bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Marius Bakke
Jason Self writes: > Marius Bakke wrote: >> not present in the Guix source. > > Please keep in mind I was discussing upstream Chromium in that piece. > It's also not an exhaustive list. I don't think upstream Chromium is relevant to this discussion. >> I cannot find these images: grepping for

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Jason Self
On Wed, 2019-02-20 at 22:49 +0100, Ricardo Wurmus wrote: > If it does after all contain objectionable files please point them > out so that we can remove them ASAP. That was done earlier in the thread. It might also be interesting to try building with enable_widevine=true. In the context of the

bug#34597: `guix challenge` - 41 packages differ

2019-02-20 Thread mikadoZero
As requested. Output from `guix describe`: guix 34372d3 repository URL: https://git.savannah.gnu.org/git/guix.git branch: master commit: 34372d3905e17c880180f811e5b5f83e423e9025 Output from `diffoscope` for three different packages that `guix challenge` highlighted as differing:

bug#34597: `guix challenge` - 41 packages differ

2019-02-20 Thread mikadoZero
Two packages did not have guix in their name are: guile-2.2.4 python-3.7.0 Thank you for referencing that documentation. I will take a look at it.

bug#34597: `guix challenge` - 41 packages differ

2019-02-20 Thread Leo Famulari
On Wed, Feb 20, 2019 at 05:51:24PM -0600, Brett Gilio wrote: > Unless I am mistaken this isn't truly a reportable bug. As you can see > in the guix challenge documentation > https://www.gnu.org/software/guix/manual/en/html_node/Invoking-guix-challenge.html > the purpose of challenge is to check

bug#34597: `guix challenge` - 41 packages differ

2019-02-20 Thread Leo Famulari
On Wed, Feb 20, 2019 at 06:31:51PM -0500, mikadoZero wrote: > After running `guix challenge` there are some packages which differ from ones > I have built locally. Thanks! > `guix --version`: > guix (GNU Guix) 34372d3905e17c880180f811e5b5f83e423e9025 There is also `guix describe` which allows

bug#34580: Service ssh-daemon could not be started

2019-02-20 Thread Leo Famulari
On Thu, Feb 21, 2019 at 12:08:07AM +0100, Andreas Enge wrote: > It looks as if ssh-keygen takes too long; this is called from > openssh-activation in services/ssh.scm, with a comment > "Generate missing host keys". Are these regenerated at each boot? > If yes, is there a race condition, one action

bug#34597: `guix challenge` - 41 packages differ

2019-02-20 Thread Brett Gilio
mikadoZero writes: > After running `guix challenge` there are some packages which differ from ones > I have built locally. Hi Mikado, Unless I am mistaken this isn't truly a reportable bug. As you can see in the guix challenge documentation

bug#34597: `guix challenge` - 41 packages differ

2019-02-20 Thread mikadoZero
After running `guix challenge` there are some packages which differ from ones I have built locally. `guix --version`: guix (GNU Guix) 34372d3905e17c880180f811e5b5f83e423e9025 Here is the relevant output from `guix challenge`: - 41 (1.6%) differed

bug#34580: Service ssh-daemon could not be started

2019-02-20 Thread Andreas Enge
On Wed, Feb 20, 2019 at 05:51:54PM -0500, Leo Famulari wrote: > On Wed, Feb 20, 2019 at 11:48:02PM +0100, Andreas Enge wrote: > > I suppose so. I would be happy to provide further information, but there is > > not much to see in the log files. I grepped for "ssh" in /var/log/messages. The

bug#34580: Service ssh-daemon could not be started

2019-02-20 Thread Leo Famulari
On Wed, Feb 20, 2019 at 11:48:02PM +0100, Andreas Enge wrote: > I suppose so. I would be happy to provide further information, but there is > not much to see in the log files. Yes, there is not much to go on. For now I am still using Shepherd 0.3 on that machine :/ I plan to reinstall from

bug#34580: Service ssh-daemon could not be started

2019-02-20 Thread Andreas Enge
On Wed, Feb 20, 2019 at 05:21:58PM -0500, Leo Famulari wrote: > I wonder if this is another instance of ? I suppose so. I would be happy to provide further information, but there is not much to see in the log files. Andreas

