Re: nudging patches

2023-05-19 Thread Andreas Enge
Am Wed, May 17, 2023 at 04:30:44PM +0200 schrieb Remco van 't Veer: > What's the preferred / politest way to draw attention to patches (and / > or bugs) which seem to have been overlooked? No idea, ideally it should not be necessary ;-) There is a certain backlog in the QA process so that your pat

Re: Should commit signing always be required for local work? [was Re: bug#63261: Recent changes to git config cause errors for non-committers]

2023-05-19 Thread Josselin Poiret
Hi Maxim and Leo, Maxim Cournoyer writes: > Thanks for voicing your thoughts on this. I originally thought the > included fragments (via the 'include.path' git config option) could we > overridden by a user but it seems they can't, making the change more > intrusive than it should have been. J

Re: nudging patches

2023-05-19 Thread Remco van 't Veer
Thanks Andreas! 2023/05/19 11:26, Andreas Enge: >> And while I have your attention and you're wondering which patches I'd >> like to promote.. 😉 >> - #62557 [guix-patches] >> [PATCH] gnu: ruby-2.7-fixed: Upgrade to 2.7.8 [fixes CVE-2023-{28755, >> 28756}] >> - #62558 [guix-patches] >> [PATC

Re: nudging patches

2023-05-19 Thread Andreas Enge
Hello Remco, Am Fri, May 19, 2023 at 11:48:08AM +0200 schrieb Remco van 't Veer: > Ruby 2.6 is EOL and 2.7 got it's "last" release in march > (https://www.ruby-lang.org/en/news/2023/03/30/ruby-2-7-8-released/). So > I guess 2.6 can be dropped and 2.7 may linger for a while? the announcement stat

[PATCH] gnu: ruby-2.7-fixed: Upgrade to 2.7.8 [fixes CVE-2023-{28755, 28756}]

2023-05-19 Thread Remco van 't Veer
Fixes: CVE-2023-28755 (ReDoS vulnerability in URI), and CVE-2023-28756 (ReDoS vulnerability in Time). * gnu/packages/ruby.scm (ruby-2.7-fixed): Update to 2.7.8. (ruby-2.7)[replacement]: Graft. --- gnu/packages/ruby.scm | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/gnu/p

Expect bayfront (bordeaux) downtime on 26 May

2023-05-19 Thread Tobias Geerinckx-Rice
Bonjour! This is a service announcement for users of the bayfront (or bordeaux) substitute server, which also handles IRC logs IIRC, and probably some other rando services. That's most Guix users. The original French message follows. The TF;DR is that networking will probably be severed du

Re: bug#55358: docker containers stopped when doing guix install or guix shell

2023-05-19 Thread Remco van 't Veer
Hi Maxim and Zimoun, 2023/02/09 13:26, Remco van 't Veer: > I think I know what is causing the issue. Both the "standard" mysql and > postgres containers use user-id 999 to run the database service (this > seems like a common practice because the redis container is configured > similarly). That

Re: Should commit signing always be required for local work? [was Re: bug#63261: Recent changes to git config cause errors for non-committers]

2023-05-19 Thread Simon Tournier
Hi Josselin, On ven., 19 mai 2023 at 11:34, Josselin Poiret wrote: > I'm curious Leo, in general (not Guix because we have a pre-push hook), > how do you make sure you always publish signed commits? I don't want to > put unsigned commits anywhere except locally, but it feels like I might > just

Re: bug#55358: docker containers stopped when doing guix install or guix shell

2023-05-19 Thread Csepp
Remco van 't Veer writes: > Hi Maxim and Zimoun, > > 2023/02/09 13:26, Remco van 't Veer: > >> I think I know what is causing the issue. Both the "standard" mysql and >> postgres containers use user-id 999 to run the database service (this >> seems like a common practice because the redis cont

Re: tracking /etc/profile.d/*guix.sh in downstream distributions

2023-05-19 Thread Philip McGrath
On Friday, May 19, 2023 6:10:53 PM EDT Vagrant Cascadian wrote: > Philip McGrath recently pointed out that the /etc/profile.d/guix.sh > snippet had not been updating in the Guix packaging for Debian: > > https://bugs.debian.org/1036304 > > (and as bonus complication, was also renamed to zzz-gui