Commit graph

25689 commits

Author SHA1 Message Date
Ludovic Courtès
7482b98120
cve: Use 'http-fetch/cached' instead of having custom caching.
That way CVE fetching benefits from 'If-Modified-Since' handling.

* guix/http-client.scm (http-fetch/cached): Add #:write-cache and
 #:cache-miss parameters and honor them.
* guix/cve.scm (%current-year-ttl, %past-year-ttl): Reduce.
(call-with-cve-port): Remove.
(write-cache): New procedure.
(fetch-vulnerabilities): Rewrite in terms of 'http-fetch/cached'.
2017-11-16 08:45:15 +01:00
Ludovic Courtès
866f37fb7e
download: Improve efficiency of 'write-request' over TLS.
This is another instance of <https://bugs.gnu.org/22966>.
The Microsoft-IIS/7.5 server at static.nvd.nist.gov would sometimes hang
when receiving our requests byte by byte.

* guix/build/download.scm (tls-wrap) [!guile-2.0]: Add 'setvbuf' call.
2017-11-16 08:45:14 +01:00
Mark H Weaver
c114c9c5d8
gnu: linux-libre: Update to 4.14.
* gnu/packages/linux.scm (%linux-libre-version): Update to 4.14.
(%linux-libre-hash): Update hash.
* gnu/packages/aux-files/linux-libre/4.13-arm.conf,
gnu/packages/aux-files/linux-libre/4.13-i686.conf,
gnu/packages/aux-files/linux-libre/4.13-x86_64.conf: Delete files.
* gnu/packages/aux-files/linux-libre/4.14-arm.conf,
gnu/packages/aux-files/linux-libre/4.14-i686.conf,
gnu/packages/aux-files/linux-libre/4.14-x86_64.conf: New files.
* Makefile.am (AUX_FILES): Update accordingly.
2017-11-16 00:03:34 -05:00
Mark H Weaver
811a24ca5f
gnu: linux-libre@4.9: Update to 4.9.62.
* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.62.
2017-11-16 00:03:00 -05:00
Mark H Weaver
6f0e2c2b4a
gnu: linux-libre@4.4: Update to 4.4.98.
* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.98.
2017-11-16 00:02:24 -05:00
Mark H Weaver
f1e3214534
gnu: icecat: Add more fixes from upstream mozilla-esr52.
Add fixes for CVE-2017-7830, the remaining 1/2 changesets for CVE-2017-7828,
the remaining 1/19 changesets for CVE-2017-7826, and selected other fixes.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add selected fixes from the
upstream mozilla-esr52 repository.
* gnu/packages/patches/icecat-bug-1348660-pt5.patch,
gnu/packages/patches/icecat-bug-1415133.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
2017-11-16 00:01:46 -05:00
Mark H Weaver
6a71fa6faa
gnu: icecat: Label patches to reflect CVE assignments.
Document that we include 18/19 changesets for CVE-2017-7826, and 1/2
changesets for CVE-2017-7828.

* gnu/packages/gnuzilla.scm (icecat)[source]: Rename patches to reflect CVE
assignments.
2017-11-16 00:01:21 -05:00
Tobias Geerinckx-Rice
ed0f9f53ab
gnu: iproute2: Update to 4.14.1.
* gnu/packages/linux.scm (iproute): Update to 4.14.1.
2017-11-15 12:45:26 +01:00
Tobias Geerinckx-Rice
7c1adf0090
gnu: gnucash: Use HTTPS for www.gnucash.org.
* gnu/packages/gnucash.scm (gnucash, gnucash-docs)[home-page]: Use HTTPS.
2017-11-15 03:19:19 +01:00
Tobias Geerinckx-Rice
471ce31cd7
gnu: gnucash: Update to 2.6.18.
* gnu/packages/gnucash.scm (gnucash): Update to 2.6.18.
2017-11-15 03:19:18 +01:00
Tobias Geerinckx-Rice
c27f48573e
gnu: youtube-dl: Update to 2017.11.15.
* gnu/packages/video.scm (youtube-dl): Update to 2017.11.15.
2017-11-15 03:19:18 +01:00
Tobias Geerinckx-Rice
99adfd7d3d
gnu: geoclue: Use HTTPS for home page.
* gnu/packages/gnome.scm (geoclue)[home-page]: Use HTTPS.
2017-11-15 03:19:18 +01:00
Tobias Geerinckx-Rice
dba7028f14
gnu: geoclue: Update to 2.4.7.
* gnu/packages/gnome.scm (geoclue): Update to 2.4.7.
2017-11-15 03:19:17 +01:00
Tobias Geerinckx-Rice
06d2a63c15
gnu: aria2: Update to 1.33.1.
* gnu/packages/bittorrent.scm (aria2): Update 1.33.1.
2017-11-15 03:19:17 +01:00
Tobias Geerinckx-Rice
c115b2dbe0
gnu: smartmontools: Mark up description.
* gnu/packages/admin.scm (smartmontools)[description]: Use @dfn.
2017-11-15 03:19:17 +01:00
Tobias Geerinckx-Rice
bd2eedd116
gnu: smartmontools: Update to 6.6.
* gnu/packages/admin.scm (smartmontools): Update to 6.6.
2017-11-15 03:19:16 +01:00
Kei Kebreau
8c2dcedd1d
gnu: devhelp: Update to 3.26.0.
* gnu/packages/gnome.scm (devhelp): Update to 3.26.0.
2017-11-14 17:50:33 -05:00
Kristofer Buffington
1697307185
gnu: Add guile-wiredtiger.
* gnu/packages/databases.scm (guile-wiredtiger): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
2017-11-14 23:46:53 +01:00
Ludovic Courtès
9f8605958e
download: Pass the timeout to 'ftp-retr'.
This ensures the timeout applies when connecting to the port returned by
PASV.

