Systemd permissions

nixinator · November 22, 2020, 4:52pm

seems to be deprecated

systemd's PermissionsStartOnly is deprecated · Issue #53852 · NixOS/nixpkgs · GitHub

so, at first look these seems to be related to permissions in someway… might be a total red herring.

Gns3 has other problems when running a nixshell ,

github.com/NixOS/nixpkgs

GNS3 needs to setcap on ubridge

opened 09:53PM - 02 Nov 20 UTC

nixinator

0.kind: bug

**Describe the bug** gns3 need to do a setcap on ubridge , this fails as setcap… cannot work on a readonly file system /nix/store **To Reproduce** 1. nix-shell -p gns3-gui gns3-server dynamips ubridge telnet qemu 2. gns3sever & 3. gns3 **Expected behavior** ubridge needs elevate capablities for gns3-gui to find interfaces on emulated devices. If it cannot then virtual 'wiring' of devices together is not possible **Screenshots** ``` gns3 2020-11-02 15:44:06 INFO root:126 Log level: INFO 2020-11-02 15:44:06 INFO main:256 GNS3 GUI version 2.2.5 2020-11-02 15:44:06 INFO main:257 Copyright (c) 2007-2020 GNS3 Technologies Inc. 2020-11-02 15:44:06 INFO main:259 Application started with /nix/store/lk0l19l9q7n8bhc0q63lss1hiqmlnbxp-python3.7-gns3-gui-2.2.5/bin/gns3 Failed to set capabilities on file `/nix/store/1c40kqycq37wqrgg6qnajczhxlqm1r77-ubridge-0.9.16/bin/ubridge' (Read-only file system) 2020-11-02 15:44:22 CRITICAL utils.progress_dialog:181 WaitForCommandWorker thread stopping with an error: Could not execute command "sudo setcap cap_net_admin,cap_net_raw=ep /nix/store/1c40kqycq37wqrgg6qnajczhxlqm1r77-ubridge-0.9.16/bin/ubridge": Command '['sudo', 'setcap', 'cap_net_admin,cap_net_raw=ep', '/nix/store/1c40kqycq37wqrgg6qnajczhxlqm1r77-ubridge-0.9.16/bin/ubridge']' returned non-zero exit status 1. 2020-11-02 15:44:22 CRITICAL progress_dialog.py:183 Could not execute command "sudo setcap cap_net_admin,cap_net_raw=ep /nix/store/1c40kqycq37wqrgg6qnajczhxlqm1r77-ubridge-0.9.16/bin/ubridge": Command '['sudo', 'setcap', 'cap_net_admin,cap_net_raw=ep', '/nix/store/1c40kqycq37wqrgg6qnajczhxlqm1r77-ubridge-0.9.16/bin/ubridge']' returned non-zero exit status 1 ``` **Notify maintainers**  **Metadata** nix-shell -p nix-info --run "nix-info -m" - system: `"x86_64-linux"` - host os: `Linux 5.4.62, NixOS, 20.03.2913.4bd1938e03e (Markhor)` - multi-user?: `yes` - sandbox: `yes` - version: `nix-env (Nix) 2.3.6` - channels(user): `""` - channels(root): `"nixos-20.03.2913.4bd1938e03e"` - nixpkgs: `/nix/var/nix/profiles/per-user/root/channels/nixos`

but it is unrelated to this.

Nice that your trying to write a service for this… It certainly worth doing.