Re: [core-updates] Setting SSL_CERT_FILE in the build environment

Ricardo Wurmus writes: > Zheng Junjie writes: > >> This patch should fix it. > > Thank you for the patch! > >> From f41bf905cfb1395a53cfc0d79315148ac9ba0a79 Mon Sep 17 00:00:00 2001 >> Message-ID: >> >> From: Zheng Junjie >> Date: Tue, 16 Jul 2024 00:06:39 +0800 >> Subject: [PATCH] gnu: pytho

Re: [core-updates] Setting SSL_CERT_FILE in the build environment

Zheng Junjie writes: > This patch should fix it. Thank you for the patch! > From f41bf905cfb1395a53cfc0d79315148ac9ba0a79 Mon Sep 17 00:00:00 2001 > Message-ID: > > From: Zheng Junjie > Date: Tue, 16 Jul 2024 00:06:39 +0800 > Subject: [PATCH] gnu: python-requests-next: Fix build. > > * gnu/p

Re: [core-updates] Setting SSL_CERT_FILE in the build environment

Ricardo Wurmus writes: > Ricardo Wurmus writes: > >> Ricardo Wurmus writes: >> >>> How can we generate a certificate bundle in the build environment? >>> Apparently it is not enough to just add the nss-certs package. >> >> Apparently it is totally enough to just add the nss-certs package, and >

GUIX_LOCPATH and setuid executables

Hi, The Glibc manual states that: "The value of ‘LOCPATH’ is ignored by privileged programs for security reasons, and only the default directory is used." I believe the restriction also applies to GUIX_LOCPATH. Does it? Should it? Kind regards Felix

Re: [core-updates] Setting SSL_CERT_FILE in the build environment

Ricardo Wurmus writes: > Ricardo Wurmus writes: > >> How can we generate a certificate bundle in the build environment? >> Apparently it is not enough to just add the nss-certs package. > > Apparently it is totally enough to just add the nss-certs package, and > that's what I did in commit cf2fb

Re: [core-updates] Setting SSL_CERT_FILE in the build environment

Ricardo Wurmus writes: > How can we generate a certificate bundle in the build environment? > Apparently it is not enough to just add the nss-certs package. Apparently it is totally enough to just add the nss-certs package, and that's what I did in commit cf2fbc8f20e26c56d0e864f302a191a1d95962cd

Re: merging r-team branch

Zheng Junjie writes: > Ricardo Wurmus writes: > >> Hi Guix, >> >> the r-team branch has been built successfully. It contains updates to >> R >> and both CRAN and Bioconductor packages. >> >> It is the last in the queue of branches to be merged: >> >> core-updates #70456 >> tex-team

Update default Golang version on go-team branch

Hi Guix! I had a courage to refresh the default Goang version to build packages from 1.17 to 1.21 as all version before it are already EoL. After rebuilt 900+ packages locally I've fixed some failing to build packages. The packages in golang-build were refresh as well which involve to rebuild ab

[core-updates] Setting SSL_CERT_FILE in the build environment

Hi Guix, in issue #70179 we remove the bundled certificate file from python-certifi, which fixes real issues with Python tools on foreign distros. The fix is not without side-effects, though. On core-updates we see a failure in python-requests, which attempts to open a certificate bundle when lo