#52533 - guix deploy breaks SSH access with a PAM error

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #5 received at submit@debbugs.gnu.org (full text, mbox, reply):

Received: (at submit) by debbugs.gnu.org; 16 Dec 2021 04:45:35 +0000
From debbugs-submit-bounces@debbugs.gnu.org Wed Dec 15 23:45:35 2021
Received: from localhost ([127.0.0.1]:34223 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1mxie6-0003KX-PQ
	for submit@debbugs.gnu.org; Wed, 15 Dec 2021 23:45:35 -0500
Received: from lists.gnu.org ([209.51.188.17]:44718)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <maxim.cournoyer@gmail.com>) id 1mxie4-0003KQ-Fb
 for submit@debbugs.gnu.org; Wed, 15 Dec 2021 23:45:32 -0500
Received: from eggs.gnu.org ([209.51.188.92]:49586)
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <maxim.cournoyer@gmail.com>)
 id 1mxie4-0002PJ-5b
 for bug-guix@gnu.org; Wed, 15 Dec 2021 23:45:32 -0500
Received: from [2607:f8b0:4864:20::834] (port=40913
 helo=mail-qt1-x834.google.com)
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <maxim.cournoyer@gmail.com>)
 id 1mxie1-0001Ln-Ke
 for bug-guix@gnu.org; Wed, 15 Dec 2021 23:45:30 -0500
Received: by mail-qt1-x834.google.com with SMTP id t34so24253988qtc.7
 for <bug-guix@gnu.org>; Wed, 15 Dec 2021 20:45:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
 h=from:to:subject:date:message-id:mime-version;
 bh=jeHqo5+i6D6n4LpHpLK/pkoeEniJ9zgxswDzI5s65ow=;
 b=SktdOdrUJqJjAaPOYuQh/st1gKWs9y/JKGSA+K1hf1oI9SEa3jtSUkFzR45I7hJCSi
 N9o026HTnJrXp0Q+/CpPFfhXc34lSZjLgWl0VO1QZuVEgDqPaLMmTn6HffPM9a45rOJC
 TGbjfYT3KCwILw8yXn4lAE3nKwqnIJmIB103r3gEw9WEQVuVXHArXoqHvLIPZmPnw4kK
 2i1wjUgW2ncE2zNdENy9bRB3KKgQ7dGDjTX6ym38OpBNdynz9zJMKKN7DGhCdYK1cTr2
 pSBlUc7nT84qZxZoO3NfPiN8lORs03Sg9+x8C5RO0D95dPrxnW18XbhTX7bN0vzLnRIf
 GYHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20210112;
 h=x-gm-message-state:from:to:subject:date:message-id:mime-version;
 bh=jeHqo5+i6D6n4LpHpLK/pkoeEniJ9zgxswDzI5s65ow=;
 b=Xu/qguEkDDkFWpLLPTIJF2Vxi2ATtHVhGDG4/tkgEWeApJElUgpIe/3gb1K89ZAn/a
 R0RPgq6PMvJAwKpkTjKtmsYJntoZNn2WqGWAdRUcsJ/aXjmVVvhapY4rQuV8xeC0RXQ2
 FGlF3oq3UooqdHBWCeUc6mhOhsnULIcs9FOLvVCIJNnCg2lHiOW/s3FPtj/f7oWBcTuB
 MEfHlRRWls7ZW7yNy3AEvpOIjIytA3x35aZDzxu5B8Axp/djQclDdE9nN9PdlLOrS5Vt
 5ONacPWwRwJmEzGsdsNQvFmeCSEn6wONM44niMmvPqcP2gs/gispV19/3tcnN9X/0Oz4
 unzA==
X-Gm-Message-State: AOAM533xWSjKhv66taYg0DBlUBvgbdQ5V/Xf/Zn8nlKM5VxU50qwVthH
 yUcPgaVyEfc3v14r+Wt3Mo4vC4WExtM=
X-Google-Smtp-Source: ABdhPJzXdmffLz6QCnWYD9qvHrHI+Q5JfxfB17+kIt72WV7JsMHMHgEQ62fb7o16pXNH8ES16/FtFg==
X-Received: by 2002:a05:622a:1056:: with SMTP id
 f22mr15422957qte.429.1639629927707; 
 Wed, 15 Dec 2021 20:45:27 -0800 (PST)
Received: from hurd (dsl-10-146-110.b2b2c.ca. [72.10.146.110])
 by smtp.gmail.com with ESMTPSA id r20sm2268882qkp.21.2021.12.15.20.45.26
 for <bug-guix@gnu.org>
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Wed, 15 Dec 2021 20:45:27 -0800 (PST)
From: Maxim Cournoyer <maxim.cournoyer@gmail.com>
To: bug-guix <bug-guix@gnu.org>
Subject: guix deploy breaks SSH access with a PAM error
Date: Wed, 15 Dec 2021 23:45:24 -0500
Message-ID: <87czlx88ez.fsf@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain
X-Host-Lookup-Failed: Reverse DNS lookup failed for 2607:f8b0:4864:20::834
 (failed)
Received-SPF: pass client-ip=2607:f8b0:4864:20::834;
 envelope-from=maxim.cournoyer@gmail.com; helo=mail-qt1-x834.google.com
X-Spam_score_int: 0
X-Spam_score: -0.1
X-Spam_bar: /
X-Spam_report: (-0.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 NUMERIC_HTTP_ADDR=1.242, RCVD_IN_DNSWL_NONE=-0.0001, RDNS_NONE=0.793,
 SPF_HELO_NONE=0.001, SPF_PASS=-0.001,
 WEIRD_PORT=0.001 autolearn=no autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.9 (/)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

