aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Use 'signature-case' in (guix nar) and 'substitute-binary'.Ludovic Courtès2014-03-31
| | | | | | | | | | | | | | | | | | | * guix/nar.scm (restore-file-set)[assert-valid-signature]: Rewrite in terms of 'signature-case'. * guix/scripts/substitute-binary.scm (narinfo-signature->canonical-sexp): Call 'leave' instead of 'raise' when SIGNATURE is invalid. (&nar-signature-error, &nar-invalid-hash-error): Remove. (assert-valid-signature): Add 'narinfo' parameter; remove 'port'. Rewrite in terms of 'signature-case' and 'leave'. Mention NARINFO's URI in error messages. Adjust caller. (narinfo-sha256): New procedure. (assert-valid-narinfo): Use it. (valid-narinfo?): Rewrite using 'narinfo-sha256' and 'signature-case'. * tests/substitute-binary.scm (assert-valid-signature, test-error-condition): Remove. ("corrupt signature data", "unauthorized public key", "invalid signature"): Remove.
* pki: Add 'signature-case' macro.Ludovic Courtès2014-03-31
| | | | | | | | | * guix/pki.scm (%signature-status): New procedure. (signature-case): New macro. * tests/pki.scm (%secret-key, %alternate-secret-key): New variables. ("signature-case valid-signature", "signature-case invalid-signature", "signature-case hash-mismatch", "signature-case unauthorized-key", "signature-case corrupt-signature"): New tests.
* substitute-binary: Notify of valid signatures.Ludovic Courtès2014-03-31
| | | | | | * guix/scripts/substitute-binary.scm (assert-valid-narinfo): Add #:verbose? parameter; when true, write "found valid signature". (valid-narinfo?): Pass #:verbose? #f.
* guix archive: Make sure $sysconfdir/guix exists in '--authorize'.Ludovic Courtès2014-03-31
| | | | | * guix/scripts/archive.scm (authorize-key): Add 'mkdir-p' call. Reported by Alex Sassmannshausen <alex.sassmannshausen@gmail.com>.
* doc: fix typo.Alex Sassmannshausen2014-03-31
| | | | | | * doc/guix.texi (Substitutes): add a missing 's'. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* gnu: Remove unused lambda arguments and prefer separate phases overEric Bavier2014-03-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | augmented phases. * gnu/packages/compression.scm (sharutils) [arguments]: Remove unused lambda args. * gnu/packages/gl.scm (mesa) [arguments]: Same * gnu/packages/fltk.scm [arguments]: Same. Substitute const check phase with #:tests? #f. Add pre-configure phase. * gnu/packages/ghostscript.scm (ghostscript) [arguments]: Put makefile patches in separate phase. Put so steps oinseparate phases. * gnu/packages/glib.scm (gobject-introspection) [arguments]: Remove unused lambda args. Put patches in pre-configure phase. * gnu/packages/gnupg.scm (gnupg) [arguments]: Put patch in pre-configure phase. (pius) [arguments]: Delete const #t configure and build phases. (signing-party) [arguments]: Factor patches into post-unpack phase. (paperkey) [arguments]: Remove unused lambda args. Factor out patches into pre-check phase. * gnu/packages/icu4c.scm [arguments]: Change source dir after standard unpack phase. Factor configure patches into pre-configure phase. * gnu/packages/lsof.scm [arguments]: Remove unused lambda args. Remove unnecessary apply. * gnu/packages/lvm.scm (lvm2) [arguments]: Factor out patches into pre-configure phase. * gnu/packages/libtiff.scm [arguments]: Same * gnu/packages/maths.scm (hdf5) [arguments]: Same * gnu/packages/gtk.scm (gtk+-2) [arguments]: Same * gnu/packages/mp3.scm (libmad) [arguments]: Same (id3lib) [arguments]: Same * gnu/packages/python.scm (python-2) [arguments]: Same * gnu/packages/texlive.scm (texlive) [arguments]: Same * gnu/packages/pretty-print.scm (a2ps) [arguments]: Same (trueprint) [arguments]: Same (source-highlight) [arguments]: Same. Remove unused lambda args. * gnu/packages/netpbm.scm [arguments]: Remove unused lambda args. Factor out test patches into pre-check phase. Condense calls to substitute* * gnu/packages/openldap.scm [arguments]: Factor out libtool copy into post-configure phases. [synopsis] Remove package name. * gnu/packages/ssh.scm (openssh) [arguments]: Factor out patches into separate phases. * gnu/packages/tcsh.scm [arguments]: Factor out test patches into pre-check phase. * gnu/packages/version-control.scm (git) [arguments]: Factor out patches into post-configure phase. * gnu/packages/vim.scm [arguments]: Same. [synopsis] Remove package name. * gnu/packages/vpn.scm (openconnect) [arguments]: Put configure flags in #:configure-flags
* offload: Exit with code 100 upon build failures.Ludovic Courtès2014-03-31
| | | | | * guix/scripts/offload.scm (transfer-and-offload): Exit with code 100 upon build failure.
