aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* gnu: Add newsraft.Luis Guilherme Coelho2024-11-03
| | | | | | | | * gnu/packages/syndication.scm (newsraft): New variable. Change-Id: Iea8d28df6f41d668818fded83a9ca77b77291484 Co-authored-by: Sharlatan Hellseher <sharlatanus@gmail.com> Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
* activation: Create directory with specified perms in ‘mkdir-p/perms’.Reepca Russelstein2024-11-03
| | | | | | | | | | | | | | | | | | | There is currently a window of time between when the desired directory is created and when its permissions are changed. During this time, its permissions are restricted only by the umask. Of course, in the "directory already exists" case, this doesn't matter, but if the directory has been specifically deleted ahead of time so that it is created afresh, this is an unnecessary window. We can avoid this by passing the caller-provided BITS to 'mkdirat' when attempting to create the last directory. * gnu/build/activation.scm (mkdir-p/perms): Create target directory with BITS permissions. Change-Id: I03d2c620872e86b6f591abe0f1c8317aa1245383 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* services: guix: Add access control to daemon socket.Reepca Russelstein2024-11-03
| | | | | | | | | | * gnu/services/base.scm (guix-configuration-socket-directory-{permissions,group,user}): New fields. (guix-shepherd-service): Use them. * doc/guix.texi (Base Services): Document them. Change-Id: I8f4c2e20392ced47c09812e62903c87cc0f4a97a Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* system: %default-privileged-programs: Set ping capabilitiesRutherther2024-11-03
| | | | | | | | | | | | | | Ping and ping6 don't need setuid, they can work with cap_net_raw capability only. This means that even if ping or ping6 had a vulnerability that could be used for execution as root, it can't anymore if the program is not setuid. * gnu/system.scm (%default-privileged-programs): Remove ping, ping6 setuid programs, add ping, ping6 programs with cap_net_raw=ep capabilities Change-Id: Ie409b477f548dbff3318eec33d0d2ca16a1b3209 Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* services: cuirass: Run ‘remote-worker’ under its own user/group.Ludovic Courtès2024-11-03
| | | | | | | | | | | | | The ‘--user’ option was added to ‘cuirass remote-worker’ in Cuirass commit 3a6abc17f904f38098d3ab08e9d82de2e821d348 (Nov. 2023). * gnu/services/cuirass.scm (%cuirass-remote-worker-accounts): New variable. (cuirass-remote-worker-shepherd-service): Pass ‘--user’. (cuirass-remote-worker-service-type): Add ACCOUNT-SERVICE-TYPE extension. Change-Id: I075ea02b6972adcad0a75e330073e85c4dacbbc5
* doc: Promote “Teams” section.Ludovic Courtès2024-11-03
| | | | | | | | | | Suggested by Simon Tournier <zimon.toutoune@gmail.com>. * doc/contributing.texi (Teams): Move from subsection of “Submitting Patches” to section of “Contributing”. Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Change-Id: Id21be29380fc981e74a5025b1467eebde8566726
* doc: Add “Making Decisions” section.Ludovic Courtès2024-11-03
| | | | | | | | | | | | Suggested by Simon Tournier <zimon.toutoune@gmail.com>. * doc/contributing.texi (Making Decisions): New section, with paragraphs moved from… (Commit Access): … here. Cross-reference it. (Teams): Likewise. Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com> Change-Id: Ib276242e0ec7598a1b60dacdde8647bd3d3b85d3
* teams: Add Sysadmin team.Sharlatan Hellseher2024-11-03
| | | | | | * etc/teams.scm (sysadmin): New team; add Sharlatan to it. Change-Id: Icf943af03420a7ae4f259953bb08591e9e79054d
* gnu: Remove faust-0.9.67.Nicolas Graves2024-11-03
| | | | | | * gnu/packages/audio.scm (faust-0.9.67): Delete variable. Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
* gnu: sorcer: Update to 1.1.3-2.94107b2.Nicolas Graves2024-11-03
| | | | | | | | | * gnu/packages/music.scm (sorcer): Update to 1.1.3-2.94107b2. [arguments]<#:phases>: Remove 'remove-architecture-specific-flags phase. Adapt 'build-faust-sources to faust-2. [native-inputs]: Replace faust-0.9.67 by faust-2. Add which. Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
* gnu: dunst: Update to 1.11.0.Sergey Trofimov2024-11-03
| | | | * gnu/packages/wm.scm (dunst): Update to 1.11.0.
