gnu: libsamplerate: Update to 0.1.9 [fixes CVE-2017-7697].

* gnu/packages/pulseaudio.scm (libsamplerate)[replacement]: New field.
(libsamplerate-0.1.9): New variable.

gnu: isc-dhcp: Update bundled bind to 9.9.9-P8 [security fixes].

Fixes CVE-2017-{3136,3137,3138}.

* gnu/packages/admin.scm (isc-dhcp): Update bundled bind to 9.9.9-P8.

gnu: icecat: Add more fixes from mozilla-esr45.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add fixes from the upstream
mozilla-esr45 repository.

gnu: bind: Update to 9.10.4-P8 [fixes CVE-2017-{3136,3137,3138}].

* gnu/packages/dns.scm (bind): Update to 9.10.4-P8.

services: tor: Run in a container.

* gnu/services/networking.scm (tor-shepherd-service): Use (gnu build
shepherd) and use 'make-forkexec-constructor/container' instead of
'make-forkexec-constructor'.

file-systems: Allow for bind-mounts of named sockets.

Previously a named socket such as /dev/log would fail
the 'regular-file?' test and we'd end up mkdir'ing it.

* gnu/build/file-systems.scm (regular-file?): Remove.
(mount-file-system): Change (regular-file? source)
to (not (file-is-directory? source)).

services: Define '%linux-bare-metal-service' using 'simple-service'.

* gnu/services.scm (linux-bare-metal-service-type): Remove.
(%linux-bare-metal-service): Define in terms of 'simple-service'.

gnu: certbot: Remove unused dependency.

This dependency was removed in certbot@0.10.0:

https://github.com/certbot/certbot/commit/d54cb76432a2eff43cc9cc3c1cc4d9136eac2221

* gnu/packages/tls.scm (certbot)[propagated-inputs]: Remove
python2-pythondialog.

gnu: python-acme: Remove unused dependencies.

Removed in python-acme@0.10.0 and 0.4.1, respectively:

https://github.com/certbot/certbot/commit/edbb3a73c6085219bef0cbf008bd1c82088bfcf6
https://github.com/certbot/certbot/commit/df383ee6e408f3be4bc3beb59aa33abc8e90f268

* gnu/packages/tls.scm (python-acme, python2-acme)[propagated-inputs]:
Remove python-ndg-httpsclient and python-werkzeug.

gnu: emacs-ag: Build and install info.

* gnu/packages/emacs.scm (emacs-ag)[arguments]: Add 'make-info' and
'install-info' phases.

Signed-off-by: Alex Kost <alezost@gmail.com>

gnu: emacs-ivy: Update to 0.9.1.

* gnu/packages/emacs.scm (emacs-ivy): Update to 0.9.1.

gnu: nano: Update to 2.8.1.

* gnu/packages/nano.scm (nano): Update to 2.8.1.

gnu: nginx: Update to 1.12.0.

* gnu/packages/web.scm (nginx): Update to 1.12.0.

gnu: certbot, python-acme: Build documentation in separate phase.

* gnu/packages/tls.scm (python-acme)[arguments]<:phases>: Add
'build-documentation' phase. Rename 'docs' phase to 'install-documentation'.
(certbot)[arguments]<:phases>: Adjust accordingly.

doc: Use OpenSSH instead of lsh in bare-bones template.

* gnu/system/examples/bare-bones.tmpl (services): Use openssh-service-type
instead of lsh-service.

gnu: Add emacs-xmlgen.

* gnu/packages/emacs.scm (emacs-xmlgen): New variable.

gnu: darkhttpd: Update source URI.

* gnu/packages/web.scm (darkhttpd)[source]: Update URI.

gnu: dovecot: Update to 2.2.29.1.

* gnu/packages/mail.scm (dovecot): Update to 2.2.29.1.
[source]: Remove 'dovecot-fix-failing-test.patch'.
* gnu/packages/patches/dovecot-fix-failing-test.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Remove it.

gnu: emacs-default-encrypt: Update source URI.

* gnu/packages/emacs.scm (emacs-default-encrypt)[source]: Update URI.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>

gnu: kde-frameworks: No longer setenv CTEST_OUTPUT_ON_FAILURE.

This is now done my the cmake-build-system.

* gnu/packages/kde-frameworks.scm (kcoreaddons, kwidgetsaddons, kpackage,
  kemoticons kiconthemes, kio, knewstuff, kpeople, krunner,kservice,
  ktexteditor, kxmlgui plasma-framework) [arguments] <check-setup>: Remove
  setenv CTEST_OUTPUT_ON_FAILURE.
  (kpty) [arguments] <patch-tests>: Remove setenv CTEST_OUTPUT_ON_FAILURE.
  (ksyntaxhighlighting) [arguments] <check-setup>: Remove phase.