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Danny Milosavljevic
On Wed, 20 Feb 2019 23:08:57 +0100 Danny Milosavljevic wrote: > First somewhat working version attached... > > It finds 1387 tests in 328 suites. > > The original finds 2611 tests in 349 suites. > > That's because skip-comments is somehow broken. Another example is tests/repo/pathspec.c

bug#34580: Service ssh-daemon could not be started

2019-02-20 Thread Leo Famulari
On Tue, Feb 19, 2019 at 10:21:26PM +0100, Andreas Enge wrote: > Hello, > > twice in a row at work (on harbourfront) and now twice in a row at home > (on dover) I am in a situation where sshd does not start on Guix machines. > Networking is available (the machines can be pinged), and I have to log

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Danny Milosavljevic
First somewhat working version attached... It finds 1387 tests in 328 suites. The original finds 2611 tests in 349 suites. That's because skip-comments is somehow broken. An example where it has an error very early is tests/core/futils.c : (use-modules (ice-9 ftw)) (use-modules (ice-9 regex))

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Ricardo Wurmus
Adonay Felipe Nogueira writes: > Em 20/02/2019 13:18, Julien Lepiller escreveu: >> I think the situation is different though. You can see the build script >> inside the "origin" record as the liberation procedure that anyone can >> see and verify. It's also a procedure targeted at our build

bug#34595: [PATCH] gnu: Add emacs-shroud

2019-02-20 Thread Ricardo Wurmus
Hi, > Shroud is a password manager written in Guile which uses GnuPG in the > backend. This package is an Emacs interface to Shroud using the Buffers > User Interface library. You have previously already submitted a variant of this: https://issues.guix.info/issue/34364 Please don’t open

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Ricardo Wurmus
Danny Milosavljevic writes: > It almost works, but it seems not to find the "test_" lines. > > I've reduced the problem to: > > scheme@(guile-user)> ,use (ice-9 regex) > scheme@(guile-user)> (fold-matches "^void" "blah\nvoid\n" '() cons) > $24 = () > > After reading the documentation, I've

bug#34595: [PATCH] gnu: Add emacs-shroud

2019-02-20 Thread Amar Singh
Shroud is a password manager written in Guile which uses GnuPG in the backend. This package is an Emacs interface to Shroud using the Buffers User Interface library. Beta quality. Thanks diff --git

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Adonay Felipe Nogueira
Em 20/02/2019 13:18, Julien Lepiller escreveu: > I think the situation is different though. You can see the build script > inside the "origin" record as the liberation procedure that anyone can > see and verify. It's also a procedure targeted at our build farms, so > that they can produce the

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Danny Milosavljevic
Hi Ricardo, On Wed, 20 Feb 2019 16:56:35 +0100 Ricardo Wurmus wrote: > The fixed version is attached. Thanks a lot! It almost works, but it seems not to find the "test_" lines. I've reduced the problem to: scheme@(guile-user)> ,use (ice-9 regex) scheme@(guile-user)> (fold-matches "^void"

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Julien Lepiller
Le 2019-02-20 14:03, Jason Self a écrit : Jason Self wrote: I should probably add on that this position comes from my interaction with the FSF in 2010: When LibreWRT was founded in 2010 (before it later merged into libreCMC) we submitted a similar question to the FSF,as to if it was sufficient

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Ricardo Wurmus
Hi Danny, > unpack libgit2-0.27.7, then invoke > > guile generate.scm -o /tmp -f -x online -x stress -x perf . > > in there. Thanks for the instructions. One of the problems is that you use and also overwrite “write”, which is a core Scheme procedure. I renamed it to “Write” and modified the

bug#34526: Updating node.js

2019-02-20 Thread Jelle Licht
Daniel Gerber writes: > [snip] > What about statically linking llhttp's C "sources" included in > node? Building v11.10.0 succeeds with this: > You could do this, of course, but afaics this is not acceptable for inclusion in Guix proper. I don't really see any way forward between

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Danny Milosavljevic
> What files does a proper test require? generate.scm scans the files with the glob "*.c" for functions test_... and refers all of those in a new file "clar.suite" in the directory specified by "-o". pgpMb_SorYHF4.pgp Description: OpenPGP digital signature

