bug#39952: Bug Report with Guix Pull on Ubuntu 18.04.3 LTS

Hullo, Thanks for submitting a bug report! Lee Jia Hong 写道： […] In srfi/srfi-1.scm: 592:17 0 (map1 (("source" # url: "https://notabug.org/cwebber/g uile-gcrypt.git" co?>) ?)) Guix was unable to check out this source repository, possibly (likely) because of a network failure. It's

bug#39942: carla fails to start

Tobias Geerinckx-Rice via Bug reports for GNU Guix 写道： ~ λ carla Traceback (most recent call last): File "/gnu/store/srsgm818w2rhifp5x5i9rs1d67hzxyzy-carla-2.0.0/share/carla/carla", line 22, in from carla_host import * File "/gnu/store/srsgm818w2rhifp5x5i9rs1d67hzxyzy-ca

bug#39942: carla Permission denied

Nathan, Nathan Dehnel 写道： bash-5.0$ carla /home/nathan/.guix-profile/bin/carla: line 15: /gnu/store/d6df2j9g65vvczxgqs6gfdmg7d0v3gji-carla-2.0.0/share/carla/carla: Permission denied /home/nathan/.guix-profile/bin/carla: line 15: exec: /gnu/store/d6df2j9g65vvczxgqs6gfdmg7d0v3gji-carla-2.0.0/share

bug#39851: [PATCH] Fix build of mozjs@17

Damien Cassou 写道： mozjs@17 doesn't build. This patch fixes that. Thanks! Pushed as 0a076f887f039449acab0fed643313425727015f with some tweaks to the commit message, mainly to note that this also (positively) affects @24. Kind regards, T G-R signature.asc Description: PGP signature

bug#33844: Rename ghc-pandoc to pandoc

Pierre Neidhardt 写道： Reason: it is used standalone to convert between formats. I agree. What do other people think? [Thumbs-up emoji] Kind regards, T G-R signature.asc Description: PGP signature

bug#39774: guix says "No space left on device"

Jesse, Are you sure Guix is incorrect? $ df -i / /gnu/store If you're (almost) out of inodes on either, you'll have to delete some files. In which case you can thank Unix for -ENOSPC meaning ‘you're out of something; I won't tell you what’, but perhaps Guix could work around its flaws by

bug#39713: Was told on IRC (#guix at freenode) to share the details of my problem with Guix (SD) via email

Akshay, Akshay Khobragade via Bug reports for GNU Guix 写道： This is my first ever installation of Guix where I chose: 1. Separate Boot (/boot) and EFI (/boot/efi) partitions 2. Encrypted root (having used it in Debian for the last 10 months, I am comfortable) This just isn't possible (yet).

bug#39643: (Out-of-tree) system kernel modules only found in :out

Marius, Marius Bakke 写道： Will these options work for you, or am I misunderstanding something? I think so. The bug is about zfs:module being treated differently from zfs:out when constructing a system/ union, not about the build system. Kind regards, T G-R signature.asc Description: PGP

bug#39648: Reverse my commits on GNOME meta-package

Raghav Gururajan 写道： Could you please reverse my following commits: 1) d36fa50fbf8169018193774782fd21f1b13b9c0e 2) 7922b6f795eb575084546ec9bfb9d40508a9378e 3) 8d8c6bffc528b60574f84620bd6c3ee9bfa1173f 4) a8cda7f57992e9ce9ae4a694eba54e3eab42c39b Copy-pasted from #guix: Whoa there, that's dra

bug#39575: guix time-machine fails when a tarball was modified in-place

zimoun 写道： You assume that Debian packs packages as fast as Guix Indeed I do! :-D Efraim's solution sounds reasonable. Kind regards, T G-R signature.asc Description: PGP signature

bug#39643: (Out-of-tree) system kernel modules only found in :out

Guix, After adding (specification->package+output "zfs:module") to my system packages, it's still missing from current-system: $ guix system reconfigure … $ ls /run/current-system/profile/lib/modules/ 5.4.0-pf7-4-ed26-M88 That's my horrible custom Linux fork/version/abomination. Apologie

bug#39614: icecat "profile cannot be loaded"

