gnu: linux-libre@4.9: Update to 4.9.22.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.22.

gnu: linux-libre@4.4: Update to 4.4.61.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.61.

gnu: libsndfile: Update to 1.0.28 [fixes CVE-2017-{7585,7586,7741,7742}].

* gnu/packages/pulseaudio.scm (libsndfile)[replacement]: New field.
(libsndfile-1.0.28): New variable.

gnu: libsamplerate: Update to 0.1.9 [fixes CVE-2017-7697].

* gnu/packages/pulseaudio.scm (libsamplerate)[replacement]: New field.
(libsamplerate-0.1.9): New variable.

gnu: isc-dhcp: Update bundled bind to 9.9.9-P8 [security fixes].

Fixes CVE-2017-{3136,3137,3138}.

* gnu/packages/admin.scm (isc-dhcp): Update bundled bind to 9.9.9-P8.

gnu: icecat: Add more fixes from mozilla-esr45.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add fixes from the upstream
mozilla-esr45 repository.

gnu: bind: Update to 9.10.4-P8 [fixes CVE-2017-{3136,3137,3138}].

* gnu/packages/dns.scm (bind): Update to 9.10.4-P8.

services: tor: Run in a container.

* gnu/services/networking.scm (tor-shepherd-service): Use (gnu build
shepherd) and use 'make-forkexec-constructor/container' instead of
'make-forkexec-constructor'.

file-systems: Allow for bind-mounts of named sockets.

Previously a named socket such as /dev/log would fail
the 'regular-file?' test and we'd end up mkdir'ing it.

* gnu/build/file-systems.scm (regular-file?): Remove.
(mount-file-system): Change (regular-file? source)
to (not (file-is-directory? source)).

services: Define '%linux-bare-metal-service' using 'simple-service'.

* gnu/services.scm (linux-bare-metal-service-type): Remove.
(%linux-bare-metal-service): Define in terms of 'simple-service'.

gnu: certbot: Remove unused dependency.

This dependency was removed in certbot@0.10.0:

https://github.com/certbot/certbot/commit/d54cb76432a2eff43cc9cc3c1cc4d9136eac2221

* gnu/packages/tls.scm (certbot)[propagated-inputs]: Remove
python2-pythondialog.

gnu: python-acme: Remove unused dependencies.

Removed in python-acme@0.10.0 and 0.4.1, respectively:

https://github.com/certbot/certbot/commit/edbb3a73c6085219bef0cbf008bd1c82088bfcf6
https://github.com/certbot/certbot/commit/df383ee6e408f3be4bc3beb59aa33abc8e90f268

* gnu/packages/tls.scm (python-acme, python2-acme)[propagated-inputs]:
Remove python-ndg-httpsclient and python-werkzeug.

gnu: emacs-ag: Build and install info.

* gnu/packages/emacs.scm (emacs-ag)[arguments]: Add 'make-info' and
'install-info' phases.

Signed-off-by: Alex Kost <alezost@gmail.com>

gnu: emacs-ivy: Update to 0.9.1.

* gnu/packages/emacs.scm (emacs-ivy): Update to 0.9.1.

gnu: nano: Update to 2.8.1.

* gnu/packages/nano.scm (nano): Update to 2.8.1.

gnu: nginx: Update to 1.12.0.

* gnu/packages/web.scm (nginx): Update to 1.12.0.

gnu: certbot, python-acme: Build documentation in separate phase.

* gnu/packages/tls.scm (python-acme)[arguments]<:phases>: Add
'build-documentation' phase. Rename 'docs' phase to 'install-documentation'.
(certbot)[arguments]<:phases>: Adjust accordingly.

doc: Use OpenSSH instead of lsh in bare-bones template.

* gnu/system/examples/bare-bones.tmpl (services): Use openssh-service-type
instead of lsh-service.

gnu: Add emacs-xmlgen.

* gnu/packages/emacs.scm (emacs-xmlgen): New variable.

gnu: darkhttpd: Update source URI.

* gnu/packages/web.scm (darkhttpd)[source]: Update URI.