1
0
mirror of https://git.savannah.gnu.org/git/guix.git synced 2026-07-22 16:04:06 +02:00
Commit Graph

132242 Commits

Author SHA1 Message Date
Reepca Russelstein 4e6df8040e activation: Create directory with specified perms in ‘mkdir-p/perms’.
There is currently a window of time between when the desired directory is
created and when its permissions are changed.  During this time, its
permissions are restricted only by the umask.

Of course, in the "directory already exists" case, this doesn't matter, but if
the directory has been specifically deleted ahead of time so that it is
created afresh, this is an unnecessary window.

We can avoid this by passing the caller-provided BITS to 'mkdirat' when
attempting to create the last directory.

* gnu/build/activation.scm (mkdir-p/perms): Create target directory with BITS
  permissions.

Change-Id: I03d2c620872e86b6f591abe0f1c8317aa1245383
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2024-11-03 23:10:44 +01:00
Reepca Russelstein 6a8a6171a7 services: guix: Add access control to daemon socket.
* gnu/services/base.scm
  (guix-configuration-socket-directory-{permissions,group,user}): New fields.
  (guix-shepherd-service): Use them.
* doc/guix.texi (Base Services): Document them.

Change-Id: I8f4c2e20392ced47c09812e62903c87cc0f4a97a
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2024-11-03 23:05:06 +01:00
Rutherther e5d64e87d4 system: %default-privileged-programs: Set ping capabilities
Ping and ping6 don't need setuid, they can work with
cap_net_raw capability only. This means that even if
ping or ping6 had a vulnerability that could be
used for execution as root, it can't anymore if
the program is not setuid.

* gnu/system.scm (%default-privileged-programs): Remove ping, ping6 setuid
programs, add ping, ping6 programs with cap_net_raw=ep capabilities

Change-Id: Ie409b477f548dbff3318eec33d0d2ca16a1b3209
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2024-11-03 22:54:00 +01:00
Ludovic Courtès e7a445571d services: cuirass: Run ‘remote-worker’ under its own user/group.
The ‘--user’ option was added to ‘cuirass remote-worker’ in Cuirass
commit 3a6abc17f904f38098d3ab08e9d82de2e821d348 (Nov. 2023).

* gnu/services/cuirass.scm (%cuirass-remote-worker-accounts): New
variable.
(cuirass-remote-worker-shepherd-service): Pass ‘--user’.
(cuirass-remote-worker-service-type): Add ACCOUNT-SERVICE-TYPE
extension.

Change-Id: I075ea02b6972adcad0a75e330073e85c4dacbbc5
2024-11-03 22:48:36 +01:00
Nicolas Graves 8964dfdb84 gnu: Remove faust-0.9.67.
* gnu/packages/audio.scm (faust-0.9.67): Delete variable.

Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 12:24:01 +00:00
Nicolas Graves a0cb16ddd7 gnu: sorcer: Update to 1.1.3-2.94107b2.
* gnu/packages/music.scm (sorcer): Update to 1.1.3-2.94107b2.
[arguments]<#:phases>: Remove 'remove-architecture-specific-flags
phase. Adapt 'build-faust-sources to faust-2.
[native-inputs]: Replace faust-0.9.67 by faust-2. Add which.

Signed-off-by: Sharlatan Hellseher <sharlatanus@gmail.com>
2024-11-03 12:24:01 +00:00
Sergey Trofimov 718e89e241 gnu: dunst: Update to 1.11.0.
* gnu/packages/wm.scm (dunst): Update to 1.11.0.
2024-11-03 19:23:58 +08:00
Nicolas Graves 79670e4bc6 gnu: ruby-ethon: Fix libcurl detection at runtime.
* gnu/packages/ruby.scm (ruby-ethon)[arguments]<#:phases>: Add phase
'libcurl-use-absolute-reference.
2024-11-03 19:23:55 +08:00
Efraim Flashner a26ba23cdd gnu: s2n: Support all 64-bit systems.
* gnu/packages/tls.scm (s2n)[supported-systems]: Expand to all 64-bit
systems supported in Guix.

Change-Id: Ide97bf8e5ec5090c4fb740c90cf0ec2aee4a3771
2024-11-03 12:36:44 +02:00
Artyom V. Poptsov da70c25a3b gnu: btop: Fix SEGFAULT error on Intel GPUs.
btop would fail on built-in Intel GPUs, this patch fixes that (see
<https://github.com/aristocratos/btop/pull/958>.)

* gnu/packages/patches/btop-fix-segfault-on-intel-gpus.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/admin.scm (btop): Use it.