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Danny Milosavljevic
Hi Ricardo, unpack libgit2-0.27.7, then invoke guile generate.scm -o /tmp -f -x online -x stress -x perf . in there. Reference: ./tests/CMakeLists.txt: COMMAND ${PYTHON_EXECUTABLE} generate.py -o "${CMAKE_CURRENT_BINARY_DIR}" -f -xonline -xstress -xperf . (in libgit2) pgptQVueyeZfL.pgp

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Jason Self
Jason Self wrote: > I should probably add on that this position comes from my interaction > with the FSF in 2010: When LibreWRT was founded in 2010 (before it > later merged into libreCMC) we submitted a similar question to the > FSF,as to if it was sufficient for the LibreWRT build scripts (which

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Marius Bakke
Jason Self writes: > A different but related matter is the build process itself. I > understand this is not exactly related to the DRM matter but it does > seem similiar. I can open another bug over this if needed. I have > recently submitted upstream's Chromium 73.0.3683.45 into my FOSSology >

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Marius Bakke
Giovanni Biscuolo writes: > Hello, > > maybe Marius Bakke have something interesting to say about his > judgements on this "DRM matter" [...] > to sum it up: AFAIU for users to be able to use Widevine they must > create a custom package definition _outside_ official Guix channels > *and*

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Ricardo Wurmus
Danny Milosavljevic writes: > I've started on implementing a replacement test generator, see attachment. Excellent! > Usage is exactly the same as the original generate.py. Can you show us how to use it? What files does a proper test require? -- Ricardo

bug#27462: OCaml CVE-2015-8869

2019-02-20 Thread Andreas Enge
On Wed, Feb 20, 2019 at 09:39:20AM +0100, Julien Lepiller wrote: > At this point, we only need it for bap and dependencies. I've added > dependencies for the latest bap commit that work with the latest ocaml, but > they haven't released a new version yet. Can we wait a bit longer? > > Another

bug#34531: Guix profile fails on Overdrive 1000

2019-02-20 Thread Danny Milosavljevic
I've started on implementing a replacement test generator, see attachment. Usage is exactly the same as the original generate.py. However, it hangs somewhere and I can't find how to step through a guile program, even in emacs. Help? ;; -*- geiser-scheme-implementation: guile -*- ;;

bug#34590: Effects of GUIX_PACKAGE_PATH and --load-path differ

2019-02-20 Thread Daniel Gerber
Hi, From reading the doc on `guix environment`: -L, --load-path=DIRprepend DIR to the package module search path I would expect these to be exactly equivalent: $ export GUIX_PACKAGE_PATH=; guix environment -L path ... $ export GUIX_PACKAGE_PATH=path; guix environment ... Yet they

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Jelle Licht
Jason Self writes: > Leo Famulari wrote: >> To clarify this general point about Guix for anyone who is reading >> along, as a matter of policy the end user does not receive non-free >> source code from Guix. > > Right; the source is downloaded from commondatastorage.googleapis.com > but that

bug#34565: ungoogled-chromium contains Widevine DRM

2019-02-20 Thread Giovanni Biscuolo
Hello, maybe Marius Bakke have something interesting to say about his judgements on this "DRM matter" indeed, this is a pretty ignorant (aka me) comment: Leo Famulari writes: [...] > I think the next steps for this subject are to first, in general, figure > out where Widevine comes from, and

bug#27462: OCaml CVE-2015-8869

2019-02-20 Thread Julien Lepiller
Le 19 février 2019 23:17:52 GMT+01:00, Andreas Enge a écrit : >On Thu, Jan 31, 2019 at 06:30:27PM +0100, Julien Lepiller wrote: >> I still care about ocaml-4.02, but I could probably update it to >ocaml-4.04 without breaking dependents. > >Commits 2e125ece093ef842ca017ffb146cbc5fa33f2f75 and

bug#34565: ungoogled-chromium might contain remnants of Widevine DRM

2019-02-20 Thread Ricardo Wurmus
Jason Self writes: > Leo Famulari wrote: >> To clarify this general point about Guix for anyone who is reading >> along, as a matter of policy the end user does not receive non-free >> source code from Guix. > > Right; the source is downloaded from commondatastorage.googleapis.com > but that