gnu: python-webtest: Update to 2.0.29.

* gnu/packages/python-web.scm (python-webtest): Update to 2.0.29.

gnu: python-ndg-httpsclient: Update to 0.4.4.

* gnu/packages/python-web.scm (python-ndg-httpsclient): Update to 0.4.4.

gnu: python-cssutils: Update to 1.0.2.

* gnu/packages/python-web.scm (python-cssutils): Update to 1.0.2.

gnu: python-flask-babel: Update to 0.11.2.

* gnu/packages/python-web.scm (python-flask-babel): Update to 0.11.2.

guix system: Check for the lack of modules in the initrd.

* guix/scripts/system.scm (check-mapped-devices): Take an OS instead of
a list of <mapped-device>.  Pass #:needed-for-boot? and #:initrd-modules
to CHECK.
(check-initrd-modules): New procedure.
(perform-action): Move 'check-mapped-devices' call first.  Add call to
'check-initrd-modules'.
* gnu/system/mapped-devices.scm (check-device-initrd-modules): New
procedure.
(check-luks-device): Add #:initrd-modules and #:needed-for-boot?.  Use
them to call 'check-device-initrd-modules'.

system: Add 'initrd-modules' field.

* gnu/system.scm (<operating-system>)[initrd-modules]: New field.
(operating-system-initrd-file): Pass #:linux-modules to 'make-initrd'.
* gnu/system/linux-initrd.scm (default-initrd-modules): New procedure.
(%base-initrd-modules): New macro.
(base-initrd): Add #:linux-modules and honor it.
* gnu/system/install.scm (embedded-installation-os): Use
'initrd-modules' instead of 'initrd'.
* gnu/tests/install.scm (%raid-root-os): Likewise.
* doc/guix.texi (operating-system Reference): Add 'initrd-modules'.
(Initial RAM Disk): Document it.  Adjust example to not use
 #:extra-modules.

linux-initrd: Separate file system module logic.

* gnu/system/linux-initrd.scm (vhash, lookup-procedure): New macros.
(file-system-type-modules, file-system-modules): New procedures.
(base-initrd)[cifs-modules, virtio-9p-modules]: Remove.
[file-system-type-predicate]: Remove.
Use 'file-system-modules' instead of 'find' +
'file-system-type-predicate'.

linux-modules: Add 'device-module-aliases' and related procedures.

* gnu/build/linux-modules.scm (readlink*, stat->device-major)
(stat->device-minor): New procedures.
(%not-slash): New variable.
(read-uevent, device-module-aliases, read-module-aliases)
(current-alias-file, known-module-aliases, matching-modules): New
procedures.

Add (guix glob).

* guix/glob.scm, tests/glob.scm: New files.
* Makefile.am (MODULES): Add guix/glob.scm.
(SCM_TESTS): Add tests/glob.scm.

environment: Add --user.

This change allows overriding the home directory of all filesystem mappings to
help hide the identity of the calling user in a container.

* doc/guix.texi (Invoking guix environment)[--container]: Mention --user.
[--user]: Add item.
* guix/scripts/environment.scm (show-help): Add --user.
(%options): Add --user.
(launch-environment/container) Add 'user' parameter.  Update doc.  Override
'user-mappings' using 'override-user-mappings'.  Consider override for chdir.
(mock-passwd, user-override-home, overrid-euser-dir): New procedures.
(guix-environment): Disallow --user without --container.  Provide user to
'launch-environment/container'.
* tests/guix-environment.sh: Add user test.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

environment: Add --link-profile.

This change is motivated by attempts to run programs (like GNU IceCat) within
containers.  The 'fontconfig' program, for example, is configured explicitly
to check ~/.guix-profile for additional fonts.

There were no existing container tests in 'tests/guix-environment.sh', but I
added one anyway for this change.

* doc/guix.texi (Invoking guix environment): Add '--link-profile'.
* guix/scripts/environment.scm (show-help): Add '--link-profile'.
(%options): Add 'link-profile' as '#\P', assigned to 'link-profile?'.
(link-environment): New procedure.
(launch-environment/container): Use it when 'link-profile?'.
[link-profile?]: New parameter.
(guix-environment): Leave when '--link-prof' but not '--container'.  Add
'#:link-profile?' argument to 'launch-environment/container' application.
* tests/guix-environment-container.sh: New '--link-profile' test.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: icecat: Add more fixes from upstream mozilla-esr52.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add selected fixes from the
upstream mozilla-esr52 repository.

gnu: icecat: Update to 52.6.0-gnu1.

* gnu/packages/gnuzilla.scm (icecat): Update to 52.6.0-gnu1.
[source]: Remove patches that are no longer needed.
* gnu/packages/patches/icecat-bug-1348660-pt5.patch,
gnu/packages/patches/icecat-bug-1414945.patch,
gnu/packages/patches/icecat-bug-1415133.patch,
gnu/packages/patches/icecat-bug-1424373-pt2.patch: Delete files.
* gnu/local.mk (dist_patch_DATA): Remove them.

gnu: postgresql@9.6: Update to 9.6.8 [fixes CVE-2018-1058].

* gnu/packages/databases.scm (postgresql-9.6): Update to 9.6.8.

gnu: postgresql: Update to 10.3 [fixes CVE-2018-1058].

* gnu/packages/databases.scm (postgresql): Update to 10.3.

gnu: memcached: Update to 1.5.6.

* gnu/packages/databases.scm (memcached): Update to 1.5.6.

gnu: linux-libre: Update to 4.15.7.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.15.7.
(%linux-libre-hash): Update hash.

gnu: linux-libre@4.14: Update to 4.14.23.

* gnu/packages/linux.scm (%linux-libre-4.14-version): Update to 4.14.23.
(%linux-libre-4.14-hash): Update hash.

gnu: linux-libre@4.9: Update to 4.9.85.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.85.

gnu: linux-libre@4.4: Update to 4.4.119.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.119.