Re: Core-updates coordination and plans

2024-02-27 Thread Development of GNU Guix and the GNU System distribution.
Hi Andreas, On Tue, Feb 27 2024, Andreas Enge wrote: > a time-based approach sounds like a good idea How about the second Monday and Tuesday of every month? That is a slow time for contributors who have more time on weekends. > It might still be good to do it in a separate branch instead of >

Re: Core-updates coordination and plans

2024-02-27 Thread Vagrant Cascadian
On 2024-02-27, Andreas Enge wrote: > Am Mon, Feb 26, 2024 at 07:26:57AM -0800 schrieb Felix Lechner: >> How about a 48-hour period every month in which commits are permitted >> even if they cause "world rebuilds"? >> We could pause the substitute builders during that period. It would get >> rid of

Re: Core-updates coordination and plans

2024-02-27 Thread Andreas Enge
Hello Felix, Am Mon, Feb 26, 2024 at 07:26:57AM -0800 schrieb Felix Lechner: > How about a 48-hour period every month in which commits are permitted > even if they cause "world rebuilds"? > We could pause the substitute builders during that period. It would get > rid of core-updates forever. a ti

Re: Core-updates coordination and plans

2024-02-26 Thread Development of GNU Guix and the GNU System distribution.
Hi Andreas, On Wed, Jan 31 2024, Andreas Enge wrote: > We should be able to do a world-rebuild not once or twice a year, but > at least every month How about a 48-hour period every month in which commits are permitted even if they cause "world rebuilds"? We could pause the substitute builders d

Re: Core-updates coordination and plans

2024-02-24 Thread Ludovic Courtès
Hello! Josselin Poiret skribis: > Thanks for the feedback! So in the meantime I chose to go ahead and try > with 2.39 (how hard could it be?). I’m glad you did that; at the same time, I feel like it’s delayed the merge. Maybe in the future we need a calendar-based schedule for ‘core-updates’

Re: Core-updates coordination and plans

2024-02-18 Thread Josselin Poiret
Hi again everyone, Thanks for the feedback! So in the meantime I chose to go ahead and try with 2.39 (how hard could it be?). The main visible change for us in 2.39 is the removal of the crypt library, with a replacement being the external libxcrypt. This wasn't too bad to fix in most places, y

Re: Core-updates coordination and plans

2024-02-01 Thread Vivien Kraus
Hello, Le mercredi 31 janvier 2024 à 17:44 +0100, Josselin Poiret a écrit : > Also, I see that most of the patches that were requested to be merged > into c-u (like the big pages for jemalloc) actually got pushed, are > there any other (well-tested) ones we can go for at the same time as > the > g

Eudev in gnome-team [Was: Core-updates coordination and plans]

2024-01-31 Thread Development of GNU Guix and the GNU System distribution.
Hi Vivien, > The eudev package has been touched on gnome-team I reviewed the patches but do not believe they solve Bug#63508 or Bug#63787. That issue, stated succinctly, arises because configure.ac sets the Makefile variable $(udevrulesdir) to the store output [1] while custom rules like mine [2

Re: Core-updates coordination and plans

2024-01-31 Thread Vagrant Cascadian
On 2024-01-31, Josselin Poiret wrote: > One conundrum we have for now: glibc 2.38 has a couple of new CVEs, and > we have three options: > 1) change glibc to track the 2.38 release branch → world rebuild. > 2) graft glibc → bad user experience (and we're not supposed to graft > outside of master).

Re: Core-updates coordination and plans

2024-01-31 Thread Vivien Kraus
Dear guix, Le mercredi 31 janvier 2024 à 10:19 -0800, Felix Lechner via Development of GNU Guix and the GNU System distribution. a écrit : > Either way, I'd appreciate if Eudev could please be fixed in this > core-updates cycle. The fix has been available for more than half a > year. The eudev pa

Re: Core-updates coordination and plans

2024-01-31 Thread Andreas Enge
Hello, Am Wed, Jan 31, 2024 at 05:44:21PM +0100 schrieb Josselin Poiret: > One conundrum we have for now: glibc 2.38 has a couple of new CVEs, and > we have three options: > 1) change glibc to track the 2.38 release branch → world rebuild. > 2) graft glibc → bad user experience (and we're not supp

Re: Core-updates coordination and plans

2024-01-31 Thread Development of GNU Guix and the GNU System distribution.
Hi Josselin, On Wed, Jan 31 2024, Josselin Poiret wrote: > One conundrum we have for now: glibc 2.38 has a couple of new CVEs The authors describe CVE-2023-6246, which is probably the most serious of the four vulnerabilities, as "significant" [1] and Red Bat ranks it as "8.4 (HIGH)" under the ne

Core-updates coordination and plans

2024-01-31 Thread Josselin Poiret
Hi everyone, Since we're a couple people working on core-updates at the same time, it might be a good idea to coordinate a bit (of course, other volunteers welcome :) ). One conundrum we have for now: glibc 2.38 has a couple of new CVEs, and we have three options: 1) change glibc to track the 2.3