* doc: Document substitutes.Ludovic Courtès2014-03-30
| | | | | | | | | | * doc/guix.texi (Invoking guix-daemon): Add cross-reference to "Substitutes". (Features): Remove footnote about unauthenticated substitutes. Link to "Substitutes". (Substitutes): New node. (Invoking guix build): Link to "Substitutes". (Packaging Guidelines): Likewise.
* Add hydra.gnu.org's narinfo signing public key.Ludovic Courtès2014-03-30
| | | | | * hydra.gnu.org.pub: New file. * Makefile.am (pkgdata_DATA): New variable.
* tests: Test the error output of 'substitute-binary'.Ludovic Courtès2014-03-30
| | | | | | | | * tests/substitute-binary.scm (test-error*): Rename to... (test-quit): ... this. Add 'error-rx' parameter and honor it. ("not a number", "wrong version number", "substitute, no signature", "substitute, invalid hash", "substitute, unauthorized key"): Adjust accordingly.
* tests: Add more signed substitute tests.Ludovic Courtès2014-03-30
| | | | | | | | * tests/substitute-binary.scm (%narinfo): Set 'URL', 'Compression', and 'NarHash'. (call-with-narinfo): Create 'example.out' and 'example.nar'. ("query narinfo without signature", "substitute, no signature", "substitute, authorized key"): New tests.
* tests: Simplify 'substitute-binary' tests; reduce use of global variables.Ludovic Courtès2014-03-30
| | | | | | | | | | | | | | | | | | | | | | | * tests/substitute-binary.scm (signature-body): Change 'str' parameter to 'bv', and expect it to be a bytevector. (%signature-body, %wrong-signature, %acl): Remove. (signature): Rename to... (signature-field): ... this. Add 'bv-or-str' parameter. Change 'str' parameter to #:version. Add #:public-key parameter. Call 'signature-body' directly. Change domain part of the signature to 'example.gnu.org'. ("not a number", "wrong version number", "valid narinfo-signature->canonical-sexp"): Use 'signature-field' instead of 'signature' or %SIGNATURE. (test-error-condition): Add 'message-rx' parameter and honor it. ("corrupt signature data", "unauthorized public key", "invalid signature"): Adjust accordingly. (narinfo, %signed-narinfo): Remove. ("query narinfo with invalid hash"): Use '%narinfo' and 'signature-field' instead of 'narinfo' and '%signature'. ("query narinfo signed with authorized key", "query narinfo signed with unauthorized key", "substitute, invalid hash", "substitute, unauthorized key"): Likewise.
* tests: Make sure the daemon reports substitute hash mismatches.Ludovic Courtès2014-03-30
| | | | * tests/store.scm ("substitute, corrupt output hash"): New test.
