bug#47830: texlive-bin: perl utilities runtime failure

2021-04-16 Thread Domagoj Stolfa
Hello: I've been trying to use the texlive distribution from guix, but noticed a particular issue with a few of the texlive-bin utilities, namely latexindent and latex-git-log. There may be more that suffer this issue. Following the discussion on IRC -- when texlive-bin gets installed, it

bug#47808: guile-git-0.5.0.drv build failed

2021-04-16 Thread Bone Baboon via Bug reports for GNU Guix
Ludovic Courtès writes: > Could you send the log file returned by: > > guix build --log-file > /gnu/store/2cllkgj32qqxvrlxkas27v6hd34g0b88-guile-git-0.5.0.drv > > ? > > It’s weird because this particular derivation was built at > ci.guix.gnu.org and substitutes are available: > > https://ci.gu

bug#47823: Hardenize Guix website TLS/DNS

2021-04-16 Thread Julien Lepiller
Le 16 avril 2021 12:15:25 GMT-04:00, Leo Famulari a écrit : >On Fri, Apr 16, 2021 at 11:00:05AM +, bo0od wrote: >> Scanning Guix website gave many missing security features which >modern >> security needs them to be available: >> >> * TLS and DNS: >> >> looking at: >> >> https://www.hardeni

bug#31719: Chains of dependencies getting longer

2021-04-16 Thread Carlo Zancanaro
On Sat, Apr 17 2021, Björn Höfling wrote: Sorry, I currently don't find the time to look at the problem. Would someone else give it a try? I just had a quick look, and I think we can resolve it by changing the patch-jni-libs to not rewrite references to "mlib_image" and "splashscreen". It loo

bug#47797: Segmentation fault when calling 'git-predicate' in a package file

2021-04-16 Thread Ludovic Courtès
Hi Ingo, Ingo Ruhnke skribis: > Calling git-predicate from a simple package file causes guix to segfault. > Bisect traced it down to this commit: > > > commit c1940fde43c7aca37d67589cc5cb248086d17d56 > Author: Ludovic Courtès > Date: Fri Mar 19 11:51:20 2021 +0100 > > git-download: Autolo

bug#47823: Hardenize Guix website TLS/DNS

2021-04-16 Thread Dr. Arne Babenhauserheide
Leo Famulari writes: >> - Force redirection of insecure connection with plain text to TLS >> - HSTS/HSTS-preload support missing (important) > > Yes, we should enable these. Be careful with HSTS, it can make the site inaccessible if you lose access to a certificate and have to replace it. And y

bug#47222: Serious bug in Nettle's ecdsa_verify

2021-04-16 Thread Ludovic Courtès
Hi! (- Niels, - nettle-bugs) ni...@lysator.liu.se (Niels Möller) skribis: > Ludovic Courtès writes: > >> Are there plans to make a new 3.5 release including these fixes? > > No, I don't plan any 3.5.x release. > >> Alternatively, could you provide guidance as to which commits should be >> cherr

bug#47760: guix pull: error: You found a bug

2021-04-16 Thread Ludovic Courtès
Hi, Mikko Räsänen skribis: > applying 3 grafts for > /gnu/store/cdnrvbr03nhg8ly1msi65lz4m8k5l3cl-curl-7.76.0.drv ... > building /gnu/store/lam6h0qnr7bj7mr5hlix4glnf5f2wymk-zip-3.0.drv... > Backtrace: [...] > ./guix/store.scm:1373:15: ERROR: >   1. &store-protocol-error: >   message: "while

bug#47301: (guix profiles) is not re-exported by (guix)

2021-04-16 Thread Ludovic Courtès
Hi! Ricardo Wurmus skribis: > The (guix) module is supposed to export all public modules, but it does > not re-export the (guix profiles) module. Initially (guix) would only re-export modules “commonly used” in package modules, manifests, or ‘guix.scm’ files; (guix profiles) would not quite fal

bug#47614: [security] Chunked store references in .zo files in Racket 8

2021-04-16 Thread Philip McGrath
Hi Ludo’, On 4/16/21 11:46 AM, Ludovic Courtès wrote: IIUC, now that has been closed, this bug is fixed. Am I right? Yes, it seems to be fixed with respect to Racket, though Mark mentioned here in (also now fixed) some

bug#31719: Chains of dependencies getting longer

2021-04-16 Thread Björn Höfling
Hi Ricardo, On Wed, 14 Apr 2021 09:36:23 +0200 Ricardo Wurmus wrote: > Have you been able to identify what’s wrong with the JDK chain? > I’d like us to drop these extra references soon so that they don’t > appear in the upcoming release. Sorry, I currently don't find the time to look at the p

bug#47791: util-linux fails to build on the Hurd (some tests fail)

2021-04-16 Thread Maxime Devos
On Fri, 2021-04-16 at 18:07 +0200, Ludovic Courtès wrote: > Hi, > > Maxime Devos skribis: > > > 3 tests of 204 FAILED > > Yes, this is a “known problem”: > > https://issues.guix.gnu.org/43857 I'll take a look. > The problem is that the build environment on GNU/Hurd has yet to be > specified

bug#47631: Add graphical installation and solve tons of headache

2021-04-16 Thread bo0od
> GNU Guix right now is not for novice users Yeah i can see that clearly. > The best way to accelerate this as you ask is to > dive in and contribute, if you can, please do! Sure i will try, Thanks alot Léo Le Bouter: On Thu, 2021-04-15 at 10:00 +, bo0od wrote: Guix need to improve itse

bug#47717: guix outrageously exhaust itself (freeze) when there is package build failure