* gnu: ruby-ethon: Fix libcurl detection at runtime.Nicolas Graves2024-11-03
| | | | | * gnu/packages/ruby.scm (ruby-ethon)[arguments]<#:phases>: Add phase 'libcurl-use-absolute-reference.
* gnu: s2n: Support all 64-bit systems.Efraim Flashner2024-11-03
| | | | | | | * gnu/packages/tls.scm (s2n)[supported-systems]: Expand to all 64-bit systems supported in Guix. Change-Id: Ide97bf8e5ec5090c4fb740c90cf0ec2aee4a3771
* gnu: btop: Fix SEGFAULT error on Intel GPUs.Artyom V. Poptsov2024-11-03
| | | | | | | | | | | | btop would fail on built-in Intel GPUs, this patch fixes that (see <https://github.com/aristocratos/btop/pull/958>.) * gnu/packages/patches/btop-fix-segfault-on-intel-gpus.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/admin.scm (btop): Use it. Change-Id: Ic2bbf55a5f892a37bde17db6fb15025733b9bad6 Reviewed-by: Z572 <zhengjunjie@iscas.ac.cn>
* gnu: btop: Generate and install the man page.Artyom V. Poptsov2024-11-03
| | | | | | | | * gnu/packages/admin.scm (btop)[native-inputs]: Add lowdown to allow generation and installation of the program man page. Change-Id: I1eb0c9491d89f21ef408cbcb4fb10f99be46690e Reviewed-by: Z572 <zhengjunjie@iscas.ac.cn>
* gnu: go-git-sr-ht-rockorager-go-jmap: Fix description.Efraim Flashner2024-11-02
| | | | | | | * gnu/packages/golang-web.scm (go-git-sr-ht-rockorager-go-jmap) [description]: Remove duplicate symbols in description field. Change-Id: I79be38ef07cb0eae1e0a0afdcdd01e24bfebd7aa
* gnu: iwd: Update to 3.0.Sergey Trofimov2024-11-03
| | | | | | * gnu/packages/networking.scm (iwd): Update to 3.0. Signed-off-by: Hilton Chain <hako@ultrarare.space>
* gnu: ell: Update to 0.69.Sergey Trofimov2024-11-03
| | | | | | * gnu/packages/linux.scm (ell): Update to 0.69. Signed-off-by: Hilton Chain <hako@ultrarare.space>
* gnu: Add distcc.Noé Lopez2024-11-02
| | | | | | * gnu/packages/distributed.scm (distcc): New package. Change-Id: Ibf486fbb5661e31769d8f987fc787ddfb514e57c
* gnu: Add kapptemplate.Sughosha2024-11-02
| | | | | | | * gnu/packages/kde.scm (kapptemplate): New variable. Change-Id: I25b930749db5c366496f2b883bbde838aa583383 Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>
* gnu: okular: Update to 24.08.2.Zheng Junjie2024-11-02
| | | | | | * gnu/packages/kde.scm (okular): Update to 24.08.2. Change-Id: I4004be7c32157c5cc16f7152c19f5ad0c8513ccd
* gnu: crun: Update to 1.18.2.Zheng Junjie2024-11-02
| | | | | | * gnu/packages/containers.scm (crun): Update to 1.18.2. Change-Id: I2406a055a3833092b070aec8e8e17c6d4f865c0d
* gnu: mpd-mpc: build from git source.Zheng Junjie2024-11-02
| | | | | | * gnu/packages/mpd.scm (mpd-mpc)[source]: Switch to git-fetch. Change-Id: I56e11e9565c3b1d8130f3f4806d99ad55d94ee26
* gnu: mpd-mpc: Update to 0.35.Ian Eure2024-11-02
| | | | | | * gnu/packages/mpd.scm (mpd-mpc): Update to 0.35. Change-Id: I72237f9fd0e9a8549ba316ae2cb65ed60f4f02c7
* gnu: guile-fibers: Fix cross-build to the Hurd.Janneke Nieuwenhuizen2024-11-02
| | | | | | | | | | | | | This fixes <https://lists.gnu.org/archive/html/guile-user/2024-10/msg00009.html>, <https://github.com/wingo/fibers/issues/111>. * gnu/packages/patches/guile-fibers-cross-build-fix.patch: New file. * gnu/local.mk (dist_patch_DATA): Register it. * gnu/packages/guile-xyz.scm (guile-fibers)[arguments]: When cross-building, add `apply-cross-build-fix-patch' phase to apply it. Change-Id: Ic845db832b9446c8cb5b534cc2db63b98c417b1a
* gnu: python-dbus-python: Revert ordering change on native-inputs.Vagrant Cascadian2024-11-01
| | | | | | | | | | | A large number of rebuilds (3987 according to guix refresh) was triggered by: a9abf9a7b30f6801e122cae759df87b44c458773 gnu: python-dbus-python: Fix indentation. Reverting the ordering changes does not trigger any rebuilds. * gnu/packages/python-xyz.scm (python-dbus-python): Unsort native-inputs.
