Re: Port forwarding for Guix containers

zimoun writes: > Hi, > > On Fri, 20 Nov 2020 at 19:26, Christopher Baines wrote: >> Zhu Zihao writes: >> >>> I found guix container "created by `guix environment --container` or >>> `guix system container`" is very useful to isolate some service. But >>> it only supports fully isolated network

Re: ebook reader recommendations?

Pierre Neidhardt writes: > Hi John, > > Thanks for the hint. > I suppose this is the product you were talking about: > > https://remarkable.com/ > > Can you expand on how "hackable" it is? Can we replace the software? > If not, what kind of access to the OS do we have? Any link? You basical

Re: Running Substitute Server over https

Hi phil, Not answering your question directly, but last time I wanted to secure the connection between a client and a substitute I used an ssh tunnel: # On the server guix archive --generate-key ssh root@client guix archive --authorize < /etc/guix/signing-key.pub guix publish& ssh -N -R 8081:loc

Re: Error with guile function format

Dear François, Ricardo and divoplade, This was indeed the issue, and the correct fix. Thank you for your explanations. I'm not familiar with the notion of ports, coming from languages that don't have them, but I see now how useful they are ! They're like the standard input/output of the shell, wit

Re: Environment of a shepherd service

Hi, So I looked at the source and I understand that there's no way around having only PATH=/run/current-system/profile/bin as the sole environment of a service (which makes me wonder how anyone is running any service in GuixSD, don't you need any env variables ?). I tried to define a trivial pack

Re: Environment of a shepherd service

t;/log/syncthing.log")) > #:stop (make-kill-destructor) > #:respawn? #t)) > (register-services syncthing) > > (start syncthing) > > As with any other shepherd service it is defined and registered, and in > this case it will start automatically. When the file is loaded b

Re: Running LAMP under Guix on a foreign distro - Debian

Hi, I'm working on something similar, but with nginx. Basically you want to make an operating-system definition, where you can orchestrate all the layers of your stack, and then you can run it using `guix system container` with the added benefit of container isolation. I'll make a quick writeup a

Re: Environment of a shepherd service

Thank you Maxime for your answer :) Maxime Devos writes: > e...@beaver-labs.com schreef op zo 11-04-2021 om 21:31 [+0200]: >> Dear fellow Guixers, > >> [...] >> But, when I try to run it with shepherd, it fails because it can't find >> flask (a dependency of the software, which I've put as a >> p

Re: Can't bind to port 80 from inside a Guix container

Dear all, I solved my problem by simply unpriviledging all ports on the system: # echo 'net.ipv4.ip_unprivileged_port_start=0' > /etc/sysctl.d/50-unprivileged-ports.conf # sysctl --system Now anybody can bind to any port. I wish we were on Plan 9 where filesystem permissions applies to the net

Re: How to lower a record to the build code ?

Dear Christopher, I can't thank you enough, your idea of "ungexp[ing] the record access bits" is what got me out of the tarpit. You can see the resulting code here, which will hopefully clear the misunderstandings generated by my oversimplification of the minimal nonworking example: https://issue

Re: Find location of installed package in /gnu/store

Hi ! This is where G-expressions will help you :) Basically the path you need does not exist in the same "strata" as the code of the package. The following code will define a build-gexp function that evaluates a G-expression and prints the resulting directory in the store. You can try it in "gui

Systemd guix containers: unable to execute Permission denied

Hi, I'm running a container using a systemd unit. This unit calls a script that call guix system container and calls the returned script. When I launch this script by itself, everything works as expected. When I launch this script with systemd, I can launch any command except as root in the cont

Re: package manager guix on Windows and OSX

Hi ! The real problem will not be the languages (guile or C++), but the system calls used by Guix. Guix makes use of some recent (less than 2 decades) and somewhat advanced features of the Linux kernel, such as namespaces. To port Guix to another operating system such as BSD (including OSX), one

Re: package manager guix on Windows and OSX

> > Why Plan 9? May I ask? Plan 9 is awesome. What the whole industry is barely managing to achieve with containers and VMs, Guix does somewhat correctly with namespaces, but Plan 9 had all this in its DNA, in a cleaner implementation 30 years ago ! By default, a process in Plan 9 only has a p

