tests: guix-daemon: Check that build processes can chown to “kvm”.

* gnu/tests/base.scm (guix-daemon-test-cases)[chown-snippet]: New
variable.
["kvm GID mapped"]: New test.

Change-Id: I0ce7a9250539766628eb2459d60abce7c05a36ee

tests: debian-install: Install the ‘uidmap’ package.

* gnu/tests/foreign.scm (run-foreign-install-test): Add #:deb-files.
[test]("install extra .deb packages"): New test.
(debian-uidmap-deb-file): New variable.
(%test-debian-install): Pass it via #:deb-files.

Change-Id: I489056131d6ff20763457c29610af71866a396b2

services: guix: Populate /etc/subgid so guix-daemon can map the “kvm” GID.

* gnu/services/base.scm (guix-activation): Add a line for ‘guix-daemon’
in /etc/subgid.
(guix-shepherd-services): Add /run/privileged/bin to ‘PATH’.

Change-Id: Ic103d86986ce2ace194b0a4296a00278bf0617eb

services: guix: Preserve ‘guix-daemon’ user supplementary groups.

When running ‘guix-daemon’ unprivileged, supplementary groups such as
“kvm” were dropped by ‘run-with-writable-store’.

* gnu/services/base.scm (run-with-writable-store): Use ‘read-group’ to
determine the list of supplementary groups for ‘user’ and pass that to
‘setgroups’.

Change-Id: I21cc546a91a1a24cc94cafb44fa93e088f8673a7

teams: Add Nicolas Graves to core team.

* etc/teams.scm (person)[Nicolas Graves]: Add to core team.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

vm-image.tmpl: Use /dev/vda2 as root file system device.

The /dev/vda1 partition points to an EFI partition.
The /run/current-system/configuration.scm will then point to an incorrect
partition - to the EFI partition instead of root partition. Fix that by
pointing it to the default root-label "Guix_image".
This allows users to reconfigure out of the /run/current-system/configuration.scm.

* gnu/system/examples/vm-image.tmpl: Switch root filesystem device
to /dev/vda2.

Change-Id: I983892fb3c860dc5bbb2a1654d28db83e88d8c1a
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

vm-image.tmpl: Do not leak local checkout URL.

Follow up of 94c9e53fa4 that made similar change, but in
gnu/system/install.scm.

Change local checkout url for the default channel url to ensure release images
will not leak local checkout url.

* gnu/system/examples/vm-image.tmpl: Change channel of
‘guix’ package to inherit from ‘%default-guix-channel’.

Change-Id: I1c633b44cfa067cae1d2948e7e7ef6922995c27d
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: Add mate-indicator-applet.

* gnu/packages/mate.scm (mate-indicator-applet): New variable.

Change-Id: Iad9f3d54a084efce1302b682a358d30dc4c4b42e

gnu: Add mate-indicator-applet.

* gnu/packages/mate.scm (mate-indicator-applet): New variable.

Change-Id: Iad9f3d54a084efce1302b682a358d30dc4c4b42e
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: guix: Update to 21ce6b3.

* gnu/packages/package-management.scm (guix): Update to 21ce6b3.

Change-Id: I3894926a412576aa814166a6081db1db0e27b282

gnu: go-1.23: Fix tests on aarch64-linux.

* gnu/packages/golang.scm (go-1.23)[arguments]: Replace the
'disable-more-tests phase.

Change-Id: I008d6d73aaeabce5d83fe044473b37902d2d375f

gnu: go-1.20: Build without binutils-gold.

* gnu/packages/golang.scm (go-1.20)[native-inputs]: Remove gold.

Change-Id: I88d39932063efe53da21c3cc51458d05423a9cae

gnu: go-1.17: Add binutils-gold for armhf-linx and aarch64-linux.

Compilation of "plugin.test" fails on aarch64-linux system after
binutils-gold was removed form native inputs. This change adds it back
conditionally.

    /gnu/store/pm409aqyb5i21sf9kn8li31p91sfrj38-gcc-14.3.0/bin/gcc
    -s
    -Wl,-z,now
    -Wl,-z,nocopyreloc
    -fuse-ld=gold
    -o
    $WORK/b1499/plugin.test
    -Wl,-rpath,/gnu/store/4hw376vyz889zgzrr8mkp82c0d4iz391-gcc-14.3.0-lib/lib
    -rdynamic
    <...>
    -O2
    -g
    -ldl
    -O2
    -g
    -lpthread

    collect2: fatal error: cannot find ‘ld’

See: <https://bordeaux.guix.gnu.org/build/a702cf61-da67-4900-95d2-b2eabd9b83cf/log>.
Change-Id: Ida07cafd632c355dc05cad1ce4ccd0cd6f38a530

gnu: matterbridge: Build with go-1.24.

* gnu/packages/messaging.scm (matterbridge)[arguments] <go>: Use default (go-1.24).
<test-flags>: Don't vet during tests.

Change-Id: I3dd7cefb6d9fbd4eef49b80030804ef7cc1981ef

gnu: lyrebird: Buid with go-1.24.

* gnu/packages/golang-web.scm (lyrebird)[arguments] <go>: Use
default (go-1.24).

Change-Id: I2d9939f39f091305d005d832b167f8373f35951c

gnu: go-github-com-yggdrasil-network-yggdrasil-go: Fix build.

* gnu/packages/golang-web.scm (go-github-com-yggdrasil-network-yggdrasil-go):
[propagated-inputs]: Remove go-github-com-quic-go-quic-go; add
go-github-com-quic-go-quic-go-0.52.

Change-Id: Ib128a6046fafec068b2cade455d208b161c3a50d

gnu: go-0xacab-org-leap-obfsvpn: Fix build.

* gnu/packages/golang-web.scm (go-0xacab-org-leap-obfsvpn):
[propagated-inputs]: Remove go-github-com-quic-go-quic-go; add
go-github-com-quic-go-quic-go-0.52.

Change-Id: I99e83e0a72cebc979fdde99e559fb61a6e4595a5

gnu: yggdrasil: Fix build.

* gnu/packages/networking.scm (yggdrasil)[propagated-inputs]: Remove
go-github-com-quic-go-quic-go; add go-github-com-quic-go-quic-go-0.52.

Change-Id: I2b5d3e52d1916c9991ac45ce2f49f2419540d54c

gnu: Add go-github-com-quic-go-quic-go-0.52.

* gnu/packages/golang-web.scm (go-github-com-quic-go-quic-go-0.52): New variable.

Change-Id: I38253b048e05a5e5734b8e5ead14823b29fb2675

gnu: go-github-com-nektos-act: Fix build.

* gnu/packages/golang-vcs.scm (go-github-com-nektos-act)[arguments]
<go>: Use default (go-1.24).

Change-Id: Ifffb48cd1612b786ccd3dfa53a239bc8290c1bb7

gnu: Remove go-gopkg-in-inconshreveable-log15-v1.

* gnu/packages/golang-xyz.scm (go-gopkg-in-inconshreveable-log15-v1):
Delete variable.
(go-gopkg-in-inconshreveable-log15-v2): Don't inherit from
go-gopkg-in-inconshreveable-log15-v1, adopt missing fields from it
instead.

Change-Id: I9a892abc0122a79d0264ba9520028cec1c74ddb6