doc: Remove docs for non-existent virtio? parameter of raw-initrd. virtio? was removed in commit eac026e5c80caae88a6cef317a46007dca343578. * doc/guix.texi (Initial RAM Disk): Remove docs for virtio? in raw-initrd. Change-Id: I99aaf58f0c5239409511146c4617546a202f5041 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
services: dhcpcd: Add shepherd-provision field. * doc/guix.texi (Networking Setup)<dhcpcd-configuration>: Regenerate the dhcpcd-configuration documentation. * gnu/services/networking.scm (dhcpcd-configuration) <shepherd-provision>: Add new field. Fix typo in client-id description. (dhcpcd-shepherd-service): Use it. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
tests: Adjust ‘package-transitive-supported-systems’ test. This test broke with commit 8c9493cb311a994c2565f71fb6270a1b26d8a644. * tests/packages.scm ("package-transitive-supported-systems, implicit inputs"): Change ‘%current-system’ to “riscv64-linux”. Change-Id: Ia6d69f086cffea4144d2f032038b27ec91e904f3
services: fail2ban: Extend profile with fail2ban package. * gnu/services/security.scm (fail2ban-service-type): Register profile-service-type extension. Change-Id: Ia7d908ba68c82fb7b5f016d4d246112679c49415
gnu: fail2ban: Apply patch to fix sshd jail filter. Recent OpenSSH uses an 'sshd-session' instead of 'sshd' binary name. * gnu/packages/patches/fail2ban-fix-sshd-filter.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/admin.scm (fail2ban): Apply it. Change-Id: I1f46e6768f4e04e97a8fcec189de45c2f1c26e1e
packages: Add x86_64-gnu to %cuirass-supported-systems. * guix/packages.scm (%cuirass-supported-systems): Add x86_64-gnu. Change-Id: I5aa8bcc511d3e12364a35ce8dac35965e0d9709b Signed-off-by: Ludovic Courtès <ludo@gnu.org>
shell, inferior: Store GC roots under /var/guix/profiles. Fixes guix/guix#2410. Until now, ‘guix shell’ and ‘guix time-machine’ would store GC roots under ~/.cache/guix. However, this directory is unreadable to guix-daemon when it’s running without root privileges. This commit changes ‘guix shell’ and ‘guix time-machine’ so they store GC roots under /var/guix/profiles/per-user/$USER, in a world-readable directory. An added benefit is that, in cluster setups, user homes no longer need to be mounted on the head node for GC to work (assuming ‘guix build -r’ and similar are not used). * guix/inferior.scm (%inferior-cache-directory): Change default value to be under ‘%profile-directory’. (%legacy-inferior-cache-directory): New variable. (cached-channel-instance): Add ‘maybe-remove-expired-cache-entries’ call. * guix/scripts/environment.scm (launch-environment/container)[nesting-mappings]: Add /inferiors and /profiles sub-directories of ‘%profile-directory’. Call ‘mkdir-p’ for these two directories. * guix/scripts/shell.scm (%profile-cache-directory): Change default value to be under ‘%profile-directory’. (%legacy-cache-directory): New variable. (guix-shell): Add call to ‘maybe-remove-expired-cache-entries’. Change-Id: Ie7d6c16a55b35c7beb18078c967d6fc902bf68d0 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
etc: guix-install.sh: Accept riscv64 as supported architecture. Although the installer script will not find any officially released binary-tar-packages for riscv64 on the guix ftp mirrors until now we should at least support the installation of custom packed binary bundles for this platform. Changes to be committed: modified: etc/guix-install.sh Change-Id: I84c82388c7771d793b108b99e03d040bad9f1154 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
git: Create/update remote references locally when needed. This allows ‘update-cached-checkout’ to fetch symbolic references such as those created by the AGit workflow with Forgejo instances. * guix/git.scm (update-cached-checkout): Create/update remote references locally. Change-Id: Ice761d09eebc4f1275381a4eefbdd679d9b95127 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
inferior: Use channel-reference to get a Git reference. * guix/inferior.scm (channel-full-commit): Use channel-reference to get a Git reference. Change-Id: Ia07f8d202ba1df1497d2763d8d49d547c6955ca6 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
channels: Export channel-reference. * guix/channels.scm: Export channel-reference. Change-Id: I3da7b8d55c0ab563c1669c9e346bb3bd34e7f1db Signed-off-by: Ludovic Courtès <ludo@gnu.org>
daemon: Restore post-canonicalization permissions after moving. At this point the value of 'st.st_mode' is from before canonicalization, so restoring to that will undo the permissions aspect of the canonicalization for a top-level directory store item. Fixes #1104, introduced in ae18b3d9e6 (ae18b3d9e6bd0c184505a094851448d08555e23e).">https://codeberg.org/guix/guix/commit/ae18b3d9e6bd0c184505a094851448d08555e23e). * nix/libstore/build.cc (DerivationGoal::registerOutputs): update 'st' with post-canonicalization permissions before making actualPath temporarily-writable. * tests/store.scm ("build outputs aren't writable"): new test. Change-Id: I5e5eaa79fa6b7f81e1d12fd285883c762a22ce5a Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: libicns: Add missing gexp. The #~ annotation was removed in 24701a21e812acdbb9cad67d0af390528b572bdc. * gnu/packages/image.scm (libicns)[arguments]: Add missing gexp. Change-Id: I57a985a0d295f0b72bc9d6c0c0df79da1d8b1053
gnu: hashcat: update to 7.1.2. * gnu/packages/password-utils (hashcat): Update to 7.1.2. Signed-off-by: Andreas Enge <andreas@enge.fr>
gnu: hashcat: Remove nonfree unrar bundled dependency. Fixes: guix/guix#2784. * gnu/packages/password-utils.scm (hashcat)[source]: Remove "deps/unrar" from compiled directories. [arguments]<#:make-flags>: Add "ENABLE_UNRAR=0". Signed-off-by: Andreas Enge <andreas@enge.fr>
gnu: opusfile: Fix CVE-2022-47021 [security-fix]. * gnu/packages/patches/opusfile-CVE-2022-47021.patch: New patch. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/xiph.scm (opusfile): Apply it. Change-Id: I32ce75de721778165da3627df34cad99e6d79630 Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>
gnu: Add ieee-p1076. * gnu/packages/electronics.scm (ieee-p1076): New variable. Change-Id: I45f4ef920f1d5768249cb542874ed012be77a13c Signed-off-by: Gabriel Wicki <gabriel@erlikon.ch>
gnu: kvmfr-linux-module: Update to B7. * gnu/packages/video.scm (kvmfr-linux-module)[version]: Update to B7. [source]: Remove patch. * gnu/packages/patches/kvmfr-linux-module-fix-build.patch: Remove file. * gnu/local.mk (dist_patch_DATA): Unregister file. Change-Id: I5cb6dadd6640a34d0f667079e272a97d7abae0aa
gnu: obs-looking-glass: Update to B7. * gnu/packages/video.scm (obs-looking-glass): Update to B7. Change-Id: I3dac87411adb90feb34544d73aaba8dbcccce8e7
gnu: looking-glass-client: Update to B7. * gnu/packages/virtualization.scm (looking-glass-client): Update to B7. Change-Id: If1e3663b38f2ea46ef53a47a91b762bf214b63c0