[PATCH] doc: Add container example to run a web browser.

Pierre Neidhardt wrote on 3 May 2020 10:12

Recipients:(address . guix-patches@gnu.org)

Message-ID:20200503081258.21873-1-mail@ambrevar.xyz

* doc/guix.texi (Invoking `guix environment'): Add paragraph and example to  run Eolie in a guix environment container.  Add `container' cindex for the  first container example, and the `certificates' cindex for the web browser  example.--- doc/guix.texi | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+)

Toggle diff (38 lines)diff --git a/doc/guix.texi b/doc/guix.texiindex d5d8662937..3c31386036 100644--- a/doc/guix.texi+++ b/doc/guix.texi@@ -4786,6 +4786,7 @@ additionally includes Git and strace: guix environment --pure guix --ad-hoc git strace @end example +@cindex container Sometimes it is desirable to isolate the environment as much as possible, for maximal purity and reproducibility.  In particular, when using Guix on a host distro that is not Guix System, it is desirable to@@ -4802,6 +4803,23 @@ guix environment --ad-hoc --container guile -- guile The @code{--container} option requires Linux-libre 3.19 or newer. @end quotation +@cindex certificates+Another typical use case for containers is to run security-sensitive+applications such as a web browser.  To run Eolie, we must expose and+share some files and directories; we include @code{nss-certs} and expose+@file{/etc/sll/certs/} for HTTPS authentication; finally we use+@code{env} from the @code{coreutils} package to set the @code{DISPLAY}+environment variable since containerized graphical applications won't+display without it.++@example+guix environment --container --network --expose=/etc/machine-id \+  --expose=/etc/ssl/certs/ \+  --share=$HOME/.local/share/eolie/=$HOME/.local/share/eolie/ \+  --ad-hoc eolie coreutils nss-certs dbus -- \+  env DISPLAY=$DISPLAY eolie+@end example+ The available options are summarized below.  @table @code-- 2.25.1

Ludovic Courtès wrote on 7 May 2020 09:42

Recipients:(name . Pierre Neidhardt)(address . mail@ambrevar.xyz)(address . 41041@debbugs.gnu.org)

Message-ID:87zhakdwd0.fsf@gnu.org

Hi,
Pierre Neidhardt <mail@ambrevar.xyz> skribis:

Toggle quote (5 lines)

> * doc/guix.texi (Invoking `guix environment'): Add paragraph and example to> run Eolie in a guix environment container. Add `container' cindex for the> first container example, and the `certificates' cindex for the web browser> example.

Good idea!

Toggle quote (7 lines)

> +@example> +guix environment --container --network --expose=/etc/machine-id \> + --expose=/etc/ssl/certs/ \> + --share=$HOME/.local/share/eolie/=$HOME/.local/share/eolie/ \> + --ad-hoc eolie coreutils nss-certs dbus -- \> + env DISPLAY=$DISPLAY eolie

Instead of ‘env’, you can preserve the ‘DISPLAY’ variable with:
guix environment -E ^DISPLAY$ …
which in turn allows you to remove ‘coreutils’, maybe.
Otherwise LGTM!
Thanks,Ludo’.

Pierre Neidhardt wrote on 7 May 2020 09:47

Recipients:(name . Ludovic Courtès)(address . ludo@gnu.org)(address . 41041@debbugs.gnu.org)

Message-ID:87tv0stcd2.fsf@ambrevar.xyz

Ludovic Courtès <ludo@gnu.org> writes:

Toggle quote (6 lines)

> Instead of ‘env’, you can preserve the ‘DISPLAY’ variable with:>> guix environment -E ^DISPLAY$ …>> which in turn allows you to remove ‘coreutils’, maybe.

Good tip, thanks!  It's strange that I've seen this "coreutils + env"trick so many times around.  I guess we really lacked examples like thisone :)
-- Pierre Neidhardthttps://ambrevar.xyz/

Caleb Ristvedt wrote on 7 May 2020 10:02

Recipients:(name . Pierre Neidhardt)(address . mail@ambrevar.xyz)(address . 41041@debbugs.gnu.org)

Message-ID:87d07gqijw.fsf@cune.org

Pierre Neidhardt <mail@ambrevar.xyz> writes:

Toggle quote (3 lines)

> +share some files and directories; we include @code{nss-certs} and expose> +@file{/etc/sll/certs/} for HTTPS authentication; finally we use

Typo: sll --> ssl
- reepca

Pierre Neidhardt wrote on 7 May 2020 10:05

Recipients:(name . Ludovic Courtès)(address . ludo@gnu.org)(address . 41041@debbugs.gnu.org)

Message-ID:87o8r0tbkf.fsf@ambrevar.xyz

Merged with 60131df02b521235a311031f9410f530ded60f33.
-- Pierre Neidhardthttps://ambrevar.xyz/

Pierre Neidhardt wrote on 7 May 2020 10:05

control message for bug #41041

Recipients:(address . control@debbugs.gnu.org)

Message-ID:87mu6ktbji.fsf@ambrevar.xyz

close 41041 quit

Pierre Neidhardt wrote on 7 May 2020 10:38

Re: [bug#41041] [PATCH] doc: Add container example to run a web browser.

Recipients:(name . Caleb Ristvedt)(address . caleb.ristvedt@cune.org)(address . 41041@debbugs.gnu.org)

Message-ID:87k11ota1g.fsf@ambrevar.xyz

Good catch! I've just fixed it.
-- Pierre Neidhardthttps://ambrevar.xyz/

is:open	open issues
is:done	closed issues
submitter:<who>	search issue submitter
author:<who>	search by message author
date:yesterday..now	search by issue date
mdate:3m..2d	search by message date