Hello, I'm running Guix System with a dedicated uid for guix-daemon.
The nobody/65534 test in python-3.12.12 prevents me from updating with `guix pull --no-substitutes` to avoid the restore-file vulnerability announced this month. [0] [1] The vulnerability was said to consist of automatically starting a consecutive step too early, so I thought of downloading a substitute myself from the CI server to verify and install more deliberately. Is that worth trying despite not being covered in the documentation, or should I be patching the test out locally to get over this bump? Thanks, Pijgn [0] https://codeberg.org/guix/guix/issues/7623 [1] https://guix.gnu.org/blog/2026/guix-substitute-pull-vulnerabilities/
