "./rnrs/io/ports.scm")
In ice-9/eval.scm:
721:20 10 (primitive-eval (library (rnrs io ports (6)) (# # # …) …))
In ice-9/psyntax.scm:
1229:36 9 (expand-top-sequence (#<syntax:ports.scm:29:0 (librar…>) …)
1121:20 8 (parse _ (("placeholder" placeholder)) ((top) #(# # …)) …)
1342:32 7 (syntax-type (library #<syntax:ports.scm:29:9 (rnrs…> …) …)
1562:32 6 (expand-macro #<procedure 7ffff76326e8 at ice-9/r6rs-l…> …)
In ice-9/r6rs-libraries.scm:
304:14 5 (_ #<syntax rnrs> (#<syntax io> #<syntax ports>) (#<s…>) …)
In ice-9/boot-9.scm:
222:29 4 (map1 (#<syntax:ports.scm:114:10 (ice-9 binary-ports)> …))
222:17 3 (map1 (#<syntax:ports.scm:115:10 (only #<syntax:port…> …))
In ice-9/r6rs-libraries.scm:
115:7 2 (_ _ _)
In ice-9/boot-9.scm:
260:13 1 (for-each #<procedure 7ffff771dda0 at ice-9/r6rs-libra…> …)
In ice-9/r6rs-libraries.scm:
118:36 0 (_ _)
ice-9/r6rs-libraries.scm:118:36: no binding `~A' in module ~A
make-custom-textual-input-port #<interface (ice-9 textual-ports) 7ffff5998f00>
builder for
`/gnu/store/y5js8n0qssnlyzppm6imn1j544bwlpay-module-import-compiled.drv' failed
with exit code 1
build of
/gnu/store/y5js8n0qssnlyzppm6imn1j544bwlpay-module-import-compiled.drv failed
View build log at
'/var/log/guix/drvs/y5/js8n0qssnlyzppm6imn1j544bwlpay-module-import-compiled.drv.gz'.
cannot build derivation
`/gnu/store/w2b7ks19giiirw1imbhi5b1wf7bi25cc-nss-certs-for-test-3.101.4.drv': 1
dependencies couldn't be built
cannot build derivation
`/gnu/store/vkszkf34ppyvy3fx8shx8qn2n64lll0g-python-certifi-2025.06.15.drv': 1
dependencies couldn't be built
cannot build derivation
`/gnu/store/48ap0j98rfmmdlpyp9ziy8n0hw4f91rv-python-mypy-1.16.1.drv': 1
dependencies couldn't be built
cannot build derivation
`/gnu/store/0cl05vqbqbkvbp70vnvglqv8kdb8w8k7-python-pycurl-7.45.4.drv': 1
dependencies couldn't be built
cannot build derivation
`/gnu/store/ml3xqq81s1cr12b5w1kpsp672i3l6qaz-adl-submit-1.0-0.f38c7ad.drv': 1
dependencies couldn't be built
guix build: error: build of
`/gnu/store/ml3xqq81s1cr12b5w1kpsp672i3l6qaz-adl-submit-1.0-0.f38c7ad.drv'
failed
The 'guix pull' command fails in the same way. Some 'guix build'
commands work like 'guix build hello' though. Many 'guix install'
commands also fail in the same way.
Before I had to create packages for guile 3.0.9 and all other guile
dependencies of Guix so that they would compile against 3.0.9 and work
fine.
Alpine is also on guile 3.0.9.
For NixOS I'm not familiar enough with it: I saw guile 3.0.11 at some
point Guix 1.5.0 without patches but I'm unsure they are for the same
nixos version (stable unstable, etc and I'm not even sure about the
exact difference between nix, NixOS, etc, or how well tested these
packages are).
So my question is if using guile 3.0.9 is really need? Or are there
known fixes (like patches) to the issue above? Or is the issue
completely unrelated? I saw a fix for fixing tests with 3.0.10, but I'm
unsure if there are other fixes.
My problem also is that if I need a separate guile or use a Guix
revision > 1.5.0, that would work fine for Parabola, but that would
block the fix of the guix package in Trisquel or other
distributions[1], so I would prefer to get this fixed.
Future work
-----------
Once everything works again my next step is to fix the security
issues, re-enable all the tests I can, and at the end upstream the
changes in Aur as well.
Tests were disabled in Parabola to be able to switch to Guix 1.5.0
to fix the security issues we had with 1.4.0.
If the security fixes work fine I also plan to look at how to update
Guix in Trisquel[1].
References:
-----------
[1] There are also other potential blockers for that but if I don't
get Parabola working first, I don't think it's worth discussing
them yet here to see if they can be solved.
Denis.
pgpbmPihDtc1X.pgp
Description: OpenPGP digital signature
