Commit Graph

21180 Commits (e2098e2d580e30b6f39e4cd6f4c7199e1224c9b3)

Author SHA1 Message Date
Mark H Weaver a08691dfbb
gnu: linux-libre: Remove CONFIG_SMC from x86 kernel configurations.
This removes support for the "shared memory communications over RDMA" (SMC-R)
networking protocol, which was added in 4.11 without the knowledge of the RDMA
maintainers, and which is thought to contain significant security flaws.  For
details, see <https://lwn.net/Articles/723081> and
<https://lwn.net/Articles/723070>.

* gnu/packages/aux-files/linux-libre/4.11-x86_64.conf,
gnu/packages/aux-files/linux-libre/4.11-i686.conf: Disable CONFIG_SMC.

723#	0001-gnu-libevent-2.0-Add-fix-from-upstream.patch
2017-05-21 01:47:09 -04:00
Mark H Weaver 519fd6c367
gnu: linux-libre@4.9: Update to 4.9.29.
* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.29.
2017-05-21 01:45:21 -04:00
Mark H Weaver ec8d69ebfe
gnu: linux-libre@4.4: Update to 4.4.69.
* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.69.
2017-05-21 01:44:25 -04:00
Ludovic Courtès 092c58e745
guix system: Increase image size for 'guix system vm'.
This is a followup to 9a1bfe7648.

* guix/scripts/system.scm (system-derivation-for-action): Add 40MiB to
the default size for 'vm'.
2017-05-21 01:25:16 +02:00
Ludovic Courtès 324499184a
gnu: unionfs-fuse-static: Remove 'unionfsctl' executable.
This avoids pulling in glibc & co.  Fixes a regression introduced in
2f861edf5c (the 'unionfsctl' executable
did not exist in unionfs-fuse 0.26).

* gnu/packages/linux.scm (unionfs-fuse/static)[arguments]
<post-install>: Remove 'unionfsctl' binary.
2017-05-21 01:17:11 +02:00
Marius Bakke a588e34e0d
vm: Increase default disk size to account for ESP partition.
Fixes a test regression introduced by ecf5d53769.

* gnu/system/vm.scm (system-qemu-image/shared-store-script): 30MiB -> 70MiB.
2017-05-21 01:17:08 +02:00
Ludovic Courtès 9f8d6eb24a
gnu: unionfs-fuse-static: Remove 'unionfsctl' executable.
This avoids pulling in glibc & co.  Fixes a regression introduced in
2f861edf5c (the 'unionfsctl' executable
did not exist in unionfs-fuse 0.26).

* gnu/packages/linux.scm (unionfs-fuse/static)[arguments]
<post-install>: Remove 'unionfsctl' binary.
2017-05-21 01:14:51 +02:00
Marius Bakke 9a1bfe7648
vm: Increase default disk size to account for ESP partition.
Fixes a test regression introduced by ecf5d53769.

* gnu/system/vm.scm (system-qemu-image/shared-store-script): 30MiB -> 70MiB.
2017-05-21 01:07:12 +02:00
Ricardo Wurmus 402f241da4
Update NEWS. 2017-05-20 23:39:30 +02:00
Leo Famulari fda33e495b
gnu: ghostscript: Add TODO comment about bundled jbig2dec.
* gnu/packages/ghostscript.scm (ghostscript): Add comment.
2017-05-20 16:26:29 -04:00
Leo Famulari 10cb88f85c
gnu: jbig2dec: Fix CVE-2017-{7885,7975,7976}.
* gnu/packages/patches/jbig2dec-CVE-2017-7885.patch,
gnu/packages/patches/jbig2dec-CVE-2017-7975.patch,
gnu/packages/patches/jbig2dec-CVE-2017-7976.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/image.scm (jbig2dec)[source]: Use them.
2017-05-20 16:26:29 -04:00
Marius Bakke fefd4c197f
gnu: pcsc-lite: Update to 1.8.21.
* gnu/packages/security-token.scm (pcsc-lite): Update to 1.8.21.
2017-05-20 21:42:58 +02:00
Leo Famulari 12eecbf0bb
gnu: icedtea@3: Add aarch32-drop.
* gnu/packages/java.scm (icedtea-8)[native-inputs]: Add aarch32-drop.
2017-05-20 14:57:22 -04:00
Leo Famulari db531f734a
gnu: icedtea@3: Update to 3.4.0 [security fixes].
Fixes CVE-2017-{3509,3511,3512,3514,3526,3533,3539,3544}.