Re: Docker image sizes

Hi ! You can use guix graph to see what depends on what, and find out why a specific dependency is needed: https://guix.gnu.org/manual/en/html_node/Invoking-guix-graph.html I just invoked: guix graph elixir > /tmp/toto.dot and by manually inspecting the dot file I can see that e.g. webkit is ne

Re: A single reference to installed non-binaries

Hi ! I side-step this kind of things by adding a stage in package-y that will find and replace all references to "bar" with the complete path to the installation path of package-x, or that will set the needed environment variable to the full path of the dependency. See e.g. https://gitlab.com/edo

Re: A single reference to installed non-binaries

Phil writes: > Thanks for comments Edouard! Responses inline. :) > > > Edouard Klein writes: > > >> See e.g. >> https://gitlab.com/edouardklein/guix/-/blob/beaverlabs/beaver/packages/scheme-xyz.scm#L68 > > Ahh so wrap-program creates a script that sets th

Setting TZDIR (was Re: A single reference to installed non-binaries)

Leo Famulari writes: > On Tue, Aug 17, 2021 at 04:01:15PM +0200, Edouard Klein wrote: >> See e.g. >> https://gitlab.com/edouardklein/guix/-/blob/beaverlabs/beaver/packages/scheme-xyz.scm#L68 >> >> Here, xlsxio and tzdir will be expanded to their full install path in

Re: creating a profile

Hi ! You can pass the --profile option to most guix subcommands. To install guile-commonmark in a profile, it would be a simple: guix install --profile=/tmp/toto guile-commonmark To install only its dependencies, the following bash one liner will do: guix install --profile=/tmp/toto $(guix sho

Re: guix pack and exposing ports

Hi ! >From what I know, with guix pack you can only have the dependencies in the docker image, but you won't have anything to start or manage your software automatically. You need to invoke the correct command (with docker run, I believe). What you can do is create an operating-system declaration

Re: setting up my own channel (for some personal packages)

Hi, I am not sure, but here is my try: I cloned your channel2 repo, and saw in emacs-hide-comnt.scm: (define-module (gnu packages emacs-hide-comnt) Modules names in Guile (in all schemes ?) must match the path, so either put emacs-hide-comnt.scm in gnu/packages, or change the above line to: (d

Re: Question about scripts in guix-home

Hi, Sorry I can't be more precise due to lack of time, but maybe invoking chmod on the .sh files in a gexp would work ? https://www.gnu.org/software/guile/manual/html_node/File-System.html #+begin_quote Scheme Procedure: chmod object mode C Function: scm_chmod (object, mode) Changes the pe

Re: Loading Common Lisp Libraries with GNU/Guix in a REPL

Hi ! I don't know the "correct" way to do it, but the way I do things is: Create a manifest.scm or guix.scm file in the directory. Here is an example manifest.scm file: #+begin_src scheme (define-module (osef) #:use-module (guix packages) #:use-module (gnu packages) #:use-module (guix prof

Re: Guix Home Entertainment SoC Media Server?

Hi ! It depends on how easy and integrated you want your experience to be ;) The raspberry pi is classic SoC to use for such a purpose, there are a lot of software and guides that you can use and take inspiration from for your project. In particular, the Retro-pi project will let you play classi

Re: GNU Guix maintainer rotation

Thank you Ludovic and Marius :) And good luck to Efraim ! Maxim Cournoyer writes: > Hello Guix! > > I'd like to bring your attention to a change to the current Guix > maintainers collective; in a nutshell, Ludovic and Marius are stepping > down from maintainer-ship while Efraim is joining. > >

Re: password-store is broken in master but builds in version-1.4.0 (utf8 problem)

Wow. Talk about a rabbit hole. I'd never would have found that alone. I'll wait for the "tree-1" patch to appear on master. Thank you all for tracking and sidestepping this bug. Guix's cleanliness really is a canary for the quality of the whole ecosystem. That's awesome. Cheers Tobias Geerinck

Re: Running graphical apps with guix shell --container

I won't be specifically helpful, but I never managed to get chromium to run in a container. It crashes almost immediately. If you ever manage it, I'd be happy to know the magic command that allows it. Cheers, Edouard. Luis Felipe writes: > [[PGP Signed Part:Undecided]] > Hi, > > I'm trying to