* guix/ftp-client.scm (ftp-list): Add #:timeout parameter.  Use
'connect*' instead of 'connect' and pass TIMEOUT.
(ftp-retr): Likewise.
* guix/build/download.scm (ftp-fetch): Pass TIMEOUT to 'ftp-retr'.
2017-11-14 23:46:53 +01:00
Oleg Pykhalov
5724a14e71
tests: install: Increase target-size.
1200 MiB are too small for a btrfs-root-os, thus let increase it.

* gnu/tests/install.scm (run-install): Increase target-size to 2200 MiB.
(%btrfs-root-installation-script): Increase my-root partition size to 2G.
2017-11-15 00:48:09 +03:00
Leo Famulari
412716eff2
grafts: Clarify the status of the workaround for <http://bugs.gnu.org/24659>.
* guix/build/graft.scm (mkdir-p*): Annotate.
2017-11-14 16:38:02 -05:00
David Thompson
52b617ffeb
gnu: Update awscli to 1.11.185.
* gnu/packages/python-web.scm (awscli): Update to 1.11.185.
2017-11-14 14:20:42 -05:00
Kei Kebreau
31d9e454ad
gnu: gnome-calculator: Update to 3.26.0.
* gnu/packages/gnome.scm (gnome-calculator): Update to 3.26.0.
2017-11-14 14:12:42 -05:00
Kei Kebreau
a5a22d7b14
gnu: gnome-system-monitor: Update to 3.26.0.
* gnu/packages/gnome.scm (gnome-system-monitor): Update to 3.26.0.
2017-11-14 13:47:03 -05:00
Tobias Geerinckx-Rice
85a9ffcbf4
gnu: exim: Use HTTPS for home page.
* gnu/packages/mail.scm (exim)[home-page]: Use HTTPS.
2017-11-14 04:06:53 +01:00
Tobias Geerinckx-Rice
58b8d1b39f
gnu: iproute2: Update to 4.14.0.
* gnu/packages/linux.scm (iproute): Update to 4.14.0.
2017-11-14 04:06:53 +01:00
Ludovic Courtès
1b2f753d9c
gnu: Move web packages from python to python-web.
This is in part to address <https://bugs.gnu.org/27284>.