Change-Id: Ic2bbf55a5f892a37bde17db6fb15025733b9bad6
Reviewed-by: Z572 <zhengjunjie@iscas.ac.cn>
2024-11-03 13:09:22 +03:00
Artyom V. Poptsov 0d7115b867 gnu: btop: Generate and install the man page.
* gnu/packages/admin.scm (btop)[native-inputs]: Add lowdown to allow
generation and installation of the program man page.

Change-Id: I1eb0c9491d89f21ef408cbcb4fb10f99be46690e
Reviewed-by: Z572 <zhengjunjie@iscas.ac.cn>
2024-11-03 13:08:58 +03:00
Efraim Flashner 81c5157aab gnu: go-git-sr-ht-rockorager-go-jmap: Fix description.
* gnu/packages/golang-web.scm (go-git-sr-ht-rockorager-go-jmap)
[description]: Remove duplicate symbols in description field.

Change-Id: I79be38ef07cb0eae1e0a0afdcdd01e24bfebd7aa
2024-11-02 22:13:24 +02:00
Sergey Trofimov 639f79952e gnu: iwd: Update to 3.0.
* gnu/packages/networking.scm (iwd): Update to 3.0.

Signed-off-by: Hilton Chain <hako@ultrarare.space>
2024-11-03 00:54:46 +08:00
Sergey Trofimov 6d915231f2 gnu: ell: Update to 0.69.
* gnu/packages/linux.scm (ell): Update to 0.69.

Signed-off-by: Hilton Chain <hako@ultrarare.space>
2024-11-03 00:54:40 +08:00
Noé Lopez 98d59a6040 gnu: Add distcc.
* gnu/packages/distributed.scm (distcc): New package.

Change-Id: Ibf486fbb5661e31769d8f987fc787ddfb514e57c
2024-11-02 21:53:27 +08:00
Sughosha 64a3a914a0 gnu: Add kapptemplate.
* gnu/packages/kde.scm (kapptemplate): New variable.

Change-Id: I25b930749db5c366496f2b883bbde838aa583383
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>
2024-11-02 21:53:27 +08:00
Zheng Junjie 36641bc7c5 gnu: okular: Update to 24.08.2.
* gnu/packages/kde.scm (okular): Update to 24.08.2.

Change-Id: I4004be7c32157c5cc16f7152c19f5ad0c8513ccd
2024-11-02 21:53:27 +08:00
Zheng Junjie 106d0c100b gnu: crun: Update to 1.18.2.
* gnu/packages/containers.scm (crun): Update to 1.18.2.

Change-Id: I2406a055a3833092b070aec8e8e17c6d4f865c0d
2024-11-02 21:53:26 +08:00
Zheng Junjie 28bd0ddf2d gnu: mpd-mpc: build from git source.
* gnu/packages/mpd.scm (mpd-mpc)[source]: Switch to git-fetch.

Change-Id: I56e11e9565c3b1d8130f3f4806d99ad55d94ee26
2024-11-02 21:53:26 +08:00
Ian Eure 3ff396ef8c gnu: mpd-mpc: Update to 0.35.
* gnu/packages/mpd.scm (mpd-mpc): Update to 0.35.

Change-Id: I72237f9fd0e9a8549ba316ae2cb65ed60f4f02c7
2024-11-02 21:53:22 +08:00
Janneke Nieuwenhuizen 20c7b8dd04 gnu: guile-fibers: Fix cross-build to the Hurd.
This fixes
<https://lists.gnu.org/archive/html/guile-user/2024-10/msg00009.html>,
<https://github.com/wingo/fibers/issues/111>.

* gnu/packages/patches/guile-fibers-cross-build-fix.patch: New file.
* gnu/local.mk (dist_patch_DATA): Register it.
* gnu/packages/guile-xyz.scm (guile-fibers)[arguments]: When cross-building,
add `apply-cross-build-fix-patch' phase to apply it.

Change-Id: Ic845db832b9446c8cb5b534cc2db63b98c417b1a
2024-11-02 14:04:19 +01:00
Vagrant Cascadian ea11d36085 gnu: python-dbus-python: Revert ordering change on native-inputs.
A large number of rebuilds (3987 according to guix refresh) was triggered by:

  a9abf9a7b3 gnu: python-dbus-python: Fix
  indentation.

Reverting the ordering changes does not trigger any rebuilds.

* gnu/packages/python-xyz.scm (python-dbus-python): Unsort native-inputs.
2024-11-01 17:05:06 -07:00
Sharlatan Hellseher bb5ccbfc70 gnu: python-scs: Adjust inputs.
* gnu/packages/python-science.scm (python-scs) [inputs]: Remove
meson-python.
[native-inputs]: Remove python-meson-python; add meson-python.

