From debbugs-submit-bounces@debbugs.gnu.org Fri May 13 11:21:48 2022 Received: (at submit) by debbugs.gnu.org; 13 May 2022 15:21:48 +0000 Received: from localhost ([127.0.0.1]:44603 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1npX6x-0002bw-RA for submit@debbugs.gnu.org; Fri, 13 May 2022 11:21:48 -0400 Received: from lists.gnu.org ([209.51.188.17]:54204) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1npX6w-0002bp-6z for submit@debbugs.gnu.org; Fri, 13 May 2022 11:21:46 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:40810) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1npX6w-00011H-26 for bug-guix@gnu.org; Fri, 13 May 2022 11:21:46 -0400 Received: from mx0.riseup.net ([198.252.153.6]:55370) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1npX6t-0004kl-MD for bug-guix@gnu.org; Fri, 13 May 2022 11:21:45 -0400 Received: from fews2.riseup.net (fews2-pn.riseup.net [10.0.1.84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mail.riseup.net", Issuer "R3" (not verified)) by mx0.riseup.net (Postfix) with ESMTPS id 4L0C6X3PV8z9s7f for ; Fri, 13 May 2022 08:21:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1652455300; bh=TMxbG2DvezrP8tFrRmR+pKDZpr+J8ZsAWihxQwEL6bE=; h=Date:From:To:Subject:From; b=YMf2cmxgV4RGFYTOunOe+nHWOG7piyvQDN/AK0tseiVCMzyfE2ZMCbhuhv5bd+v1e SXxA1DUbEymsD8qLE8usnjLK7XGs+j7cMwVQM9237MqBJLQWAJUVRaIJNrmC38fNjd NfegQob1J2JET9fEs3gmMvjdX4hGgZtbwk+hpdyI= X-Riseup-User-ID: A422B65AA728CA59D5DC920278E4FA4F43FAD4E46B87EAC9E1140F38A1AE7074 Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews2.riseup.net (Postfix) with ESMTPSA id 4L0C6V5dk9z1yBZ for ; Fri, 13 May 2022 08:21:38 -0700 (PDT) Date: Fri, 13 May 2022 12:21:27 -0300 From: =?iso-8859-1?Q?Andr=E9?= Batista To: bug-guix@gnu.org Subject: guix system reconfigure fails on channel validation Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Received-SPF: pass client-ip=198.252.153.6; envelope-from=nandre@riseup.net; helo=mx0.riseup.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) Hello Guix! Recently, I've not been able to reconfigure some of my guix systems because guix fails to forward validate the commits in between the current system deployment and the newer one. This appears to be related to the new libgit2 version 1.4.3[1][2], which addressed CVE 2022-24765, since there was no change to the related guix routines on the time lapse since the last deploy. This is the error I'm getting: $ sudo guix system --fallback -c 3 -M 3 reconfigure myconfig.scm Backtrace: 19 (primitive-load "/home/user/.config/guix/current/bin/g?") In guix/ui.scm: 2230:7 18 (run-guix . _) 2193:10 17 (run-guix-command _ . _) In ice-9/boot-9.scm: 1752:10 16 (with-exception-handler _ _ #:unwind? _ # _) In guix/status.scm: 829:3 15 (_) 809:4 14 (call-with-status-report _ _) In guix/scripts/system.scm: 1253:4 13 (_) In ice-9/boot-9.scm: 1752:10 12 (with-exception-handler _ _ #:unwind? _ # _) In guix/store.scm: 658:37 11 (thunk) 1320:8 10 (call-with-build-handler # ?) 2129:25 9 (run-with-store # _ # _ ?) In guix/scripts/system.scm: 1277:15 8 (_ _) 819:5 7 (perform-action reconfigure #< name: #f format:?> ?) In guix/scripts/system/reconfigure.scm: 345:3 6 (check-forward-update _ #:current-channels _) In srfi/srfi-1.scm: 691:23 5 (filter-map # . #) In guix/scripts/system/reconfigure.scm: 352:37 4 (_ #< name: guix url: "/src/guix.git" branch: ?>) In guix/git.scm: 469:7 3 (update-cached-checkout _ #:ref _ #:recursive? _ # _ # _ ?) In git/bindings.scm: 77:2 2 (raise-git-error _) In ice-9/boot-9.scm: 1685:16 1 (raise-exception _ #:continuable? _) 1685:16 0 (raise-exception _ #:continuable? _) ice-9/boot-9.scm:1685:16: In procedure raise-exception: Git error: repository path '/src/guix.git/' is not owned by current user ----- And these are the commits being compared: $ guix system describe Generation 214 May 06 2022 22:47:43 (current) file name: /var/guix/profiles/system-214-link canonical file name: /gnu/store/b0wrzz8sxqi9hywpqz29cm73l9adxjy9-system label: GNU with Linux-Libre-Atom 5.17.5 bootloader: grub root device: label: "rootfs" kernel: /gnu/store/xmdskyk85sypr4wgf5iwg5iid08l4aiq-linux-libre-atom-5.17.5/bzImage channels: guix: repository URL: /src/guix.git branch: master commit: ee70ed5bf50e781a6a43985211aa763e28db62b9 configuration file: /gnu/store/g653hksfz0iwnbpynaq2mx4nv7ayb7r7-configuration.scm $ guix describe Generation 200 May 12 2022 13:48:01 (current) guix a1cb645 repository URL: /src/guix.git branch: master commit: a1cb645d83d085382eaf64f4c097642aa47c297a Any thoughts? 1. https://github.com/libgit2/libgit2/blob/v1.4.3/docs/changelog.md 2. https://github.com/libgit2/libgit2/commit/0cc4a70db0942f65528f4877be14a6a987fe3c64 3. https://github.blog/2022-04-12-git-security-vulnerability-announced/