Nathan Dehnel 写道： That worked, thank you. Great! Closing this bug, since it's both ‘fixed’ and not Guix-specific. Kind regards, T G-R signature.asc Description: PGP signature

bug#39632: Wrong keymap when decrypting master key

Damien, Damien Cassou 写道： I find it quite annoying to enter my passphrase 3 times. But even more annoying, the first time, I have to enter it in Qwerty even though all my system is supposed to be configured for Colemak: Didn't you already[0] report this bug as #39288? Then I'll merge the t

bug#39614: icecat "profile cannot be loaded"

Nathan, Nathan Dehnel 写道： deleting the directory and --ProfileManager flag don't help Did you delete (back up) your entire ~/.mozilla, not just the ‘icecat’ subdirectory? Kind regards, T G-R signature.asc Description: PGP signature

bug#39615: LetsEncrypt root certificate hash changed

Chris, Guix, Tobias Geerinckx-Rice via Bug reports for GNU Guix 写道： This is not at all a solution, but you can ‘guix download’ the old .pem files here[0] and hopefully be on your merry way. Actually: this shouldn't be necessary now, since I've copied these files to berlin (a

bug#39615: LetsEncrypt root certificate hash changed

Chris, Christopher Baines 写道： However, while this change might avoid the problem with guix pull in the future, I still a bit stuck. I got this from a fresh install of Guix on the Overdrive machine I have (aarch64-linux). I guess I've found my purpose this week and it's ‘mirroring old shit’.

bug#39575: guix time-machine fails when a tarball was modified in-place

Jan, Simon, Janneke 写道： https://snapshot.debian.org/archive/debian/20190406T212022Z/pool/main/h/harfbuzz/harfbuzz_2.4.0.orig.tar.bz2 This is a wonderful resource! Thank you, Janneke (and Debian)! zimoun 写道： Cool! But how do you determine the "date", i.e., this reference '20190406T212022Z'

bug#39615: LetsEncrypt root certificate hash changed

Chris, Christopher Baines 写道： ~$ guix pull building /gnu/store/1r2cj292vvjvhbb92bri568p7dia7cp1-isrgrootx1.pem.drv... building /gnu/store/dhlb62lpf1ggcrax62hm7l7rlcf5c4fi-letsencryptauthorityx3.pem.drv... downloading from https://letsencrypt.org/certs/isrgrootx1.pem... -sha256 hash mismatch f

bug#39614: icecat "profile cannot be loaded"

Danny Milosavljevic 写道： There's also a command line option for icecat to specify another directory (--profile ...), but not sure whether it would create a new one, too. You can also start icecat with the ‘--ProfileManager’ option for the slightly more user-friendly GUI edition. Kind regards

bug#39575: guix time-machine fails when a tarball was modified in-place

zimoun 写道： Maybe I miss a point, but the file we need is the old one, not the new one, i.e., the one with the expected hash 1mpah6kwqid1kxsj4rwqsniivqbrx231j65v51yncx6s0dch0dch. And I should do ~ λ guix download https://www.tobias.gr/guix/harfbuzz-2.4.0.tar.bz2 Starting download of /tmp/gui

bug#39538: IceCat 68.4.1esr (64-bit) Missing digits

Christopher, This sounds like a duplicate of ol' bug #33996, so I'm merging the two. Christopher Howard 写道： Hello, I recently upgraded all user packages and also did a system reconfig. Below, I assume IceCat is installed to your user's default profile. In the new version of IceCat, I h

bug#39294: Can't run ./configure

Damien, Damien Cassou 写道： guix$ ./configure ... checking if (gnutls) is available... yes checking if (git) is available... no configure: error: Guile-Git is missing; please install it. I tried passing "--ad-hoc guile-git git" as parameter to "guix environment", but this does

bug#39288: Wrong keyboard layout to decrypt hard drive

Damien, Damien Cassou 写道： during graphical installation I chose to encrypt my hard drive and to use the colemak keyboard layout. After the system rebooted, typing the passphrase in colemak didn't work and I got dropped into rescue mode. The rescue mode is in qwerty, not colemak. Could you ch

bug#39287: [Graphical installation] Can't select location independently of language