* gnu/packages/java.scm (icedtea-8): Update to 3.4.0.
2017-05-20 14:57:22 -04:00
Leo Famulari b17bd261b0
gnu: imagemagick: Update to 6.9.8-6.
* gnu/packages/imagemagick.scm (imagemagick): Update to 6.9.8-6.
2017-05-20 14:06:20 -04:00
Leo Famulari 40fd5600a2
download: Prune the ImageMagick mirror list.
These sites' TLS certificates are invalid.

* guix/download.scm (%mirrors) <imagemagick>: Remove
mirrors-{au,ru,uk}.go-parts.com.
2017-05-20 14:06:20 -04:00
Ludovic Courtès 82ce81ba06
gnu: guix: Add 'guile2.0-guix'.
* gnu/packages/package-management.scm (guile2.0-guix): New variable.
2017-05-20 20:00:53 +02:00
Ludovic Courtès 74460d1121
gnu: libssh, guile-ssh: Add a "debug" output.
* gnu/packages/ssh.scm (libssh)[outputs]: New field.
(guile-ssh)[outputs]: New field.
2017-05-20 19:49:36 +02:00
Ludovic Courtès 96afb480f8
pack: Use 'guile2.0-json' when building with Guile 2.0.
Fixes <http://bugs.gnu.org/27005>.
Reported by Pjotr Prins <pjotr.public12@thebird.nl>.

Fixes a regression introduced in commit
2252f087d4.

* guix/scripts/pack.scm (docker-image)[json]: New variable.
[build]: Use it.
2017-05-20 14:39:50 +02:00
Leo Famulari 7dccad95b6
gnu: icedtea@2: Update to 2.6.10 [security fixes].
Fixes CVE-2017-{3509,3511,3512,3514,3526,3533,3539,3544}.

* gnu/packages/java.scm (icedtea-7): Update to 2.6.10.
2017-05-20 14:39:50 +02:00
Leo Famulari 6a9defd747
gnu: dropbear: Update to 2017.75 [fixes CVE-2017-{9078,9079}].
* gnu/packages/ssh.scm (dropbear): Update to 2017.75.
2017-05-20 14:39:50 +02:00
Ludovic Courtès 429046e9dd
system: Use Guile 2.2 rather than 2.0 in %BASE-PACKAGES.
* gnu/system.scm (%base-packages): Change GUILE-2.0 to GUILE-2.2.
2017-05-20 14:39:49 +02:00
Ludovic Courtès d6bf931cb2
pack: Use 'guile2.0-json' when building with Guile 2.0.
Fixes <http://bugs.gnu.org/27005>.
Reported by Pjotr Prins <pjotr.public12@thebird.nl>.

Fixes a regression introduced in commit
2252f087d4.

* guix/scripts/pack.scm (docker-image)[json]: New variable.
[build]: Use it.
2017-05-20 14:30:01 +02:00
Marius Bakke 6520904b3e
vm: Add UEFI loader to disk images.
* gnu/build/vm.scm (install-efi): New procedure.
(initialize-hard-disk): Generate EFI blob when ESP is present.
* gnu/system/vm.scm (qemu-image): Append 40MiB EFI System Partition.

(cherry picked from commit ecf5d53769)
2017-05-20 10:57:00 +02:00
Marius Bakke 03119da211
vm: Support creating FAT partitions.
* gnu/build/vm.scm (create-ext-file-system, create-fat-file-system): New procedures.
(format-partition): Use them. Error for unknown file systems.
* gnu/system/vm.scm (qemu-image): Include DOSFSTOOLS.
* gnu/system/linux-initrd.scm (base-initrd): Always add nls_is8859-1.ko.
2017-05-20 10:20:35 +02:00
Marius Bakke fd5a30ab7b
vm: Support arbitrary partition flags.
* gnu/build/vm.scm (<partition>): Change BOOTABLE? to FLAGS.
(initialize-partition-table): Pass each flag to parted.
(initialize-hard-disk): Locate boot partition.
* gnu/system/vm.scm (qemu-image): Adjust partition flags.
2017-05-20 10:17:52 +02:00
Ludovic Courtès c383dc520f
gnu: guile-ssh: Fix potential double-free/use-after-free issue.
Fixes <http://bugs.gnu.org/26976>.
Reported by Mark H Weaver <mhw@netris.org>.