* substitute-binary: Defer narinfo authentication and authorization checks.Ludovic Courtès2014-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * guix/scripts/substitute-binary.scm (narinfo-signature->canonical-sexp): Catch 'gcry-error' around 'string->canonical-sexp' call, and re-raise as a SRFI-35 &message and &nar-signature-error. (narinfo-maker): Handle when SIGNATURE is #f or an invalid canonical sexp. (&nar-signature-error, &nar-invalid-hash-error): New variables. (assert-valid-signature): Use them. Expect 'signature' to be a canonical sexp. (read-narinfo): Remove authentication and authorization checks. (%signature-line-rx): New variable. (assert-valid-narinfo, valid-narinfo?): New procedures. (guix-substitute-binary): Wrap body in 'with-error-handling'. [valid?]: New procedure. <--query>: Show only store items of narinfos that match 'valid-narinfo?'. <--substitute>: Call 'assert-valid-narinfo'. * tests/substitute-binary.scm (test-error*): Use 'test-equal'. (%keypair): Remove. (%public-key, %private-key): Load from signing-key.{pub,sec}. (signature-body): Add #:public-key parameter. (call-with-narinfo): New procedure. (with-narinfo): New macro. ("corrupt signature data", "unauthorized public key", "invalid signature"): Make the first argument to 'assert-valid-signature' a canonical sexp. ("invalid hash", "valid read-narinfo", "valid write-narinfo"): Remove. ("query narinfo with invalid hash", "query narinfo signed with authorized key", "query narinfo signed with unauthorized key", "substitute, invalid hash", "substitute, unauthorized key"): New tests.
* substitute-binary: Store the cache's URI in the local cached narinfo.Ludovic Courtès2014-03-30
| | | | | | | | | * guix/scripts/substitute-binary.scm (<narinfo>)[uri-base]: New field. (narinfo-maker): Pass CACHE-URL as the 'uri-base' value. (string->narinfo): Add 'cache-uri' parameter. (lookup-narinfo)[cache-entry]: Switch to version 1. Add 'cache-uri' field. Adjust body accordingly. (remove-expired-cached-narinfos): Switch to version 1 by default.
* substitute-binary: Support the Signature field of a narinfo file.Nikita Karetnikov2014-03-30
| | | | | | | | | | | | | | | | * guix/scripts/substitute-binary.scm (<narinfo>): Add the 'signature' and 'contents' fields. (narinfo-signature->canonical-sexp): New function. (narinfo-maker): Add the 'signature' argument and use it. (assert-valid-signature): New function. (read-narinfo): Support the Signature field. (write-narinfo): Use 'narinfo-contents'. (%allow-unauthenticated-substitutes?): New variable. * guix/base64.scm, tests/base64.scm, tests/substitute-binary.scm: New files. * Makefile.am (SCM_TESTS): Add tests/base64.scm and tests/substitute-binary.scm. (MODULES): Add guix/base64.scm. * test-env.in: Set 'GUIX_ALLOW_UNAUTHENTICATED_SUBSTITUTES'.
* nar: Clarify that 'assert-valid-signature' accepts a string.Nikita Karetnikov2014-03-30
| | | | * guix/nar.scm (assert-valid-signature): Improve the wording.
* gnu: ed: Upgrade to 1.10.Ludovic Courtès2014-03-29
| | | | | * gnu/packages/ed.scm (ed): Upgrade to 1.10. Use '.tar.lz' file, and add 'native-inputs' field.
* gnu: ocrad: Upgrade to 0.23.Ludovic Courtès2014-03-29
| | | | * gnu/packages/ocrad.scm (ocrad): Upgrade to 0.23.
* tests: Make sure 'guix archive --import' succeeds.Ludovic Courtès2014-03-29
| | | | | * tests/guix-archive.sh: Check the exit value of 'guix archive --import'.
* daemon: Add tests for substitutes and --no-substitutes.Ludovic Courtès2014-03-27
| | | | * tests/guix-daemon.sh: Add substituter tests.
