bug#31841: ./pre-inst-env guix system no longer works without ~/.config/guix

2018-06-14 Thread Rutger Helling
I'm having the same problem. I think being able to run Guix entirely from a git checkout is one of the best things about it and it's pretty essential that we keep that possibility for people who want it. pgptMVmZX8dv0.pgp Description: OpenPGP digital signature

bug#31841: ./pre-inst-env guix system no longer works without ~/.config/guix

2018-06-14 Thread Mark H Weaver
Since updating to current master (commit b494bbe46), 'guix system' no longer works for me: --8<---cut here---start->8--- mhw@jojen ~/guix$ ./pre-inst-env guix system build -n /etc/config.scm guix: system: command not found Try `guix --help' for more information.

bug#31838: "make" error on guix master

2018-06-14 Thread Ben Sturmfels
Hi folks, I'm on the current head of Guix master, b494bbe466419dcac9f415c1152131f012b9555e, and I'm getting an error building guix. I've just run a "make clean" and "./bootstrap" prior to the below. Regards, Ben ben@Marseille ~/work/ws/guix [env][master*]$ make /bin/sh ./config.status --recheck

bug#31827: "guix pull" fails

2018-06-14 Thread Ben Sturmfels
On 15/06/18 01:13, Alex Kost wrote: > Hello, sorry for bothering. I tried to run "guix pull" from the guix > git checkout (using pre-inst-env) and it failed for me with the > following backtrace. Do I miss anything obvious? > guix/git-download.scm:86:17: In procedure allocate-struct: Wrong type

bug#31825: guix offload fails with guix-authenticate error

2018-06-14 Thread Ludovic Courtès
Hello, Maxim Cournoyer skribis: > I've read the documentation carefully many times, but I still can't make > `guix offload' work. It always fails like so: > > guix offload test > guix offload: testing 1 build machines defined in '/etc/guix/machines.scm'... > guix offload: '192.168.1.105' is runn

bug#31598: Check for initrd-modules fails to detect when loaded module and on-disk module filename differ

2018-06-14 Thread Ludovic Courtès
Hello Vagrant & Florian, Vagrant Cascadian skribis: > In my config: > > (initrd-modules (append (list ... "sdhci-of-arasan" ... ) > %base-initrd-modules)) > > > When I run: > > $ sudo -E guix system reconfigure /etc/config.scm > > : error: you may need these modules in the initrd for > /

bug#31836: Installing bc downloads ghc

2018-06-14 Thread Caleb Ristvedt
Pretty much what the title says. I tried installing bc and it downloaded ghc, among other things. I was curious how this came to be, so I ran guix graph --type=derivation bc | grep -- '-ghc' (the dash being there to exclude accidental matches of "ghc" showing up in hashes). My understanding is th

bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries

2018-06-14 Thread Leo Famulari
On Thu, Jun 14, 2018 at 03:50:49PM -0400, Leo Famulari wrote: > I'll try OpenSSL next. I sent patches for both branches of OpenSSL: version 1.0.2: version 1.1.0: signature.asc Description: PGP signature

bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries

2018-06-14 Thread Gábor Boskovits
2018-06-14 21:53 GMT+02:00 Gábor Boskovits : > 2018-06-14 21:50 GMT+02:00 Leo Famulari : > >> I see that Efraim already updated libgcrypt. Awesome, thanks Efraim! >> >> I'll try OpenSSL next. >> > > I'll try libressl. > Here it is: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=31832

bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries

2018-06-14 Thread Leo Famulari
> 2018-06-14 21:50 GMT+02:00 Leo Famulari : > > I'll try OpenSSL next. They committed a fix but haven't released an update yet: https://github.com/openssl/openssl/commit/a3e9d5aa980f238805970f420adf5e903d35bf09 There is also an unrelated security advisory for a DoS bug from 2 days ago: https://

bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries

2018-06-14 Thread Gábor Boskovits
2018-06-14 21:50 GMT+02:00 Leo Famulari : > I see that Efraim already updated libgcrypt. Awesome, thanks Efraim! > > I'll try OpenSSL next. > I'll try libressl.

bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries

2018-06-14 Thread Leo Famulari
I see that Efraim already updated libgcrypt. Awesome, thanks Efraim! I'll try OpenSSL next. signature.asc Description: PGP signature

bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries

2018-06-14 Thread Leo Famulari
Recently a new side-channel key extraction technique was published as CVE-2018-0495, and it affects a lot of the cryptographic libraries we package: https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/?style=Cyber+Security An excerpt from that advisor

bug#31786: 'pre-inst-env guix --version' is not updated by new commits"