* gnu: python-scs: Adjust inputs.Sharlatan Hellseher2024-11-01
| | | | | | | | * gnu/packages/python-science.scm (python-scs) [inputs]: Remove meson-python. [native-inputs]: Remove python-meson-python; add meson-python. Change-Id: I0122ecd0db405b134a6587c32592b59522e6320b
* gnu: python-dbus-python: Fix indentation.Sharlatan Hellseher2024-11-01
| | | | | | | * gnu/packages/python-xyz.scm (python-dbus-python): Fix indentation, adjust order of fields, sort inputs alphabetically. Change-Id: I895518f041bd2cfc9c2f94774a9d1db47b26ffc3
* gnu: pam-mount: Update to 2.20.Nikita Domnitskii2024-11-01
| | | | | | | * gnu/packages/admin.scm (pam-mount): Update to 2.20. Change-Id: I5dc139525096981bd789fe7845eff4b47198cf5b Signed-off-by: Oleg Pykhalov <go.wigust@gmail.com>
* gnu: pam-mount: Fix libcryptsetup detection.Nikita Domnitskii2024-11-01
| | | | | | | | | | * gnu/packages/admin.scm (pam-mount): Fix libcryptsetup detection. [inputs]: Add extra inputs required for libcryptsetup, remove duplicates. [arguments]<#:configure-flags>: Explicitly enable cryptsetup in order to detect breakage in the future. Change-Id: Icf588945279c8785081a8049d401eaf7e6a22e3c Signed-off-by: Oleg Pykhalov <go.wigust@gmail.com>
* gnu: Add kvmfr-linux-module.Oleg Pykhalov2024-11-01
| | | | | | | | * gnu/packages/patches/kvmfr-linux-module-fix-build.patch: New file. * gnu/local.mk (dist_patch_DATA): Add patch. * gnu/packages/video.scm (kvmfr-linux-module): New variable. Change-Id: I113c1c8e1f6c9ebd541083b620ea0e098d56d588
* gnu: looking-glass-client: Fix build.Oleg Pykhalov2024-11-01
| | | | | | | | * gnu/packages/virtualization.scm (looking-glass-client)[arguments]<#:configure-flags>: Add '-DENABLE_BACKTRACE=no' flag. Change-Id: Iecf644b60d99793782a7d1069194fe7f95337cb3
* gnu: packages/astronomy: Sort alphabetically.Sharlatan Hellseher2024-11-01
| | | | | | | | * gnu/packages/astronomy.scm (python-asdf-zarr, python-casa-formats-io, python-czml3, python-ephem, siril, skymaker): Sort variables alphabetically. Change-Id: I12d41a0d7647b9de67ec4dc2a9926ad7e6532afc
* gnu: packages/astronomy: Sort alphabetically.Sharlatan Hellseher2024-11-01
| | | | | | | * gnu/packages/astronomy.scm (phd2, python-bayesicfitting, scamp, sgp4, stellarium): Sort variables alphabetically. Change-Id: I31dc9b76df8fd6a90213bf51aaa045ed03031486
* services: anonip: Add 'debug?' configuration field.Maxim Cournoyer2024-11-01
| | | | | | | | * gnu/services/web.scm (<anonip-configuration>) [debug?]: New field. (anonip-shepherd-service): Honor it. * doc/guix.texi (Log Rotation) <anonip-configuration>: Document it. Change-Id: Iaf57b5992808374b069a55c34a9adfdfe52b046c
* doc: Use @table @code for anonip-configuration doc.Maxim Cournoyer2024-11-01
| | | | | | * doc/guix.texi (Log Rotation): Use @table @code for anonip-configuration doc. Change-Id: Ib6f8136715ecabc81d53dc13a14f4b111302c5c9
* gnu: Add python-green.Wiktor Żelazny2024-11-01