Damien, Damien Cassou 写道： I'm installing Guix using the graphical installation method. After choosing English as language I would like to choose France as location. This is not possible however as it seems only English-speaking locations are provided (see attached screenshot). Both terms us

bug#39023: binary installation manual doesn't work on Alpine Linux

Gábor, Gábor Boskovits 写道： Oops, I missed that. I'm suprised I haven't confused add* & *add once so far in this thread :-) There was some upstream discussion to get useradd and groupadd to busybox upstream, as this seems to be causing problems everywhere. They told that they are unwilli

bug#39023: adduser/addgroup vs useradd/groupadd

Hullo Simon, zimoun 写道： options: a/ explicitly notice in the parenthesis that the chunk needs to be adapted; mentioning adduser/addgroup instead of useradd/groupadd for example. There's also: c/ do nothing, or d/ include the complete code snippet provided by symphonia, but as an ‘o

bug#39023: binary installation manual doesn't work on Alpine Linux

Gábor, Gábor Boskovits 写道： ezt írta (időpont: 2020. jan. 7., K, 22:32): I suggest adding another example which works by default on busybox. […] addgroup -S guixbuild […] I assume that the command you gave would work on non-busybox also. I would say we should replace the command we hav

bug#38086: RAID installation script with ‘mdadm’ no longer works

Ludo', Ludovic Courtès 写道： Continue creating array? D’oh, I hadn’t seen that message. I doubt it was there for you to see in Guix's output. Things not ending with a newline tend to get lost easily due to line-buffering. Probably not worth worrying about. “yes|” works like a charm, I

bug#38887: sassc has a memory leak

Jesse, Thanks for the report! Jesse Gibbons 写道： When I try to build arc-theme and leave it to run, the entire system eventually freezes. When I monitor how much memory it takes, I see that it spawns a sassc process that eventually takes all 30 GB of the RAM not taken by GNOME and the other se

bug#38086: RAID installation script with ‘mdadm’ no longer works

Ludovic Courtès 写道： As you can see, it’s attempting to make a RAID1 device out of two partitions (not two disks), which makes no sense in the real world, but is easier to handle here. So I wonder if this is what’s causing it to hang… It's just waiting for input: $ # dd & losetup magic, wh

bug#39073: GNU icecat number and # missing.

Pablo Ferreira 写道： Desde que eu atualizei o GNU Icecat para a versão 68.4.x eu não consigo mais ver números na internet. Solved (over IRC) by installing ‘font-gnu-freefont-ttf’ alongside IceCat. I'm merging this with bug #37345, because this still needs documenting if it can't be fixed in

bug#39060: Broken emacs-guix link in the Web manual

Guix, sameerynho/lxsameer on #guix helpfully reported that ‘The Emacs-Guix Reference Manual’ here[0] points to the wrong domain (guix.gnu.org). The source is @pxref{Top,,, emacs-guix, The Emacs-Guix Reference Manual} so I thought this would be a trivial fix but lo: EMACS_GUIX = https://e

bug#38942: nm-applet icons don't appear to be working

Matthew, Matthew Leach 写道： Sorry for the noise - please close. You can close any bug by appending -close (or the subtly different -done) to the bug number ‘recipient’ of your reply, as I've done above. Kind regards, T G-R signature.asc Description: PGP signature

bug#38924: Encrypted root volume requires passphrase twice on boot

Matthew, Matthew Leach 写道： I've setup guix on two machines each one of them with an encrypted root partition. However, on boot I'm prompted for my passphrase twice, once before the grub menu is shown and second after Linux has started and launched guile as init. Unfortunately, this is expec

bug#38521: guix package: error: build of `...-youtube-viewer-3.5.8.drv' failed

All, Marius, Tobias Geerinckx-Rice 写道： Alas for my free evening: commit 8524b1b8b4ba973864b67354d5d81ad1a691e764 Author: Tobias Geerinckx-Rice Date: Wed Oct 16 03:06:10 2019 +0200 gnu: perl-gtk2: Update to 1.24993. * gnu/packages/gtk.scm (perl-gtk2): Update to 1.24993

bug#35552: Dead Link

David, Brett, David Kleuker writes: the link "as its name suggests" on https://www.gnu.org/software/guix/blog/2018/tarballs-the-ultimate-container-image-format/ points to https://www.gnu.org/software/tar/manual/en/html_node/Introduction.html which shows 404 Thank you for catching & reportin