Hello Guix!

Following the big merge of the core-updates-frozen branch into master,
I've noticed now on two counts the following: running 'guix deploy'
leaves the remote machine unreachable by SSH.  The connection passes
authentication but then gets closed immediately.  /var/log/messages
reveals the following error:

--8<---------------cut here---------------start------------->8---
sshd[29578]:  error: PAM: pam_open_session(): Module is unknown
--8<---------------cut here---------------end--------------->8---

The machines updated were running Guix System revisions predating the
core-updates-frozen merge.

The 'guix deploy' command doesn't succeed due to SSH starting to fail at
99% completion or similar; the bootloader configuration is not updated
so rebooting boots into the same old system generation (and SSH works
again):

--8<---------------cut here---------------start------------->8---
guix deploy: deploying to x200...
guix deploy: sending 0 store items (0 MiB) to 'x200.local'...
guix deploy: sending 0 store items (0 MiB) to 'x200.local'...
substitute: updating substitutes from 'http://127.0.0.1:8181'... 100.0%
substitute: updating substitutes from 'https://ci.guix.gnu.org'... 100.0%
The following derivations will be built:
   /gnu/store/049wr939gjpgl3471wrk8b1waqgswrdi-remote-exp.scm.drv
   /gnu/store/y1mgddpa2qkrmc01knpdam917b60yxlq-switch-to-system.scm.drv
   /gnu/store/vgadszcfklbhr7d8yl8jprzipjy6b0vj-system.drv
   /gnu/store/ypyaf6ib1w5nc4kr0xgjm4par407cnzk-provenance.drv

building /gnu/store/ypyaf6ib1w5nc4kr0xgjm4par407cnzk-provenance.drv...
building /gnu/store/vgadszcfklbhr7d8yl8jprzipjy6b0vj-system.drv...
building /gnu/store/y1mgddpa2qkrmc01knpdam917b60yxlq-switch-to-system.scm.drv...
building /gnu/store/049wr939gjpgl3471wrk8b1waqgswrdi-remote-exp.scm.drv...
guix deploy: sending 5 store items (0 MiB) to 'x200.local'...
guix deploy: error: failed to deploy x200: failed to start 'guix repl' on 'x200.local'

$ guix deploy ~/stow/guix/machines/x200.scm --no-offload
The following 1 machine will be deployed:
  x200

guix deploy: deploying to x200...
guix deploy: error: failed to deploy x200: remote command
'/run/setuid-programs/sudo -n -- guix repl -t machine' failed with
status 254

$ ssh x200
Last login: Wed Dec 15 23:28:02 2021 from 192.168.10.15
Connection to x200.local closed.
--8<---------------cut here---------------end--------------->8---

This is obviously embarrassing in scenarios where the SSH connection is
the main way to reach to the remote machine.

Ideas?

Thank you,

Maxim

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Tue Sep 9 23:07:17 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#52533 guix deploy breaks SSH access with a PAM error