bug#70659: Too many heap sections on guix pull

[Peacememories]

Hi, thanks for the quick reply!

On 30.04.2024 11:11, Ludovic Courtès wrote:
> Hi,
>
> Peacememories <peacememories@posteo.net> skribis:
>
> > `guix pull` on a fresh install on WSL Ubuntu 24.04 fails with the
> > following log.
> >
> > The same happened to me when trying GUIX on NixOS 23.11 via the
> > `services.guix` option.
> >
> > ```
> >
> > hint: Consider installing the `glibc-locales' package and defining
> > `GUIX_LOCPATH', along these lines:
> >
> >      guix install glibc-locales
> >      export GUIX_LOCPATH="$HOME/.guix-profile/lib/locale"
> >
> > See the "Application Setup" section in the manual, for more info.
> >
> > Updating channel 'guix' from Git repository at
> > 'https://git.savannah.gnu.org/git/guix.git'...
> > Authenticating channel 'guix', commits 9edb3f6 to ddf3759 (29,446 new
> > commits)...
> > Building from this channel:
> >   guix      https://git.savannah.gnu.org/git/guix.git   ddf3759
>
> [...]
>
> > -Too many heap sections: Increase MAXHINCR or MAX_HEAP_SECTS
> > guix pull: error: You found a bug: the program
>
> Thanks for the report.  As someone confirmed on IRC, this was caused by
> 7cef6b7ba555a9dfaf6d09cb7e112b0df77d5114, which introduced a circular
> dependency, but only for those systems running a version of guix-daemon
> lacking “builtin:git-download” (added in Sept. 2023).
>
> Commit df3d30819e650a490ef39dd6692740bb13263c75 fixes that; you should
> be able to pull now.

I can indeed confirm that
(1) Using an older commit caused the error to disappear
(2) Pulling the newest version now seems to work as well

> I would recommend upgrading guix-daemon though, as noted in:
>
>   https://guix.gnu.org/manual/devel/en/html_node/Upgrading-Guix.html
>
> One of the main reasons to do so is this:
>
>
> https://guix.gnu.org/en/blog/2024/fixed-output-derivation-sandbox-bypass-cve-2024-27297/

I'll definitely update guix on the WSL installation (I had just done the 
initial installation which presumably comes with an older version), but 
I think I'll hold off on the update in NixOS. For one, trying to change 
the binary and service definition under Nix' nose seems dangerous, but 
also it seems that Nix already backported the CVE fix you mentioned 
(https://github.com/NixOS/nixpkgs/blob/12430e43bd9b81a6b4e79e64f87c624ade701eaf/pkgs/by-name/gu/guix/package.nix#L47-L58)

Just thought I'd mention that here in case anyone stumbles across this 
in a similar situation

All the best,

Peacememories

> Thanks for reporting the bug!
>
> Ludo’.