Re: permission denied: /gnu/store/...guile...

[Ludovic Courtès]

rekado <address@hidden> skribis:

>>> Derive([("out","/gnu/store/vvs2c9zzl9zwrq0zwrayjlih9cpwjbcq-ibus-pinyin-1.5.0.tar.gz","sha256","a85d458dcc51ea9fd65849e63002428b3fcb3b39adcbea9214b5cb4a4cbdbc96")],[("/gnu/store/479gki04zgbysxipcb1wdl56mh1bldbx-guile-2.0.11.drv",["out"]),("/gnu/store/p20cih7k80cpqka6f06100j1ycgf3fl1-module-import.drv",["out"]),("/gnu/store/s8bacxxryg87p2ag6gl46qz6jvpdm5qs-gnutls-3.4.0.drv",["out"]),("/gnu/store/w9g2dqsfgr6n8pslwmm2lgbka96qwig4-module-import-compiled.drv",["out"])],["/gnu/store/yhds5m08mgp3a3yb2gj9imn7pkap0fc1-ibus-pinyin-1.5.0.tar.gz-builder"],"x86_64-linux","/gnu/store/cnqmkmj40jmssnx6fkf9n0n3bqj5x426-guile-2.0.11/bin/guile",["--no-auto-compile","-L","/gnu/store/6fnbs4j7dsn6rc598d72caay00yggvh7-module-import","-C","/gnu/store/ww9kwrbs4h468vll6a3swg6dc3hr9f8i-module-import-compiled","/gnu/store/yhds5m08mgp3a3yb2gj9imn7pkap0fc1-ibus-pinyin-1.5.0.tar.gz-builder"],[("impureEnvVars","http_proxy
>>>  
>>> https_proxy"),("out","/gnu/store/vvs2c9zzl9zwrq0zwrayjlih9cpwjbcq-ibus-pinyin-1.5.0.tar.gz")])
>>>  
>> 
>>However I don’t see this derivation mention in the strace log.
>
> Oh, right.  The strace log shows the output for another package I'm working 
> on, "gnome-keyring".  There are only two things it has in common with 
> "ibus-pinyin": there is no binary substitute available and I get the same 
> error about "permission denied" when executing guile.

Could you post the output of
“stat /gnu/store/cnqmkmj40jmssnx6fkf9n0n3bqj5x426-guile-2.0.11/bin/guile”?

What do the following return at the Guile REPL:

  (getgr 30000)
  (getpw 30001)

?

> The strace log is here: 
> http://elephly.net/downies/guile-permission-denied2.txt

Note that here, since it’s a fixed-output derivation, there’s no chroot,
unshare, etc., so it’s really just UID 30001 running that file.
Something equivalent to:

  # su guixbuilder01
  $ /gnu/store/cnqmkmj40jmssnx6fkf9n0n3bqj5x426-guile-2.0.11/bin/guile

> ~~~~~~~~
> address@hidden guix $ sudo ls
> sudo: unable to stat /etc/sudoers: Permission denied
> sudo: no valid sudoers sources found, quitting
> sudo: unable to initialize policy plugin

Same with:

  /run/setuid-programs/sudo ls

?

Does /run/setuid-programs/sudo have the same inode as
$(guix build sudo)/bin/sudo?

  stat -c '%i' /run/setuid-programs/sudo \
    $(guix build sudo)/bin/sudo


The only partitions are / and /home, right?

Thanks,
Ludo’.