* daemon: Clear $NIX_SUBSTITUTERS when passed '--no-substitutes'.Ludovic Courtès2014-03-27
| | | | | | | | * nix/nix-daemon/guix-daemon.cc (main): When --no-substitutes is used, clear NIX_SUBSTITUTERS. Before that, and after 89faa5c75cb3a419c6d02c51f56955275b7ae351, '--no-substitutes' would lead to attempts to use 'download-using-manifests.pl', which in practice would gracelessly fail.
* daemon: Change some options via 'settings.set'.Ludovic Courtès2014-03-27
| | | | | | | * nix/nix-daemon/guix-daemon.cc (parse_opt): Use 'settings.set' instead of direct field access for 'buildCores', 'maxBuildJobs', and 'useSubstitutes'. (main): Call 'settings.update' after 'argp_parse'.
* gnu: tcl: Install man pages in share/man.Mark H Weaver2014-03-26
| | | | * gnu/packages/tcl.scm (tcl): Add --mandir configure flag.
* Add (guix svn-download).Sree Harsha Totakura2014-03-27
| | | | | | | * guix/svn-download.scm, guix/build/svn.scm: New files. * Makefile.am (MODULES): Add them. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* gnu: gnu-pw-mgr: Fix download location.Andreas Enge2014-03-26
| | | | * gnu/packages/gnu-pw-mgr.scm (gnu-pw-mgr): Fix download location.
* gnu: Add mcEric Bavier2014-03-26
| | | | | | | * gnu/packages/mc.scm: New file * gnu/packages/patches/mc-fix-ncurses-build.patch: New patch * gnu-system.am (GNU_SYSTEM_MODULES): Add mc.scm. (dist_patch_DATA): Add patch
* gnu: libssh2: Fix use with libssh2.pcEric Bavier2014-03-26
| | | | | * gnu/packages/ssh.scm (libssh2): Pass --with-libgcrypt configure flag and propagate inputs.
* Merge branch 'core-updates'Ludovic Courtès2014-03-26
|\
| * check-available-binaries: Make sure substitutes are enabled.Ludovic Courtès2014-03-25
| | | | | | | | | | * build-aux/check-available-binaries.scm: Add call to 'set-build-options'.
| * hydra: Hard-code target systems.Ludovic Courtès2014-03-25
| | | | | | | | | | | | * build-aux/hydra/gnu-system.scm (hydra-jobs)[systems]: Define locally, independently of ARGUMENTS. This matches the new Hydra convention, where using a 'system' input is deprecated.
| * gnu: remove python-fix-dbm.patchCyril Roelandt2014-03-25
| | | | | | | | | | | | * gnu/packages/patches/python-fix-dbm.patch: remove file. It is not needed anymore, and is probably a left-over of a failed merge. * gnu-system.am: remove gnu/packages/patches/python-fix-dbm.patch
| * gnu: Enable tests in Python 3.Cyril Roelandt2014-03-25
| | | | | | | | | | | | * gnu/packages/python.scm: enable tests for Python 3 * gnu/packages/python-fix-tests.patch: New file. * gnu/packages/gnu-system.am (dist_patch_DATA): add it.
| * gnu: Python: use /nix/.../sh instead of /bin/sh in the subprocess moduleCyril Roelandt2014-03-25
| | | | | | | | | | * gnu/packages/python.scm (python-2): patch Lib/subprocess.py to use /nix/.../sh.
| * gnu: Enable the 'ctypes' module in Python.Cyril Roelandt2014-03-25
| | | | | | | | | | * gnu/packages/python.scm (python-2): add libffi to the inputs and use it to build the ctypes module.
| * hydra: Fix typo in core package list.Ludovic Courtès2014-03-25
| | | | | | | | | | * build-aux/hydra/gnu-system.scm: Use (gnu packages gcc). (%core-packages): Remove nonexistent 'gcc'; add GCC-4.8 and GCC-4.7.
