gnu: Add libxls.

* gnu/packages/xml.scm (libxls): New variable.

Co-authored-by: Ricardo Wurmus <rekado@elephly.net>

gnu: Add kiki.

* gnu/packages/games.scm (kiki): New variable.
* gnu/packages/patches/kiki-level-selection-crash.patch,
gnu/packages/patches/kiki-makefile.patch,
gnu/packages/patches/kiki-missing-includes.patch,
gnu/packages/patches/kiki-portability-64bit.patch: New patches.
* gnu/local.mk (dist_patch_DATA): Add them.

gnu: Add freeglut-2.8.

* gnu/packages/gl.scm (freeglut-2.8): New variable.

gnu: linux-libre: Update to 4.10.10.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.10.10.
(%linux-libre-hash): Update hash.

gnu: linux-libre@4.9: Update to 4.9.22.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.22.

gnu: linux-libre@4.4: Update to 4.4.61.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.61.

gnu: libsndfile: Update to 1.0.28 [fixes CVE-2017-{7585,7586,7741,7742}].

* gnu/packages/pulseaudio.scm (libsndfile)[replacement]: New field.
(libsndfile-1.0.28): New variable.

gnu: libsamplerate: Update to 0.1.9 [fixes CVE-2017-7697].

* gnu/packages/pulseaudio.scm (libsamplerate)[replacement]: New field.
(libsamplerate-0.1.9): New variable.

gnu: isc-dhcp: Update bundled bind to 9.9.9-P8 [security fixes].

Fixes CVE-2017-{3136,3137,3138}.

* gnu/packages/admin.scm (isc-dhcp): Update bundled bind to 9.9.9-P8.

gnu: icecat: Add more fixes from mozilla-esr45.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add fixes from the upstream
mozilla-esr45 repository.

gnu: bind: Update to 9.10.4-P8 [fixes CVE-2017-{3136,3137,3138}].

* gnu/packages/dns.scm (bind): Update to 9.10.4-P8.

services: tor: Run in a container.

* gnu/services/networking.scm (tor-shepherd-service): Use (gnu build
shepherd) and use 'make-forkexec-constructor/container' instead of
'make-forkexec-constructor'.

file-systems: Allow for bind-mounts of named sockets.

Previously a named socket such as /dev/log would fail
the 'regular-file?' test and we'd end up mkdir'ing it.

* gnu/build/file-systems.scm (regular-file?): Remove.
(mount-file-system): Change (regular-file? source)
to (not (file-is-directory? source)).

services: Define '%linux-bare-metal-service' using 'simple-service'.

* gnu/services.scm (linux-bare-metal-service-type): Remove.
(%linux-bare-metal-service): Define in terms of 'simple-service'.

gnu: certbot: Remove unused dependency.

This dependency was removed in certbot@0.10.0:

https://github.com/certbot/certbot/commit/d54cb76432a2eff43cc9cc3c1cc4d9136eac2221

* gnu/packages/tls.scm (certbot)[propagated-inputs]: Remove
python2-pythondialog.

gnu: python-acme: Remove unused dependencies.

Removed in python-acme@0.10.0 and 0.4.1, respectively:

https://github.com/certbot/certbot/commit/edbb3a73c6085219bef0cbf008bd1c82088bfcf6
https://github.com/certbot/certbot/commit/df383ee6e408f3be4bc3beb59aa33abc8e90f268

* gnu/packages/tls.scm (python-acme, python2-acme)[propagated-inputs]:
Remove python-ndg-httpsclient and python-werkzeug.

gnu: emacs-ag: Build and install info.

* gnu/packages/emacs.scm (emacs-ag)[arguments]: Add 'make-info' and
'install-info' phases.

Signed-off-by: Alex Kost <alezost@gmail.com>

gnu: emacs-ivy: Update to 0.9.1.

* gnu/packages/emacs.scm (emacs-ivy): Update to 0.9.1.

gnu: nano: Update to 2.8.1.

* gnu/packages/nano.scm (nano): Update to 2.8.1.

gnu: nginx: Update to 1.12.0.

* gnu/packages/web.scm (nginx): Update to 1.12.0.