* gnu/packages/patches/guile-ssh-double-free.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/ssh.scm (guile-ssh)[source](patches): Add it.
2017-05-20 10:17:49 +02:00
Ludovic Courtès 4ee6584cbf
modules: Add more source-less modules.
* guix/modules.scm (%source-less-modules): New variable.
(source-module-dependencies): Use it.
2017-05-20 10:17:43 +02:00
Ludovic Courtès 4a628d57fc
publish: Fix narinfo rendering for already-compressed items.
Fixes <http://bugs.gnu.org/26975>.
Reported by Mark H Weaver <mhw@netris.org>.

* guix/scripts/publish.scm (bake-narinfo+nar): Pass #f as the 2nd
argument to 'stat' and properly handle #f.
* tests/publish.scm (wait-for-file): New procedure.
("with cache"): Remove 'wait-for-file' procedure.
("with cache, uncompressed"): New test.
2017-05-20 10:17:36 +02:00
Ludovic Courtès 36c99429a3
union: Gracefully handle dangling symlinks in the input.
Fixes <http://bugs.gnu.org/26949>.
Reported by Pjotr Prins <pjotr.public12@thebird.nl>.

* guix/build/union.scm (file-is-directory?): Return #f when FILE does
not exist or is a dangling symlink.
(file=?): Pass #f as a second argument to 'stat'; return #f when both
ST1 or ST2 is #f.
* tests/profiles.scm (test-equalm): New macro.
("union vs. dangling symlink"): New test.
2017-05-20 10:17:14 +02:00
Ludovic Courtès 51fe9cd38d
services: user-homes: Do not create home directories marked as no-create.
Fixes a bug whereby GuixSD would create the /nonexistent directory, from
user 'nobody', even though it has 'create-home-directory?' set to #f.

* gnu/build/activation.scm (activate-users+groups): Add comment for
\#:create-home?.
(activate-user-home)[ensure-user-home]: Skip when CREATE-HOME? is #f or
SYSTEM? is #t.
* gnu/tests/base.scm (run-basic-test)["no extra home directories"]: New
tests.
2017-05-20 10:17:10 +02:00
Marius Bakke f3f8938fe0
install: Enable SSH in installation image.
* gnu/system/install.scm (%installation-services): Add OPENSSH-SERVICE-TYPE.
* doc/guix.texi (Preparing for Installation)[Networking]: Document it.
2017-05-20 10:16:37 +02:00
Marius Bakke e13b55ae79
services: openssh: Don't depend on networking.
* gnu/services/ssh.scm (openssh-shepherd-service): Drop requirement.
2017-05-20 10:16:34 +02:00
Leo Famulari a6c642ef63
maint: The 'release' target builds a VM image.
* gnu/system/examples/vm-image.tmpl: New file.
* Makefile.am (GUIXSD_VM_SYSTEMS, GUIXSD_VM_IMAGE_BASE,
GUIXSD_VM_IMAGE_SIZE): New variables.
(release): Add logic to build a VM image.
(EXAMPLES): Add 'gnu/system/examples/vm-image.tmpl'.
* doc/guix.texi (Running GuixSD in a VM, Installing GuixSD in a VM): Mention the
pre-built VM image.
2017-05-20 10:16:23 +02:00
Ludovic Courtès 56a03975eb
gnu: aspell: 'dict-dir' set to ~/.guix-profile/lib/aspell or $ASPELL_DICT_DIR.
See <https://bugs.gnu.org/25836> for background.