Re: Running graphical apps with guix shell --container

It does work ! Thank you very much :) Luis Felipe writes: > [[PGP Signed Part:Undecided]] > Hi Edouard, > > On Friday, January 28th, 2022 at 10:11 AM, Edouard Klein > wrote: > >> I won't be specifically helpful, but I never managed to get chromium to >> ru

Re: I think thunked fields are breaking my previously working code

Thank you so much Ricardo, you have no idea how big of a thorn you removed from my side. I owe you one. Ricardo Wurmus writes: > e...@beaver-labs.com writes: > >> For example, given that "minimal-container" is an operating system, I >> can do the following: >> >> (set-fields minimal-container ((

Re: was I hacked?

Hi, Sorry about the noise, but I'm curious about this as well, and I think if this is indeed an attack that it would be brilliant to see that guix protected against it. I would like to document it. @jgart I can open a git repo for you and lend a hand if you need help pushing the strange branch so

Re: was I hacked?

e Lemmer-Webber writes: > Well good news, jgart pushed them elsewhere in the thread: > > jgart writes: > >> Here are the repos of interest: >> >> https://git.sr.ht/~whereiseveryone/pjmkglp >> >> https://git.sr.ht/~whereiseveryone/authentification-channels >

Re: A package search engine for a curated list of channels

That's a great idea :) I can lend a VPS with guix installed on it for testing and initial deployment, if you need it. I can't promise to help with development because of time constraints, but I'll follow this with eagerness. Unless I'm mistaken (which I very well my be), pulling from a channel b

How do I extend openssh-service-type ?

Hi ! I'm trying to make sense of: https://guix.gnu.org/manual/en/guix.html#index-openssh_002dservice_002dtype #+begin_quote This service can be extended with extra authorized keys, as in this example: (service-extension openssh-service-type (const `(("charlie"

Re: bug#55359: How do I extend openssh-service-type ?

Thank you both for solving this. I used a workaround for a while (rsyncing the keys to /home/user/.ssh/authorized_keys). Now I can confirm that the fixes work and I'm back to a declarative configuration of my server, which is awesome ! Cheers, Edouard. Ludovic Courtès writes: > Hi, > > Oleg Pyk

Re: Trivia question: What does the "G" in G-expressions stand for?

My bet would be on "Guix" ? jgart writes: > Hi, > > What does the "G" in G-expressions stand for? > > all best, > > jgart

Re: Sourcing a script in phases

Hi, It's probably not the right answer, but for lack of time to find the actual solution when I faced the same problem as you, here is what I did: https://gitlab.com/edouardklein/guix/-/blob/beaverlabs/beaver/packages/python-xyz.scm#L191 #+begin_src scheme #:builder (begin (use-mod

Re: Using an alternative python to build python modules

As an example in this line of thought, a long time ago I submitted a patch (since then reverted as it broke a lot of things) to use an obsolete version of a python module, which was the only one that worked with a specific module that hadn't updated its dependencies: https://git.savannah.gnu.org/c

Re: Using an alternative python to build python modules

variant property convention. It is not clear to me how to write > one for an inferior python for use with > `package-with-explicit-python'. > > I will keep you posted if I make any breakthroughs. I'm really eager to > be able to replace conda with guix. > > Best Regard

Can't setuid-program to a custom user

Dear Guix, I am trying to install a program that requires its own user, and to create a suid binary that will launch as this user, no matter who launches it. See lines 119 on of this file: https://gitlab.com/edouardklein/guix/-/blob/6ae4c66bde1927aaae041311888c35105595a83e/beaver/packages/plan9.s

Re: Message by a novice

Hi ! First, drop sudo, guix can be run by unprivileged users once installed, and will only affect them. Great for shared environments ! anguriamelone--- via writes: > Hi to everyone. > > I am a novice in GNU Guix, so far I used Trisquel GN-Linux 9.0.2 (i686), but > at the end of April the supp

Re: lookup which file can be found in which package

My usual method is first: guix search, then: grep -ri in a checkout of the source, and last searching the web for the package name in other distros, and a bit of guesswork. It usually endup in a *-utils or *-tools package. >From a computer science standpoint this is an interesting problem. The co