bug#38715: Issue with guile-email: unbound variable

Jelle, Jelle Licht 写道： Hey guix, Pretty recently, it seems something weird is happening when playing with guix on the REPL. On master, 5a947e118fb72b8fb1fd0c8d0b783fc7cde0c461: --8<---cut here---start->8--- $ guix repl (use-modules (gnu packages gnupg)

bug#38585: Installation script fails to import gpg keys

dalanicolai, Actually, try this instead of ‘sudo -i’: $ sudo --preserve-env ./guix-install.sh Kind regards, T G-R Source: https://debbugs.gnu.org/db/37/37939.html signature.asc Description: PGP signature

bug#38585: Installation script fails to import gpg keys

dalanicolai 写道： I try to install guix in Ubuntu using the installation script but it fails to import the gpg keys (see picture below) [image: image.png] Thanks for attaching the detailed output, by the way. It's really helpful :-) This sounds vaguely familiar. Does the following command w

bug#38586: Can not obtain gpg keys for binary install

dalanicolai 写道： Also when trying to install via binary, I am not able to obtain the gpg keys (see picture below) [image: image.png] I assume you copy and pasted these URLs from the ‘Binary Installation’ section of the manual. And the text explicitly states: 1. Download the binary tarball

bug#38500: Ruby is built against libruby-static.a

Vincente, Brett, Brett Gilio 写道： Vicente Eduardo writes: I would like to have two versions, or at least the dynamic one, that's the common way Ruby should be built, and also the Guixy style. Important: static linking isn't the Guixy style at all! Statically linking different packages ‘sub

bug#38446: Guix pull broken

Ricardo, Ricardo Wurmus 写道： For the time being you can do git clone https://guix.gnu.org/git/guix which is a read-only copy of my clone of the repository. I’d like to make it automatically sync up with the repo on Savannah, but I ran out of time. Did you use --mirror to do this? It sh

bug#38446: Guix pull broken

Clément Lassieur 写道： Would it be possible to have an *official* backup Git repository hosted somewhere else (like Github, or whatever), where we could redirect users when they encounter issues? Coming soon ;-) Kind regards, T G-R signature.asc Description: PGP signature

bug#38360: Retroarch might violate FSDG

Arne, Arne Babenhauserheide 写道： Aren’t we overblocking here? As of current master: very likely :-( Regardless of (y)our opinions on commerce and freedom, downloading executables that violate GNU's own Free Software Distribution Guidelines is simply not an option. However, it's very likely

bug#38439: No way for Retroarch users to install cores & assets via Guix

Guix, When starting our Retroarch package, it warns: ‘Missing assets, go get some’. Unfortunately, there's no way to do so through Guix apart from manually searching for the required core(s) & assets and downloading them to the right location. It would be nice to be able to just run ‘guix

bug#38360: [PATCH] gnu: retroarch: Disable Online Updater [FSDG fix].

Nicolò, Guix, Tobias Geerinckx-Rice via Bug reports for GNU Guix 写道： * gnu/packages/emulators.scm (retroarch)[source]: Add patch and snippet. * packages/patches/retroarch-disable-online-updater.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. That patch was incomplete, but I&#x

bug#38360: [PATCH] gnu: retroarch: Disable Online Updater [FSDG fix].

Addresses . * gnu/packages/emulators.scm (retroarch)[source]: Add patch and snippet. * packages/patches/retroarch-disable-online-updater.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. --- gnu/local.mk | 1 + gnu

bug#38360: Retroarch might violate FSDG

Tobias Geerinckx-Rice via Bug reports for GNU Guix 写道： $ echo 'menu_show_core_updater = "false"' ^ "true", of course… Kind regards, T G-R signature.asc Description: PGP signature

bug#38360: Retroarch might violate FSDG

Tobias Geerinckx-Rice 写道： I'm looking into this now. So I've installed Retroarch on Debian. They patch[0] it to hide the Updater by default but it's trivial to reënable (tested): $ echo 'menu_show_core_updater = "false"' >> \ ~/.config/retro

bug#38422: .png files in /gnu/store with executable permissions (555)