2021-04-16 Thread bo0od
> Many people are happily using it, and are quite enthusiastic about it, > so evidently it's "usable". That doesn't imply that it's good for > everyone. Perhaps you would prefer a more traditional distro, or one > that has had more time to mature. If so, that's okay. I can say that on almost a

bug#47748: Packages which cant be find/removed by guix remove

2021-04-16 Thread bo0od
> I suggested two hints. What do you think of the second hint: > > Hint: On Guix System, packages can defined in the operating system declaration. > These are not affected by "guix remove PACKAGES". Yeah also this one is good, except user need to know "operating system declaration" beforehand

bug#47748: Packages which cant be find/removed by guix remove

2021-04-16 Thread bo0od
Great, I believe you got my message clearly thank you as well for the commands. yes in debian if you want to remove libavahi it wont be removed (without breaking stuff), but avahi-daemon (if its installed) you can remove it with no issues so as wpa-supplicant,mesa..etc Anyway you just got my

bug#47748: Packages which cant be find/removed by guix remove

2021-04-16 Thread bo0od
> But, apt-get uses gpg too, to check package signatures. It still has its > own copy of gpg, so it still works. You can't remove it easily. > > It's the same situation, and it's not a bug. what are you talking about? im talking about packages which are not essential like mesa , nouveau , wpa-s

bug#47660: Add link to the ticket when someone reply

2021-04-16 Thread bo0od
Not gonna go with details about email thing (not what the ticket is about), But just clarify what you asked: > I couldn't parse this. What does ‘they are exist by names but does nothing’ > mean? having TLS connection is not oh wow im secured now. TLS has versions and many other stuff like c

bug#47823: Hardenize Guix website TLS/DNS

2021-04-16 Thread Leo Famulari
On Fri, Apr 16, 2021 at 11:00:05AM +, bo0od wrote: > Scanning Guix website gave many missing security features which modern > security needs them to be available: > > * TLS and DNS: > > looking at: > > https://www.hardenize.com/report/guix.gnu.org/1618568751 > > https://www.ssllabs.com/sslt

bug#47791: util-linux fails to build on the Hurd (some tests fail)

2021-04-16 Thread Ludovic Courtès
Hi, Maxime Devos skribis: > On my x86_64-linux-gnu with a childhurd, util-linux fails to compile. > > $ guix build util-linux --system=i586-gnu >> [exporting path ...] >> offloading build of /gnu/store/nih[...]8fxg-util-linux-2.35.1.drv to >> 'localhost' >> [log, attached in e-mail] > > $ guix

bug#47614: [security] Chunked store references in .zo files in Racket 8

2021-04-16 Thread Ludovic Courtès
Hi Philip and all, Philip McGrath skribis: > Indeed, I expect this is a more precise diagnosis of the same > problem. My patch in https://issues.guix.gnu.org/47180 solves it by > putting the store references (search paths for foreign libraries) in a > configuration data file that isn't compiled,

bug#47808: guile-git-0.5.0.drv build failed

2021-04-16 Thread Ludovic Courtès
Hi, Bone Baboon skribis: > On an i686 computer when I run `guix pull --no-substitutes` I get this > error: > > ``` > Updating channel 'guix' from Git repository at > 'https://git.savannah.gnu.org/git/guix.git'... > Building from this channel: > guix https://git.savannah.gnu.org/git/guix

bug#36508: GDM files have incorrect owner after temporarily removing service

2021-04-16 Thread Ludovic Courtès
Hi, Mark H Weaver skribis: > It's true that if you delete a user or group on another distro and then > re-add it, it might not be assigned the same UID/GID. That much is the > same as any other distro. > > The key difference is this: On Debian, at least in my experience, users > and groups are

bug#36508: GDM files have incorrect owner after temporarily removing service

2021-04-16 Thread Ludovic Courtès
Hi Mark, Mark H Weaver skribis: > This particular issue is easily addressed. It's easy enough to find a > function from 31-hash values to 32-bit IDs that's injective and avoids > any chosen subset of special IDs, as long as there are fewer than 2^31 > special IDs. > > Simply adding 65536 (or ev

bug#47748: Packages which cant be find/removed by guix remove

2021-04-16 Thread Mark H Weaver
Mark H Weaver writes: > Julien Lepiller writes: > >> The manual suggests modify-services in some places: >> >> (modify-services %desktop-services >> (delete avahi-service-type)) > > I don't see how this can work. For the record: Julien was right. 'modify-services' was enhanced to support del

bug#47823: Hardenize Guix website TLS/DNS

2021-04-16 Thread bo0od
Hi There, Scanning Guix website gave many missing security features which modern security needs them to be available: * TLS and DNS: looking at: https://www.hardenize.com/report/guix.gnu.org/1618568751 https://www.ssllabs.com/ssltest/analyze.html?d=guix.gnu.org - DNS: DNSSEC support missin

bug#47786: Several build --keep-failed result in wrong env variables

2021-04-16 Thread Dmitry Matveyev
Hi Mark, Mark H Weaver writes: > This is the intended behavior, although I agree that it can be > surprising. Thank you for explaining, I think it's clear now! Regards, Dmitry.

bug#36508: GDM files have incorrect owner after temporarily removing service

2021-04-16 Thread Maxime Devos
On Thu, 2021-04-15 at 14:58 -0400, Mark H Weaver wrote: > Ludovic Courtès writes: > > > Mark H Weaver skribis: > > > > > Here's one idea: when activating a system, *never* delete users or > > > groups if files still exist that are owned by those users/groups. > > > Checking all filesystems woul

bug#47748: Packages which cant be find/removed by guix remove

2021-04-16 Thread Leo Famulari
On Fri, Apr 16, 2021 at 04:37:13AM +, bo0od wrote: > Please reopen. It can be reopened by sending a message containing "reopen 47748" to . https://debbugs.gnu.org/server-control.html I still think that "Guix doesn't work like another OS" isn't a bug.