Re: guix shell readline issue with R

Hi Kyle, Running guix shell r and then R will get you the C-c handling you want. There is indeed readline support with guix shell r -- R: up arrow to get history, c-E, c-A for end of line, start if line, etc. I think maybe the problem lies not with readline but with the way signals are handle

Re: guix shell readline issue with R

g Cheers, Edouard. Kyle Andrews writes: > Edouard Klein writes: > >> Hi Kyle, >> >> >> Running >> guix shell r >> >> and then >> R >> >> will get you the C-c handling you want. > > Hi Edouard, > > I wrote another

Re: guix shell readline issue with R

@" exit 0 fi ACTUAL CONTENTS OF THE SCRIPT HERE #+end_src Cheers ! Edouard Kyle Andrews writes: > Edouard Klein writes: > >> Here is a script that restores the ctrl-C behaviour of R, whithin a guix >> shell. >> >> I must admit I don't exactly under

Re: Moment de convivialité Guix@Paris en octobre

Je souhaite venir également :) J'avais raté l'annonce pour octobre. J'aurais deux trucs à présenter: - Du sucre syntaxique pour instancier, étendre, modifier, ou supprimer des services, - Comment monter des systèmes de fichier 9P au sein d'un guix container. C'est pas super formel, ce sont des re

Re: Installing software inside containers

Hi ! If you create you containers with guix shell, you can use the --nesting option, or alternatively, use: guix shell --container --network --expose=/gnu/ --share=/var/guix/ guix Maybe similar options with a 'guix system'-generated container would work. Alternatively, if your own guix has a no

Re: Moment de convivialité Guix@Paris en nov… euh… décembre

Merci d'avoir organisé tout ça :) Tanguy LE CARROUR writes: > Bonjour Guix, > > Merci à ceux qui ont bravé les intempéries et les transports parisiens > pour venir hier soir ! Et, surtout merci à ceux qui, présents ou à > distance, on partagé leur travail, leurs découvertes ou leurs problèmes, >

Re: Installing software inside containers

ello, for example. I hope this solves your problem. It solved mine: I had a quite complex OS configuration to try out before deploying it on a VPS, and running VMs is cumbersome a requires a lot of disk space. The OS configuration I want to try implies running containers inside of containers, now it

Re: Guix Days: Patch flow discussion

I, for one, would be willing to review patches, hoping that in turn my patches would be reviewed instead of staying in limbo forever, which is a drag on me submitting more patches. Is there a procedure to follow, or do I just start replying "LGTM" to patch email threads ? Cheers, Edouard. Steve

Re: Guix Days: Patch flow discussion

Skyler Ferris writes: > On 2/6/24 05:39, Steve George wrote: >> I agreed to organise some 'patch review' online sessions in the next couple >> of >> weeks. >> >> Organising a basic process is a good topic for that online session. For >> example, elsewhere in the thread someone mentions some ta

Re: Service definitions: create a symlink in /etc???

Hi, An quicker and dirtier solution is to create an activation service that will create a symlink: (extend-service activation #~(begin (unless (stat "/etc/whatever" #f) (symlink "/etc/hostname" "/etc/whatever" This is using beaverlabs's f

Re: Online talk (Thursday): Using Mumi for Guix patches by Jgart

Hi Steve, Hi list, Will there be a recording available ? I won't be able to make it but I'm very much interested. Thanks, Cheers, Edouard. Steve George writes: > Hi all, > > This Thursday (29th) Jgart is going to give a talk about Mumi, a command line > interface that makes > interacting de

Re: Installing Guix System on an OVH VPS (Virtual Private Server)

Hi Maxim, Good job ! It must not have been easy to come up with a series of steps that actually work... The method I use for https://guix-hosting.com/ is somewhat different and does not require partitionning the disk but has the disadvantage of ending up with an ext4 drive instead of btrfs, which

Re: Installing Guix System on an OVH VPS (Virtual Private Server)

Also, here goes my "moat" for guix-hosting.com, but as RMS once sang: "Hoarders can get piles of money, That is true, hackers, that is true. But they cannot help their neighbors; That's not good, hackers, that's not good." https://www.gnu.org/music/free-softwar

Using 'guix system disk-image' on a non-GuixSD OS

Hi all, I do not know whether the "guix system disk-image" command is supposed to work on a non GuixSD system. If it is, then I'm running into an error while trying to create a disk from a system declaration on my Arch Linux OS. I run: $ guix system disk-image --fallback config.scm with config.

