summary refs log tree commit diff
AgeCommit message (Collapse)Author
10 daysgnu: openvpn: Update to 2.6.12. [security fixes]Nicolas Graves
Thix fixes CVE-2024-24974, CVE-2024-27459 and CVE-2024-27903. * gnu/packages/vpn.scm (openvpn): Update to 2.6.12. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: sendmail: Update to 8.18.1. [security fixes]Nicolas Graves
This fixes CVE-2023-51765 and CVE-2021-3618. * gnu/packages/mail.scm (sendmail): Update to 8.18.1. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: pam-u2f: Update to 1.3.0. [security fixes]Nicolas Graves
This fixes CVE-2021-31924. * gnu/packages/security-token.scm (pam-u2f): Update to 1.3.0. [inputs]: Add libfido2, openssl. Remove libu2f-host, libu2f-server. [native-inputs]: Sort packages. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: bart: Update to 0.9.00.Nicolas Graves
This fixes bart reproducibility. * gnu/packages/image-processing.scm (bart): Update to 0.9.00. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Change-Id: I2c40957a8e55fec945ec03e097cf3a3c71da85ee
10 daysgnu: nzbget: Ignore failing tests.Nicolas Graves
* gnu/packages/networking.scm (nzbget)[arguments]<#:phases>: Ignore a misconfigured test on aarch64. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: nzbget: Update to 24.3. [security fixes]Nicolas Graves
This fixes CVE-2023-49102. * gnu/packages/networking.scm (nzbget): Update to 24.3. [source]: Switch to git-fetch. [build-system]: Switch to cmake-build-system. [arguments]<configure-flags>: Update field. [inputs]: Add boost, openssl. [native-inputs]: Remove pkg-config, add which. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: curl: Fix CVE-2024-8096.Ashish SHUKLA
* gnu/packages/curl.scm (curl) [replacement]: New field. (curl/fixed): New variable. * gnu/packages/patches/curl-CVE-2024-8096.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. Change-Id: I42facad095d97dc94302e9db60626b9fa00f3738 Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: ffmpeg-4: Update to 4.4.5 [fixes CVE-2024-7055].Ashish SHUKLA
* gnu/packages/video.scm (ffmpeg-4): Update to 4.4.5. * gnu/packages/patches/ffmpeg-remove-compressed_ten_bit_format.patch: Delete file. * gnu/local.mk (dist_patch_DATA): De-register it. Change-Id: Ie35066988c26af338120b2ce002c767ff4c7aaec Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Modified-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: ffmpeg-5: Update to 5.1.6 [fixes CVE-2024-7055, CVE-2024-7272].Ashish SHUKLA
* gnu/packages/video.scm (ffmpeg-5): Update to 5.1.6. Change-Id: If86cbff17d63528b42a9c5ce2c062014251b8fcb Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysbuild: chicken-build-system: Update for 5.4.0.Ashish SHUKLA
* guix/build/chicken-build-system (build): chdir to the directory containing sources, and let chicken-install process the current directory. (install): Switch to define as we do not need any keys. (check): Remove unused egg-name from the arguments. Change-Id: I4adf5e2378deab6e3f3b3c128c3cc75ce43f0e8a Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: chicken: Update to 5.4.0.Ashish SHUKLA
* gnu/packages/chicken.scm (chicken): Update to 5.4.0. Change-Id: I448bdc25a5cb11e55c7ebb9d9e0cf1876ca958d8 Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: libarchive: Graft to 3.7.7. [security fixes]Liliana Marie Prikler
* gnu/packages/backup.scm (libarchive): Add replacement with libarchive/fixed. (libarchive/fixed): New variable. Fixes: Out of bounds access in ZIP files [CVE-2024-37407]. Fixes: Out of bounds access in RAR files [CVE-2024-48957, CVE-2024-48958]. Fixes: Race condition in multi-threaded systems [CVE-2023-30571]. Fixes: NULL pointer dereference [CVE-2022-36227]. Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
10 daysgnu: emacs-telega: Update to 0.8.391.Sergey Trofimov
* gnu/packages/emacs-xyz.scm (emacs-telega): Update to 0.8.391.
10 daysgnu: tdlib: Update to 1.8.39.Sergey Trofimov
* gnu/packages/messaging.scm (tdlib): Update to 1.8.39.