Bengt, Ricardo, I see similar results here with ‘guix install moka-icon-theme’, and I'm sure the rest of my (and everyone's) store is full of misperm'd files too. It's kind of generally known. This seems to be particularly common in Meson packages: for some reason, Meson installs everything

bug#38360: Retroarch might violate FSDG

Ludovic Courtès 写道： Would you be able to help with that? Hopefully there are patches we can take from Debian, no? If nobody can work on it in a timely fashion, I would propose to remove retroarch until someone can do this work. I'm looking into this now. Kind regards, T G-R signature.a

bug#38360: Retroarch does violate FSDG

Guix, This is not about Schrödinger's proprietary-until-proven-innocent binary. The Updater includes at least two cores explicitly marked as non-free in Debian: libretro-genesisplusgx libretro-snes9x Disabling the Updater seems like an open & shut case to me. This is a shame, because I t

bug#38356: bambam-0.6: runtime failure missing pygame

Tobias Geerinckx-Rice 写道： Thanks for the report! Updating bambam to 1.0.0 on master fixed this for me. Let me know if it still doesn't work for you after ‘guix pull’ and an update. Savannah is rejecting my push (it just hangs), so ‘guix pull’ won't get you the new Bambam.

bug#38356: bambam-0.6: runtime failure missing pygame

Christopher, Christopher Howard 写道： christopher@nightshade ~$ bambam Traceback (most recent call last): File "/gnu/store/6w3vk2z278vwp629hgr71gw2xagdmdl9-bambam- 0.6/bin/.bambam-real", line 20, in import pygame, sys,os, random, string, glob ImportError: No module named pygame Thanks for

bug#38357: babl-0.1.72 build failure (test failure) - dependency for gimp

Christopher, Thanks for the bug report! Christopher Howard 写道： 22/25 alpha_symmetric_transform FAIL 0.12 s (exit I've built master's babl a few times now, the damned thing keeps succeeding: λ guix describe […] guix 39bf4e0 repository URL: https://git.savannah.gnu.

bug#38295: manual-config php-fpm mismatch

Efraim, Efraim Flashner 写道： In (gnu services web) for it says that default for 'socket-group' is "nginx". In the manual, in 8.8.16 (Web Services), it says the socket-group default is php-fpm. Good catch. Obviously when deploying the code trumps the manual, but what is it supposed to be?

bug#38148: Guix packages old/broken version of qutebrowser

Florian, [I'm not a regular qutebrowser user, nor maintainer — I don't think we have one.] Florian Bruhin 写道： I'm the upstream author of qutebrowser - it looks like Guix currently packages qutebrowser 0.11.0: https://guix.gnu.org/packages/qutebrowser-0.11.0/ That version is very outdated (

bug#37942: Insufficient environment wrappers

Leo, Leo Prikler 写道： Some packages -- such as meld after the startup fix -- fail to use important resources when simply called from their build directory. This is… true, and has been a source of personal annoyance for years :-) As it is, this bug report is a bit vague, almost a meta-bug (‘

bug#37469: meld doesn't start up successfully

Danny, I can't reproduce this failure so I'm closing the bug. Kind regards, T G-R signature.asc Description: PGP signature

bug#37937: Lollypop missing propagated-input gsettings-desktop-schemas

Sam, Sam 写道： lollypop is missing gsettings-desktop-schemas as dependency, and fails to start without the package. Thanks for reporting this, and for trying to fix it. I took a different approach in commit 8ac8b3b3601560c4a455543435276a8cdf61b54e: propagation is, at heart, a kluge, and one

bug#37882: [PATCH] build-system/linux-module: Accept a #:make-flags keyword.

--- a/guix/build-system/linux-module.scm +++ b/guix/build-system/linux-module.scm @@ -1,5 +1,6 @@ ;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2019 Danny Milosavljevic +;;; Copyright © 2019 Tobias Geerinckx-Rice ;;; ;;; This file is part of GNU Guix. ;;; @@ -120,6 +

bug#37914: guix avahi install fails

Bengt, Bengt Richter 写道： patching file avahi-core/server.c patching file avahi-core/server.c Hunk #1 FAILED at 930. You should ‘guix pull’ and try again: this was fixed on master a day or two ago. I'm closing this bug for that reason. Let me know if you still have problems with avahi. K

bug#37911: Cannot build a system with colord-service.

