Re: Running guix-daemon as an unprivileged user

2015-08-23 Thread Ludovic Courtès
Thompson, David dthomps...@worcester.edu skribis: Yes, user namespaces can be created by unprivileged users. The user that created the namespace then has root in the context of the new namespace, which allows for creating all of the other types of namespaces. There's been some bumps along

Re: Running guix-daemon as an unprivileged user

2015-08-23 Thread Ludovic Courtès
Eric Bavier ericbav...@openmailbox.org skribis: On 2015-08-17 15:46, Claes Wallin wrote: On Mon, Aug 17, 2015 at 10:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: I have experimented with this a bit lately. It works to some extent, but I have had to apply a few patches to some

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-18 Thread 韋嘉誠
On Mon, Aug 17, 2015 at 10:57 PM, Eric Bavier ericbav...@openmailbox.org wrote: On 2015-08-17 15:46, Claes Wallin wrote: On Mon, Aug 17, 2015 at 10:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: I have experimented with this a bit lately. It works to some extent, but I have had to

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-18 Thread Eric Bavier
On 2015-08-17 15:46, Claes Wallin wrote: On Mon, Aug 17, 2015 at 10:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: I have experimented with this a bit lately. It works to some extent, but I have had to apply a few patches to some package recipes. Some packages have failing tests (where

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-18 Thread 韋嘉誠
On Mon, Aug 17, 2015 at 10:57 PM, Eric Bavier ericbav...@openmailbox.org wrote: Any patches related to bootstrapping gcc? I'm getting lib/lib64 confusion. Yes, that's been one issue. Attached are the patches I have so far. Hopefully they can get you a bit further. I've been able to build

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread 韋嘉誠
On Mon, Aug 17, 2015 at 3:42 PM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: On Mon, Aug 17, 2015 at 10:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: https://www.gnu.org/software/guix/manual/guix.html#Build-Environment-Setup If you are installing Guix as an unprivileged

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread Eric Bavier
On Mon, 17 Aug 2015 14:45:28 +0200 Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: On Sun, Aug 16, 2015 at 4:01 PM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: [Reposting with correct sender. Sorry, David.] Great! I ran into this when trying to compile and run guix

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread Thompson, David
On Mon, Aug 17, 2015 at 4:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: On Mon, 17 Aug 2015 14:45:28 +0200 Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: On Sun, Aug 16, 2015 at 4:01 PM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: [Reposting with correct

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread 韋嘉誠
On Mon, Aug 17, 2015 at 4:27 PM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: Now I'm doing this: git clean -fxd # recover from previous attempts git checkout HEAD . # ditto gettextize --po-dir=po{/guix,/packages,} sed -re

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread 韋嘉誠
On Mon, Aug 17, 2015 at 10:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: On Mon, 17 Aug 2015 14:45:28 +0200 Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: On Sun, Aug 16, 2015 at 4:01 PM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: [Reposting with correct

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread 韋嘉誠
On Sun, Aug 16, 2015 at 4:01 PM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: [Reposting with correct sender. Sorry, David.] Great! I ran into this when trying to compile and run guix on a machine at work, where I'm not root. I was planning to run guix as a stow of steroids. But

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread Thompson, David
On Mon, Aug 17, 2015 at 11:16 AM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: On Mon, Aug 17, 2015 at 4:34 PM, Thompson, David dthomps...@worcester.edu wrote: On Mon, Aug 17, 2015 at 4:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: On Mon, 17 Aug 2015 14:45:28 +0200

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread 韋嘉誠
On Mon, Aug 17, 2015 at 5:25 PM, Thompson, David dthomps...@worcester.edu wrote: On Mon, Aug 17, 2015 at 11:16 AM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: I think that to really make unprivileged use of Guix work acceptably, we need to use the user namespaces feature first

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread 韋嘉誠
On Mon, Aug 17, 2015 at 4:34 PM, Thompson, David dthomps...@worcester.edu wrote: On Mon, Aug 17, 2015 at 4:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: On Mon, 17 Aug 2015 14:45:28 +0200 Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote:

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread 韋嘉誠
I'm almost done talking to myself, I promise. This is just all very exciting. On Mon, Aug 17, 2015 at 4:31 PM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: On Mon, Aug 17, 2015 at 4:27 PM, Claes Wallin (韋嘉誠) g...@clacke.user.lysator.liu.se wrote: Now I'm doing this: git clean

Re: Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-17 Thread 韋嘉誠
On Mon, Aug 17, 2015 at 10:33 AM, Eric Bavier ericbav...@openmailbox.org wrote: I have experimented with this a bit lately. It works to some extent, but I have had to apply a few patches to some package recipes. Some packages have failing tests (where presumably they would pass or be

Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-16 Thread 韋嘉誠
[Reposting with correct sender. Sorry, David.] Great! I ran into this when trying to compile and run guix on a machine at work, where I'm not root. I was planning to run guix as a stow of steroids. But I'm still wondering whether what I'm attempting is even intended to be possible? Of course, I

Running guix-daemon as an unprivileged user (Was: [PATCH] syscalls: setns: Skip binding if there is no such C function.)

2015-08-16 Thread 韋嘉誠
On 16-Aug-2015 2:19 pm, David Thompson da...@gnu.org wrote: Great! I ran into this when trying to compile and run guix on a machine at work, where I'm not root. I was planning to run guix as a stow of steroids. But I'm still wondering whether what I'm attempting is even intended to be possible?