Re: Using 'guix system disk-image' on a non-GuixSD OS

(authorized-keys `(("edouard" ,(local-file "edouard.pub")) ("root" ,(local-file "edouard.pub" (permit-root-login 'without-password) (port-number 22)))

Data dirs and shepherd services

Hi guys ! I'm packaging a piece of software that is due in the next few days and I'm cutting corners everywhere. I'll come back to it later and clean things up, in the process I've packaged some free software lacking from the distribution, that I'll send the patches for. In the meantime, I have s

Re: warning: failed to install locale

I had the same problem, which was solved by installing glibc-utf8-locales in root's profile and adding the export line to root's ~/.profile, which fits Ricardo's explanations. Le jeu. 17 janv. 2019 à 21:56, Quiliro Ordonez a écrit : > Thank you for this straightforward answer Ricardo. I post som

Re: Request for assistance in three subjects: Iptables, LightDM and Whiskermenu.

Most esteemed correspondent, It is but a time-honored custom, when one hath discovered a solution through alternate avenues, to bestow upon the same forum wherein one did request aid a recounting of said resolution. For, lo, future seekers of knowledge may stumble upon thine inquiry via the grea

Re: Avoid sending sources to offload servers

I may be mistaken, but you I think you can run guix build a with offloading, and guix build b c without, then when you run guix shell, a, b, and c will all be in your store and won't need to be rebuilt. Simen Endsjø writes: > Yes, that's what I'm using, but it's not granular. The problem is thi

Re: Modular home configuration

I'm on mobile, so I'll give you a better answer soon, but I built a system around this exact idea: And I have ported it to home configurations You

Re: Modular home configuration

The magic is here Le 9 novembre 2024 18:35:10 GMT+01:00, Ian Eure a écrit : >Hi folks, > >I’m trying to make my home configuration more modular, so I can better support >system variances.

Re: Software running in a container fails when using fontconfig?

sabled because of security. I can choose to disable the sandbox, and the > application restarts, showing the html, crashing again. So I can just not > disable the sandbox and avoid triggering the bug. > > On Fri, Nov 15, 2024, at 11:17, Edouard Klein wrote: >> Hi, >> >>

Re: Software running in a container fails when using fontconfig?

Hi, This may miss the mark wildly, but I remember having trouble with fontconfig in a container a few months ago and solving it with --emulate-fhs maybe this is worth a try. Cheers, Edouard. Simen Endsjø writes: > Hi, I'm packaging a piece of software which crashes when launching > chromium e

Re: Questions about guix-home-service-type for multi-user systems

The way I work around this is to use (guix-for-channels ...) in the sytem's configuration, and never guix pull. The only guix is the system's: /run/current-system/profile/bin/guix Kristoffer Ström writes: > Hello, I am running a multi-user system, and use guix-home-service-type > to setup the u

Re: libfreetype6

On my system guix refresh --list-transitive icecat | grep -Eo '[^ ]*freetype[^ ]*' yields freetype@2.13.0 Then guix edit freetype@2.13.0 allows me to see exactly where the source is fetched from, and its hash. The manual is: https://guix.gnu.org/manual/devel/en/guix.html#Invoking-guix-refresh

Re: libfreetype6

tes: > OK thanks, as far as I can tell then, it has not been patched. > > > On 19/03/2025 10:16, Edouard Klein wrote: >> On my system >> >> guix refresh --list-transitive icecat | grep -Eo '[^ ]*freetype[^ ]*' >> >> yields >> >> f

Re: Guix SD idiomatic system backup and restore

Hi ! That sounds about right. Be careful though that the guix installation image often is widely out of date. It may therefore take quite long to install your system, if it works at all (if will fail if you use packages that were not defined when the installer was created, or if you use channels).