Change-Id: I0122ecd0db405b134a6587c32592b59522e6320b
2024-11-01 21:28:24 +00:00
Sharlatan Hellseher a9abf9a7b3 gnu: python-dbus-python: Fix indentation.
* gnu/packages/python-xyz.scm (python-dbus-python): Fix indentation,
adjust order of fields, sort inputs alphabetically.

Change-Id: I895518f041bd2cfc9c2f94774a9d1db47b26ffc3
2024-11-01 21:10:04 +00:00
Nikita Domnitskii cd9ac7d96b gnu: pam-mount: Update to 2.20.
* gnu/packages/admin.scm (pam-mount): Update to 2.20.

Change-Id: I5dc139525096981bd789fe7845eff4b47198cf5b
Signed-off-by: Oleg Pykhalov <go.wigust@gmail.com>
2024-11-01 18:33:30 +03:00
Nikita Domnitskii 2c5bcb1f30 gnu: pam-mount: Fix libcryptsetup detection.
* gnu/packages/admin.scm (pam-mount): Fix libcryptsetup detection.
[inputs]: Add extra inputs required for libcryptsetup, remove duplicates.
[arguments]<#:configure-flags>: Explicitly enable cryptsetup in order to
detect breakage in the future.

Change-Id: Icf588945279c8785081a8049d401eaf7e6a22e3c
Signed-off-by: Oleg Pykhalov <go.wigust@gmail.com>
2024-11-01 18:33:30 +03:00
Oleg Pykhalov 94e0028d6f gnu: Add kvmfr-linux-module.
* gnu/packages/patches/kvmfr-linux-module-fix-build.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add patch.
* gnu/packages/video.scm (kvmfr-linux-module): New variable.

Change-Id: I113c1c8e1f6c9ebd541083b620ea0e098d56d588
2024-11-01 18:33:21 +03:00
Oleg Pykhalov 78de845aaa gnu: looking-glass-client: Fix build.
* gnu/packages/virtualization.scm
(looking-glass-client)[arguments]<#:configure-flags>: Add
'-DENABLE_BACKTRACE=no' flag.

Change-Id: Iecf644b60d99793782a7d1069194fe7f95337cb3
2024-11-01 18:19:58 +03:00
Sharlatan Hellseher 870b7d69b4 gnu: packages/astronomy: Sort alphabetically.
* gnu/packages/astronomy.scm (python-asdf-zarr, python-casa-formats-io,
python-czml3, python-ephem, siril, skymaker): Sort variables
alphabetically.

Change-Id: I12d41a0d7647b9de67ec4dc2a9926ad7e6532afc
2024-11-01 14:26:31 +00:00
Sharlatan Hellseher 4812072848 gnu: packages/astronomy: Sort alphabetically.
* gnu/packages/astronomy.scm (phd2, python-bayesicfitting, scamp, sgp4,
stellarium): Sort variables alphabetically.

Change-Id: I31dc9b76df8fd6a90213bf51aaa045ed03031486
2024-11-01 14:26:31 +00:00
Maxim Cournoyer 2c322884b4 services: anonip: Add 'debug?' configuration field.
* gnu/services/web.scm (<anonip-configuration>) [debug?]: New field.
(anonip-shepherd-service): Honor it.
* doc/guix.texi (Log Rotation) <anonip-configuration>: Document it.

Change-Id: Iaf57b5992808374b069a55c34a9adfdfe52b046c
2024-11-01 23:15:20 +09:00
Wiktor Żelazny 08dc72473b gnu: Add python-green.
* gnu/packages/python-check.scm (python-green): New variable.

Change-Id: I554e8a635ff51413c79e3834fc1b88b34bbda84b
Reviewed-by: get-state <mazin@getstate.dev>
Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
2024-11-01 22:54:16 +09:00
Maxim Cournoyer 49375f83fc services: web: Fix race between nginx activation and anonip.
* gnu/services/web.scm (anonip-shepherd-service): Recreate the input file when
it's not a FIFO.

Fixes: <https://issues.guix.gnu.org/59181>
Change-Id: I8ba87f9fc48ecfd515e34bdee9e2949a2a559f9c
2024-11-01 21:58:28 +09:00
Navid Afkhami a007045b7c gnu: Add r-netid.
* gnu/packages/bioinformatics.scm (r-netid): New variable.

Change-Id: Icf8fd23c6f24252350c783faa7f34f35eb1fbce2
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-01 12:16:22 +01:00
Navid Afkhami 7ea473d0cd gnu: Add r-raceid.
* gnu/packages/cran.scm (r-raceid): New variable.

