Re: Disabling authentication checks for tests in local Guix checkouts

2024-06-17 Thread Suhail Singh
Ludovic Courtès writes: > The challenge is in determining that Guix is running from a local > checkout. Now that I think about it, it’s not that hard: ./pre-inst-env > sets ‘GUIX_UNINSTALLED’. So we could do: > > #:authenticate? (not (getenv "GUIX_UNINSTALLED")) > > Problem is that an attacke

Re: ‘core-updates’ rebased: testing needed!

2024-06-17 Thread 宋文武
Hello, there are 399 build failed which only on core-updates if I count it correctly (1 at the end of each line come from ci status, I think 2 are for dependencies failed), the 4xx are build number, which can be used as "https://ci.guix.gnu.org/build/4602867/details";. 389-ds-base.x86_64-lin

Re: [PATCH maintenance] hydra: services: Reload nginx when certbot updates certificates.

2024-06-17 Thread Carlo Zancanaro
On Mon, Jun 17 2024, Ludovic Courtès wrote: > Right. However, issues.guix.gnu.org is actually hosted on bayfront, I'm not so sure about this. To make the change that I sent I grepped for issues.guix.gnu.org and it showed up in hydra/nginx/berlin.scm in a variable called %berlin-servers, which is

Re: New mumi am subcommand

2024-06-17 Thread Arun Isaac
> I guess a next step, in case you (and others!) are looking for one, > would be to allow users to run through a review check list from the > command line, and to add a ‘reviewed-looks-good’ tag. Great idea! I have opened an issue https://issues.guix.gnu.org/71622 to brainstorm and to invite con

Re: Disabling authentication checks for tests in local Guix checkouts

2024-06-17 Thread Ludovic Courtès
Suhail Singh skribis: > Ludovic Courtès writes: > >> I’m not sure how to integrate it though: in the general case, we >> probably want to keep authentication enabled by default, but how to >> allow users to easily disable it when using a personal checkout? > > Could you please elaborate on what

‘core-updates’ rebased: testing needed!

2024-06-17 Thread Ludovic Courtès
Hello! I have just rebased ‘core-updates’ on ‘master’ (commit bd5c61781c13611ed16686513980907c6ee34ae6): 6e5ecfd0fb7 gnu: libarea: Fix build. 41e2cd0dd0e gnu: txr: Add missing input. 1c27fa835d9 gnu: grass: Fix build. 399a4e8afd3 gnu: python-magic: Adjust test suite. 8e6ad35f1d7 gnu: di

Re: "guix pack -f docker" does too much work

2024-06-17 Thread Ludovic Courtès
Hi, Michal Atlas skribis: >>> Also seems that Nix's way only quickly imports the changed layers? And >>> Guix's always imports the whole thing, at least I think? >> What do you mean by “imports the whole thing”? > > I'm not sure what exactly happens, so correct me if I'm wrong, however > if I ti

Re: Reducing "You found a bug" reports

2024-06-17 Thread Ricardo Wurmus
Felix Lechner via "Development of GNU Guix and the GNU System distribution." writes: > On Mon, Jun 17 2024, Ludovic Courtès wrote: > >> I’m fine removing the “report a bug” message [...] WDYT? > > Just a quick side note that some members in our community (not I) are > offended by the word "bug"

Re: Latest Commit: error: linux-libre-headers-6.8: unbound variable 71c678a16aae416298a0e3fa322b425315bb7b00

2024-06-17 Thread Wilko Meyer
This should fix it for now: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=71617 to prevent this from happening: the idea to use a generic linux-libre-headers variable that points to the latest headers for these cases came up in IRC, however: #+BEGIN_SRC scheme ;; The following package is used i

Re: Latest Commit: error: linux-libre-headers-6.8: unbound variable 71c678a16aae416298a0e3fa322b425315bb7b00

2024-06-17 Thread Wilko Meyer
Hi everyone, John Kehayias writes: >> ice-9/boot-9.scm:1685:16: In procedure raise-exception: >> error: linux-libre-headers-6.8: unbound variable libbpf seems to explicitly depend on linux-libre-headers-6.8 since 12d2a6e5a6f412d91ba0c34a1c3c080c6c587cc6 which slipped through when I removed li

Re: Latest Commit: error: linux-libre-headers-6.8: unbound variable 71c678a16aae416298a0e3fa322b425315bb7b00

