Commit graph

133417 commits

Author SHA1 Message Date
Adriel Dumas--Jondeau bcc5ba6358
gnu: Add kalamine.
* gnu/packages/python-xyz.scm (kalamine): New variable.

Change-Id: If13f258440bb35973b3d79a87fea68e4708845bf
Reviewed-by: Sharlatan Hellseher <sharlatanus@gmail.com>
Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
2024-03-13 09:58:17 +01:00
Nicolas Graves 35e4561843
gnu: emacs-sway: Update to 0.7-0.84eae5e.
* gnu/packages/emacs-xyz.scm (emacs-sway): Update to 0.7-0.84eae5e.

Change-Id: I37549f7e66d9fa1df455af3bc972e49cb79d50ef
Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
2024-03-13 09:49:38 +01:00
Cayetano Santos 8bd8484e6d
gnu: emacs-org-pandoc-import: Update to 1.0-0.db308f1.
* gnu/packages/emacs-xyz.scm (emacs-org-pandoc-import): Update to 1.0-0.db308f1.

Last stable 1.0 version dates back from 3 years ago.

Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
Change-Id: Ic0da2b7956695f75274aab14a13dbfca919a4999
2024-03-13 09:47:27 +01:00
Cayetano Santos f0d5d50c2c
gnu: emacs-crux: Update to 0.5.0.
* gnu/packages/emacs-xyz.scm (emacs-crux): Update to 0.5.0.

Signed-off-by: Nicolas Goaziou <mail@nicolasgoaziou.fr>
Change-Id: I539c77ff756b692f9f0b0b4c62f18db373a05f16
2024-03-13 09:46:14 +01:00
Nicolas Goaziou 8529e7358a
gnu: asymptote: Update to 2.87.
* gnu/packages/plotutils.scm (asymptote): Update to 2.87.

Change-Id: I25d91094e56b9e6b9d1a7313d6697f82ab1c2785
2024-03-13 09:42:55 +01:00
Nicolas Goaziou dfe177bd43
gnu: xournalpp: Update to 1.2.3.
* gnu/packages/pdf.scm (xournalpp): Update to 1.2.3.

Change-Id: If7ec00c3bcdb208132d595c152c3099258f738f4
2024-03-13 09:42:29 +01:00
Maxim Cournoyer 43d6d5e646
gnu: libextractor: Enable tidy-html support.
* gnu/packages/gnunet.scm (libextractor)
[source]: Apply patch.
[phases] <force-reconfigure>: New phase.
[inputs]: Add tidy-html.  Remove associated comment.
* gnu/packages/patches/libextractor-tidy-support.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.

Change-Id: Ic812e09504d522ec87410bbbb03ccd3d6e48dd71
2024-03-13 00:38:11 -04:00
Maxim Cournoyer e1e3536ece
gnu: libextractor: Enable RPM support.
* gnu/packages/gnunet.scm (libextractor)
[inputs]: Add rpm.

Change-Id: I618330e038d4793bc61cf62320dc33fa16ab9c7f
2024-03-13 00:38:11 -04:00
Maxim Cournoyer 28012e9fe1
gnu: libextractor: Enable apparmor support.
* gnu/packages/gnunet.scm (libextractor)
[inputs]: Add libapparmor.

Change-Id: I6ec8b7fce5db0179f2b65d9a4509ab9bcecb12ef
2024-03-13 00:38:11 -04:00
Maxim Cournoyer 0d44ac48bb
gnu: libextractor: Add autotools inputs.
These are needed when building from git.

* gnu/packages/gnunet.scm (libextractor)
[native-inputs]: Add autoconf-2.71, automake, gettext-minimal, libtool and
texinfo.

Change-Id: Ia35932b56c74354fc7cffc104e4ae5efa9ad8c85
2024-03-13 00:38:11 -04:00
Maxim Cournoyer dc24ee62ee
gnu: libextractor: Modernize.
* gnu/packages/gnunet.scm (libextractor): Move inputs, native-inputs after
arguments.
[arguments]: Use gexps.  Remove trailing #t.
[inputs]: Remove labels and sort.

Change-Id: Ia3950630bd0985e106fb92cce3f92732e93970df
2024-03-13 00:38:10 -04:00
Maxim Cournoyer a2bf7bda4c
gnu: libextractor: Update to 1.13.
* gnu/packages/gnunet.scm (libextractor): Update to 1.13.
[inputs]: Remove ffmpeg-4, no longer supported.
Replace gtk+ with gdk-pixbuf.
[argumens]: Reinstate parallel tests.  Remove fix-exiv2-tests phase.

Change-Id: Ic299c31a2d40512116c9876e0fbb4f9ded0ccc3b
2024-03-13 00:38:10 -04:00
Efraim Flashner 447e9c9625
gnu: ruby-stackprof: Update to 0.2.26.
* gnu/packages/ruby.scm (ruby-stackprof): Update to 0.2.26.