| * hydra: Remove cross-builds from i686-linux to mips64el-linux-gnuabi64.Ludovic Courtès2014-03-25
| | | | | | | | | | * build-aux/hydra/gnu-system.scm (hydra-jobs)[cross-jobs]: Define 'from-32-to-64?'. Filter out %CROSS-TARGETS that match.
| * hydra: Build GCC and glibc, not their '-final' variant.Ludovic Courtès2014-03-25
| | | | | | | | | | * build-aux/hydra/gnu-system.scm (%core-packages): Replace GCC-FINAL and GLIBC-FINAL with GCC and GLIBC.
| * gnu: glibc: Patch mtrace.pl to avoid retaining a reference to Perl.Ludovic Courtès2014-03-24
| | | | | | | | | | * gnu/packages/base.scm (glibc)[argument] <pre-configure phase>: Patch malloc/mtrace.pl.
| * Merge branch 'master' into core-updatesMark H Weaver2014-03-22
| |\
| * | gnu: guile: Upgrade to 2.0.11.Mark H Weaver2014-03-22
| | | | | | | | | | | | * gnu/packages/guile.scm (guile): Upgrade to 2.0.11.
| * | gnu: util-macros: Install .pc file in lib/pkgconfig; remove INSTALL file.Mark H Weaver2014-03-20
| | | | | | | | | | | | | | | | | | * gnu/packages/xorg.scm (util-macros): Substitute "$(libdir)/pkgconfig" for "$(datadir)/pkgconfig" in Makefile.in. After install, remove share/util-macros/INSTALL and share/util-macros.
| * | gnu: readline: Fix cross-compilation.Ludovic Courtès2014-03-19
| | | | | | | | | | | | | | | | | | * gnu/packages/readline.scm (readline)[arguments]: Add "bash_cv_wcwidth_broken=no" to #:configure-flags when (%current-target-system) is true.
| * | gnu: bzip2: Install man pages to share/man/man1, not share/man1.Mark H Weaver2014-03-19
| | | | | | | | | | | | | | | * gnu/packages/compression.scm (bzip2)[fix-man-dir]: Rename "man" to "share/man", not "share".
| * | gnu: ncurses: Install man pages in share/man/man*, not man/man*.Mark H Weaver2014-03-19
| | | | | | | | | | | | * gnu/packages/ncurses.scm (ncurses): Add --mandir configure flag.
| * | gnu: guile: Upgrade to 2.0.10.Ludovic Courtès2014-03-18
| | | | | | | | | | | | * gnu/packages/guile.scm (guile-2.0): Upgrade to 2.0.10.
| * | gnu: Make libgc 7.4 the default.Ludovic Courtès2014-03-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | * gnu/packages/bdw-gc.scm (libgc): Rename to... (libgc-7.2): ... this. (libgc-7.4): Rename to... (libgc): ... this. * gnu/packages/guile.scm (guile-2.0): Switch to LIBGC. (guile-2.0/fixed): Alias GUILE-2.0.
| * | Merge branch 'master' into core-updatesLudovic Courtès2014-03-17
| |\ \
| * | | gnu: libgc: Upgrade to 7.2e.Mark H Weaver2014-03-10
| | | | | | | | | | | | | | | | * gnu/packages/bdw-gc.scm (libgc): Upgrade to 7.2e.
| * | | Change default store values from /nix/store to /gnu/store.Ludovic Courtès2014-03-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * gnu/packages/ld-wrapper.scm (%store-directory): Change the default to /gnu/store. * guix/build/utils.scm (%store-directory): New procedure. (remove-store-references): Use it for the default value of 'store'. * guix/packages.scm (patch-and-repack)[builder]: Change default store to /gnu/store.
generated by cgit v1.2.3 (git 2.45.0) at 2024-11-28 01:01:37 +0000