2024-06-17 Thread John Kehayias
Hello, CC'ing Wilko and Leo from kernel team. On Monday, June 17th, 2024 at 1:27 PM, jgart wrote: > > > :( > It is guix pull that is broken due to linux-libre-headers-6.8 being removed but still used somewhere. Presumably this commit: http://git.savannah.gnu.org/cgit/guix.git/commit/?id=

Latest Commit: error: linux-libre-headers-6.8: unbound variable 71c678a16aae416298a0e3fa322b425315bb7b00

2024-06-17 Thread jgart
:( jgart@unknown1ee35e825799:~/Code/guix-latest [env]$ make -j6 && ./pre-inst-env guix refresh -l libgc make all-recursive make[1]: Entering directory '/home/jgart/Code/guix-latest' Making all in po/guix make[2]: Entering directory '/home/jgart/Code/guix-latest/po/guix' make[2]: Nothing to be do

Re: /run/setuid-programs via the Shepherd?

2024-06-17 Thread Development of GNU Guix and the GNU System distribution.
Hi Juli! On Sat, Jun 08 2024, Juliana Sims wrote: > To bring this email back to directly the topic you raise Thank you for your most substantive and thoughtful reply! Unfortunately, I do not know enough to contribute, but I forgot to mention my immediate motivation: The handling of setuid/setgi

Re: Reducing "You found a bug" reports

2024-06-17 Thread Development of GNU Guix and the GNU System distribution.
Hi Ludo' & Ian, On Mon, Jun 17 2024, Ludovic Courtès wrote: > I’m fine removing the “report a bug” message [...] WDYT? Just a quick side note that some members in our community (not I) are offended by the word "bug" to describe software defects. Perhaps here is a chance to replace it? Kind reg

Re: [PATCH Cuirass v2] cuirass: Fix handling of SPECIFICATION-NAME.

2024-06-17 Thread Ludovic Courtès
Romain GARBAGE skribis: > Fixes a regression introduced in > 1da873b0e23eceb3c239dd6dc6781debf23bec63, where the NAME field of the > SPECIFICATION record type is forced to be a symbol as stated by the > documentation. > > * src/cuirass/base.scm (jobset-registry): Handle SPECIFICATION-NAME as a >

Re: networking service not starting with netlink-response-error errno:17

2024-06-17 Thread Giovanni Biscuolo
Hi Ludovic, executive summary: it is (was) a "network architecture" mistake by my side, since I was mixing a device with static-network defined via guix with a bridge defined via libvirt... and this is not good. The more I think about it the more I'm convinced that trying to add a route for devic

[PATCH Cuirass v2] cuirass: Fix handling of SPECIFICATION-NAME.

2024-06-17 Thread Romain GARBAGE
Fixes a regression introduced in 1da873b0e23eceb3c239dd6dc6781debf23bec63, where the NAME field of the SPECIFICATION record type is forced to be a symbol as stated by the documentation. * src/cuirass/base.scm (jobset-registry): Handle SPECIFICATION-NAME as a symbol. * src/cuirass/http.scm (body->s

Re: [PATCH Cuirass] cuirass: Fix handling of SPECIFICATION-NAME.

2024-06-17 Thread Romain GARBAGE
On Mon Jun 17, 2024 at 3:42 PM CEST, Ludovic Courtès wrote: > Hi! Hi Ludo' ! > Romain GARBAGE skribis: > > [...] > > * src/cuirass/base.scm: Handle SPECIFICATION-NAME as a symbol. > > * src/cuirass/http.scm: Handle SPECIFICATION-NAME as a symbol. > > * src/cuirass/templates.scm: Fix template gen

Re: "guix pack -f docker" does too much work

2024-06-17 Thread Michal Atlas
Hi, Also seems that Nix's way only quickly imports the changed layers? And Guix's always imports the whole thing, at least I think? What do you mean by “imports the whole thing”? I'm not sure what exactly happens, so correct me if I'm wrong, however if I time the different approaches, I think

Re: Disabling authentication checks for tests in local Guix checkouts

2024-06-17 Thread Suhail Singh
Ludovic Courtès writes: > I’m not sure how to integrate it though: in the general case, we > probably want to keep authentication enabled by default, but how to > allow users to easily disable it when using a personal checkout? Could you please elaborate on what the challenge is? Is the challen

Re: [PATCH Cuirass] cuirass: Fix handling of SPECIFICATION-NAME.