Change-Id: I6f15da677e630708c702eb00e83c960de8e3d639
2024-03-12 15:33:52 +02:00
Efraim Flashner d7e092719a
gnu: ruby-stackprof: Skip test known to fail.
* gnu/packages/ruby.scm (ruby-stackprof)[arguments]: Skip another test
which is known to fail.

Change-Id: Ie261864cc19eba881377b88c07b6402c60a22423
2024-03-12 15:33:50 +02:00
Ludovic Courtès 30a8de0bcd
gnu: guix: Update to 4c94b9e.
* gnu/packages/package-management.scm (guix): Update to 4c94b9e.

Change-Id: I73678ae87acbc2ef0185daf844486f7394a46fd7
2024-03-12 14:27:01 +01:00
Ludovic Courtès 4c94b9e983
news: Update commit for fixed-output derivation vulnerability.
* etc/news.scm: Update.

Change-Id: Ia34408882f8928a0fd05acc12d4edc66b3dcb3b7
2024-03-12 14:24:18 +01:00
Ludovic Courtès ff1251de0b
daemon: Address shortcoming in previous security fix for CVE-2024-27297.
This is a followup to 8f4ffb3fae.

Commit 8f4ffb3fae fell short in two
ways: (1) it didn’t have any effet for fixed-output derivations
performed in a chroot, which is the case for all of them except those
using “builtin:download” and “builtin:git-download”, and (2) it did not
preserve ownership when copying, leading to “suspicious ownership or
permission […] rejecting this build output” errors.

* nix/libstore/build.cc (DerivationGoal::buildDone): Account for
‘chrootRootDir’ when copying ‘drv.outputs’.
* nix/libutil/util.cc (copyFileRecursively): Add ‘fchown’ and ‘fchownat’
calls to preserve file ownership; this is necessary for chrooted
fixed-output derivation builds.
* nix/libutil/util.hh: Update comment.

Change-Id: Ib59f040e98fed59d1af81d724b874b592cbef156
2024-03-12 14:07:28 +01:00
Zheng Junjie fc1762fe38
gnu: ruby-x25519: Fix build on non x86_64.
* gnu/packages/patches/ruby-x25519-automatic-fallback-non-x86_64.patch:
New patch.
* gnu/packages/ruby.scm (ruby-x25519)[source]: Use it.
* gnu/local.mk (dist_patch_DATA): Register it.

Change-Id: If9c3b8dd8d818094f4cc5392bd5717f1430c369a
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2024-03-12 13:50:33 +02:00
Giacomo Leidi a42ce77f1b
gnu: ssh-to-age: Update to 1.1.7.
* gnu/packages/password-utils.scm (ssh-to-age): Update to 1.1.7.
[synopsis]: Remove period at the end of the sentence.

Change-Id: Ide1bab2490b52459c31191d578619f9ea1edcbaf
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2024-03-12 13:48:32 +02:00
Lars Bilke f7e6a84e98
gnu: hypre: Honor the #:tests? flag.
* gnu/packages/maths.scm (hypre)[arguments]: Adjust 'check phase to
honor the #:tests? flag.

Change-Id: I475fabd7d9f73ed320b97a4767830d82190c2b15
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2024-03-12 13:48:32 +02:00
Lars Bilke 6cff29fb6e
gnu: petsc: Add tunable property.
Tested with some real-world simulations on multpiple HPC systems.

* gnu/packages/maths.scm (petsc)[properties]: Add tunable? flag.

Change-Id: I81588d0556c4176f29d7ab760322cd7aec271f12
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2024-03-12 13:48:32 +02:00
Efraim Flashner ac74586ff3
gnu: syncthing: Mark as tunable.
* gnu/packages/syncthing.scm (syncthing)[properties]: Mark package as
tunable.

Change-Id: Ia885bbd32f043e83b231359cca438ea9caf4e8dc
2024-03-12 13:48:32 +02:00
Efraim Flashner 62d8b14e32
gnu: rust-bindgen-cli: Add shell completions.
* gnu/packages/rust-apps.scm (rust-bindgen-cli)[arguments]: Add a phase
to install shell completions.

Change-Id: Ia476d02a7c2d75518da2624b09b7091fafb70d8d
2024-03-12 13:48:32 +02:00
aurtzy 4ef63d7ed0
gnu: Add rust-bindgen-cli-0.69.
* gnu/packages/rust-apps.scm (rust-bindgen-cli): New variable.
(rust-bindgen): Remove this package.

Change-Id: I0841f34d73acf4e161c9f0ba0c6543d7f0d03092
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
2024-03-12 13:48:28 +02:00
宋文武 a52701a4d3
gnu: cagebreak: Update to 2.3.1.
* gnu/packages/wm.scm (cagebreak): Update to 2.3.1.
[inputs]: Replace wlroots-0.16 with wlroots.