10 daysgnu: liblouisutdml: Update to 2.12.0-0.00ca783.Zheng Junjie
* gnu/packages/language.scm (liblouisutdml): Update to 2.12.0-0.00ca783. [arguments]: Use G-expressions. [native-inputs]: Remove labels. [propagated-inputs]: Remove labels. Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail> Change-Id: Iedbcb5b3073f26a42805ae02550a28f6f1abee86
10 daysgnu: emacs-org-node: Update to 1.7.4.Danny Milosavljevic
* gnu/packages/emacs-xyz.scm (emacs-org-node): Update to 1.7.4. Change-Id: Ie1da1b7626f9deb9abc64abdb5df544f68e34c4e
10 daysgnu: emacs-org-node: Update to 1.6.1.Danny Milosavljevic
* gnu/packages/emacs-xyz.scm (emacs-org-node): Update to 1.6.1. Change-Id: I4c0f11db95620d15b7104ae288ce7c68c3fdc46f
10 daysgnu: r-hdwgcna: Use R build system phases.Ricardo Wurmus
* gnu/packages/bioinformatics.scm (r-hdwgcna)[arguments]: Explicitly select %STANDARD-PHASES from r-build-system module. Change-Id: I8f6593ab1243884827698cf84d34d9f7aef5c28c
10 daysgnu: Add r-hdwgcna.Ricardo Wurmus
* gnu/packages/bioinformatics.scm (r-hdwgcna): New variable. Change-Id: I1e3c7663a777ee543c53ccee90b6e71f544d89aa
10 daysgnu: Add r-tester.Ricardo Wurmus
* gnu/packages/cran.scm (r-tester): New variable. Change-Id: Id7835b32794b8c34ff7f540f8c7a4cfc1d616ba0
11 daysgnu: Add python-rangehttpserver.Navid Afkhami
* gnu/packages/python-web.scm (python-rangehttpserver): New variable. Change-Id: Ib37b29bedb468faf4da5ab5080106c54e50f52c7 Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
11 daysgnu: Add python-harmonypy.Navid Afkhami
* gnu/packages/bioinformatics.scm (python-harmonypy): New variable. Change-Id: Iad8be627099858776163fccfeb27c08129e6fb75 Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
11 daysgnu: dropbear: Update to 2024.86.Attila Lendvai
* gnu/packages/ssh.scm (dropbear): Update to 2024.86. Change-Id: I1fe9bf0fcaaed3e55ed9a56697d51c5451f3a726 Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
11 daysinstaller: Support dry-run from Guile via store.Janneke Nieuwenhuizen
This supports running the installer quasi-directly from Guile by only building a Guile installer-script in the store. Do something like: ./pre-inst-env guile -c '((@ (gnu installer) run-installer) #:dry-run? #t)' or and BE VERY CAREFUL WHEN NOT USING #:DRY-RUN #T! sudo -E ./pre-inst-env guile -c '((@ (gnu installer) run-installer))' for this to work, you also need connman. * gnu/installer.scm (installer-script, run-installer): New procedures. Change-Id: I8cc1746845ec99f738e35fa91bb2342a674cfa88
11 daysinstaller: Add static-networking template.Janneke Nieuwenhuizen
* gnu/installer/services.scm (%system-services): Add static-networking-service-type. Change-Id: Iec6336f8d1f49e8b801e978d5c9eeb4f83a6e748
11 daysinstaller: Add "Kernel" page to select the Hurd.Janneke Nieuwenhuizen
This adds a "Kernel" page to the installer with the option to (cross-) install the Hurd, if applicable (only available on x86 machines for now). * gnu/installer/newt.scm (kernel-page): New procedure. (newt-installer)[kernel-page]: New field. * gnu/installer/kernel.scm, gnu/installer/newt/kernel.scm: New files. * gnu/local.mk (INSTALLER_MODULES): Add them. * gnu/installer.scm (installer-steps): Use them to select kernel if applicable. * gnu/installer/newt/partition.scm (run-label-page): Default to "msdos" when instaling the Hurd. (run-fs-type-page): Add ext2 for the hurd. (run-partitioning-page-partition): Remove `entire-encrypted' option when installing the Hurd. * gnu/installer/services.scm (system-services->configuration): Cater for the Hurd with %base-services/hurd, and with %base-packages/hurd that must always be set. (%system-services): Change to procedure. When installing the the Hurd, do not recommend `ntp-service-type' and USE `openssh-sans-x' package for `openssh-service-type'. (system-service-none): New