Pierre, Pierre Langlois 写道： Hello Guix! I tried to add (service colord-service) to my config and I got a error back :-(. I reduced my system to the minimum but the problem is persist. Probably related to my recent colord update to fix simple-scan. I'll take a look. Thanks! T G-R signa

bug#37905: (no subject)

…and adjusted in commit 70a4fb6f983f05b5630cf8c7d85c3143b6d5523b. Kind regards, T G-R signature.asc Description: PGP signature

bug#37904: CPU overheating on recent laptops

Ludo', Ludovic Courtès 写道： Also, there used to be an “ondemand” governor, which is no longer listed in /sys/devices/system/cpu/cpu?/cpufreq/scaling_available_governors. For laptops and other battery-powered devices, ‘conservative’ is preferred over ‘ondemand’. It's probably a sane default c

bug#37905: psmisc-23.2.tar.xz was updated in place

Guix, Here's[0] the diff with pretty colours. Here it is without: diff -Naur psmisc-23.2-old/ChangeLog psmisc-23.2-new/ChangeLog --- psmisc-23.2-old/ChangeLog 2018-08-13 13:25:48.670327531 +0200 +++ psmisc-23.2-new/ChangeLog 2018-09-18 13:13:41.336594226 +0200 @@ -2,9 +2,11 @@ ===

bug#37687: simple-scan build failure

Guix, With commit d9f6d587, Simple Scan has finally been updated to Document Scanner 3.34.1. Sorry it took so long (a whole core-updates cycle…). Do not, however, despair: there's a minor cosmetic issue with a handful of missing icons if anyone's feeling bored. Kind regards, T G-R sign

bug#37897: Bug: Resetting locale settings

Hullo again, I can't help you with your exact problem, but o.ro...@posteo.net 写道： In the latter case, I was able to login via 'loadkeys /run/current-system/profile/share/keymaps/i386/qwertz/de-latin1' in TTY (where I went with C-M-F2 or F3, nvm); but now, I am unable to set the keymap via loa

bug#37897: bug#37896: setxkbmap has worked

Hullo, I think this was sent to bug #37896 by mistake so I'm re-posting it to what I assume is the correct bug number: o.ro...@posteo.net 写道： Hello everyone, just a quickie: I noticed that even though loadkeys doesnt work, setxkbmap does. Sorry, just read the setxkbmap and figured how to us

bug#37896: Bug: Cannot use `guix pull`

Hullo, o.ro...@posteo.net 写道： after some time of not upgrading, I have been unable to guix pull and thus to upgrade my system. Find below what has occurred after I ran `guix pull` Thanks for the report! This was due to an incomplete commit on master, which I've reverted for now (in 9eec52

bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

Ludo', Ludovic Courtès 写道： See https://issues.guix.gnu.org/issue/37744 Will this be automatically linkified? This issue was initially [reported by Michael Orlitzky for Nix](https://www.openwall.com/lists/oss-security/2019/10/09/4) ([CVE-2019-17365](https://nvd.nist.gov/vuln/detail?vulnId=CVE

bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

Let's try that again: (nl "Onveilige @file{/var/guix/profiles/per-user}-rechten")) (nl "Het standaard gebruikersprofiel, @file{~/.guix-profile}, verwijst naar @file{/var/guix/profiles/per-user/$USER}. Tot op heden kon om het even wie in @file{/var/guix/profiles/per-user} schrijve

bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

Ludo', Ludovic Courtès 写道： Taking that into account, I propose this (I’ve also changed the title to make it hopefully clearer): Here's my NL translation: (nl "Onveilige @file{/var/guix/profiles/per-user}-rechten")) (nl "Het standaard gebruikersprofiel, @file{~/.guix-profile

bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

pelzflorian (Florian Pelz) 写道： On Wed, Oct 16, 2019 at 05:16:47PM +0200, Tobias Geerinckx-Rice wrote: blah blah blah Sorry for being imprecise. I meant on Guix System. Sorry for misreading, you're right that it shouldn't be needed (or recommended IMO). Kind regar

bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

pelzflorian, pelzflorian (Florian Pelz) 写道： Why sudo guix pull? It should be without sudo, am I wrong? Guix on ‘foreign’ distributions uses the root profile for the daemon by default (i.e. in guix-daemon.service). You could change this to a regular user's profile, but that amounts to givi

bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

Ludo', That was swift, thanks! IANAC++. Ludovic Courtès 写道： diff --git a/nix/libstore/local-store.cc b/nix/libstore/local-store.cc index 3b08492c64..3793382361 100644 --- a/nix/libstore/local-store.cc +++ b/nix/libstore/local-store.cc @@ -88,8 +88,9 @@ LocalStore::LocalStore(bool reserveSpace

bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

Ludo', Thanks for your answer. Ludovic Courtès 写道： I need more cluebat please: say I'm an attacker and connect to your daemon (over TCP, why not), asking it to create an empty ‘per-user/ludo’. You wouldn’t be able to do that because over TCP because the daemon can’t tell what user you are.

