* gnu/packages/ntp.scm (tlsdate)[arguments]: Configure with unprivileged user
and group.
[arguments]: Build with the system provided certificates in a new phase.
---
gnu/packages/ntp.scm | 14 ++++++++++++--
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git a/gnu/packages/ntp.scm b/gnu/packages/ntp.scm
index 13781fbda..45f334b57 100644
--- a/gnu/packages/ntp.scm
+++ b/gnu/packages/ntp.scm
@@ -4,6 +4,7 @@
;;; Copyright © 2015 Taylan Ulrich Bayırlı/Kammer <taylanbayi...@gmail.com>
;;; Copyright © 2015 Ludovic Courtès <l...@gnu.org>
;;; Copyright © 2016 Efraim Flashner <efr...@flashner.co.il>
+;;; Copyright © 2016 ng0 <n...@libertad.pw>
;;;
;;; This file is part of GNU Guix.
;;;
@@ -134,8 +135,17 @@ minimalist than ntpd.")
(file-name (string-append name "-" version "-checkout"))))
(build-system gnu-build-system)
(arguments
- '(#:phases (modify-phases %standard-phases
- (add-after 'unpack 'autogen
+ '(#:configure-flags '("--with-unpriv-user=tlsdate"
+ "--with-unpriv-group=tlsdate")
+ #:phases (modify-phases %standard-phases
+ (add-after 'unpack 'set-cert-path
+ ;; Use the system certificate store, not the
+ ;; application bundled certificates.
+ (lambda _
+ (substitute* "Makefile.am"
+
(("$(sysconfdir)/tlsdate/ca-roots/tlsdate-ca-roots.conf")
+ "/etc/ssl/certs/ca-certificates.crt"))))
+ (add-after 'set-cert-path 'autogen
(lambda _
;; The ancestor of 'SOURCE_DATE_EPOCH'; it contains the
;; date that is recorded in binaries. It must be a
--
2.11.0