* gnu/packages/patches/aspell-default-dict-dir.patch: New file.
* gnu/packages/aspell.scm (aspell)[source](patches): New field.
[native-search-paths]: New field.
* gnu/local.mk (dist_patch_DATA): Add it.
2017-05-20 10:16:14 +02:00
Alex Kost 37fd956771
build: Compile stackage only if 'guile-json' is available.
Fixes <http://bugs.gnu.org/26860>.
This is a followup to commit 3089b5d3f5.

* Makefile.am (MODULES): Move "guix/scripts/import/stackage.scm" within
'if HAVE_GUILE_JSON'.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2017-05-20 10:16:02 +02:00
Leo Famulari c90fd5564c
gnu: qemu: Fix CVE-2017-7493.
* gnu/packages/patches/qemu-CVE-2017-7493.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/qemu.scm (qemu)[source]: Use it.
2017-05-20 10:15:53 +02:00
Maxim Cournoyer 6d1ae43dcb
profiles: Add elapsed time to manual-database hook to output message.
* guix/profiles.scm (manual-database): Add elapsed time to manual-database
hook to output message.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2017-05-20 10:15:47 +02:00
Ricardo Wurmus d03b34cf19
gnu: glibc/hurd: Do not apply i686 patch.
This is a follow-up to commit c2e4f14ac8.

* gnu/packages/base.scm (glibc/hurd)[arguments]: Override pre-configure phase
with a copy that does not include the patch application.
2017-05-20 10:15:31 +02:00
Ricardo Wurmus 5d6e38a6c3
gnu: glibc/hurd: Use modify-phases syntax.
* gnu/packages/base.scm (glibc/hurd)[arguments]: Use modify-phases syntax.
2017-05-20 10:15:28 +02:00
Efraim Flashner ed5e3ab8ab
gnu: tor: Update to 0.3.0.7.
* gnu/packages/tor.scm (tor): Update to 0.3.0.7.
2017-05-20 10:15:00 +02:00
Leo Famulari d30ce4a7e2
gnu: icedtea@2: Update to 2.6.10 [security fixes].
Fixes CVE-2017-{3509,3511,3512,3514,3526,3533,3539,3544}.

* gnu/packages/java.scm (icedtea-7): Update to 2.6.10.
2017-05-19 21:40:26 -04:00
ng0 cc5a76a74c
gnu: Add loksh.
* gnu/packages/shells.scm (loksh): New variable.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-20 02:42:04 +02:00
Leo Famulari 70f8242b13
gnu: dropbear: Update to 2017.75 [fixes CVE-2017-{9078,9079}].
* gnu/packages/ssh.scm (dropbear): Update to 2017.75.
2017-05-19 20:32:26 -04:00
Brendan Tildesley 1326166ebe
gnu: calibre: Don't create uninstaller.
* gnu/packages/ebook.scm (calibre)[arguments]<#:phases>. Add 'patch-source' phase.

Co-authored-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley affaf98f77
gnu: calibre: Add exhaustive license list.
* gnu/packages/ebook.scm (calibre): Add exhaustive license list.
(chmlib)[license]: Use license: prefix.

Co-authored-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley 9b7dcc2703
gnu: calibre: Add missing dependencies.
* gnu/packages/ebook.scm (calibre)[inputs]: Add poppler, python2-dnspython,
and python2-pygments.
[arguments]: Remove old TODO comments. libwmf and psutil are no longer used.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley eeba7d3a07
gnu: calibre: Unbundle chardet.
* gnu/packages/ebook.scm (calibre)[source]: Delete bundled chardet.
[inputs]: Add python2-chardet.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley b3399a0985
gnu: calibre: Unbundle liberation fonts.
*gnu/packages/ebook.scm (calibre)[source]: Delete liberation .ttf files.
[native-inputs]: Add font-liberation.
[arguments]: Calibre still references the bundled fonts, so we install the
packaged fonts to the directory the bundled fonts would have been.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00
Brendan Tildesley 29ec085170
gnu: calibre: Unbundle python2-markdown.
* gnu/packages/ebook.scm (calibre)[snippet]: Replace python references to
bundled markdown with packaged. Remove markdown from source.
[inputs]: Add python2-markdown as a dependency.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>
2017-05-19 23:49:21 +02:00