bug#37692: quaternion not displaying anything

Jesse, Jesse Gibbons 写道： Looks like you fixed it. Thanks! Great! You can close bugs by sending mail to nnn-d...@debbugs.gnu.org, as I'm doing now. Happy posting links to long messages, T G-R signature.asc Description: PGP signature

bug#37759: network-manager-openvpn broken since network-manager-applet update

Jelle, Jelle Licht 写道： Commit 8fc3a337ab420dc9f80472ce057eae603fc892d3, the update of network-manager-applet to 1.8.24, broke network-manager-openvpn: --8<---cut here---start->8--- checking for LIBNM_GTK... no configure: error: Package requirements (libnm-g

bug#37692: quaternion not displaying anything

Jesse, Jesse Gibbons 写道： 1. launch quaternion 2. click on any subscribed page The page display area remains blank. Quaternion 0.0.9.4c works fine in my filthy environment. What's a ‘subscribed page’? A hyperlink? Convo history? Does ‘anything’ in the subject include window dressing? Someo

bug#37744: Per-user profile directory hijack (CVE-2019-17365 for Nix)

Ludo', Thanks for your report :-p The 1777 is obviously very bad, no question. However: question: Ludovic Courtès 写道： I don’t see how to let the daemon create ‘per-user/$USER’ on behalf of the client for clients connecting over TCP. Or we’d need to add a challenge mechanism or authenticati

bug#37721: build failure: parted 3.3

Jesse, Jesse Gibbons 写道： This one prevents me from upgrading gnome-tweaks. It appears there is a failure in applying "parted-glibc-compat.patch". Yes, yes indeed… $ git show stash | grep '(patches' - (patches (search-patches "parted-glibc-compat.patch")) Sorry, and thanks for repo

bug#37694: Problem with guix pull from local repository

Jan 写道： Somehow pulling a few times didn't work, but now it works. Strange, don't know what have happened. It was fixed up the stream :-) Commit 2d821e4c7fd8968639bd793f5e1485447fe49374. Kind regards, T G-R signature.asc Description: PGP signature

bug#37695: Issue Fixed

Steven, Steven vanZyl 写道： This issue was fixed by commit: 2d821e4c7fd8968639bd793f5e1485447fe49374 I've merged this bug with the duplicate (#37694, so you probably crossed each other :-) and closed it. Thanks! T G-R signature.asc Description: PGP signature

bug#37479: International locale error

Quiliro, You say that: quil...@riseup.net 写道： My current locale is es_EC.UTF-8: quiliro@GSD3 ~$ locale locale: Cannot set LC_CTYPE to default locale: No such file or directory locale: Cannot set LC_MESSAGES to default locale: No such file or directory locale: Cannot set LC_ALL to default loca

bug#36634: Virtual Machine Manager (virt-manager)

Chrisen, Chris Marusich 写道： In the meantime, should we revert to version 5.4.0 in Guix? I'm not sure if there are any security vulnerabilities between 5.4.0 and the most recent release, but this bug is currently preventing me from creating any VMs at all in Guix using virt-manager, which is

bug#37482: Guix fails to build libreoffice

Tobias Geerinckx-Rice 写道： People tend to underestimate just how slow swap is by several orders of magnitude, though. Or just how quickly it can destroy an SSD. Kind regards, T G-R signature.asc Description: PGP signature

bug#37482: Guix fails to build libreoffice

Jesse Gibbons 写道： Even then, some complex executables will simply fail to link with so little RAM. You can get around too little RAM by using swap, correct? Partition ~8GB as swap and add (swap-devices) in the configuration. Sure, I think I suggested that (I was serious about Gnome, too!).

bug#37482: Guix fails to build libreoffice

Jan, Thanks for the report, and sorry you had to learn this the hard way. Jan Wielkiewicz 写道： I've recently tried to reconfigure my system, but after about 3 hours of building libreoffice, the system froze for 2 hours and then guix threw: […] g++: internal compiler error: Killed (progra

bug#37421: Apply nodejs test workaround?

