gnu: linux-libre 6.1: Update to 6.1.124.

* gnu/packages/linux.scm (linux-libre-6.1-version): Update to 6.1.124.
(linux-libre-6.1-pristine-source): Update hash.

Change-Id: I9d43a1d271a888af0f26e46e176dda5646635f65

gnu: linux-libre 6.6: Update to 6.6.70.

* gnu/packages/linux.scm (linux-libre-6.6-version): Update to 6.6.70.
(linux-libre-6.6-pristine-source, deblob-scripts-6.6): Update hashes.

Change-Id: I621fcbd89df72899e8bd53c849674fcd9f35b82b

gnu: linux-libre: Update to 6.12.9.

* gnu/packages/linux.scm (linux-libre-6.12-version): Update to 6.12.9.
(linux-libre-6.12-pristine-source): Update hash.

Change-Id: I9427c37d290abad05dcdae1d302ea8f9e7b538d6

gnu: Add cl-semver.

* gnu/packages/lisp-xyz.scm (cl-semver, ecl-cl-semver, sbcl-cl-semver): New variables.

Change-Id: I42d44a52f8965f7be3826151c97a3ea096d88ad6

gnu: chibi-scheme: Fix cross-compilation.

* gnu/packages/scheme.scm (chibi-scheme)[arguments]: Use G-expression.
<#:make-flags>:When cross-compilation, Set CHIBI.
[native-inputs]: When cross-compilation. Add this-package.

Change-Id: I424854d77e575f2e2aab8a5a9d32ef628c9db953
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

services: rootless-podman: Enable I/O delegation.

Based on
https://rootlesscontaine.rs/getting-started/common/cgroup2/#enabling-cpu-cpuset-and-io-delegation
, this patch enables I/O delegation for cgroups v2 enabled users.

* gnu/services/containers.scm (cgroups-limits-entrypoint): Enable I/O
controller delegation.
* gnu/tests/containers.scm: Test it.

Change-Id: I7caba33695f11830bea477c4ab3afb89cfaa2fa5
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

services: tests: Add delay for rootless Podman system test.

* gnu/tests/containers.scm (run-rootless-podman-test): Add 60 seconds
long delay before tests are actually run.

Change-Id: Ifcf70f7258f9e0886bf829884d7daedc9803352b
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

services: nginx: Make log formats configurable.

* gnu/services/web.scm (<nginx-log-format-configuration>): New record.
(<nginx-configuration>)[log-format, log-formats]: New fields.
(assert-valid-log-format-escape): New procedure.
(emit-nginx-log-format-config): New procedure.
(default-nginx-config): Make log formats configurable.
* doc/guix.texi (Web Services): Document it.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Change-Id: I8a16a1a9a20f64606dac0a1e14f1c5217d351f90

services: dns: Add unbound service.

This allows using Unbound as a local DNSSEC-enabled resolver. This
commit also allows configuration of the Unbound DNS resolver via a
Scheme API. The API currently provides very common options and
includes an escape hatch to enable less common configurations.

* gnu/service/dns.scm (unbound-serialize-field): New procedure.
(unbound-serialize-alist, unbound-serialize-section)
(unbound-serialize-string, unbound-serialize-boolean)
(unbound-serialize-list-of-strings): New procedures.
(unbound-zone): New record type.
(unbound-serialize-unbound-zone)
(unbound-serialize-list-of-unbound-zone): New procedures.
(unbound-remote): New record type.
(unbound-serialize-unbound-remote): New procedure.
(unbound-server): New record type.
(unbound-serialize-unbound-server): New procedure.
(unbound-configuration): New record type.
(unbound-config-file, unbound-shepherd-service): New procedures.
(unbound-account-service): New variable.
(unbound-service-type): New services.
* gnu/tests/dns.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* doc/guix.texi (DNS Services): Document it.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
Change-Id: I4c9646c9e17d4882e596d33ff8f738e1877fa1ae

doc: cookbook: Update "Build system arguments" section.

* doc/guix-cookbook.texi (Build system arguments)

Remove recommendation on phase return value.
Ensure code examples can run and are up-to-date.

Change-Id: I143babf79983751578d6d4e20b20195ea000656d
Signed-off-by: Ludovic Courtès <ludo@gnu.org>

services: cuirass: Add ‘build-expiry’ field.

* gnu/services/cuirass.scm (<cuirass-configuration>)[build-expiry]: New
field.
(cuirass-shepherd-service): Honor it.
* doc/guix.texi (Continuous Integration): Document it.

Change-Id: I1f9e21368437fd8fc236719e32bad7656928c926

gnu: cuirass: Update to 6b499a7.

* gnu/packages/ci.scm (cuirass): Update to 6b499a7.

Change-Id: I38dd8283ae928b9f736488683426fd8aedf40d66

etc: upgrade: Add web and crypto packages.

* etc/manifests/upgrade.scm (security-packages): add nghttp2, nginx,
nettle, and libsodium.

Change-Id: I264d4595c3448cdfe5aefebbeb19eeee5107cef9

upstream: Return #f when ‘source-urls’ is a <git-reference>.

Fixes a type error where ‘find2’ could be passed a <git-reference>
instead of a list of strings (URLs).

* guix/upstream.scm (preferred-upstream-source-url): Return #f and #f
when ‘upstream-source-urls’ does not return a pair.

Change-Id: If43a610fac5f3feb871e0900966d65b4971bd053

gnu: opensc: Update to 0.26.0.

* gnu/packages/security-token (opensc): Update to 0.26.0.

Change-Id: Ib4dc6b971c7f99cbf48fb6d2c701ce4fe5e994df

gnu: snac2: Update to 2.68.

* gnu/packages/fediverse.scm (snac2): Update to 2.68.

Change-Id: Iccb52a4b1d7eb6c19f13114b9c42acfb9613e728
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>

gnu: mold: Update to 2.36.0.

* gnu/packages/mold.scm (mold): Update to 2.36.0.

Change-Id: I71c149a0012a5c37008a9d62b0a6f5d3cc6fb553
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>

gnu: ugrep: Update to 7.1.3.

* gnu/packages/search.scm (ugrep): Update to 7.1.3.

Change-Id: I389c9b056f389d80f942ed487bf80cbba97364a4
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>

gnu: opencv: update to 4.11.0.

* gnu/packages/image-processing.scm (opencv): Update to 4.11.0.

Change-Id: I44e8572163c3b6ccb6d27b3910ceda5941260241
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>

gnu: squashfuse-for-appimage: Fix name.

* gnu/packages/file-systems.scm (squashfuse-for-appimage): Fix name.

Change-Id: Ibeac5f777890df487d4f79a2e830023acf54a6e9