variable. * gnu/installer/newt/services.scm (run-network-management-page): Include it when installing the Hurd. (run-desktop-environments-cbt-page): When installing the Hurd, recommend to not select any desktop enviroment. Update users. * gnu/installer/parted.scm (efi-installation?): Return #f when installing for the Hurd. (create-ext2-file-system): New procedure. (user-fs-type-name, user-fs-type->mount-type, partition-filesystem-user-type, format-user-partitions): Support `ext2'. (<user-partition> partition->user-partition): Use `ext2' when installing the Hurd. (auto-partition!): Likewise. No swap partition when installing the Hurd. * gnu/installer/final.scm (install-system): Cater for cross installation of the Hurd. (bootloader-configuration): Use `grub-minimal-bootloader' when installing the Hurd. (user-partition-missing-modules): Cater for empty user-partitions. (initrd-configuration, user-partitions->configuration): Cater for the Hurd. * gnu/installer/steps.scm (format-configuration, configuration->file): Cater for the Hurd. * gnu/system/hurd.scm (%desktop-services/hurd): New variable. * gnu/installer/tests.scm (choose-kernel): New procedure. * gnu/tests/install.scm (gui-test-program): Use it. Change-Id: Ifafb27b8a2f933944c77223a27ec151757237e36
11 daysinstaller: Add dry-run?Janneke Nieuwenhuizen
This allows running the installer without root privileges. Do something like ./pre-inst-env guix repl ,use (guix) ,use (gnu installer) (installer-program #:dry-run? #t) ,build $1 => "/gnu/store/...-installer-program" and run /gnu/store/...-installer-program * gnu/installer/newt.scm (locale-page): Add #:dry-run? parameter. (keymap-page): Likewise. * gnu/installer/newt/keymap.scm (run-keymap-page): Likewise. * gnu/installer/steps.scm (run-installer-steps): Likewise. Use it to skip writing to socket. * gnu/installer/newt/final.scm (run-final-page): Rename to... (run-final-page-install): ...this. (dry-run-final-page, run-final-page): New procedures. * gnu/installer/parted.scm (bootloader-configuration): Cater for empty user partitions. * gnu/installer/utils.scm (dry-run-command): New procedure. * gnu/installer.scm (compute-locale-step): Add #:dry-run? parameter. Use it to avoid actually applying locale. (compute-keymap-step): Add dry-run? parameter. Pass it to keymap-page. (installer-program): Add #:dry-run? parameter. If #:true avoid writing to /proc, use dry-run-command, skip sync and reboot, and pass dry-run? to... (installer-steps): ...here. Add #:dry-run? parameter. Use it to disable skip network, substitutes, partitioning pages, and pass it to... compute-locale-step, compute-keymap-step, and final-page. Change-Id: I0ff4c3b0a0c69539af617c27ba37654beed44619
11 daysinstaller: Use `%' for parameter %run-command-in-installer.Janneke Nieuwenhuizen
* gnu/installer/utils.scm (run-command-in-installer): Rename to... (%run-command-in-installer): ...this. * gnu/installer.scm (installer-program): Update accordingly. * gnu/installer/parted.scm (remove-logical-devices, create-btrfs-file-system, create-ext4-file-system, create-fat16-file-system, create-fat32-file-system, create-jfs-file-system, create-ntfs-file-system, create-xfs-file-system, create-swap-partition, luks-format-and-open, luks-ensure-open, luks-close): Update accordingly. Change-Id: I96ebc59ebc85fd8ebccb0cc57130b4e7532d287f
11 daysinstaller: Fix file-name typos.Janneke Nieuwenhuizen
* gnu/installer/newt/page.scm (run-dump-page): Typo file-name. * gnu/installer/utils.scm (open-new-log-port): Likewise. Change-Id: I837991a0ee5054b3afa8328205e23ac6f9fbae8d
11 daysinstaller: Use "partitioning-page" consistently.Janneke Nieuwenhuizen