Change-Id: I1e14c45790aa633c200f604243bcd61b269bc231
2024-03-12 18:10:36 +08:00
宋文武 2a739c4d21
gnu: manaplus: Update to 2.1.3.17.
* gnu/packages/games.scm (manaplus): Update to 2.1.3.17.
[arguments]: Pass "--with-sdl2" as configure-flags.
[inputs]: Replace sdl-union with sdl2, sdl2-image, sdl2-mixer, sdl2-net and
sdl2-ttf.

Change-Id: I223150d559bce21e055b44262c7c97b3ccfa8dc2
2024-03-12 18:09:26 +08:00
宋文武 91efdc55f6
gnu: ltris: Update to 1.3.
* gnu/packages/games.scm (ltris): Update to 1.3.

Change-Id: I52e61633449100d945f52160c689d5a9d27da66a
2024-03-12 18:08:57 +08:00
宋文武 e0ada527e5
gnu: xfce: Add xfwm4-themes.
* gnu/packages/xfce.scm (xfce)[inputs]: Add xfwm4-themes.

Change-Id: If68db115691bdb0dc324ca502f1853d51e9d52b8
2024-03-12 18:02:07 +08:00
宋文武 671acb67ab
gnu: Add xfwm4-themes.
* gnu/packages/xfce.scm (xfwm4-themes): New package.

Change-Id: I01f7c7e095234c408c40cf344f6332753289d55f
2024-03-12 18:02:07 +08:00
宋文武 ff055e80e4
gnu: xfce4-dev-tools: Update to 4.18.1.
* gnu/packages/xfce.scm (xfce4-dev-tools): Update to 4.18.1.

Change-Id: I4e5b30d2dc70ba50b560d777a8b10ecb421dcbd9
2024-03-12 18:02:07 +08:00
宋文武 0888676854
gnu: xfce4-power-manager: Update to 4.18.3.
* gnu/packages/xfce.scm (xfce4-power-manager): Update to 4.18.3.

Change-Id: I64cb289730b4fea2af5e3cbffef5500e1bfe1382
2024-03-12 18:02:07 +08:00
宋文武 30e6d0a192
gnu: xfce4-terminal: Update to 1.1.3.
* gnu/packages/xfce.scm (xfce4-terminal): Update to 1.1.3.

Change-Id: Ic6589ee48f8e406f4d6b7b12ead165119b904e7f
2024-03-12 18:02:07 +08:00
宋文武 ad5faf2775
gnu: thunar: Update to 4.18.10.
* gnu/packages/xfce.scm (thunar): Update to 4.18.10.

Change-Id: I170cfa24d0086d6c1d2707d4c5693f28678adf3e
2024-03-12 18:02:07 +08:00
宋文武 80679b5c05
gnu: xfce4-settings: Update to 4.18.4.
* gnu/packages/xfce.scm (xfce4-settings): Update to 4.18.4.

Change-Id: If945317a90a0e0325bac352024c98920b8c6c86c
2024-03-12 18:02:07 +08:00
宋文武 b6701d3a84
gnu: xfce4-appfinder: Update to 4.18.1.
* gnu/packages/xfce.scm (xfce4-appfinder): Update to 4.18.1.

Change-Id: Ice902179d6991d9e887aeb2d9dfe144530c5dcf7
2024-03-12 18:02:07 +08:00
宋文武 43fb294937
gnu: xfce4-panel: Update to 4.18.6.
* gnu/packages/xfce.scm (xfce4-panel): Update to 4.18.6.

Change-Id: I29a0372692fc9896cdfa083e07c0e4a0255108c5
2024-03-12 18:02:07 +08:00
宋文武 359cef96d3
gnu: tumbler: Update to 4.18.2.
* gnu/packages/xfce.scm (tumbler): Update to 4.18.2.

Change-Id: I99c65a09b5fe4b02e4d678f64721a713cde09b87
2024-03-12 18:02:07 +08:00
宋文武 64794c145a
gnu: garcon: Update to 4.18.2.
* gnu/packages/xfce.scm (garcon): Update to 4.18.2.

Change-Id: I45cfb8bca3556849cc08c00053696b077553f4f6
2024-03-12 18:02:07 +08:00
宋文武 351303a944
gnu: xfconf: Update to 4.18.3.
* gnu/packages/xfce.scm (xfconf): Update to 4.18.3.

Change-Id: I938fa3a1d8770c62a1456a814144b24ed1b4a025
2024-03-12 18:02:07 +08:00
Florian Pelz 0547fe862c
news: Add 'de' translation.
* etc/news.scm: Add German translation.