2024-06-17 Thread Ludovic Courtès
Hi! Romain GARBAGE skribis: > Fixes a regression introduced in > 1da873b0e23eceb3c239dd6dc6781debf23bec63, where the NAME field of the > SPECIFICATION record type is forced to be a symbol as stated by the > documentation. Yay, that was fast! > * src/cuirass/base.scm: Handle SPECIFICATION-NAME

Re: I'm retiring (for a while); help needed

2024-06-17 Thread Ricardo Wurmus
Ludovic Courtès writes: >> The channel updaters are running on the berlin server, and the channel >> packages are built by the build farm guix.bordeaux.inria.fr. > > Is there a document summarizing the setup: the repos involved, the > services/periodic jobs running, etc.? There is no such docume

Re: Call for contribution to the Guix infrastructure

2024-06-17 Thread Zach Oglesby
On June 17, 2024 8:36:10 AM EDT, "Ludovic Courtès" wrote: >Hi Zach, > >Unless you have meant with other members of the sysadmin or core >development team, I’d be reluctant to grant you SSH access to the infra >for now. > >However, as mentioned in my lengthy message, some of the sysadmin tasks >can

Re: [PATCH maintenance] hydra: services: Reload nginx when certbot updates certificates.

2024-06-17 Thread Ludovic Courtès
Hi, Carlo Zancanaro skribis: > * hydra/modules/sysadmin/services.scm (%certbot-deploy-hook): New > variable. > (%certbot-job): Pass %certbot-deploy-hook to certbot invocation. Applied, thanks! > I think this patch should resolve the certificate issue more > permanently. I haven't tested it at

Re: networking service not starting with netlink-response-error errno:17

2024-06-17 Thread Ludovic Courtès
Hi Giovanni, Giovanni Biscuolo skribis: > after a reboot on a running remote host (it was running since several > guix system generations ago... but with no reboots meanwhile) I get a > failing networking service and consequently the ssh service (et al) > refuses to start :-( > > Sorry I've no t

Re: pico.css in Cuirass

2024-06-17 Thread Ricardo Wurmus
Ludovic Courtès writes: >> The last thing I started working on was to use the HTML5 "progress" >> element instead of using custom div + bootstrap JS. With pico.css we >> can drop most classes and a lot of nested divs. Currently, though, it >> all looks very messy. > > Do I get it right that thi

Re: [PATCH Cuirass 1/4] specification: Ensure name is a symbol.

2024-06-17 Thread Ludovic Courtès
Hi, Ludovic Courtès skribis: > I’ve applied the whole series to Cuirass: > > 81d2530 * http: Add /admin/gitlab/event. > 10cf59f * gitlab: Add module for Gitlab JSON objects definition. > 1da873b * specification: Ensure name is a symbol. After doing some more testing, we realized the strin

Re: Guix + GNUNet update ?

2024-06-17 Thread Ludovic Courtès
Hi Noé, Noé Lopez via "Development of GNU Guix and the GNU System distribution." skribis: > I was looking at the previous GSoC projects page and the GNUNet project > seems really cool to me. I had already dreamed about having > decentralized substitutes, so I would love to have this. I would en

Re: New mumi am subcommand

2024-06-17 Thread Ludovic Courtès
Howdy Arun! Arun Isaac skribis: > First, set the current issue (say 61036). > > $ mumi current 61036 > > Then, apply the latest patchset using > > $ mumi am > > You may also apply a patchset of a specific version (say, v3) using > > $ mumi am v3 Woow, very nice! (Also great that pages at issue

Re: Disabling authentication checks for tests in local Guix checkouts

2024-06-17 Thread Ludovic Courtès
Hi Ada, Ada Stevenson skribis: > I'm currently trying to help test the changes to GRUB submitted in > issue #71348[1]. Unfortunately, `make check`, whilst building the > local Guix channel, authenticates every commit. That means commits not > signed by people in `guix-authorizations` will stop t

Re: [PATCH] cuirass: check for null on specification edition page.

2024-06-17 Thread Ludovic Courtès
Hi, Jaming skribis: > From a5a99b1a7f930614bd88cadfe7a3470805403d48 Mon Sep 17 00:00:00 2001 > From: Justin Martin > Date: Sun, 9 Jun 2024 11:20:25 -0400 > Subject: [PATCH] cuirass: check for null on specification edition page. > > * src/static/js/cuirass.js: check '.remove-channel' for null.

Re: Reducing "You found a bug" reports

2024-06-17 Thread Ludovic Courtès
Hi, Ian Eure skribis: > Is there some way for this code to be smarter about when it prints the > "report a bug" message, so it doesn’t tell users to report bugs when > none exist? Is there a way for it to notice that the problem is > related to networking, and tell the users to try again in a l

Re: CLISP test failures on ‘core-updates’

2024-06-17 Thread Ludovic Courtès
Guillaume Le Vaillant skribis: > Guillaume Le Vaillant skribis: > >> Maybe the CI just had a hiccup... I restarted the build, maybe it will >> be enough. > > It looks like it worked. Oh well, thanks for taking a look! Ludo’.