Having `partition-page' function call `RUN-partititionING-page' where all other proxy functions call `RUN-<name>' hurts my brain while refactoring. * gnu/installer/record.scm (<installer>)[partition-page]: Rename to... [partitioning-page]: ...this. * gnu/installer/newt.scm (partitioning-page, newt-installer): Update accordingly. * gnu/installer.scm (installer-steps): Update accordingly. Change-Id: I6b2f3459a3d0a7a89260224b7d8438676e3411ba
11 daysinstaller: Align comments.Janneke Nieuwenhuizen
* gnu/installer.scm (installer-program): Align comments. Change-Id: I50c173c46ea9bfdb3da0562146bc969d46f0edd9
11 daysinstaller: Remove unused (newt) imports.Janneke Nieuwenhuizen
* gnu/installer/newt/ethernet.scm, gnu/installer/newt/keymap.scm, gnu/installer/newt/locale.scm, gnu/installer/newt/parameters.scm, gnu/installer/newt/services.scm: Remove (newt). Change-Id: Ia6624aaf73491024da54b8ffee7358941b187fdf
11 daysmaint: Add installer dependencies to the manifest.Janneke Nieuwenhuizen
* manifest.scm: Add guile-newt, guile-parted, guile-webutils. Change-Id: Idcf46320d29c15f36da05f66e81b7779e37c1bf6
11 dayssystem: examples: Add devel-hurd.tmpl.Janneke Nieuwenhuizen
This operating system specification for the Hurd creates a system that supports building the guix package from git natively. Do something like ./pre-inst-env guix system build --target=i586-pc-gnu \ gnu/system/examples/devel-hurd.tmpl ./pre-inst-env guix system image --image-type=hurd-qcow2 --image-size=15G \ --no-offload gnu/system/examples/devel-hurd.tmpl cp /gnu/store/...disk-image devel.img guix shell qemu -- qemu-system-i386 -enable-kvm -m 4096 \ -device rtl8139,netdev=net0 \ -netdev user,id=net0,hostfwd=tcp:127.0.0.1:10022-:2222 \ -hda devel-hurd.img ssh -p 10022 root@localhost GUIX_PROFILE=/run/current-system/bootstrap-profile source $GUIX_PROFILE/etc/profile mkdir -p ~/src/guix cd src/guix git clone git://git.savannah.gnu.org/guix cd guix ./bootstrap ./configure --with-courage make * gnu/system/examples/devel-hurd.tmpl: New file. Change-Id: I097c7c00a9ab9602db7f8f3305827c815f308d1e
11 dayshurd-boot: Support second boot.Janneke Nieuwenhuizen
* gnu/build/hurd-boot.scm (boot-hurd-system): Check for stale shepherd socket and remove it. Be chattier about /hurd symlink replacement. Change-Id: I5e528c131ebeadb7ebc9727336a0f9301af3e68e
11 daysgnu: hurd: Support second boot.Janneke Nieuwenhuizen
This avoids hanging upon second boot and ensures a declarative /hurd and /dev. * gnu/packages/patches/hurd-startup.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/hurd.scm (hurd): Use it. [arguments]: In stage create-runsystem remove /dev/urandom. Change-Id: Ifcca5562c297204735c35132820a32ca0f273677
11 dayssystem: hurd: Add swap-services to hurd-default-essential-services.Janneke Nieuwenhuizen
* gnu/services/base.scm (swap-service-type): Do not include 'udev' requirement for the Hurd. Use system* with "swapon", "swapoff" for the Hurd. * gnu/system.scm (hurd-default-essential-services): Add swap-services. * gnu/services/base.scm (swap-service-type): Change-Id: I1d4d445c614921752dc84aa0dd6ff42cdbf62aa8
11 dayssystem: hurd: Remove qemu networking from %base-services/hurd.Janneke Nieuwenhuizen
This allows us to use %base-services/hurd for services in a Hurd config for a real machine without removing static-networking. * gnu/system/hurd.scm (%base-services/hurd): Factor networking out to... (%base-services+qemu-networking/hurd): ..this new variable. * gnu/system/examples/bare-hurd.tmpl (%hurd-os): Use it. * gnu/services/virtualization.scm (%hurd-vm-operating-system): Use it. * gnu/system/images/hurd.scm (hurd-barebones-os): Use it. Add comment about QEMU and networking for a real machine. Change-Id: I777a63410383b9bf8b5740e4513dbc1e9fb0fd41
11 daysbootloader: grub: Remove hardcoded partition number for the Hurd.Janneke Nieuwenhuizen