Re: Guix SD idiomatic system backup and restore

DD'd onto a new system disk. > > However, I'm using btrfs inside a cryptroot, and btrfs doesn't appear to be > supported by the image definitions at present. > > On Tue, 18 Mar 2025, 11:21 Edouard Klein, wrote: > > Hi ! > > That sounds about right. Be careful thoug

Re: Unable to boot. No space left on device

Hi, I can't speak for others, but I went to btrfs because guix does not support zfs ;-) You get a way to choose the amount of redundancy you want (I wanted something like raidz3 and was able to do it), you get deduplication (which given the often repeated contents of the store, is quite important

Re: Patched version of broken offlineimap3

I too use this pythonfile=... option to be able to use password-store. I was a bit ashamed that I did not take the time to send a proper fix to guix upstream, but I was already debugging something else when this bug hit and I couldn't find the time. I'm glad this snippet was helpful to you then :)

Re: Patched version of broken offlineimap3

For the record, to help readers of the mailing list navigate the package transformations syntax, here is what I did when faced with this bug: replaced offlineimap in my home-configuration.scm with: ((options->transformation (list `(with-patch . "offlineimap3=patches/offlineimap3.patch")

Re: Trying to package python-panel - how to combine python and npm build?

Hi Alexis, I'm out of my depth too, but what I would try to do is package those npm packages first, and add them as input (probably propagated-inputs ?) to your package, hoping that the npm call in your build process would see them installed and not try to download them. The above is assuming npm

There's some black magic going on with define-deprecated

Resending because the first one didn't go through (?) Hi all, Here is a fun one: Run: guix time-machine --channels=/tmp/last-good.scm -- system image -t qcow2 -e '(use-modules (beaver system)) (minimal-ovh)' And you'll get /gnu/store/naijarz2br4m7sdhw5dzyrx1wl2ynf69-image.qcow2 So far, so goo

There's some black magic going on with define-deprecated

Hi all, Here is a fun one: Run: guix time-machine --channels=/tmp/last-good.scm -- system image -t qcow2 -e '(use-modules (beaver system)) (minimal-ovh)' And you'll get /gnu/store/naijarz2br4m7sdhw5dzyrx1wl2ynf69-image.qcow2 So far, so good. Now run guix time-machine --channels=/tmp/first-ba

Re: Why does guix home need 700 MB of cache ?

Ludovic Courtès writes: > > It would probably make sense to have it in Guix proper. > Aaand it's a pull request now :) https://codeberg.org/guix/guix/pulls/619 @Rutherther, could you please be so kind as to take a look ? I changed some defaults, and added the possibility to have an ove

Re: Why does guix home need 700 MB of cache ?

Hi, > > On Sat, 14 Jun 2025 at 11:23, Edouard Klein wrote: > >> I think I'll maintain a systemwide cache as a workaround, but any >> guidance as to why guix home needs a full copy of the whole history of >> guix would help me understand how to get rid of that. > &g

Why does guix home need 700 MB of cache ?

Hi ! I'm trying to let users reconfigure their home configuration on a shared guix system, but we can't all have a 700MB .cache/guix dir. I've solved part of the problem by forbidding guix pull and deploying an up-to-date system wide guix regularly. However, when running guix home reconfigure con

Re: Why does guix home need 700 MB of cache ?

est of both worlds :) Thank you for your help ! Edouard. Rutherther writes: > Hello Edouard, > > On June 14, 2025 11:23:33 AM GMT+02:00, Edouard Klein wrote: >>Hi ! >> >>I'm trying to let users reconfigure their home configuration on a shared >>guix system,

Re: Introducing Guixotic, a Guix/Guile worker cooperative

Congrats on the launch ! I'm very happy to read that more people are trying to use guix commercially. I'm also very happy that you chose a cooperative as a setup, I think many problems would be solved if every company in the world was a cooperative, but alas, the revolution is not for tomorrow.

Re: Introducing Guixotic, a Guix/Guile worker cooperative

Ludovic Courtès writes: > Hello, > > Edouard Klein writes: > >> I run guix-hosting.com which does not have enough clients to sustain me, >> and because I hate myself everytime I do any form of marketing, it does >> not grow. > > Heh. :-) (I’ve looked