2018-06-14 Thread Clément Lassieur
Clément Lassieur writes: > Hi George, > > George Clemmer writes: > >> Leo Famulari writes: >> >>> On Wed, Jun 13, 2018 at 08:54:49AM +0200, Ludovic Courtès wrote: The other aspect, from a maintenance and readability viewpoint, is that we could quickly add up lots of explanations that

bug#31786: 'pre-inst-env guix --version' is not updated by new commits"

2018-06-14 Thread Ludovic Courtès
Hi George, George Clemmer skribis: > Leo Famulari writes: > >> On Wed, Jun 13, 2018 at 08:54:49AM +0200, Ludovic Courtès wrote: >>> The other aspect, from a maintenance and readability viewpoint, is that >>> we could quickly add up lots of explanations that we’ll have to keep >>> up-to-date and

bug#31786: 'pre-inst-env guix --version' is not updated by new commits"

2018-06-14 Thread Clément Lassieur
Hi George, George Clemmer writes: > Leo Famulari writes: > >> On Wed, Jun 13, 2018 at 08:54:49AM +0200, Ludovic Courtès wrote: >>> The other aspect, from a maintenance and readability viewpoint, is that >>> we could quickly add up lots of explanations that we’ll have to keep >>> up-to-date and

bug#31786: 'pre-inst-env guix --version' is not updated by new commits"

2018-06-14 Thread George Clemmer
Leo Famulari writes: > On Wed, Jun 13, 2018 at 08:54:49AM +0200, Ludovic Courtès wrote: >> The other aspect, from a maintenance and readability viewpoint, is that >> we could quickly add up lots of explanations that we’ll have to keep >> up-to-date and that may make more important information h

bug#31827: "guix pull" fails

2018-06-14 Thread Alex Kost
Hello, sorry for bothering. I tried to run "guix pull" from the guix git checkout (using pre-inst-env) and it failed for me with the following backtrace. Do I miss anything obvious? [...] compiling...100.0% of 1 files compiling...100.0% of 40 files grafting '/gnu/store/z5fy5i0va7l3ffwlia

bug#31814: setuid programs are not first in PATH

2018-06-14 Thread Joshua Branson
Clément Lassieur writes: > Joshua Branson writes: > >> Clément Lassieur writes: >> >>> Hi, >>> >>> sourcing /etc/profile >>> >>> - prepends /run/setuid-programs to $PATH >>> - then sources $HOME/.guix-profile/etc/profile >>> >>> and sourcing $HOME/.guix-profile/etc/profile >>> >>> - prepends $H

bug#21073: SQLite database creation for binary tarball is non-deterministic

2018-06-14 Thread Ludovic Courtès
l...@gnu.org (Ludovic Courtès) skribis: > When running ‘make guix-binary.x86_64-linux.tar.xz’ twice (and of course > ‘guix gc -d /gnu/store/*-guix-tarball.tar.xz’ in the meantime), one can > see that the ‘db.sqlite’ files in the tarballs have the same size but > differ by a few bytes. Fixed by co

bug#30116: [PATCH] `substitute' crashes when file contains NUL characters (core-updates))

2018-06-14 Thread Ludovic Courtès
Mark H Weaver skribis: > Thanks for working on this. I found a problem with this patch, > and I also have a suggestion. Please see below. I hadn’t seen Mark’s reply, which raises valid concerns. Please dismiss the message I just sent, Maxim. Ludo’.

bug#30116: [PATCH] `substitute' crashes when file contains NUL characters (core-updates))

2018-06-14 Thread Ludovic Courtès
Hello Maxim, Maxim Cournoyer skribis: > l...@gnu.org (Ludovic Courtès) writes: [...] >> Otherwise LGTM. This would have to go to the next ‘core-updates’ (or >> ‘core-updates-next’ in the meantime.) >> >> Thanks! >> >> Ludo’. > > Ping. Is it the right time to merge this? Yes you can push it t

bug#30116: [PATCH] `substitute' crashes when file contains NUL characters (core-updates))

2018-06-14 Thread Mark H Weaver
Hi Maxim, Thanks for working on this. I found a problem with this patch, and I also have a suggestion. Please see below. Maxim Cournoyer writes: > From 9891e428eae0ed24e0d61862b3f5e298606b79eb Mon Sep 17 00:00:00 2001 > From: Maxim Cournoyer > Date: Sun, 14 Jan 2018 20:31:33 -0500 > Subject: