| Commit message (Collapse) | Author | Age |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.16-version,
linux-libre-6.16-gnu-revision, deblob-scripts-6.16,
linux-libre-6.16-pristine-source, linux-libre-6.16-source,
linux-libre-headers-6.16, linux-libre-6.16): New variables.
(linux-libre-headers-latest): Use linux-libre-headers-6.16.
* gnu/packages/aux-files/linux-libre/6.16-arm64.conf,
gnu/packages/aux-files/linux-libre/6.16-i686.conf,
gnu/packages/aux-files/linux-libre/6.16-riscv.conf,
gnu/packages/aux-files/linux-libre/6.16-x86_64.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Co-authored-by: Dariqq <dariqq@posteo.net>
Change-Id: I2ec0b54aa3b6ba509cb80daaf8175ddc822da382
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* guix/import/crate/cargo-lock.scm: New file.
* Makefile.am (MODULES): Regisiter it.
* etc/teams.scm (rust)[#:scope]: Add it.
* CODEOWNERS: Add it.
* guix/import/crate.scm (cargo-lock->expressions): New procedure.
* tests/crate.scm (temp-file): New variable.
("crate-lockfile-import"): New test.
Co-authored-by: Murilo <murilo@disroot.org>
Co-authored-by: Luis Guilherme Coelho <lgcoelho@disroot.org>
Change-Id: I95421e9e2ba11a671b4bc4e1323c6d31a1b012c5
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This kernel series is no longer supported upstream.
* gnu/packages/linux.scm (linux-libre-6.14-version,
linux-libre-6.14-gnu-revision, deblob-scripts-6.14,
linux-libre-6.14-pristine-source, linux-libre-6.14-source,
linux-libre-headers-6.14, linux-libre-6.14): Remove variables.
* gnu/packages/aux-files/linux-libre/6.14-arm.conf,
gnu/packages/aux-files/linux-libre/6.14-arm64.conf,
gnu/packages/aux-files/linux-libre/6.14-i686.conf,
gnu/packages/aux-files/linux-libre/6.14-riscv.conf,
gnu/packages/aux-files/linux-libre/6.14-x86_64.conf: Delete files.
* Makefile.am (AUX_FILES): Remove them.
Change-Id: I59b84296f21c6204990442a817ec3727403169de
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/luanti.scm: New file.
(luanti, luanti-server, luanti-topic, luanti-moreores, luanti-sound-api-core)
(luanti-basic-materials, luanti-coloredwood, luanti-ethereal)
(luanti-homedecor-modpack, luanti-mesecons, luanti-mineclone, luanti-mobs)
(luanti-mobs-animal, luanti-mobs-monster, luanti-pipeworks, luanti-technic)
(luanti-throwing, luanti-throwing-arrows, luanti-worldedit)
(luanti-unifieddyes, luanti-unified-inventory, luanti-advtrains)
(luanti-basic-trains, luanti-oneblock, luanti-wielded-light): New variables.
* gnu/packages/minetest.scm:
(minetest, minetest-server, minetest-topic, minetest-moreores)
(minetest-sound-api-core, minetest-basic-materials, minetest-coloredwood)
(minetest-ethereal, minetest-homedecor-modpack, minetest-mesecons)
(minetest-mineclone, minetest-mobs, minetest-mobs-animal)
(minetest-mobs-monster, minetest-pipeworks, minetest-technic)
(minetest-throwing, minetest-throwing-arrows, minetest-worldedit)
(minetest-unifieddyes, minetest-unified-inventory, minetest-advtrains)
(minetest-basic-trains, minetest-oneblock, minetest-wielded-light): Deprecate
in favor of the above.
(minetest-game): Move to…
* gnu/packages/luanti.scm (minetest-game): … here.
* gnu/local.mk (GNU_SYSTEM_MODULES): Register luanti.scm.
* guix/build-system/luanti.scm: New file.
(luanti-mod-build-system): New public variable.
* guix/build-system/minetest.scm (minetest-mod-build-system): Deprecate in
favor of luanti-mod-build-system.
* guix/build/luanti-build-system.scm: New file, renamed from…
* guix/build/minetest-build-system.scm: … this. Deprecate in favor of
luanti-build-system.
* guix/import/luanti.scm: New file, renamed from guix/import/minetest.scm.
(%contentdb-api): Switch to “https://content.luanti.org/api/”.
(luanti-package?, latest-luanti-release, luanti->guix-package)
(luanti-recursive-import, %luanti-updater): New public variables.
* guix/import/minetest.scm (minetest-package?, latest-minetest-release)
(minetest->guix-package, minetest-recursive-import, %minetest-updater):
Deprecate in favor of the luanti variants above.
* guix/scripts/import/luanti.scm: New file, renamed from
guix/scripts/import/minetest.scm.
(guix-import-luanti): New public variable.
* guix/scripts/import/minetest.scm (guix-import-minetest): Deprecate in favor
of guix-import-luanti.
* tests/minetest.scm: Rename to…
* tests/luanti.scm: … this.
* Makefile.am (MODULES, SCM_TESTS): Adjust accordingly.
* etc/teams.scm (games): Adjust accordingly.
* CODEOWNERS: Adjust accordingly.
|
|
|
|
|
|
| |
* Makefile.am (WEBLATE_REPO): Update.
Change-Id: I93b97fa296c3b7a393bdff3cbc3357a24c660154
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.15-version,
linux-libre-6.15-gnu-revision, deblob-scripts-6.15,
linux-libre-6.15-pristine-source, linux-libre-6.15-source,
linux-libre-headers-6.15, linux-libre-6.15): New variables.
(linux-libre-headers-latest): Use linux-libre-headers-6.15
* gnu/packages/aux-files/linux-libre/6.15-arm.conf,
gnu/packages/aux-files/linux-libre/6.15-arm64.conf,
gnu/packages/aux-files/linux-libre/6.15-i686.conf,
gnu/packages/aux-files/linux-libre/6.15-riscv.conf,
gnu/packages/aux-files/linux-libre/6.15-x86_64.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Change-Id: I7edd9dc48744065785a5e84cdf6c404b956b03fd
|
|
|
|
|
|
|
|
| |
* Makefile.am (.git/hooks/): Add.
(.git/hooks/%, .git/hooks/commit-msg): Depend on .git/hooks/.
Change-Id: I5e027d22ec71b8cb080dca2971fabb85c593cb35
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
|
|
|
|
|
|
|
| |
* Makefile.am (MODULES): Add guix/import/nuget.scm.
Change-Id: I4a96f81c1ecd34a82e015889868bb0559259165f
Signed-off-by: Zheng Junjie <z572@z572.online>
|
|
|
|
|
|
|
|
| |
Fixes: guix/guix#812
* Makefile.am (CODEOWNERS): wrap it with in_git_p and !CROSS_COMPILING.
Change-Id: I65389947d3065d470739ca1a12398551be2178c1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The container that slirp4netns runs in should already be quite difficult to do
anything malicious in beyond basic denial of service or sending of network
traffic. There is, however, one hole remaining in the case in which there is
an adversary able to run code locally: abstract unix sockets. Because these
are governed by network namespaces, not IPC namespaces, and slirp4netns is in
the root network namespace, any process in the root network namespace can
cooperate with the slirp4netns process to take over its user.
To close this, we use seccomp to block the creation of unix-domain sockets by
slirp4netns. This requires some finesse, since slirp4netns absolutely needs
to be able to create other types of sockets - at minimum AF_INET and AF_INET6
Seccomp has many, many pitfalls. To name a few:
1. Seccomp provides you with an "arch" field, but this does not uniquely
determine the ABI being used; the actual meaning of a system call number
depends on both the number (which is often the result of ORing a related
system call with a flag for an alternate ABI) and the architecture.
2. Seccomp provides no direct way of knowing what the native value for the
arch field should be; the user must do configure/compile-time testing for
every architecture+ABI combination they want to support. Amusingly enough,
the linux-internal header files have this exact information
(SECCOMP_ARCH_NATIVE), but they aren't sharing it.
3. The only system call numbers we naturally have are the native ones in
asm/unistd.h. __NR_socket will always refer to the system call number for
the target system's ABI.
4. Seccomp can only manipulate 32-bit words, but represents every system call
argument as a uint64.
5. New system call numbers with as-yet-unknown semantics can be added to the
kernel at any time.
6. Based on this comment in arch/x86/entry/syscalls/syscall_32.tbl:
# 251 is available for reuse (was briefly sys_set_zone_reclaim)
previously-invalid system call numbers may later be reused for new system
calls.
7. Most architecture+ABI combinations have system call tables with many gaps
in them. arm-eabi, for example, has 35 such gaps (note: this is just the
number of distinct gaps, not the number of system call numbers contained in
those gaps).
8. Seccomp's BPF filters require a fully-acyclic control flow graph.
Any operation on a data structure must therefore first be fully
unrolled before it can be run.
9. Seccomp cannot dereference pointers. Only the raw bits provided to the
system calls can be inspected.
10. Some architecture+ABI combos have multiplexer system calls. For example,
socketcall can perform any socket-related system call. The arguments to
the multiplexed system call are passed indirectly, via a pointer to user
memory. They therefore cannot be inspected by seccomp.
11. Some valid system calls are not listed in any table in the kernel source.
For example, __ARM_NR_cacheflush is an "ARM private" system call. It does
not appear in any *.tbl file.
12. Conditional branches are limited to relative jumps of at most 256
instructions forward.
13. Prior to Linux 4.8, any process able to spawn another process and call
ptrace could bypass seccomp restrictions.
To address (1), (2), and (3), we include preprocessor checks to identify the
native architecture value, and reject all system calls that don't use the
native architecture.
To address (4), we use the AC_C_BIGENDIAN autoconf check to conditionally
define WORDS_BIGENDIAN, and match up the proper portions of any uint64 we test
for with the value in the accumulator being tested against.
To address (5) and (6), we use system call pinning. That is, we hardcode a
snapshot of all the valid system call numbers at the time of writing, and
reject any system call numbers not in the recorded set. A set is recorded for
every architecture+ABI combo, and the native one is chosen at compile-time.
This ensures that not only are non-native architectures rejected, but so are
non-native ABIs. For the sake of conciseness, we represent these sets as sets
of disjoint ranges. Due to (7), checking each range in turn could add a lot
of overhead to each system call, so we instead binary search through the
ranges. Due to (8), this binary search has to be fully unrolled, so we do
that too.
It can be tedious and error-prone to manually produce the syscall ranges by
looking at linux's *.tbl files, since the gaps are often small and
uncommented. To address this, a script, build-aux/extract-syscall-ranges.sh,
is added that will produce them given a *.tbl filename and an ABI regex (some
tables seem to abuse the ABI field with strange values like "memfd_secret").
Note that producing the final values still requires looking at the proper
asm/unistd.h file to find any private numbers and to identify any offsets and
ABI variants used.
(10) used to have no good solution, but in the past decade most architectures
have gained dedicated system call alternatives to at least socketcall, so we
can (hopefully) just block it entirely.
To address (13), we block ptrace also.
* build-aux/extract-syscall-ranges.sh: new script.
* Makefile.am (EXTRA_DIST): register it.
* config-daemon.ac: use AC_C_BIGENDIAN.
* nix/libutil/spawn.cc (setNoNewPrivsAction, addSeccompFilterAction): new
functions.
* nix/libutil/spawn.hh (setNoNewPrivsAction, addSeccompFilterAction): new
declarations.
(SpawnContext)[setNoNewPrivs, addSeccompFilter]: new fields.
* nix/libutil/seccomp.hh: new header file.
* nix/libutil/seccomp.cc: new file.
* nix/local.mk (libutil_a_SOURCES, libutil_headers): register them.
* nix/libstore/build.cc (slirpSeccompFilter, writeSeccompFilterDot):
new functions.
(spawnSlirp4netns): use them, set seccomp filter for slirp4netns.
Change-Id: Ic92c7f564ab12596b87ed0801b22f88fbb543b95
Signed-off-by: John Kehayias <john.kehayias@protonmail.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
guix/build/po.go is not installed and this speeds up convert-xref.scm when
cross-compiling for a host with incompatible guile bytecode.
Fixes: guix/guix#141
* Makefile.am (guile-compilation-rule): Parameterize the host variable.
(make-core-go,make-packages*-go, make-system-go,make-cli-go): Compile for the
host triplet.
(guix/build/po.go): Compile for the build triplet.
Change-Id: I9bad5f7743dd736a2958fb8ae8dd0ee8efc190ec
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/emacs.scm (emacs-minimal): Update to 30.1.
(guile-emacs): Remove now unneeded phase.
* gnu/packages/aux-files/emacs/comp-integrity.el: Replace with…
* gnu/packages/aux-files/emacs/comp-integrity-next.el: … this.
Delete file.
* Makefile.am: Unregister it.
* gnu/packages/patches/emacs-exec-path.patch: Replace with…
* gnu/packages/patches/emacs-next-exec-path.patch: … this.
* gnu/packages/patches/emacs-native-comp-driver-options.patch: Replace with…
* gnu/packages/patches/emacs-next-native-comp-driver-options.patch: … this.
* gnu/packages/patches/emacs-native-comp-fix-filenames.patch: Replace with…
* gnu/packages/patches/emacs-next-native-comp-fix-filenames.patch: … this.
Change-Id: Ic144329bfe5a126a5d7e86dd0fdb726cf92de175
|
|
|
|
|
|
|
|
| |
* Makefile.am (CODEOWNERS): Depend on scripts/guix .
Fixes: #470
Reported-by: Dtelsing
Change-Id: I6fd0676eb42842d4ef35e563c779fca7bd9f0a70
|
|
|
|
|
|
|
|
| |
* Makefile.am: Make scripts/guix depend on local guile.
* build-aux/pre-inst-env.in: Require scripts/guix.
Change-Id: Ib248da80a1e8215c4c5e6c485ade41a893ac0fd5
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
|
|
|
|
|
|
|
|
|
| |
* Makefile.am (CODEOWNERS): New rule.
(BUILT_SOURCES): Add ‘CODEOWNERS’.
Change-Id: Ie4a3b7b1d90d87049567061886763aa360675eb2
Change-Id: I399396b7465cd74dab1c6adffe523ad46284bce9
|
|
|
|
|
|
| |
* Makefile.am (EXTRA_DIST): Add ‘etc/teams.scm’.
Change-Id: Ic8898434865ba0012db83bd8599ee6670760077b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This kernel series is no longer supported upstream.
* gnu/packages/linux.scm (linux-libre-6.13-version,
linux-libre-6.13-gnu-revision, deblob-scripts-6.13,
linux-libre-6.13-pristine-source, linux-libre-6.13-source,
linux-libre-headers-6.13, linux-libre-6.13): Remove variables.
* gnu/packages/aux-files/linux-libre/6.13-arm.conf,
gnu/packages/aux-files/linux-libre/6.13-arm64.conf,
gnu/packages/aux-files/linux-libre/6.13-i686.conf,
gnu/packages/aux-files/linux-libre/6.13-riscv.conf,
gnu/packages/aux-files/linux-libre/6.13-x86_64.conf: Delete files.
* Makefile.am (AUX_FILES): Remove them.
Change-Id: Ied843a009392752dd4baefa2880994965019779d
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.14-version,
linux-libre-6.14-gnu-revision, deblob-scripts-6.14,
linux-libre-6.14-pristine-source, linux-libre-6.14-source,
linux-libre-headers-6.14, linux-libre-6.14): New variables.
(linux-libre-headers-latest): Use linux-libre-headers-6.14.
* gnu/packages/aux-files/linux-libre/6.14-arm.conf,
gnu/packages/aux-files/linux-libre/6.14-arm64.conf,
gnu/packages/aux-files/linux-libre/6.14-i686.conf,
gnu/packages/aux-files/linux-libre/6.14-riscv.conf,
gnu/packages/aux-files/linux-libre/6.14-x86_64.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Change-Id: I09bc4e47fbe0172b5172f27b03a1b6bd88421fff
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/firmware.scm (ovmf-x86-64)
[phases] {install-qemu-firmware-metadata}: New phase.
(ovmf-aux-file): New procedure.
* gnu/packages/aux-files/ovmf/51-edk2-ovmf-2m-raw-x64-nosb.json: New file.
* Makefile.am (AUX_FILES): Register it.
Change-Id: I301eac8b79aed523f3b4cdedb7b3925d8fd0ad3d
|
|
|
|
|
|
|
| |
* Makefile.am (GUIX_SYSTEM_SUPPORTED_SYSTEMS): Rename to
GUIX_SYSTEM_INSTALLER_SYSTEMS.
Change-Id: I5c15e6916583bcd56e535733f284f3a735d7600b
|
|
|
|
|
|
| |
* Makefile.am (SUPPORTED_SYSTEMS): Add riscv64-linux.
Change-Id: Ie8a18500b73b39f0702af64a5c9cb988ffd77250
|
|
|
|
|
|
|
|
|
| |
* Makefile.am (SCM_TESTS): Add tests/hexpm.scm, tests/ipfs.scm.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add gnu/tests/lightdm.scm,
gnu/tests/sddm.scm.
* po/doc/local.mk (EXTRA_DIST): Add po/doc/po4a.cfg.
Change-Id: I05da61e50e2311edad50c8c7eb7850b9e9496f2a
|
|
|
|
| |
* Makefile.am (EXAMPLES): Add missing hurd and hurd64 examples.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Makefile.am (SCM_TESTS): Add test modules.
* doc/guix.texi: Add documentation.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add modules.
* gnu/machine/hetzner.scm: Add hetzner-environment-type.
* gnu/machine/hetzner/http.scm: Add HTTP API.
* po/guix/POTFILES.in: Add Hetzner modules.
* tests/machine/hetzner.scm: Add machine tests.
* tests/machine/hetzner/http.scm Add HTTP API tests.
Change-Id: I276ed5afed676bbccc6c852c56ee4db57ce3c1ea
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.13-version,
linux-libre-6.13-gnu-revision, deblob-scripts-6.13,
linux-libre-6.13-pristine-source, linux-libre-6.13-source,
linux-libre-headers-6.13, linux-libre-6.13): New variables.
(linux-libre-headers-latest): Use linux-libre-headers-6.13.
* gnu/packages/aux-files/linux-libre/6.13-arm.conf,
gnu/packages/aux-files/linux-libre/6.13-arm64.conf,
gnu/packages/aux-files/linux-libre/6.13-i686.conf,
gnu/packages/aux-files/linux-libre/6.13-riscv.conf,
gnu/packages/aux-files/linux-libre/6.13-x86_64.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Change-Id: Ib2acb495eb3bd6c2c2e9e5eebd2e8a1826aeed53
|
|
|
|
|
|
|
|
| |
* Makefile.am (MODULES): Add loongarch platform module.
* doc/guix.texi: Add documentation for loongarch platform.
* guix/platforms/loongarch.scm (loongarch64-linux): New variable.
Change-Id: I71b8f3cb3b2f0d9562bbbefdc1f2fc4b2dcc4fbb
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This kernel series is no longer supported upstream.
* gnu/packages/linux.scm (linux-libre-6.11-version,
linux-libre-6.11-gnu-revision, deblob-scripts-6.11,
linux-libre-6.11-pristine-source, linux-libre-6.11-source,
linux-libre-headers-6.11, linux-libre-6.11): Remove variables.
the commit message for your changes. Lines starting
* gnu/packages/aux-files/linux-libre/6.11-arm.conf,
gnu/packages/aux-files/linux-libre/6.11-arm64.conf,
gnu/packages/aux-files/linux-libre/6.11-i686.conf,
gnu/packages/aux-files/linux-libre/6.11-riscv.conf,
gnu/packages/aux-files/linux-libre/6.11-x86_64.conf: Delete files.
* Makefile.am (AUX_FILES): Remove them.
Change-Id: I71ae7696534b2096de5ffb650bf8a8313e907edb
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.12-version,
linux-libre-6.12-gnu-revision, deblob-scripts-6.12,
linux-libre-6.12-pristine-source, linux-libre-6.12-source,
linux-libre-headers-6.12, linux-libre-6.12): New variables.
(linux-libre-headers-latest): Use linux-libre-headers-6.12.
(linux-libre-lts-version, linux-libre-lts-gnu-revision,
linux-libre-lts-pristine-source, linux-libre-lts-source, linux-libre-lts): Use
linux-libre 6.12.
* gnu/tests/base.scm (%test-linux-libre-6.12): New test.
* gnu/packages/aux-files/linux-libre/6.12-arm.conf,
gnu/packages/aux-files/linux-libre/6.12-arm64.conf,
gnu/packages/aux-files/linux-libre/6.12-i686.conf,
gnu/packages/aux-files/linux-libre/6.12-x86_64.conf,
gnu/packages/aux-files/linux-libre/6.12-riscv.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Change-Id: I430d9dd29cda4bd4b66ad6eddc004935f93bb111
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This kernel series is no longer supported upstream.
* gnu/packages/linux.scm (linux-libre-4.19-version,
linux-libre-4.19-gnu-revision, deblob-scripts-4.19,
linux-libre-4.19-pristine-source, linux-libre-4.19-source,
linux-libre-headers-4.19, linux-libre-4.19, linux-libre-arm-generic-4.19,
linux-libre-arm-omap2plus-4.19): Remove variables.
* gnu/tests/base.scm (%test-linux-libre-4.19): Remove variable.
* gnu/packages/aux-files/linux-libre/4.19-arm.conf,
gnu/packages/aux-files/linux-libre/4.19-arm64.conf,
gnu/packages/aux-files/linux-libre/4.19-i686.conf,
gnu/packages/aux-files/linux-libre/4.19-x86_64.conf: Delete files.
* Makefile.am (AUX_FILES): Remove them.
Change-Id: If79ccbb948975c544b27757104d360539970377c
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* guix/build/zig-utils.scm: New file.
* Makefile.am (MODULES): Add it.
* guix/build-system/zig.scm (%zig-build-system-modules): Add it.
(zig-build,zig-cross-build): Add #:zig-build-target.
* guix/build/zig-build-system.scm (zig-target): Move to (guix build zig-utils).
(configure): Move to (guix build zig-utils) as zig-configure.
(build): Replace target with zig-build-target.
(%standard-phases): Adjust accordingly.
* gnu/packages/zig.scm (zig-0.9)[arguments]<#:imported-modules,#:modules>: Add
zig-build-system modules.
<#:configure-flags>: Set ZIG_TARGET_TRIPLE for native builds too.
Move applicable flags from zig-0.10 here.
<#:phases>: Apply 'zig-configure.
Unset ZIG_LIBC in 'check.
Remove 'set-cache-dir.
(zig-0.10)[arguments]<#:configure-flags>: Adjust accordingly.
(zig-0.10.0-610)[arguments]<#:configure-flags>: Remove ZIG_TARGET_TRIPLE.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes <https://issues.guix.gnu.org/31785>.
Similar to <https://github.com/NixOS/nix/issues/178>, fixed in
<https://github.com/NixOS/nix/commit/29cde917fe6b8f2e669c8bf10b38f640045c83b8>.
We can't rely on Goal deletion to release our locks in a timely manner. In
the case in which multiple guix-daemon processes simultaneously try producing
an output path path1, the one that gets there first (P1) will get the lock,
and the second one (P2) will continue trying to acquire the lock until it is
released. Once it has acquired the lock, it checks to see whether the path
has already become valid in the meantime, and if so it reports success to
those Goals waiting on its completion and finishes. Unfortunately, it fails
to release the locks it holds first, so those stay held until that Goal gets
deleted.
Suppose we have the following store path dependency graph:
path4
/ | \
path1 path2 path3
P2 is now sitting on path1's lock, and will continue to do so until path4 is
completed. Suppose there is also a P3, and it has been blocked while P1
builds path2. Now P3 is sitting on path2's lock, and can't acquire path1's
lock to determine that it has been completed. Likewise P2 is sitting on
path1's lock, and now can't acquire path2's lock to determine that it has been
completed. Finally, P3 completes path3 while P2 is blocked.
Now:
- P1 knows that path1 and path2 are complete, and holds no locks, but can't
determine that path3 is complete
- P2 knows that path1 and path3 are complete, and holds locks on path1 and
path3, but can't determine that path2 is complete
- P3 knows that path2 and path3 are complete, and holds a lock on path2, but
can't determine that path1 is complete
And none of these locks will be released until path4 is complete. Thus, we
have a deadlock.
To resolve this, we should explicitly release these locks as soon as they
should be released.
* nix/libstore/build.cc
(DerivationGoal::tryToBuild, SubstitutionGoal::tryToRun):
Explicitly release locks in the has-become-valid case.
* tests/store-deadlock.scm: New file.
* Makefile.am (SCM_TESTS): Add it.
Change-Id: Ie510f84828892315fe6776c830db33d0f70bcef8
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
|
|
|
|
|
|
| |
* guix/build/toml.scm: New file.
* tests/toml.scm: New file.
* Makefile.am: Register new files.
|
|
|
|
|
|
|
| |
* etc/manifests/ungraft.scm: New file.
* Makefile.am (EXTRA_DIST): Add it.
Change-Id: If4aa7649721b93d3297ecd967d5db4a6b71ec6eb
|
|
|
|
|
|
|
|
|
|
|
|
| |
* etc/disarchive-manifest.scm, etc/hurd-manifest.scm,
etc/kernels-manifest.scm, etc/release-manifest.scm,
etc/source-manifest.scm, etc/system-tests.scm,
etc/time-travel-manifest.scm, etc/upgrade-manifest.scm: Move to…
* etc/manifests: … here, and drop “-manifest” from file name.
* Makefile.am (EXTRA_DIST, assert-binaries-available, check-system):
Adjust accordingly.
Change-Id: Iedee3d0cdd42e72ef8bbf654ea5d3b47dca95874
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* guix/scripts/system/installer.scm: New file.
* Makefile.am (MODULES)[ENABLE_INSTALLER]: Register it.
(MODULES_NOT_COMPILED)[!ENABLE_INSTALLER]: Likewise.
* guix/scripts/system.scm (show-help): Add help for "installer" sub-command.
(actions): Register "installer".
(guix-system): Invoke `guix-system-installer' sub-command.
* doc/guix.texi (Invoking guix system): Document it.
* gnu/installer.scm (run-installer): Remove "./pre-inst env".
Change-Id: I5a05b941c060682c17d45d871df3cf34e3f8643a
|
|
|
|
|
|
|
|
| |
* guix/scripts/build.scm (dependents): Export.
* etc/upgrade-manifest.scm: New file.
* Makefile.am (EXTRA_DIST): Add it.
Change-Id: I1b2a2ebd09e559c68da9f25772bf33caacb4c031
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.10-version, linux-libre-6.10-gnu-revision,
deblob-scripts-6.10, linux-libre-6.10-pristine-source, linux-libre-6.10-source,
linux-libre-headers-6.10, linux-libre-6.10): Remove variables.
* gnu/packages/aux-files/linux-libre/6.10-arm.conf,
gnu/packages/aux-files/linux-libre/6.10-arm64.conf,
gnu/packages/aux-files/linux-libre/6.10-riscv.conf
gnu/packages/aux-files/linux-libre/6.10-i686.conf,
gnu/packages/aux-files/linux-libre/6.10-x86_64.conf: Delete files.
* Makefile.am (AUX_FILES): Remove aforementioned .conf files.
Change-Id: I7a22ca60378b38d45130d8a7ffee52eed1fba7f3
Signed-off-by: Leo Famulari <leo@famulari.name>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.11-version, linux-libre-6.11-gnu-revision,
deblob-scripts-6.11, linux-libre-6.11-pristine-source, linux-libre-6.11-source,
linux-libre-headers-6.11, linux-libre-6.11): New variables.
* gnu/packages/aux-files/linux-libre/6.11-arm.conf,
gnu/packages/aux-files/linux-libre/6.11-arm64.conf,
gnu/packages/aux-files/linux-libre/6.11-i686.conf,
gnu/packages/aux-files/linux-libre/6.11-riscv.conf,
gnu/packages/aux-files/linux-libre/6.11-x86.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Co-authored-by: Ahmad Draidi <a.r.draidi@redscript.org>
Change-Id: I35bad9fbea9f568e60e7f24c95f85c240ef96277
Signed-off-by: Leo Famulari <leo@famulari.name>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.9-version, linux-libre-6.9-gnu-revision,
deblob-scripts-6.9, linux-libre-6.9-pristine-source, linux-libre-6.9-source,
linux-libre-headers-6.9, linux-libre-6.9): Remove variables.
(linux-libre-headers-latest): New variable.
(libbpf)[native-inputs]: Switch to linux-libre-headers-latest.
* gnu/packages/aux-files/linux-libre/6.9-arm.conf,
gnu/packages/aux-files/linux-libre/6.9-arm64.conf,
gnu/packages/aux-files/linux-libre/6.9-riscv.conf
gnu/packages/aux-files/linux-libre/6.9-i686.conf,
gnu/packages/aux-files/linux-libre/6.9-x86_64.conf: Delete files.
* Makefile.am (AUX_FILES): Remove aforementioned .conf files.
Change-Id: Ia05bce46ab94f0dbbc7bb5b2e75e2067e9b78e7b
Signed-off-by: Leo Famulari <leo@famulari.name>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.10-version, linux-libre-6.10-gnu-revision,
deblob-scripts-6.10, linux-libre-6.10-pristine-source, linux-libre-6.10-source,
linux-libre-headers-6.10, linux-libre-6.10): New variables.
* gnu/packages/aux-files/linux-libre/6.10-arm.conf,
gnu/packages/aux-files/linux-libre/6.10-arm64.conf,
gnu/packages/aux-files/linux-libre/6.10-i686.conf,
gnu/packages/aux-files/linux-libre/6.10-x86.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Change-Id: If62ec2e8029ebd7531d3b4ba9a666c0b5f3b0f4c
Signed-off-by: Leo Famulari <leo@famulari.name>
|
|
|
|
|
|
|
|
| |
* gnu/packages/aux-files/emacs/comp-integrity-next.el: New file.
* Makefile.am (AUX_FILES): Register it here.
* gnu/packages/emacs.scm (emacs-next-minimal): Update to 30.0.60-1.4e22ef8.
(emacs->emacs-next)[arguments]: Swap out ‘validate-comp-integrity’ phase,
so as to refer to the new integrity check.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.8-version, linux-libre-6.8-gnu-revision,
deblob-scripts-6.8, linux-libre-6.8-pristine-source, linux-libre-6.8-source,
linux-libre-headers-6.8, linux-libre-6.8): Remove variables.
* gnu/packages/aux-files/linux-libre/6.8-arm.conf,
gnu/packages/aux-files/linux-libre/6.8-arm64.conf,
gnu/packages/aux-files/linux-libre/6.8-riscv.conf
gnu/packages/aux-files/linux-libre/6.8-i686.conf,
gnu/packages/aux-files/linux-libre/6.8-x86_64.conf: Delete files.
* Makefile.am (AUX_FILES): Remove aforementioned .conf files.
Signed-off-by: Leo Famulari <leo@famulari.name>
Change-Id: Ib94c61f629721f94a307e51b449e5ccd117a2f9a
|
|
|
|
|
|
|
|
| |
* gnu/packages/aux-files/linux-libre/6.9-riscv.conf: New file.
* Makefile.am (AUX_FILES): Register it.
Change-Id: I1f5e24726c3a59bec73805068548ce5916b427f8
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>
|
|
|
|
|
|
|
|
| |
* Makefile.am (AM_V_PO4A_0, AM_V_POXREF_0): Align the Automake status lines of
the po4a and the PO xref, since the common width is 10 characters.
Change-Id: Ic8c32f73294ba6e4ca71ab4aa889a558e4d7fcee
Signed-off-by: Florian Pelz <pelzflorian@pelzflorian.de>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Big thanks to Dariqq <dariqq@posteo.net> for debugging and communicating
upstream about a problem with the deblobbing scripts in this kernel
series!
* gnu/packages/linux.scm (linux-libre-6.9-version, linux-libre-6.9-gnu-revision,
deblob-scripts-6.9, linux-libre-6.9-pristine-source, linux-libre-6.9-source,
linux-libre-headers-6.9, linux-libre-6.9): New variables.
* gnu/packages/aux-files/linux-libre/6.9-arm.conf,
gnu/packages/aux-files/linux-libre/6.9-arm64.conf,
gnu/packages/aux-files/linux-libre/6.9-i686.conf,
gnu/packages/aux-files/linux-libre/6.9-x86.conf: New files.
* Makefile.am (AUX_FILES): Add them.
Signed-off-by: Leo Famulari <leo@famulari.name>
Change-Id: I8dc011a603684f0be88766b7881aa6c560b94443
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The previous recommendation, running ‘make authenticate’, was insecure
because it led users to run code from the very repository they want to
authenticate:
https://lists.gnu.org/archive/html/guix-devel/2024-04/msg00252.html
* Makefile.am (commit_v1_0_0, channel_intro_commit)
(channel_intro_signer, GUIX_GIT_KEYRING, authenticate): Remove.
* Makefile.am (.git/hooks/%): New target, generalization of previous
‘.git/hooks/pre-push’ target.
(nodist_noinst_DATA): Add ‘.git/hooks/post-merge’.
* doc/contributing.texi (Building from Git): Suggest ‘guix git
authenticate’ instead of ‘make authenticate’.
* etc/git/post-merge: New file.
* etc/git/pre-push: Run ‘guix git authenticate’ instead of ‘make
authenticate’.
Reviewed-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
Reported-by: Skyler Ferris <skyvine@protonmail.com>
Change-Id: Ia415aa8375013d0dd095e891116f6ce841d93efd
|
|
|
|
|
|
|
| |
* gnu/packages/aux-files/linux-libre/6.8-riscv.conf: New files.
* Makefile.am (AUX_FILES): Add it.
Change-Id: I293912d4f7fe09e281432b0f973999d9d8db582a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* guix/scripts/import.scm: (importers): Add "npm-binary".
* doc/guix.texi (Invoking guix import): Document npm-binary importer.
* guix/import/npm-binary.scm: New file.
* guix/scripts/import/npm-binary.scm: New file.
* tests/npm-binary.scm: New file.
* Makefile.am: Add them.
Co-authored-by: Timothy Sample <samplet@ngyro.com>
Co-authored-by: Lars-Dominik Braun <lars@6xq.net>
Change-Id: I98a45068cf5b9c42790664cc743feaa7ac76f807
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* gnu/packages/linux.scm (linux-libre-6.7-version, linux-libre-6.7-gnu-revision,
deblob-scripts-6.7, linux-libre-6.7-pristine-source, linux-libre-6.7-source,
linux-libre-headers-6.7, linux-libre-6.7): Remove variables.
* gnu/packages/aux-files/linux-libre/6.7-arm.conf,
gnu/packages/aux-files/linux-libre/6.7-arm64.conf,
gnu/packages/aux-files/linux-libre/6.7-i686.conf,
gnu/packages/aux-files/linux-libre/6.7-x86_64.conf: Delete files.
* Makefile.am (AUX_FILES): Remove aforementioned .conf files.
Change-Id: Ic69a65e1fbfa59d893e85d26950f33195ea9fbe1
Signed-off-by: Leo Famulari <leo@famulari.name>
|
|
|
|
|
|
|
|
|
|
|
|
| |
This replaces Automake's `build-aux/mdate-sh' with our own
`build-aux/mdate-from-git.scm' to use reproducible timestamps from Git
instead.
* build-aux/mdate-from-git.scm: New script.
* bootstrap: Use it to replace build-aux/mdate-sh.
* Makefile.am (EXTRA_DIST): Add it.
Change-Id: I17d0a7de9ffea397129c0db1728f86e28a4e245f
|