Change-Id: Ia2a11f71cdee5ccbf2a7fbe176e713418771599e
2024-03-12 10:26:17 +01:00
Ludovic Courtès 7fa8bf8520
news: Give upgrade instructions for foreign distros.
* etc/news.scm: Update entry.

Change-Id: Ia7c326bc97042d92a8d499ee27dd41d15f1f0d29
2024-03-12 09:52:50 +01:00
Efraim Flashner 7f1145d11a
gnu: icedove-minimal: Build with newest rust-cbindgen.
* gnu/packages/gnuzilla.scm (icedove-minimal)[inputs]: Replace
rust-cbindgen-0.23 with rust-cbindgen.

Change-Id: I7e8f1edca86a5faf5a148e34a1ff20b85f16e039
2024-03-12 08:36:29 +02:00
Efraim Flashner bacc391eba
gnu: icecat: Build with latest rust-cbindgen.
* gnu/packages/gnuzilla.scm (icecat-minimal)[inputs]: Replace
rust-cbindgen-0.24 with rust-cbindgen.

Change-Id: I147c6facf297f19f24c12b908a8a43793fa6c153
2024-03-12 08:36:29 +02:00
Efraim Flashner 79163d2c3c
gnu: tor-browser: Build with newest rust-cbindgen.
* gnu/packages/tor-browsers.scm (make-torbrowser)[inputs]: Replace
rust-cbindgen-0.24 with rust-cbindgen.

Change-Id: I6263a11342cb506c6c271e0360b7273c35be585d
2024-03-12 08:36:26 +02:00
Ludovic Courtès 4003c60abf
news: Add entry for the daemon fixed-output derivation vulnerability.
* etc/news.scm: Add entry.

Change-Id: Ib3f9c22eda1e8b9075620ec01b4edf2f24cfcf93
2024-03-11 23:14:37 +01:00
Ludovic Courtès b8954a7fae
gnu: guix: Update to 8f4ffb3.
* gnu/packages/package-management.scm (guix): Update to 8f4ffb3.

Change-Id: I4574442c529f49881df03501d000e2da68618417
2024-03-11 23:14:37 +01:00
Vagrant Cascadian 5f100c68a4
etc: systemd services: switch to "journal" for output and error logging.
The "syslog" method has been deprecated for years, and issues a warning:

  Standard output type syslog is obsolete, automatically updating to
  journal. Please update your unit file, and consider removing the setting
  altogether.

Fixes: #48323

* etc/guix-daemon.service.in (StandardOutput): Use "journal"
(StandardError): Likewise.
* etc/guix-publish.service.in (StandardOutput): Likewise.
(StandardError): Likewise.
2024-03-11 14:34:25 -07:00
Ludovic Courtès 8f4ffb3fae
daemon: Protect against FD escape when building fixed-output derivations (CVE-2024-27297).
This fixes a security issue (CVE-2024-27297) whereby a fixed-output
derivation build process could open a writable file descriptor to its
output, send it to some outside process for instance over an abstract
AF_UNIX socket, which would then allow said process to modify the file
in the store after it has been marked as “valid”.

Vulnerability discovered by puck <https://github.com/puckipedia>.

Nix security advisory:
https://github.com/NixOS/nix/security/advisories/GHSA-2ffj-w4mj-pg37

Nix fix:
244f3eee0b

* nix/libutil/util.cc (readDirectory): Add variants that take a DIR* and
a file descriptor.  Rewrite the ‘Path’ variant accordingly.
(copyFile, copyFileRecursively): New functions.
* nix/libutil/util.hh (copyFileRecursively): New declaration.
* nix/libstore/build.cc (DerivationGoal::buildDone): When ‘fixedOutput’
is true, call ‘copyFileRecursively’ followed by ‘rename’ on each output.

Change-Id: I7952d41093eed26e123e38c14a4c1424be1ce1c4

Reported-by: Picnoir <picnoir@alternativebit.fr>, Théophane Hufschmitt <theophane.hufschmitt@tweag.io>
Change-Id: Idb5f2757f35af86b032a9851cecb19b70227bd88
2024-03-11 22:12:34 +01:00
Ludovic Courtès a26bce55e6
time-machine: Allow time travels to v0.16.0.
* guix/scripts/time-machine.scm (%oldest-possible-commit): Change to
v0.16.0.
* tests/guix-time-machine.sh: Adjust comment.

Change-Id: I9ad82bd45fee0d172b5348a8ae16e990338a3a97
2024-03-11 22:12:34 +01:00
Leo Famulari 001dfb8957
gnu: Update the default linux-libre package to the 6.7 series.
* gnu/packages/linux.scm (linux-libre-version, linux-libre-gnu-revision,
linux-libre-pristine-source, linux-libre-source, linux-libre): Use
linux-libre-6.7.

Change-Id: I889a36129417363328d7509446dcedb31f816569
2024-03-11 11:20:43 -04:00