services: Remove unnecessary references to (gnu build shepherd).

* gnu/services/databases.scm (memcached-shepherd-service): Remove
‘with-imported-modules’ form and ‘modules’ field.
* gnu/services/security-token.scm (pcscd-shepherd-service): Remove
‘with-imported-modules’ form.
* gnu/services/web.scm (hpcguix-web-shepherd-service): Likewise.

Change-Id: Ieb817508f1751e0c1ff551a0e078789a4a813c1c

services: jami: Use ‘least-authority-wrapper’.

* gnu/services/telephony.scm (jami-configuration->command-line-arguments)
[wrapper]: New procedure.
Use it.
(jami-shepherd-services): In ‘start’ method of ‘jami’ service, use
‘fork+exec-command’ instead of ‘make-forkexec-constructor/container’.
Remove use of (gnu build shepherd).

Change-Id: Ic71c0c88477d92bf137d9d0a5832bae8721cc210

services: jami-dbus-session: Use ‘least-authority-wrapper’.

* gnu/services/telephony.scm (jami-shepherd-services): Use
‘least-authority-wrapper’ for ‘dbus-daemon’.  Use ‘fork+exec-command’
instead of ‘make-forkexec-constructor/container’ in the ‘start’ method’.
Remove reference to (gnu build shepherd).

Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Change-Id: I9d9f8de6ecea77950000ff64aa8c8d097dc028a0

tests: jami: Double timeouts.

* gnu/tests/telephony.scm (run-jami-test): Pass #:timeout to
‘wait-for-service’.  Double number passed to ‘with-retries’.

Change-Id: Ib3c81a770c2d52b2eb40e4f28abc8e33f5c71fc8

tests: jami: Check status of Jami D-Bus session.

* gnu/tests/telephony.scm (run-jami-test)["dbus session is up"]: New
test.

Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Change-Id: Ifa9b57c732f3c64e1ec6bf3028b69a57cee56320

least-authority: Add support for changing UIDs/GIDs before exec.

Fixes <https://issues.guix.gnu.org/67175>.

* guix/least-authority.scm (least-authority-wrapper): Add #:user
and #:group.
[code]: Add calls to ‘setgid’ and ‘setuid’ when appropriate.

Change-Id: I2aad8e5686b42b5c92fc306b114c5c60cb8bc551

services: bitlbee: Remove use of ‘make-forkexec-constructor/container’.

This will only affect systems running Shepherd < 0.9.0, which was
released in August 2022.

* gnu/services/messaging.scm (bitlbee-shepherd-service): Remove
‘with-imported-modules’ and ‘modules’ field.  Use
‘make-forkexec-constructor’ instead of
‘make-forkexec-constructor/container’ when ‘make-inetd-constructor’ is
missing.

Change-Id: I35a0487bccaee4799ad0d81388d540e5c7891f7e

services: pagekite: Add ‘configuration’ action.

* gnu/services/networking.scm (pagekite-shepherd-service): Add ‘actions’
field.

Change-Id: I04daa846d505b0700b574a82472ecd99b492d7c4

services: pagekite: Use ‘least-authority-wrapper’.

* gnu/services/networking.scm (pagekite-shepherd-service): Define
‘config-file’ and ‘mappings’; define ‘pagekite’ in terms of
‘least-authority-wrapper’.  Remove now-unneeded ‘with-imported-modules’
form and ‘modules’ field.  Use ‘make-forkexec-constructor’ instead of
‘make-forkexec-constructor/container’.

Change-Id: I7c6c6266785f6a0f81a69d85f070779a0d6edd91

gexp: #:references-graphs accepts and honors <gexp-input> records.

* guix/gexp.scm (lower-reference-graphs)[tuple->gexp-input]: Add
‘gexp-input?’ case.
(gexp->derivation): Update docstring.
* doc/guix.texi (G-Expressions): Adjust accordingly.
* tests/gexp.scm ("references-file, non-default output"): New test.

Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Change-Id: I595cb75da0867ab8ab44552887dc06ed1d23315e

gexp: Add compiler for <gexp-input>.

* guix/gexp.scm (gexp-input-compiler): New procedure.
* tests/gexp.scm ("gexp references non-existent output")
("gexp-input, as first-class input"): New tests.
* doc/guix.texi (G-Expressions): Document it.

Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Change-Id: I95b58d6e4d77a54364026b4324fbb00125a9402e

teams: mozilla: Add icecat-extension.scm and browser-extensions.scm.

* etc/teams.scm (mozilla): Add "gnu/build/icecat-extension.scm" and
"gnu/packages/browser-extensions.scm".

Change-Id: Id59fb307256e5870b3c19f0b7c41446775a57d9e

gnu: openssh: Update to 9.6p1 [security-fixes].

Fixes CVE-2023-48795.

* gnu/packages/ssh.scm (openssh): Update to 9.6p1.
[arguments]<#:parallel-tests?>: Disable.

Change-Id: I8b7707894d904ec8bcccb943908fff2e69a1a027
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>

gnu: libssh: Update to 0.10.6 [security-fixes].

Fixes CVE-2023-6004, CVE-2023-48795, and CVE-2023-6918.

* gnu/packages/ssh.scm (libssh): Update to 0.10.6.

Change-Id: Ie9d304d78b2629f41af9836e5c7eab5df6f26bb5
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>

gnu: Syncthing: Update to 1.27.1.

* gnu/packages/syncthing.scm (syncthing): Update to 1.27.1.

Signed-off-by: Leo Famulari <leo@famulari.name>
Change-Id: Ib95828dee7b2b8b5f852a47026f3bbff69361329

teams: Add entry for Clément Lassieur.

* etc/teams.scm ("Clément Lassieur"): New member.

Change-Id: If6456d9496f59b0a26608ad5e55aa8fdfb8af492

gnu: Add r-ncmisc.

* gnu/packages/cran.scm (r-ncmisc): New variable.

Change-Id: I54bbaf23244767bdb7cce9f31e604ba6998448a4
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>

gnu: i2pd: Update to 2.50.0.

* gnu/packages/i2p.scm (i2pd): Update to 2.50.0.
[native-inputs]: Add pkg-config, check.
[arguments]: Use G-Expressions.
<#:configure-flags>: Drop obsolete and defaulted flags. Enable testing with
cmake.
<#:phases>: Drop obsolete 'check replacement.

Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>
Change-Id: If276d475587fa9431fbb9b55b051e71a2f5d39e3

gnu: bitcoin-core: Update to 26.0.

* gnu/packages/finance.scm (bitcoin-core): Update to 26.0.

Signed-off-by: Guillaume Le Vaillant <glv@posteo.net>
Change-Id: Ied4b14221f862e05f37fc0516392d1b474bc6d19

gnu: Add obs-pipewire-audio-capture.

* gnu/packages/video.scm (obs-pipewire-audio-capture): New variable.

Change-Id: I6f8e400a8ec81b84c65d948b6c30d41d74bd5dca