~ruther/guix-local

40f69b58 — Ludovic Courtès 1 year, 8 months ago 
daemon: Remount root directory as read-only.

* nix/libstore/build.cc (DerivationGoal::runChild): Bind-mount the store
and /tmp under ‘chrootRootDir’ to themselves as read-write.
Remount / as read-only.

Change-Id: I79565094c8ec8448401897c720aad75304fd1948
93474f92 — Ludovic Courtès 1 year, 9 months ago 
daemon: Remount inputs as read-only.

* nix/libstore/build.cc (DerivationGoal::runChild): Remount ‘target’ as
read-only.

Reported-by: Reepca Russelstein <reepca@russelstein.xyz>
Change-Id: Ib7201bcf4363be566f205d23d17fe2f55d3ad666
550ca897 — Ludovic Courtès 1 year, 8 months ago 
daemon: Bind-mount all the inputs, not just directories.

* nix/libstore/build.cc (DerivationGoal::startBuilder): Add all of
‘inputPaths’ to ‘dirsInChroot’ instead of hard-linking regular files.
Special-case symlinks.
(DerivationGoal)[regularInputPaths]: Remove.

Reported-by: Reepca Russelstein <reepca@russelstein.xyz>
Change-Id: I070987f92d73f187f7826a975bee9ee309d67f56
5c0b93b2 — Ludovic Courtès 1 year, 8 months ago 
daemon: Bind-mount /etc/nsswitch.conf & co. only if it exists.

Those files may be missing in some contexts, for instance within the
build environment.

* nix/libstore/build.cc (DerivationGoal::runChild): Add /etc/resolv.conf
and related files to ‘ss’ only if they exist.

Change-Id: Ie19664a86c8101a1dc82cf39ad4b7abb10f8250a
7bad04fa — Ludovic Courtès 1 year, 7 months ago 
daemon: Close the read end of the logging pipe.

* nix/libutil/util.cc (commonChildInit): Close ‘logPipe.readSide’.

Reported-by: Reepca Russelstein <reepca@russelstein.xyz>
Change-Id: Ia9e48d1afb85d7af52770e016f2b6832792044dd
f03e6eff — Ludovic Courtès 1 year, 8 months ago 
daemon: Use ‘close_range’ where available.

* nix/libutil/util.cc (closeMostFDs) [HAVE_CLOSE_RANGE]: Use
‘close_range’ when ‘exceptions’ is empty.
* config-daemon.ac: Check for <linux/close_range.h> and the
‘close_range’ symbol.

Change-Id: I12fa3bde58b003fcce5ea5a1fee1dcf9a92c0359
92205bab — Ludovic Courtès 1 year, 7 months ago 
services: unattended-upgrade: Exit with non-zero upon failure.

Until now, the service would always exit with 0, which makes failures
harder to distinguish in the output of ‘herd status’, for instance.

* gnu/services/admin.scm (unattended-upgrade-shepherd-services)[code]:
Call ‘exit’ after ‘report-invoke-error’.

Change-Id: Idfc74a48a6a798e813db96d5770a897595b27240
80651b88 — David Thompson 1 year, 7 months ago 
gnu: guile-goblins: Update to 0.15.1.

* gnu/packages/guile-xyz.scm (guile-goblins): Update to 0.15.1.

Change-Id: I6bb3b6ac2a4d1ffa3f9ab9fae5820b82a0fdd49c
ea41557c — Danny Milosavljevic 1 year, 7 months ago 
gnu: Add perl-math-interpolate.

* gnu/packages/perl-maths.scm (perl-math-interpolate): New variable.

Change-Id: I4b5b9585e53845fb1ec226a0e350fe38ec859916

gnu: mtools: Update to 4.0.48.

* gnu/packages/mtools.scm (mtools): Update to 4.0.48.

Change-Id: Ia4cbe13dfcba65b0c301c34559721da24dc815c7
Signed-off-by: Danny Milosavljevic <dannym@friendly-machines.com>
df439ebc — Leo Famulari 1 year, 7 months ago 
gnu: linux-libre 6.6: Update to 6.6.84.

* gnu/packages/linux.scm (linux-libre-6.6-version): Update to 6.6.84.
(linux-libre-6.6-pristine-source): Update hash.

Change-Id: Ie7d7ff328aa3a6e4c66b52a06326ebd3f77b064e
9d73c810 — Leo Famulari 1 year, 7 months ago 
gnu: linux-libre 6.12: Update to 6.12.20.

* gnu/packages/linux.scm (linux-libre-6.12-version): Update to 6.12.20.
(linux-libre-6.12-pristine-source): Update hash.

Change-Id: I5e056e4fc42be3de24d25597e6af754f420b9692
af1210b0 — Leo Famulari 1 year, 7 months ago 
gnu: linux-libre: Update to 6.13.8.

* gnu/packages/linux.scm (linux-libre-6.13-version): Update to 6.13.8.
(linux-libre-6.13-pristine-source): Update hash.

Change-Id: I11e59be49416352b1de797c55a318c1a8756a1a8
0c83bcfa — Vinicius Monego 1 year, 8 months ago 
gnu: opencv: Remove unused input.

* gnu/packages/image-processing.scm (opencv)[inputs]: Remove gtkglext.

Change-Id: I9444e4d9eaf36d56051bfbc54d7039c120405f03
Signed-off-by: Andreas Enge <andreas@enge.fr>
24effa5f — André Batista 1 year, 8 months ago 
gnu: mozjs: Remove version 91.

No packages depend on this version anymore.

* gnu/packages/gnuzilla.scm (mozjs-91): Delete variable.

Change-Id: Icc4efd0fc8b3728e4e6c6953fe3266262358d193
Signed-off-by: Andreas Enge <andreas@enge.fr>
a8fa0cca — Nguyễn Gia Phong 1 year, 7 months ago 
gnu: mepo: Update to 1.3.4.

* gnu/packages/geo.scm (mepo): Update to 1.3.4.
[arguments]<zig>: Specify Zig 0.14.
<phases>: Add patch-geoclue-demos-path.
[inputs]: Add geoclue.

Change-Id: Ibb9020dcb8202becced1c70ac2a616502dec466e
Signed-off-by: Andreas Enge <andreas@enge.fr>
24440a29 — Efraim Flashner 1 year, 7 months ago 
gnu: python-numpy: Skip another test on armhf-linux.

* gnu/packages/python-xyz.scm (python-numpy)[arguments]: When building
for armhf-linux skip another test.

Change-Id: Iccd691affca928061becc183db14009544c0e163
d6a9fc6c — Zheng Junjie 1 year, 8 months ago 
gnu: Add python-flake8-import-order.

* gnu/packages/python-xyz.scm (python-flake8-import-order): New variable.

Change-Id: I2f6a0a71c39d2b8112c66116b8a880d570b8b950
19905aaf — Zheng Junjie 1 year, 8 months ago 
gnu: Add python-flake8-class-newline.

* gnu/packages/python-xyz.scm (python-flake8-class-newline): New variable.

Change-Id: I4cf791c6e075094ba0be02daec8de06bd5cf2619
7127a514 — Zheng Junjie 1 year, 8 months ago 
gnu: Add python-flake8-docstrings.

* gnu/packages/python-xyz.scm (python-flake8-docstrings): New variable.

Change-Id: I758db70b11394134221d795e38a049527aa87da8
Next