Collin Funk <[email protected]> writes:
> I think something like this would work:
>
> gl_CONDITIONAL([IS_OVERFLOW_GID],
> [test `cat /proc/sys/kernel/overflowgid` = `id -G | sed
> 's/ /\n/g' | awk '{ if (NR == 2) print }'`])
>
> Let me see if I can figure out how to set up a guix vm.
Unfortunately, I cannot follow the instructions to run guix daemon as a
non-root user [1], since snapshot download page gives me a
"504 Gateway Time-out". :(
But using a Guix system installation:
$ ps aux | grep -E '(configure|guix-daemon)' | grep -v grep
root 324 0.0 0.0 12536 5252 ? Ss 14:55 0:00
/gnu/store/5kj8lyybjrdl7xd0fx9g9vzkz8sklqsy-guix-1.4.0/bin/guix-daemon
--build-users-group guixbuild --max-silent-time 0 --timeout 0 --log-compression
gzip --discover=no --substitute-urls https://ci.guix.gnu.org
https://bordeaux.guix.gnu.org
root 21627 2.1 0.0 14644 7644 ? Ss 16:26 0:00
/gnu/store/5kj8lyybjrdl7xd0fx9g9vzkz8sklqsy-guix-1.4.0/bin/guix-daemon 21617
guixbuild --max-silent-time 0 --timeout 0 --log-compression gzip
--discover=no --substitute-urls https://ci.guix.gnu.org
https://bordeaux.guix.gnu.org
guixbui+ 21674 6.0 0.0 4924 4120 ? S 16:26 0:00
/gnu/store/3jhfhxdf6v5ms10x5zmnl166dh3yhbr1-bash-minimal-5.1.16/bin/bash
./configure
CONFIG_SHELL=/gnu/store/3jhfhxdf6v5ms10x5zmnl166dh3yhbr1-bash-minimal-5.1.16/bin/bash
SHELL=/gnu/store/3jhfhxdf6v5ms10x5zmnl166dh3yhbr1-bash-minimal-5.1.16/bin/bash
--prefix=/gnu/store/n7wd9s0klzmz15rf7rjq75xvkw9pjzcr-gnulib-testdir-all-0.0
--enable-fast-install --build=x86_64-unknown-linux-gnu
guixbui+ 22608 0.0 0.0 4924 2824 ? S 16:26 0:00
/gnu/store/3jhfhxdf6v5ms10x5zmnl166dh3yhbr1-bash-minimal-5.1.16/bin/bash
./configure
CONFIG_SHELL=/gnu/store/3jhfhxdf6v5ms10x5zmnl166dh3yhbr1-bash-minimal-5.1.16/bin/bash
SHELL=/gnu/store/3jhfhxdf6v5ms10x5zmnl166dh3yhbr1-bash-minimal-5.1.16/bin/bash
--prefix=/gnu/store/n7wd9s0klzmz15rf7rjq75xvkw9pjzcr-gnulib-testdir-all-0.0
--enable-fast-install --build=x86_64-unknown-linux-gnu
The issue would only occur when ./configure is running as the
guixbuild user and the daemon is not running as the root user?
Collin
[1] https://hpc.guix.info/blog/2025/03/build-daemon-drops-its-privileges/
[2] https://ci.guix.gnu.org/eval/2056455
