gnu: pipewire: Update to 1.2.5.
* gnu/packages/linux.scm (pipewire): Update to 1.2.5.
Change-Id: I6d671eec2c7e24aa4979abd36f4fa770024f4379
Signed-off-by: Andreas Enge <andreas@enge.fr>
gnu: pipewire: Update to 1.2.3.
* gnu/packages/linux.scm (pipewire): Update to 1.2.3.
Signed-off-by: Andreas Enge <andreas@enge.fr>
Change-Id: I2e22d93c4ecc07ff8238440bea6d79ca4aa8b47f
news: Add 'de' translation.
* etc/news.scm: Add German translation for build user takeover entry.
Change-Id: I48e5aec5dbbf85062ad13806117b8bd4b853347d
gnu: notcurses: Update to 3.0.11.
* gnu/packages/notcurses.scm (notcurses): Update to 3.0.11.
Change-Id: Ib182956e8f847ee94597ada8b12e8b6acf9de16f
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: dwl: Update to 0.6.
* gnu/packages/wm.scm (dwl): Update to 0.6.
[origin]<url>: Update repository url.
[homepage]: Update homepage.
[arguments]: Convert to G-exps, use #$output instead of assoc-ref.
[inputs]: Remove wlroots-0.16; add wlroots.
Change-Id: I567a99e88a899953049a9ce00d699ea73ee08c14
Signed-off-by: Noé Lopez <noelopez@free.fr>
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: mozo: Wrap python and gi dependencies.
* gnu/packages/mate.scm (mozo)
[#:phases]: Add 'python-and-gi-wrap phase.
[inputs]: Add gtk+ and mate-panel.
Change-Id: I322878083101b5c05da53fe13092afa037e32736
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: mate-control-center: Add gsettings-desktop-schemas to inputs
* gnu/packages/mate.scm (mate-control-center)[inputs]: Add gsettings-desktop-schemas.
Change-Id: Id695c231c2e886ab219084037cdfb8137646a925
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: mate-control-center: Remove input labels.
* gnu/packages/mate.scm (mate-control-center)[inputs]: Remove labels.
Change-Id: I0c54cd365ef8686a67d4bc44bc47996905040d72
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
shell: Enable caching when using deterministic package transformations.
Until now, using any package transformation would disable the automatic
GC root creation and caching in ‘guix shell’. This change introduces a
finer-grain distinction: a command like:
guix shell --tune inkscape
is now subject to caching, whereas:
guix shell --with-latest=inkscape inkscape
remains non-cacheable.
* guix/transformations.scm (%transformations-with-external-dependencies):
New variable.
(cacheable-transformation-option-key?): New procedure.
* guix/scripts/shell.scm (profile-cached-gc-root): In the
‘transformation-option-key?’ clause, call ‘loop’ when
‘cacheable-transformation-option-key?’ returns true.
Change-Id: I847b661dfea20ecf851db2023a5c7ea8c5b5ca7c
git: Add server connection and read timeouts.
Fixes <https://issues.guix.gnu.org/71818>.
* guix/git.scm (set-git-timeouts): New procedure.
(update-cached-checkout): Add #:connection-timeout and #:read-timeout.
Call ‘set-git-timeouts’.
Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Change-Id: Ibbd4fc6104ce66afed880b3975c129abbc2ab755
gnu: python-lazy-loader: Adjust inputs.
As seen in python-team build
<https://ci.guix.gnu.org/build/6091717/log/raw>.
* gnu/packages/python-xyz.scm (python-lazy-loader) [native-inputs]: Add
python-setuptools.
Change-Id: Id8c4eb18f0d2622a1d3270ad29653ef27dcd2fe3
gnu: python-mpv: Adjust inputs.
As seen in python-team build
<https://ci.guix.gnu.org/build/6091629/log/raw>.
* gnu/packages/python-xyz.scm (python-mpv) [native-inputs]: Add
python-setuptools.
Change-Id: I3a43904057c2b3f77833372e2be68280f95189a2
gnu: python-sge: Adjust inputs.
As seen in python-team build
<https://ci.guix.gnu.org/build/6099416/log/raw>.
* gnu/packages/game-development.scm (python-sge): Adjust inputs.
[arguments]<#:tests>: Disable as they are not provided.
[native-inputs]: Add python-setuptools.
Change-Id: I46a83e8ebb0b25ff7d3895334bef257ce98da20f
gnu: xdot: Update to 1.4.
* gnu/packages/graphviz.scm (xdot): Update to 1.4.
[native-inputs]: Add python-packaging.
Change-Id: Ifc06ab8fddfd23d0273d134efec610750bf2a462
gnu: ardour: Update to 8.10.
* gnu/packages/audio.scm (ardour): Update to 8.10.
Change-Id: Ie6498779b9e48226f35ef376687dfed749e632cc
news: Add news entry for build user takeover vulnerability fix.
* etc/news.scm: add entry about build user takeover vulnerability.
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Change-Id: I469e368914681e599252e766cd30100d5a377257
daemon: Sanitize successful build outputs prior to exposing them.
There is currently a window of time between when the build outputs are exposed
and when their metadata is canonicalized.
* nix/libstore/build.cc (DerivationGoal::registerOutputs): wait until after
metadata canonicalization to move successful build outputs to the store.
Change-Id: Ia995136f3f965eaf7b0e1d92af964b816f3fb276
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
daemon: Sanitize failed build outputs prior to exposing them.
The only thing keeping a rogue builder and a local user from collaborating to
usurp control over the builder's user during the build is the fact that
whatever files the builder may produce are not accessible to any other users
yet. If we're going to make them accessible, we should probably do some
sanity checking to ensure that sort of collaborating can't happen.
Currently this isn't happening when failed build outputs are moved from the
chroot as an aid to debugging.
* nix/libstore/build.cc (secureFilePerms): new function.
(DerivationGoal::buildDone): use it.
Change-Id: I9dce1e3d8813b31cabd87a0e3219bf9830d8be96
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
gnu: Add linux-libre 6.11.4.
* gnu/packages/linux.scm (linux-libre-6.11-version, linux-libre-6.11-gnu-revision,
deblob-scripts-6.11, linux-libre-6.11-pristine-source, linux-libre-6.11-source,
linux-libre-headers-6.11, linux-libre-6.11): New variables.
* gnu/packages/aux-files/linux-libre/6.11-arm.conf,
gnu/packages/aux-files/linux-libre/6.11-arm64.conf,
gnu/packages/aux-files/linux-libre/6.11-i686.conf,
gnu/packages/aux-files/linux-libre/6.11-riscv.conf,
gnu/packages/aux-files/linux-libre/6.11-x86.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Co-authored-by: Ahmad Draidi <a.r.draidi@redscript.org>
Change-Id: I35bad9fbea9f568e60e7f24c95f85c240ef96277
Signed-off-by: Leo Famulari <leo@famulari.name>