Re: permission denied: /gnu/store/...guile...

[rekado]

---- On Wed, 20 May 2015 20:18:31 +0800 Ludovic Courtès  wrote ---- 
>So this happens only with this derivation? 

No.  It happens whenever I build something without substitutes.  There are no 
substitutes for packages that are still in development (like my ibus-pinyin 
draft).

>I suppose you’re on Linux-libre 4.0.2, right? 

I'm on Linux-libre 4.0.4.  "uname -a" says this:

    Linux banana 4.0.4-gnu #1 SMP Mon May 18 21:33:05 UTC 2015 x86_64 GNU/Linux

>> I have installed GuixSD from the 0.8.2 USB image onto a new, empty 
>> partition. I'm reusing only my home directory, which is located on a luks 
>> LVM. I have pulled the latest version of Guix and reconfigured the system a 
>> few hours ago. 
> 
>... which means that other derivations build just fine, right? 

When substitutes are involved everything works fine, as far as I can tell.

>> Derive([("out","/gnu/store/vvs2c9zzl9zwrq0zwrayjlih9cpwjbcq-ibus-pinyin-1.5.0.tar.gz","sha256","a85d458dcc51ea9fd65849e63002428b3fcb3b39adcbea9214b5cb4a4cbdbc96")],[("/gnu/store/479gki04zgbysxipcb1wdl56mh1bldbx-guile-2.0.11.drv",["out"]),("/gnu/store/p20cih7k80cpqka6f06100j1ycgf3fl1-module-import.drv",["out"]),("/gnu/store/s8bacxxryg87p2ag6gl46qz6jvpdm5qs-gnutls-3.4.0.drv",["out"]),("/gnu/store/w9g2dqsfgr6n8pslwmm2lgbka96qwig4-module-import-compiled.drv",["out"])],["/gnu/store/yhds5m08mgp3a3yb2gj9imn7pkap0fc1-ibus-pinyin-1.5.0.tar.gz-builder"],"x86_64-linux","/gnu/store/cnqmkmj40jmssnx6fkf9n0n3bqj5x426-guile-2.0.11/bin/guile",["--no-auto-compile","-L","/gnu/store/6fnbs4j7dsn6rc598d72caay00yggvh7-module-import","-C","/gnu/store/ww9kwrbs4h468vll6a3swg6dc3hr9f8i-module-import-compiled","/gnu/store/yhds5m08mgp3a3yb2gj9imn7pkap0fc1-ibus-pinyin-1.5.0.tar.gz-builder"],[("impureEnvVars","http_proxy
>>  
>> https_proxy"),("out","/gnu/store/vvs2c9zzl9zwrq0zwrayjlih9cpwjbcq-ibus-pinyin-1.5.0.tar.gz")])
>>  
> 
>However I don’t see this derivation mention in the strace log.

Oh, right.  The strace log shows the output for another package I'm working on, 
"gnome-keyring".  There are only two things it has in common with 
"ibus-pinyin": there is no binary substitute available and I get the same error 
about "permission denied" when executing guile.

> Could 
>you try to strace again the daemon, but this time just run: 
> 
> guix build -S ibus-pinyin 

Here's the client output:

~~~~~~~~
address@hidden guix $ ./pre-inst-env guix build -S ibus-pinyin
substitute: updating list of substitutes from 'http://hydra.gnu.org'... 100.0%
The following derivation will be built:
   /gnu/store/ni0hz29nyd051fsp2n73icjnwx28fajz-ibus-pinyin-1.5.0.tar.gz.drv
@ build-started 
/gnu/store/ni0hz29nyd051fsp2n73icjnwx28fajz-ibus-pinyin-1.5.0.tar.gz.drv - 
x86_64-linux 
/var/log/guix/drvs/ni//0hz29nyd051fsp2n73icjnwx28fajz-ibus-pinyin-1.5.0.tar.gz.drv.bz2
build error: executing 
`/gnu/store/cnqmkmj40jmssnx6fkf9n0n3bqj5x426-guile-2.0.11/bin/guile': 
Permission denied
builder for 
`/gnu/store/ni0hz29nyd051fsp2n73icjnwx28fajz-ibus-pinyin-1.5.0.tar.gz.drv' 
failed with exit code 1
@ build-failed 
/gnu/store/ni0hz29nyd051fsp2n73icjnwx28fajz-ibus-pinyin-1.5.0.tar.gz.drv - 1 
builder for 
`/gnu/store/ni0hz29nyd051fsp2n73icjnwx28fajz-ibus-pinyin-1.5.0.tar.gz.drv' 
failed with exit code 1
killing process 2209
guix build: error: build failed: build of 
`/gnu/store/ni0hz29nyd051fsp2n73icjnwx28fajz-ibus-pinyin-1.5.0.tar.gz.drv' 
failed
address@hidden guix $ 
~~~~~~~~

The strace log is here: http://elephly.net/downies/guile-permission-denied2.txt

I think I should also mention that I'm encountering another "permission denied" 
problem, which may or may not be related.  "sudo" is not working:

~~~~~~~~
address@hidden guix $ sudo ls
sudo: unable to stat /etc/sudoers: Permission denied
sudo: no valid sudoers sources found, quitting
sudo: unable to initialize policy plugin
address@hidden guix $ 
~~~~~~~~

The output of "strace sudo ls" is here: http://elephly.net/downies/sudo.txt

The store is of course not mounted with "nosetuid" flag.

Thank you all for offering assistance!  I appreciate it.
~~ Ricardo