#36241 build, doc: Warn on unprivileged Guix daemon usage
https://github.com/bitcoin/bitcoin/pull/36241 · · +57/-0 in 2 files, 2 commits · labels: none · draft
Goal
- Warn developers early when using an unprivileged Guix daemon before long builds fail
- Prevent confusing late compilation errors and document how to switch to root mode
Adds a pre-build check in contrib/guix/guix-build that warns users when guix-daemon runs unprivileged under Linux user namespaces. Also adds migration instructions in contrib/guix/INSTALL.md to switch the daemon back to root mode.
Problem: Modern Guix installations using unprivileged user namespaces break local compilation of certain dependencies such as python-distlib and node when building without substitutes, causing long Guix builds to fail late with confusing permission errors.
Category: Build and CI (#40 of 55)
P3 · user request
- P3 because it saves developers hours of wasted compilation time from late Guix build failures
- Diagnoses broken unprivileged user namespace setups early when building without substitutes
Saves developer time by diagnosing an environmental Guix failure early. As the PR notes, unprivileged namespaces are 'known to cause reproducible build failures in dependencies (like python-distlib and node) when building locally without substitutes', saving 'developers hours of wasted compilation time'.
Membership: Changes contrib/guix/guix-build and contrib/guix/INSTALL.md, which govern the Guix reproducible build system.
Factors: security/stability 0, bug 0, performance 0, user value 1, leverage 0
Reviewability: Ready
- Ready for review now with a small, self-contained diff and no technical blockers
The diff is small and self-contained with no technical blocks or pending author reworks.
Author status: silent since 2026-09-13 (opened PR as draft based on RFC #36239)
Agreement: Crickets
- No substantive reviews or Concept ACKs yet
- Suggested keeping as draft pending rough consensus in RFC #36239 (hebasto)
No reviews yet; hebasto suggested keeping in draft pending RFC #36239 consensus
No substantive reviews or Concept ACKs have been posted yet.
- hebasto suggested keeping as draft until ongoing discussion in #36239 reaches a rough consensus
Review verdicts (DrahtBot): 0
Files
57 lines under test/bench/ci.
- contrib/guix/INSTALL.md +37/-0
- contrib/guix/guix-build +20/-0
Card
This PR adds a warning check to contrib/guix/guix-build and migration documentation in contrib/guix/INSTALL.md for developers running guix-daemon in unprivileged user-namespace mode. It resolves confusing dependency build failures that occur during local Guix builds without substitutes. The PR is clean and ready for review, though kept in draft pending discussion in RFC #36239. It has received no substantive review comments yet.