<spacebat>I've just installed guix and followed through the daemon setup and so on, made nix-setuid-helper owned by root and setuid so I can run the daemon once as guix-builder, but when I try to install something permission is denied to write to /nix, so I created that, then permission is denied to /nix/store, /nix/store/.links and so on
<spacebat>is there a script I've missed that sets up these directories with the right permissions, or is it that I'm running the daemon wrong?
<davexunit>spacebat: /nix/store? are you using a release tarball or git?
<davexunit>guix is really cool and it will be getting even better as time goes on. a new release should be happening sometime soon.
<davexunit>regarding the bash 4.3 upgrade: I recall a discussion here about having a large collection of packages on top of bash 4.2. was it the guix project that convinced the bash maintainers to release a new version?
<mark_weaver>spacebat: fwiw, I've never added setuid bits to 'nix-setuid-helper'. I just run the daemon as root, which is the recommendation.
<mark_weaver>the actual builds happen as unprivileged users. root is needed in the daemon to set up a secure build environment (chroot, linux container with private namespaces, etc).
<mark_weaver>davexunit: if the bash release was because of us, that would be news to me.
<davexunit>mark_weaver: okay, it probably wasn't then. I recalled a moment where I think civodul wondered if we could convince bash to make a new release so that we didn't have to deal with so many patches.
<mark_weaver>yes, I remember that too. perhaps he talked to them, but he didn't mention it to me, although he *did* point out the new release to me.
<davexunit>anyway, it's great that the release happened. :)