Change-Id: I337463c66040179f5a4a1622fb759a87ebd2344a
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-01 12:15:09 +01:00
Navid Afkhami 325f46b578 gnu: Add r-coop.
* gnu/packages/cran.scm (r-coop): New variable.

Change-Id: Idb79f51b518a16bf6410cc4239a69ee654c6c95d
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-01 12:14:24 +01:00
Navid Afkhami b223d04784 gnu: Add r-fateid.
* gnu/packages/cran.scm (r-fateid): New variable.

Change-Id: If8d8dc20a0d377173a7428ebbfa238695a5d8002
2024-11-01 12:13:29 +01:00
Navid Afkhami a5ed41e02a gnu: Add r-runner.
* gnu/packages/cran.scm (r-runner): New variable.

Change-Id: Ie19a65368b6985cee8d5e438b33a222c18011b4d
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-01 12:13:16 +01:00
Navid Afkhami a18b8a4a92 gnu: Add r-robustrankaggreg.
* gnu/packages/cran.scm (r-robustrankaggreg): New variable.

Change-Id: I2dbc983544b9858e279c192f00d52b3f18bc71c4
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-01 12:11:45 +01:00
Afkhami, Navid e96af11f2b gnu: Add r-cellchat-2.
* gnu/packages/bioinformatics.scm (r-cellchat-2): New variable.

Change-Id: Iae15f373aefa1c2a0899d5271cf8dddbbfdfa2bd
2024-11-01 12:10:30 +01:00
Afkhami, Navid aa7511eeb4 gnu: Add r-scdesign2.
* gnu/packages/bioinformatics.scm (r-scdesign2): New variable.

Change-Id: I25599df1cb8493bc2d9cc1839b5232aee03bf848
2024-11-01 12:09:01 +01:00
Afkhami, Navid 3d7b1a2768 gnu: Add r-spacexr.
* gnu/packages/bioinformatics.scm (r-spacexr): New variable.

Change-Id: Icf2a7dd9d637d14d835c7a428093ba8daf25e25a
2024-11-01 12:08:18 +01:00
Afkhami, Navid 15374a17d3 gnu: Add r-caliberrfimpute.
* gnu/packages/cran.scm (r-caliberrfimpute): New variable.

Change-Id: I0f3d29e4620a4301644077f56e70c50d1f4c1438
2024-11-01 12:07:33 +01:00
Afkhami, Navid b579bc42dd gnu: Add r-cca.
* gnu/packages/cran.scm (r-cca): New variable.

Change-Id: Icc3411c5b57e97d8fc9f6e749f280b62572c32b3
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-01 12:02:11 +01:00
Afkhami, Navid e5924771d1 gnu: Add r-shapviz.
* gnu/packages/cran.scm (r-shapviz): New variable.

Change-Id: I9795dceda2534663b640a0fa936b10a4a2ff8fae
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>
2024-11-01 11:54:17 +01:00
Afkhami, Navid b66563931b gnu: Add r-gggenes.
* gnu/packages/cran.scm (r-gggenes): New variable.

Change-Id: I6062ecc14a9e9af4f676b050983323bed27e6bfa
2024-11-01 11:54:17 +01:00
Sughosha 6e50b0c56a gnu: Add haruna.
* gnu/packages/kde-multimedia.scm (haruna): New variable.

Change-Id: I424bf7d8fbcf6f64f356d7bd79a306003565a09f
Signed-off-by: Zheng Junjie <zhengjunjie@iscas.ac.cn>
2024-10-31 15:38:58 +08:00
Sughosha 80d8996192 gnu: stargate: Switch to Qt6.
* gnu/packages/music.scm (stargate)[inputs]: Replace python-pyqt with
python-pyqt-6.

Change-Id: Ibea59107a24d396415bbb2e5126c3326f39505ad
2024-10-31 14:26:17 +08:00
Cayetano Santos 9fb7333fc9 gnu: openfpgaloader: Update to 0.12.1.
* gnu/packages/fpga.scm (openfpgaloader): Update to 0.12.1.
[source]: Update url. Use GIT-FILE-NAME.
[inputs]: Add eudev and libgpiod.
[home-page]: Update it.

Change-Id: Iae97a45364bff1b668ccab8de44a11a29d9284dd
2024-10-31 14:12:02 +08:00
David Pflug 3eb531f04e gnu: odamex: Update to 10.6.0.
* gnu/packages/games.scm (odamex): Update to 10.6.0.

Change-Id: Ifbad7399f3e43b8a05948d8f7b1b73ba9b30477b
2024-10-31 13:56:45 +08:00