Re: “Building a Secure Software Supply Chain with GNU Guix”

On +2022-06-30 16:13:10 +0200, Ludovic Courtès wrote: > Hello Guix! > > I’m happy to announce the publication of a refereed paper in the > Programming journal: > > https://doi.org/10.22152/programming-journal.org/2023/7/1 > > It talks about the “secure update” mechanism used for channels and h

Re: Experimental nar-herder support for serving fixed output files by hash

Ludovic Courtès writes: >>> IWBN to share as much code as possible with ‘guix publish’, which has >>> great test suite coverage and is being hammered every day. Clearly the >>> bit about extracting nars is specific to the nar-herder though, so that >>> may prove difficult. >> >> I'm going to lo

Re: Rust in the kernel

On Thu, Jun 30, 2022 at 12:37:54PM -0400, Leo Famulari wrote: > Within Guix, we'll need to adapt our kernel build processes in order to > support this. An update on GCC support for Rust: https://lwn.net/Articles/899385/ signature.asc Description: PGP signature

Rust in the kernel

The effort to use the Rust programming language within the Linux kernel is progressing and may be realized in the next few months: https://lwn.net/SubscriberLink/899182/6c831b90eaee015e/ https://www.memorysafety.org/blog/memory-safety-in-linux-kernel/ Within Guix, we'll need to adapt our kernel b

Re: r-mathjaxr

Ricardo Wurmus skribis: > Ricardo Wurmus writes: > >> unfortunately I had to revert commits >> 9078c651e8d50e08b46e3b2da1c532c15af5ddb6 (Add r-mathjaxr) and >> 00056eafaefed0af8535f219760fbbe01dd6f240 (updating r-metafor). > […] >> The good news is that we can soon build a >> slightly degraded v

“Building a Secure Software Supply Chain with GNU Guix”

Hello Guix! I’m happy to announce the publication of a refereed paper in the Programming journal: https://doi.org/10.22152/programming-journal.org/2023/7/1 It talks about the “secure update” mechanism used for channels and how it fits together with functional deployment, reproducible builds, a

Re: r-mathjaxr

Ricardo Wurmus writes: > unfortunately I had to revert commits > 9078c651e8d50e08b46e3b2da1c532c15af5ddb6 (Add r-mathjaxr) and > 00056eafaefed0af8535f219760fbbe01dd6f240 (updating r-metafor). […] > The good news is that we can soon build a > slightly degraded version of mathjaxr completely from

Re: Experimental nar-herder support for serving fixed output files by hash

Hi, Christopher Baines skribis: > Ludovic Courtès writes: > >>> The code isn't great, there's some difficulty in extracting the single >>> file from the nar, but the biggest problem is a limitation in the guile >>> fibers web server. Currently, responses have to be read in to memory, >>> which

Re: Rust reprodubility -- .rmeta and shadow-rs

Hello! Maxime Devos skribis: > There was some mail about irreproducibility in Rust, but I couldn't > find it anymore. Anyway, I found a potential cause: rust-shadow-rs > embeds timestamps (even though it nominally respects > SOURCE_DATE_EPOCH???) and the ordering of definitions it generates is

Re: RISCV porting effort

Howdy, Efraim Flashner skribis: > (ins)efraim@3900XT ~/workspace/guix$ time ./pre-inst-env guix weather -s > riscv64-linux --substitute-urls="http://localhost:3000"; -c100 > computing 15,205 package derivations for riscv64-linux... > looking for 15,948 store items on http://localhost:3000... >

Re: guix refresh to a specific version?

Hartmut Goebel skribis: > FYI: I'm working on this. Given the number of importers and updaters > is just takes some time. Excellent. If you want, you can ping me for early comments on the API for this. Ludo’.

Re: Rust reprodubility -- .rmeta and shadow-rs

> https://issues.guix.gnu.org/50015 I don't think that shadow-rs changes Cargo.toml, so I think that one is a separate issue ... > https://issues.guix.gnu.org/55928 Maybe related, though .rmeta isn't mentioned there so maybe not. Seems debugging information related, so maybe the report at (and f

Re: Dealing with upstream issues

Hi! Just to be clear, I started this thread as discussion on the kind of interaction we reviewers should offer to submitters. I am not suggesting changes in our “quality standards”, nor am I suggesting that one group of people do more work. Maxime Devos skribis: > Ludovic Courtès schreef op ma

Re: emacs-jedi package bug missing crucial python server file

jgart writes: > On Wed, 22 Jun 2022 12:14:10 +0300 Munyoki Kilyungi > wrote: >> but do you have all your Emacs configs in Guix? > > I get my emacs plugin dependencies with guix but I write my config in elisp: > > https://git.sr.ht/~whereiseveryone/jgart-dots/tree/master/item/dot_emacs > Than

r-mathjaxr

Hi, unfortunately I had to revert commits 9078c651e8d50e08b46e3b2da1c532c15af5ddb6 (Add r-mathjaxr) and 00056eafaefed0af8535f219760fbbe01dd6f240 (updating r-metafor). mathjaxr contains vast amounts of minified JavaScript that cannot be built from source. The Guix R team has been working on packa

Re: Shall updaters fall back to other updaters?

Hartmut Goebel schreef op do 30-06-2022 om 10:58 [+0200]: > Hi, > > while working on refreshing to a specific version (see > https://lists.gnu.org/archive/html/guix-devel/2022-06/msg00222.html) I > discovered that the updaters fall back to another updater. Is this intended? > > Concrete example

Shall updaters fall back to other updaters?

Hi, while working on refreshing to a specific version (see https://lists.gnu.org/archive/html/guix-devel/2022-06/msg00222.html) I discovered that the updaters fall back to another updater. Is this intended? Concrete example (using refresh to a specific version): Package "xlsxio" has no versi

Re: Why is greetd greeter user in so many groups?

Hi, > Sounds good, thanks for the fix! d921516f50a946e92f9d5dc6d3bd49aca9788ac2 services: greetd: Remove unnecessary user groups. Cheers, Lars