[SECURITY] Setuid binaries created in /gnu/store on GuixSD

2017-10-08 Thread Ludovic Courtès
GuixSD Security Advisory On GuixSD, ‘activate-setuid-programs’ in (gnu build activation) would create setuid-root binaries under /gnu/store for all the programs listed under ‘setuid-programs’ in the ‘operating-system’ declaration. Consequently, any program that appeared i

Re: Wrong hashes for libgit2 archives

2017-10-08 Thread Leo Famulari
On Sun, Oct 08, 2017 at 06:46:04PM +0200, Hartmut Goebel wrote: > Hi, > > I'm currently stuck with building kde-frameworks due to mismatching > hashes for libgit2: > > @ build-failed > /gnu/store/mgh4yjxkxfyqmc7c61vwq4vs8v837602-libgit2-0.26.0.tar.gz.drv - > 1 sha256 hash mismatch for output path

Re: hardcoded $HOME/.guix-profile in kdevelop

2017-10-08 Thread Thomas Danckaert
From: Ricardo Wurmus Subject: hardcoded $HOME/.guix-profile in kdevelop Date: Mon, 04 Sep 2017 21:17:44 +0200 I think we should not hardcode the default user profile directory in application wrappers. Is it really necessary to add “$HOME/.guix-profile” to XDG_DATA_DIRS in the wrapper? Will th

Wrong hashes for libgit2 archives

2017-10-08 Thread Hartmut Goebel
Hi, I'm currently stuck with building kde-frameworks due to mismatching hashes for libgit2: @ build-failed /gnu/store/mgh4yjxkxfyqmc7c61vwq4vs8v837602-libgit2-0.26.0.tar.gz.drv - 1 sha256 hash mismatch for output path `/gnu/store/53lj4z9cavl7n27r89zjnvyd8fk854kj-libgit2-0.26.0.tar.gz'   expected:

Re: Updating Guix package manager on Debian-based systems

2017-10-08 Thread Adonay Felipe Nogueira
Just for clarity: "# " means it must be run as root. Generally, you woould want to update/pull and upgrade guix as root first. When done, then do the same for everyone that *does* have a Guix profile enabled. l...@gnu.org (Ludovic Courtès) writes: > Hello, > > > Guix can update itself. There ar

Re: Scope of support for Guix on other distros

2017-10-08 Thread Adonay Felipe Nogueira
Personally, I'm against mentioning these in the download page, the reason being that I *think* it is somewhat like recommending non-free system distributions. ng0 writes: > > By my own observation, systems including Guix either officially > or by third-party / community methods: > > Archlinux: h

Re: Browsing Guix (or any) lists with Gmane

2017-10-08 Thread Adonay Felipe Nogueira
Interesting... I wonder if this can be combined with the current Namazu instance? I ask because we also have Namazu which allows searching, and which I think is also provided by the provider who hosts this mailing list. Maxim Cournoyer writes: > Hello Guix! > > For Guix and Gnus (or to become)

Re: [PATCH] DRAFT: build: Compile scheme modules in batches (was Re: Release!)

2017-10-08 Thread Ricardo Wurmus
Ricardo Wurmus writes: > Ricardo Wurmus writes: > >>> I've attached a workaround that I've been using for the last 6 weeks on >>> my MIPS-based Yeeloong running GuixSD, since it only has 1 GB of RAM and >>> otherwise it would not be able to successfully build the 'guix' package. >>> >>> Note th

Re: Release!

2017-10-08 Thread Hartmut Goebel
Am 07.10.2017 um 23:30 schrieb Ricardo Wurmus: > The target audience here has little overlap with Guix developers. […] > The goal I had in mind when I worked on the JSON importer was to make > packaging even simpler for people who don’t really care all that much > about packaging – […] +1 -- Re

Re: Building things other than Guix with Cuirass

2017-10-08 Thread Christopher Baines
On Wed, 20 Sep 2017 08:20:18 +0200 Jan Nieuwenhuizen wrote: > Christopher Baines writes: > > > Providing these packages sit within the Guix repository, > > ...and if they don't you can set > > (#:load-path . "/your/packages/directory") > > (It says path, but means directory I think). >

Re: [PATCH] DRAFT: build: Compile scheme modules in batches (was Re: Release!)

2017-10-08 Thread Ricardo Wurmus
Ricardo Wurmus writes: >> I've attached a workaround that I've been using for the last 6 weeks on >> my MIPS-based Yeeloong running GuixSD, since it only has 1 GB of RAM and >> otherwise it would not be able to successfully build the 'guix' package. >> >> Note that I never use 'guix pull', so I'

Re: [PATCH] DRAFT: build: Compile scheme modules in batches (was Re: Release!)

2017-10-08 Thread Ricardo Wurmus
Hi Mark, > I've attached a workaround that I've been using for the last 6 weeks on > my MIPS-based Yeeloong running GuixSD, since it only has 1 GB of RAM and > otherwise it would not be able to successfully build the 'guix' package. > > Note that I never use 'guix pull', so I'm not sure off-hand