Jack, Jack Hill 写道： I wanted to ping this issue. From the discussion in #37421, it seems like we are OK with disabling the problematic tests as a work-around for now. We are. Done as aae65db560bd146ba47774cca46056d72be2a5d4 and closing. Kind regards, T G-R signature.asc Description: P

bug#37423: Changing the login service from GDM to SLiM and then back to GDM causes a really bad loop

Hi Ludo'! Ludovic Courtès 写道： However, looking at the allocation routines in (gnu build accounts), I think that this would forcefully set ‘gdm’ to 900/900 on existing installations, even if 900 is already used by another account: I'm already using GID 900 (and others) for my own nefarious en

bug#37437: hash mismatch for emacs-elixir-mode

Tobias Geerinckx-Rice 写道： I can check my substitute server tomorrow for the ‘original’ (091cizxg1aw8bkj58y048mj020ssapjflav633z9bl6gmi10dy4v) tarball if nobody else has a copy. Guix servers don't seem to. I didn't have the chance while in LAN range, and the point's now moot

bug#37437: hash mismatch for emacs-elixir-mode

Josh, Thanks for the report! Josh Holland 写道： \sha256 hash mismatch for /gnu/store/bb5m97pbmzvwlvn8wmrdfgpvnl0k8r1m-elixir-mode-2.3.1.tar: expected hash: 091cizxg1aw8bkj58y048mj020ssapjflav633z9bl6gmi10dy4v actual hash: 13d5r64rqskdapnrbbxv0h91gn77c6af5kjjrg5mpphvl887s04c It's alrea

bug#37421: [PATCH] gnu: node: Disable tests that fail with openssl@1.1.1d.

Ludovic Courtès 写道： Could we take a look at what these failures are about to see how bad that might be? Jelle Licht 写道： Interestingly enough, https://github.com/nodejs/node/issues/3881 notes issues with exactly these two tests. Perhaps there is a regressions in our case? Thanks, and indee

bug#37421: [PATCH] gnu: node: Disable tests that fail with openssl@1.1.1d.

Work around . * gnu/packages/node.scm (node)[arguments]: Disable failing tests. --- Jelle, Guix, So here's the obvious non-solution, ignoring test failures being the lesser evil compared to 4 potential CVEs anywhere in a Web browser's closure

bug#36896: [PATCH] added gsettings-desktop-schema to progragated inputs

Martin, Martin Becze 写道： ping :P Absolutely. The diff you sent here[0] is incomplete (it relies on your previous patch and doesn't have a header); please always send git-formatted patches that apply directly to current master. They are easier to merge and will be merged sooner. Yeah I d

bug#37386: ungoogled-chromium broken because of openssl update

Jelle, Jelle Licht 写道： Commit cf065aba1ec14bdacab7a5a6bddbdfd7661cd409 seems to have broken node, which subsequently broke ungoogled-chromium. It should still be possible to upgrade node to the latest LTS version 10.16.3, but this requires an upgrade to the following rebuild-the-world package

bug#37371: CMake’s “ctest” doesn’t know about X.509 certificates

Ricardo, Ricardo Wurmus 写道： This is the correct way, in my opinion. The user of libcurl is supposed to handle environment variable lookup. I'm aware of this, but it seems like some users don't do this. On #guix, Tobias also rightfully suggested adding a ‘getenv’ call directly in libcurl, w

bug#36896: [PATCH] added gsettings-desktop-schema to progragated inputs

Martin, Martin Becze 写道： Prefix appends ${MY_VAR:+:}$MY_VAR to the env var, so that seems nice. Sure, that's what I'd expect, but why is it preferred over keeping any user-defined entries first? Kind regards, T G-R signature.asc Description: PGP signature

bug#37308: guix weston-launch segfaults, /usr/bin/weston-launch does not -- why?

Bengt, Bengt Richter 写道： Could we have [strace -k] back, or is it a security issue? Ask upstream, they disabled[0] it by default, but I can't see how it could ever be a ‘security issue’. strace isn't installed setuid. Thanks for noticing, T G-R [0]: https://github.com/strace/strace/blo

<    1   2   3   4   5   6   7   8   >