Re: /run/setuid-programs via the Shepherd?

2024-06-17 Thread Ludovic Courtès
Hi Juliana, Juliana Sims skribis: > To bring this email back to directly the topic you raise, a Shepherd > run0 is complementary to a future ocaps-ification of the broader > process environment; they support and reinforce each > other. Furthermore, with ocaps, the Shepherd could grow beyond run0

[PATCH Cuirass] cuirass: Fix handling of SPECIFICATION-NAME.

2024-06-17 Thread Romain GARBAGE
Fixes a regression introduced in 1da873b0e23eceb3c239dd6dc6781debf23bec63, where the NAME field of the SPECIFICATION record type is forced to be a symbol as stated by the documentation. * src/cuirass/base.scm: Handle SPECIFICATION-NAME as a symbol. * src/cuirass/http.scm: Handle SPECIFICATION-NAME

Re: Disabling Shepherd services across reboots?

2024-06-17 Thread Ludovic Courtès
Hi, Felix Lechner via "Development of GNU Guix and the GNU System distribution." skribis: > Is there a way to disable Shepherd services across reboots without > reconfiguring the system? No, it’s not supported (I never thought about this use case). > If not, what is the purpose of 'herd disabl

Re: Call for contribution to the Guix infrastructure

2024-06-17 Thread Ludovic Courtès
Hi Zach, Zach Oglesby skribis: > I would be happy to give a hand, but I am not sure that I qualify as a > known guix community memeber. I have been around a while and am also > active in the system crafters community. I also had access to Fedora > Infrastructure for years to work on docs build s

Re: Call for contribution to the Guix infrastructure

2024-06-17 Thread Ludovic Courtès
Hi Wilko, Wilko Meyer skribis: > Ludovic Courtès writes: >> - Improve infra monitoring: set up a dashboard to monitor all the >> infrastructure, and an out-of-band channel to communicate about >> downtime. > ... >> - Support mirroring: We’d like to make it easy for o

qa.guix delays in processing patches

2024-06-17 Thread Ludovic Courtès
Hi Philip, "Philip McGrath" skribis: > For some reason QA still doesn't seem to be working for > https://issues.guix.gnu.org/71203 (a Racket update I sent on May 26), which I > suspect may be related to this. Could someone take a look? > > The page at https://qa.guix.gnu.org/issue/71203 says "

Little progress on powerpc64le and aarch64 builds on ci.guix

2024-06-17 Thread Ludovic Courtès
Hello! Andreas Enge skribis: > Am Thu, Jun 06, 2024 at 07:48:27PM +0200 schrieb Andreas Enge: >> Could the graph on >>https://ci.guix.gnu.org/metrics >> be augmented by the number of packages to be built for the different >> architectures? That would be nice, I agree (I haven’t looked much

Re: Are 'guix gc' stats exaggerated?

2024-06-17 Thread Ludovic Courtès
Andreas Enge skribis: > In my experience on ext4 (also not backed by looking at the code), "guix gc" > always deletes substantially less than what I ask for. I always thought it > just counted hard linked files even when the link count does not go to 0 > and the file is not actually deleted. Yes

Re: "guix pack -f docker" does too much work

2024-06-17 Thread Ludovic Courtès
Hi, Michal Atlas skribis: > I greatly agree, it would be an awesome QOL improvement. If there’s consensus, let’s see how we can get that done. The advantage of having (guix docker) & co. all in Scheme is that moving it from a derivation to code running straight from ‘guix pack’ is definitely f

[PATCH maintenance] hydra: services: Reload nginx when certbot updates certificates.

2024-06-17 Thread Carlo Zancanaro
* hydra/modules/sysadmin/services.scm (%certbot-deploy-hook): New variable. (%certbot-job): Pass %certbot-deploy-hook to certbot invocation. --- I think this patch should resolve the certificate issue more permanently. I haven't tested it at all, but I mostly just stole it from Guix's certbot serv

Re: issues.guix.gnu.org certificate expired

2024-06-17 Thread Christopher Baines
Andy Tai writes: > trying to connect to is using Firefox, Firefox says: > > > Did Not Connect: Potential Security Issue > > Firefox detected an issue and did not continue to issues.guix.gnu.org. > The website is either misconfigured or your computer clock is set to > the wrong time. > > It’s