gnu: flann: Build with python@3.

* gnu/packages/maths.scm (flann)[inputs]: Replace python-2 by python.

Change-Id: Ia0e2ae8ca6a1198aed0c9f652f3737f2dbadca1c

gnu: gnubg: Update to 1.08.003.

* gnu/packages/games.scm (gnubg): Update to 1.08.003.
[native-inputs]: Add flex. Replace python-2 by python. Remove libxcrypt.

Change-Id: I1093f481ad664b4183b09c238d220fd36009ca4d

gnu: libicns: Fix build with gcc-14.

* gnu/packages/image.scm (libicns)[arguments]<#:configure-flags>:
New field, relaxing errors to warnings.

Change-Id: Ie609d4acd2714f91a3675f7c60b3d13d86c39f49
Signed-off-by: Andreas Enge <andreas@enge.fr>

gnu: Add guile-bewaking.

* gnu/packages/guile-xyz.scm (guile-bewaking): New variable.

Change-Id: I6e569e9a85833f3eadc7825e2d1b99a67cfd6067
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

services: nix: Point Nix to bin/bash.

The nix-service-type will create the nix.conf file pointing to
`bin/sh' file in the bash-minimal package, however this is a symbolic
link to `bin/bash' in that same package, so when the sandbox gets
created there will be a symlink in the Nix sandbox like this:

  drwxr-xr-x  2 nobody nogroup 4096 Sep 18 13:10 .
  drwxr-x--- 10 nobody nixbld  4096 Sep 18 13:10 ..
  lrwxrwxrwx  1 nobody nogroup    4 Jan  1  1970 sh -> bash

Making builds that depend on /bin/sh fail since /bin/bash does not
exist in the sandbox.

* gnu/services/nix.scm (nix-service-etc): Change ‘build-sandbox-paths’ to
point to ‘bin/bash’.

Change-Id: I9138e9b772b8468382cfde6d133f0758837d03ff
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

doc: Fix documentation of ‘vfs-mapping’.

* doc/guix.texi (VFS Mapping Service): Fix source/destination mixup.

Change-Id: I10bd066369a6507e69a40155dc3faa23cf40c1e6
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: Add guile-usbrelay.

* gnu/packages/hardware.scm (guile-usbrelay): New variable.

Change-Id: I4b9dac27217fc365b0a98950cdf8368407de6321
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

file-systems: Fix article usage in docstrings.

* gnu/build/file-systems.scm (linux-swap-superblock?)
(read-linux-swap-superblock, bcachefs-superblock?): Use "a" instead of
"an" before consonant sounds.

Change-Id: Ifb36a125733ff898ecbef0a0a546819130707fba
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

file-systems: Add support for hibernation swap detection.

* gnu/build/file-systems.scm (%linux-swsuspend-magic): New variable.
(linux-swsuspend-superblock?, read-linux-swsuspend-superblock): New
procedures.
(%partition-label-readers, %partition-uuid-readers): Add readers for
linux-swsuspend superblocks.

Change-Id: If77ca9b4ae1f72c4e9ce52149b10d331566b0030
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: audiofile: Update to 0.3.6 [security-fix].

* gnu/packages/audio.scm (audiofile): Update to 0.3.6.

Change-Id: I2dda621f60c27e02b1513e2d89a138136a1633ca
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

system: bare-bones: Remove Cuirass service.

This reverts changes from d72eef9c918144bd892522722be71321d4a5ad97 that
were inadvertently committed.

* gnu/system/examples/bare-bones.tmpl: Remove Cuirass.

Change-Id: I29253dce841479bbddef00756a0f6bd57694dfae

Revert "publish: Prevent publication of non-substitutable derivation outputs."

Fixes guix/guix#2450.

This reverts commit b5745a327e8dae21caaf10b59256dc7b16d54588, which introduced
discrepancies in how substitutes are served; in particular, narinfos of
non-substitutable items would still be served, and likewise for narinfos and
nars of dependents of non-substitutable items.

services: secret-service: Add missing import for ‘reboot’.

* gnu/services/virtualization.scm (secret-service-shepherd-services): In
‘modules’, add (shepherd system).

Change-Id: I23201f0ee3ce102f0d48d4f5ea24ddbfc06c247f

services: secret-service: Add #:timeout to ‘secret-service-receive-secrets’.

* gnu/build/secret-service.scm (secret-service-receive-secrets):
Add #:timeout parameter and honor it.

Change-Id: I4b6720444a28e1424ede07b6c329cd355b27b5e3

services: secret-service: Fiberize ‘secret-service-receive-secrets’.

* gnu/build/secret-service.scm (secret-service-receive-secrets)
[wait-for-client]: Pass ‘SOCK_NONBLOCK’ to ‘socket’.  Use
‘wait-for-readable-fd’ instead of ‘select’.  Pass flags to ‘accept’.

Change-Id: I1d5ff8e286942838af5b77fbb4068689a0529ed1

services: secret-service: Remove redundant ‘dump’ procedure.

* gnu/build/secret-service.scm (secret-service-receive-secrets)[dump]: Remove.
Use ‘dump-port’ from (guix build utils) instead.

Change-Id: I5a098a6f4f6629cf275862e9f10c9a2718bb27a1

services: secret-service: Fiberize ‘secret-service-send-secrets’.

The previous code was tentatively written to run either in a Fibers context or
in a non-Fibers context.  Drop the non-Fibers code since this always runs
within ‘shepherd’, which is fiberized.

* gnu/build/secret-service.scm (with-modules): Remove.
(wait-for-readable-fd): Rewrite using regular Fibers operations.
(secret-service-send-secrets): Use ‘SOCK_NONBLOCK’.  Simplify ‘sleep’ binding.

Change-Id: Ic05d0bc54e6d2df89b6602bc716402067c845792

gnu: esound: Fix build.

* gnu/packages/patches/esound-c99.patch: New patch.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/gstreamer.scm (esound): Apply it.

Change-Id: I6aa9ccda6e9948961b6e0011ebd813f43de1b18d

gnu: python-vunit: Unbundle dependencies.

* gnu/packages/electronics.scm (python-vunit)[source]: Unset
[arguments]: Add dosymlink #:phase.
[inputs]: Add json-for-vhdl-for-vunit and osvvm-2023.04.

Change-Id: I17af0acf0b4be171b908db50ec9908334aad8a8a
Signed-off-by: Maxim Cournoyer <maxim@guixotic.coop>

gnu: Add json-for-vhdl-for-vunit.

* gnu/packages/electronics.scm (json-for-vhdl-for-vunit): New variable.

Change-Id: I7502ab75847560dd94564ca641fdc049f64a9ed2
Signed-off-by: Maxim Cournoyer <maxim@guixotic.coop>