gnu: Reformat screen.scm.

* gnu/packages/screen.scm: Reorder #:use-module alphabetically.
Use license: prefix for licenses.

Change-Id: I86e810993024cd60a5842fc4222c05fc7c9f22df
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>

gnu: Move abduco to screen.scm.

* gnu/packages/abduco.scm (abduco): Move from here…
* gnu/packages/screen.scm: …to here.
* gnu/local.mk (GNU_SYSTEM_MODULES): Remove reference to abduco.scm.
* po/packages/POTFILES.in: Likewise.

Change-Id: Ic1acbf3264ee242b3c5aa5363e466a48f4408f45
Signed-off-by: Liliana Marie Prikler <liliana.prikler@gmail.com>

gnu: goimapnotify: Update to 2.5.3.

* gnu/packages/mail.scm (goimapnotify): Update to 2.5.3.

Change-Id: I906b8b442f960bf2009e7f89e1cef7a62c95b0e9

gnu: s-tui: Update inputs.

* gnu/packages/admin.scm (s-tui)[inputs]: Replace python-urwid-3 with
python-urwid.

Change-Id: I5a9db42576228f11d60624f67e69bd1afc86a793

gnu: guile-goblins: Update to 0.17.0.

* gnu/packages/guile-xyz.scm (guile-goblins): Update to 0.17.0.

Change-Id: If5cd1db91af08eabdb37b3ca34989454ef843e08

gnu: iperf: Update to 3.19.1.

* gnu/packages/networking.scm (iperf): Update to 3.19.1.

Change-Id: I6ca75138739ac41cb89e68f524aeb0225b6d9b67

gnu: opendht: Remove a trailing whitespace in a commentary.

* gnu/packages/networking.scm (opendht): Remove a trailing whitespace in a
commentary.

Change-Id: Id0ef92a4e59edf62b901a7c27a2462f760000f2c

gnu: nanomsg: Update to 1.2.2.

* gnu/packages/networking.scm (nanomsg): Update to 1.2.2.

Change-Id: Ib63bde6b2f130166c6e9fd89e7e94f78d730daea

gnu: bgpq3: Update to 0.1.38.

* gnu/packages/networking.scm (bgpq3): Update to 0.1.38.

Change-Id: I72d7c224af26c55969bb6b21ffa11246c33585e2

gnu: lr: Update to 2.0.1.

* gnu/packages/admin.scm (lr): Update to 2.0.1.

Change-Id: Ie27adbb65cfac6dc41e860f8f0955aaee73a22c3

gnu: yabridge: Fix build.

* gnu/packages/audio.scm (yabridge)[inputs]: Replace asio with asio-1.28.

Change-Id: I25ae31cbc3724038dde921fd1e5048545d69eead

gnu: Add asio-1.28.

* gnu/packages/networking.scm (asio-1.28): New variable.

Change-Id: I78e4ccf9e128917f7dd01278d9e9cd3858edbe10

guix-install.sh: Add the “kvm” GID to /etc/subgid.

* etc/guix-install.sh (SYSTEMD_REQUIRE): New variable.
(sys_create_build_user): Populate /etc/subgid.

Change-Id: I989c3ff682453d8d65e313c89fb751a20aa48bb8

daemon: Attempt to map the “kvm” group inside the build user namespace.

Fixes <https://issues.guix.gnu.org/77862>.

Previously, the ‘guix-daemon’ account (for unprivileged execution) would
typically have “kvm” as a supplementary group, but that group would not
be mapped in the build user namespace.  Consequently, attempts to
‘chown’ a file to that supplementary group would fail with EINVAL.

The test suites of Coreutils, Python, and Go (among others) exercise
this chown-to-supplementary-group behavior, so they would all fail when
started by the unprivileged ‘guix-daemon’ even though they succeed when
started by ‘guix-daemon’ running as root.

Thanks to keinflue <keinflue@posteo.net> and Reepca Russelstein
<reepca@russelstein.xyz> for helping out.

* nix/libstore/build.cc (initializeUserNamespace): Add ‘extraGIDs’ and
‘haveCapSetGID’ parameters.  Invoke ‘newgidmap’ when ‘extraGIDs’ is
non-empty and ‘haveCapSetGID’ is false.  Honor ‘extraGIDs’ when
‘haveCapSetGID’ is true.
(maxGroups, guestKVMGID): New variables.
(kvmGIDMapping): New function.
(DerivationGoal::startBuilder): Set ‘ctx.lockMountsMapAll’ in the
CLONE_NEWUSER case.  Pass ‘extraGIDs’ to ‘initializeUserNamespace’.
* tests/store.scm ("kvm GID is mapped"): New test.

Change-Id: I10ba710fc1b9ca1e3cd3122be1ec8ede5df18b40

daemon: Export as little as needed from libutil/spawn.cc.

* nix/libutil/spawn.cc (reset_writeToStderrAction, restoreAffinityAction)
(setsidAction, earlyIOSetupAction, dropAmbientCapabilitiesAction)
(chrootAction, chdirAction, closeMostFDsAction, setPersonalityAction)
(oomSacrificeAction, setIDsAction, setNoNewPrivsAction)
(addSeccompFilterAction, restoreSIGPIPEAction, setupSuccessAction)
(usernsInitSyncAction, usernsSetIDsAction, initLoopbackAction)
(setHostAndDomainAction, makeFilesystemsPrivateAction)
(makeChrootSeparateFilesystemAction, bindMount)
(mountIntoChroot, mountIntoChrootAction, mountProcAction)
(mountDevshmAction, mountDevptsAction, pivotRootAction)
(idMapToIdentityMap, lockMountsAction, runChildSetupEntry): Add ‘static’
qualifier.
* nix/libutil/spawn.hh: Remove the corresponding ‘extern’ declarations.

Change-Id: I3156d72d866f22fa31aa9a843f116771763ccb61

daemon: ‘runProgram’ exits with 127 upon ENOENT or similar.

This is in accordance with widespread conventions.  Previously it would
exit with code 1, which was misleading.

* nix/libutil/util.cc (runProgram): Exit with 127 if ‘execv’ or ‘execvp’
fails.

Change-Id: I5df214afffda69aa329a25afbc48f6cbfdd0961c

gnu: wireshark: Build with lua@5.4

In this current version, wireshark needs lua-5.3 or higher to build with
lua scripting support.

* gnu/packages/networking.scm (wireshark)[inputs]: Remove lua-5.2;
add lua-5.4.

Change-Id: Ib37aec86b7e95ffc4196dabb0fd48ae6a69dcd1a
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: labwc: Update to 0.9.2.

* gnu/packages/wm.scm (labwc): Update to 0.9.2.

Change-Id: I5aeae9bae6b0acaea5168ec4317fc29b1e4dee3a
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: snac: Update to 2.83.

* gnu/packages/fediverse.scm (snac2): Update to 2.83.

Change-Id: Ice54f40f831953947763b1efa14d809a7826139e
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

services: cuirass: Start ‘cuirass register’ eagerly.

* gnu/services/cuirass.scm (cuirass-shepherd-service): Pass #:lazy-start?.

Change-Id: Ib91c82e74ce9c80616a3de693d858939e670a03d