This supports using another than the default DISK0 PART1 and using LABEL or UUID as root file-system specifier. It still defaults to DISK0 PART1 if the file-system cannot be found, i.e., lives only at the build side: A virtual machine/childhurd build. * gnu/build/file-systems.scm (%hurd-device-spec-regexp, %device-spec-regexp): New variables. (device-name->hurd-device-name, hurd-device-name->device-name, device-spec->device, device-spec->device-name): Use them in new procedures. * gnu/bootloader/grub.scm (make-grub-configuration): Use them to remove hardcoded partition number (root-index 1). Change-Id: I49fa93dacc09883dfb4d695402c5eac2e0e17286
11 daysguix system: When installing the Hurd, create essential devices.Janneke Nieuwenhuizen
* guix/scripts/system.scm (install): When installing the Hurd, invoke `make-hurd-device-nodes'. Change-Id: If84d5fe0b5bf4a93452f0b5241650f325d583543
11 daysreconfigure: Use native bootloader package for running the installer.Janneke Nieuwenhuizen
This fixes running grub-install when using guix system init --target. * guix/scripts/system/reconfigure.scm (install-bootloader): Use native package when invoking install-bootloader-program. Change-Id: I48d80a8dff866ada3625d827dd3036fb966eee9a
11 daysgnu: linux-libre 6.11: Disable a debugging option in the kernel configs.Leo Famulari
Reported by dariqq: <https://issues.guix.gnu.org/74280>. This is a followup to commit 92910f5413fd9112c0502138eed5fff758c5de65. * gnu/packages/aux-files/linux-libre/6.11-i686.conf, gnu/packages/aux-files/linux-libre/6.11-x86_64.conf: Disable CONFIG_DRM_I915_REPLAY_GPU_HANGS_API. Change-Id: I345aba7b19d3e7c3e28fec2e6ed2d7bdbc2099c9
12 daysgnu: icedove: Update to 115.16.2.Jonathan Brielmaier
* gnu/packages/gnuzilla.scm (icedove): Update to 115.16.2. Change-Id: Ibe020ce42e5503980ef4120863dc1c6e4fb40eb7
12 daysgnu: ultrastar-deluxe: Update to 2024.10.0.Lars-Dominik Braun
* gnu/packages/games.scm (ultrastar-deluxe): Bump version. [inputs]: Use ffmpeg 6 and ttf output of font-google-noto. Change-Id: I105c352abd8296a73dde54fecdfc6de7692e712e
12 daysgnu: go-1.23: Update to 1.23.2.Brennan Vincent
* gnu/packages/golang.scm (go-1.23): Update to 1.23.2. Change-Id: I9687e3d14bcf78c267a54479b7d9073cb8b9a879 Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
12 daysgnu: go-1.22: Update to 1.22.7.Brennan Vincent
* gnu/packages/golang.scm (go-1.22): Update to 1.22.7. Change-Id: I67fbb1c630a08cfb29f2230a600bf3a24e2c8486 Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
12 daysbuild/go: fix-embed-files: Adjust procedure docstring.Sharlatan Hellseher
This is a follow up adjustment, proposed by Maxim Cournoyer <maxim.cournoyer@gmail.com> in <https://issues.guix.gnu.org/73299>. * guix/build/go-build-system.scm (fix-embed-files): Improve the grammar and style, and provide a URL to the raw source file for reference. Change-Id: I78824b92d70a2431f61d11e8737bca6a2ddea3fa
12 daysgnu: run: Update to 0.11.2.Sharlatan Hellseher
* gnu/packages/task-runners.scm (run): Update to 0.11.2. Adjust package style by shiftin order of fields. [arguments]: Do not install sources. [propagated-inputs]: Remove go-github-com-tekwizely-go-parsing. [native-inputs]: Add go-github-com-goreleaser-fileglob, go-github-com-subosito-gotenv, and go-github-com-tekwizely-go-parsing. Change-Id: I02e4384aee83a3000c159e9d74fe1e94505ce9a7
12 daysgnu: go-github-com-subosito-gotenv: Move to golang-xyz.Sharlatan Hellseher
* gnu/packages/golang.scm (go-github-com-subosito-gotenv): Move from here ... * gnu/packages/golang-xyz.scm: ... to here. Change-Id: Ic9733d34808da599536a34b33caad88707f8ebb7
12 daysgnu: go-github-com-subosito-gotenv: Update to 1.6.0.Sharlatan Hellseher
* gnu/packages/golang.scm (go-github-com-subosito-gotenv): Update to 1.6.0. [propagated-inputs]: Add go-golang-org-x-text. Change-Id: I6010bdacf80eaf6aa2cf869844b2327124318580