| | | | | | | | * gnu/packages/python-check.scm (python-green): New variable. Change-Id: I554e8a635ff51413c79e3834fc1b88b34bbda84b Reviewed-by: get-state <mazin@getstate.dev> Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
* services: web: Fix race between nginx activation and anonip.Maxim Cournoyer2024-11-01
| | | | | | | | * gnu/services/web.scm (anonip-shepherd-service): Recreate the input file when it's not a FIFO. Fixes: <https://issues.guix.gnu.org/59181> Change-Id: I8ba87f9fc48ecfd515e34bdee9e2949a2a559f9c
* gnu: Add r-netid.Navid Afkhami2024-11-01
| | | | | | | * gnu/packages/bioinformatics.scm (r-netid): New variable. Change-Id: Icf8fd23c6f24252350c783faa7f34f35eb1fbce2 Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
* gnu: Add r-raceid.Navid Afkhami2024-11-01
| | | | | | | * gnu/packages/cran.scm (r-raceid): New variable. Change-Id: I337463c66040179f5a4a1622fb759a87ebd2344a Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
* gnu: Add r-coop.Navid Afkhami2024-11-01
| | | | | | | * gnu/packages/cran.scm (r-coop): New variable. Change-Id: Idb79f51b518a16bf6410cc4239a69ee654c6c95d Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
* gnu: Add r-fateid.Navid Afkhami2024-11-01
| | | | | | * gnu/packages/cran.scm (r-fateid): New variable. Change-Id: If8d8dc20a0d377173a7428ebbfa238695a5d8002
* gnu: Add r-runner.Navid Afkhami2024-11-01
| | | | | | | * gnu/packages/cran.scm (r-runner): New variable. Change-Id: Ie19a65368b6985cee8d5e438b33a222c18011b4d Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
* gnu: Add r-robustrankaggreg.Navid Afkhami2024-11-01
| | | | | | | * gnu/packages/cran.scm (r-robustrankaggreg): New variable. Change-Id: I2dbc983544b9858e279c192f00d52b3f18bc71c4 Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
* gnu: Add r-cellchat-2.Afkhami, Navid2024-11-01
| | | | | | * gnu/packages/bioinformatics.scm (r-cellchat-2): New variable. Change-Id: Iae15f373aefa1c2a0899d5271cf8dddbbfdfa2bd
* gnu: Add r-scdesign2.Afkhami, Navid2024-11-01
| | | | | | * gnu/packages/bioinformatics.scm (r-scdesign2): New variable. Change-Id: I25599df1cb8493bc2d9cc1839b5232aee03bf848
* gnu: Add r-spacexr.Afkhami, Navid2024-11-01
| | | | | | * gnu/packages/bioinformatics.scm (r-spacexr): New variable. Change-Id: Icf2a7dd9d637d14d835c7a428093ba8daf25e25a
* gnu: Add r-caliberrfimpute.Afkhami, Navid2024-11-01
| | | | | | * gnu/packages/cran.scm (r-caliberrfimpute): New variable. Change-Id: I0f3d29e4620a4301644077f56e70c50d1f4c1438
* gnu: Add r-cca.Afkhami, Navid2024-11-01
| | | | | | | * gnu/packages/cran.scm (r-cca): New variable. Change-Id: Icc3411c5b57e97d8fc9f6e749f280b62572c32b3 Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
* gnu: Add r-shapviz.Afkhami, Navid2024-11-01
| | | | | | | * gnu/packages/cran.scm (r-shapviz): New variable. Change-Id: I9795dceda2534663b640a0fa936b10a4a2ff8fae Signed-off-by: Ricardo Wurmus <rekado@elephly.net>