* gnu/packages/python.scm (python-httplib2, python2-httplib2)
(python-sockjs-tornado, python2-sockjs-tornado)
(python-flask-babel, python2-flask-babel)
(python-html5lib, python2-html5lib)
(python-html5lib-0.9, python2-html5lib-0.9)
(python-html5-parser, python2-html5-parser)
(python-webencodings, python2-webencodings)
(python-openid, python2-openid, python-cssutils, python2-cssutils)
(python-cssselect, python2-cssutils)
(python-openid-cla, python2-openid-cla)
(python-openid-teams, python2-openid-teams)
(python-tornado, python2-tornado)
(python-tornado-http-auth, python-terminado, python2-terminado)
(python-webob, python2-webob, python-zope-event, python2-zope-event)
(python-zope-interface, python2-zope-interface)
(python-zope-exceptions, python2-zope-exceptions)
(python-zope-testing, python2-zope-testing)
(python-zope-testrunner, python2-zope-testrunner)
(python-zope-i18nmessageid, python2-zope-i18nmessageid)
(python-zope-schema, python2-zope-schema)
(python-zope-configuration, python2-zope-configuration)
(python-zope-proxy, python2-zope-proxy)
(python-zope-location, python2-zope-location)
(python-zope-security, python2-zope-security)
(python-zope-component, python2-zope-component)
(python-ndg-httpsclient, python2-ndg-httpsclient)
(python-websocket-client, python2-websocket-client)
(python-requests-toolbelt, python2-requests-toolbelt)
(python-rauth, python2-rauth, python-urllib3, python2-urllib3)
(awscli, python-wsgiproxy2, python2-wsgiproxy2)
(python-pastedeploy, python2-pastedeploy)
(python-webtest, python2-webtest, python-flask, python2-flask)
(python-flast-wtf, python2-flask-wtf)
(python-flask-multistatic, python2-flask-multistatic)
(python-cookies, python2-cookies)
(python-responses, python2-responses)
(python-geventhttpclient, python2-geventhttpclient)
(python-requests-oauthlib, python2-requests-oauthlib)
(python-url, python2-url, python-cachecontrol, python2-cachecontrol)
(python-betamax, python2-betamax)
(python-betamax-matchers, python2-betamax-matchers)
(python-s3transfer, python2-s3transfer)
(python-flask-restful, python-flask-basicauth)
(python-flask-sqlalchemy, python-flask-restplus)
(python-flask-restful-swagger, python-htmlmin, python2-htmlmin)
(python-flask-htmlmin, python2-flask-htmlmin)
(python-flask-login, python2-flask-login)
(python-oauth2client, python-flask-oidc)
(python-webassets, python-cssmin, python2-cssmin)
(python-elasticsearch, python2-elasticsearch)
(python-flask-script, python2-flask-script)
(python-flask-migrate, python2-flask-migrate)
(python-genshi, python2-genshi)
(python-flask-principal, python2-flask-principal)
(python-flask-httpauth, python2-flask-httpauth)
(python-uritemplate, python2-uritemplate): Move to...
* gnu/packages/python-web.scm: ... here.  New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* gnu/packages/admin.scm, gnu/packages/backup.scm,
gnu/packages/dav.scm, gnu/packages/django.scm,
gnu/packages/docker.scm, gnu/packages/ebook.scm,
gnu/packages/logging.scm, gnu/packages/mail.scm,
gnu/packages/music.scm, gnu/packages/openstack.scm,
gnu/packages/package-management.scm, gnu/packages/rdf.scm,
gnu/packages/tls.scm, gnu/packages/tor.scm,
gnu/packages/tryton.scm, gnu/packages/version-control.scm,
gnu/packages/web-browsers.scm,
gnu/packages/web.scm: Adjust accordingly.
2017-11-13 23:41:01 +01:00
Ben Woodcroft
a68e586097
gnu: diamond: Update to 0.9.13.
* gnu/packages/bioinformatics.scm (diamond): Update to 0.9.13.
2017-11-14 08:25:43 +10:00
Ricardo Wurmus
5ccde2079e
gnu: Move test packages from perl to perl-check.
* gnu/packages/perl.scm (perl-test2-bundle-extended,
perl-test2-plugin-nowarnings, perl-test-base, perl-test-class,
perl-test-class-most, perl-test-cleannamespaces, perl-test-command,
perl-test-cpan-meta, perl-test-cpan-meta-json, perl-test-deep,
perl-test-differences, perl-test-directory, perl-test-eol,
perl-test-exception, perl-test-fatal, perl-test-file-sharedir-dist,
perl-test-files, perl-test-harness, perl-test-leaktrace,
perl-test-longstring, perl-test-manifest, perl-test-memory-cycle,
perl-test-mockobject, perl-test-mocktime, perl-test-most, perl-test-needs,
perl-test-notabs, perl-test-nowarnings, perl-test-number-delta,
perl-test-output, perl-test-pod, perl-test-pod-coverage, perl-test-requires,
perl-test-script, perl-test-sharedfork, perl-test-simple, perl-test-taint,
perl-test-tester, perl-test-trap, perl-test-utf8, perl-test-warn,
perl-test-warnings, perl-test-without-module, perl-test-writevariants,
perl-test-yaml, perl-test-trailingspace): Move variables to ...
* gnu/packages/perl-check.scm: ... this new file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* gnu/packages/admin.scm,
gnu/packages/bioinformatics.scm,
gnu/packages/crypto.scm,
gnu/packages/databases.scm,
gnu/packages/glib.scm,
gnu/packages/gnupg.scm,
gnu/packages/image-viewers.scm,
gnu/packages/language.scm,
gnu/packages/networking.scm,
gnu/packages/package-management.scm,
gnu/packages/perl.scm,
gnu/packages/terminals.scm,
gnu/packages/tex.scm,
gnu/packages/version-control.scm,
gnu/packages/web.scm,
gnu/packages/xml.scm,
gnu/packages/xorg.scm: Use perl-check module.
2017-11-13 23:03:01 +01:00
Ricardo Wurmus
587d175266
gnu: ghc-tls: Move to (gnu packages tls).
* gnu/packages/haskell.scm (ghc-tls): Move from here...
* gnu/packages/tls.scm (ghc-tls): ...to here.
* gnu/packages/haskell-web.scm: Use (gnu packages tls).
2017-11-13 18:40:55 +01:00
Ricardo Wurmus
f24eba89f4
gnu: Move crypto packages from haskell to haskell-crypto.
* gnu/packages/haskell.scm (ghc-asn1-types, ghc-asn1-encoding, ghc-asn1-parse,
ghc-crypto-api, ghc-crypto-api-tests, ghc-cryptohash, ghc-cryptohash-md5,
ghc-cryptohash-sha1, ghc-cryptonite, ghc-digest, ghc-entropy, ghc-pem,
ghc-puremd5, ghc-sha, ghc-x509, ghc-x509-store, ghc-x509-validation,
ghc-x509-system): Move variables to ...
* gnu/packages/haskell-crypto.scm: ... this new file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* gnu/packages/haskell.scm,
gnu/packages/haskell-web.scm,
gnu/packages/version-control.scm: Include haskell-crypto module.
2017-11-13 18:36:51 +01:00
Ricardo Wurmus
44b7374a22
gnu: Move web packages from haskell to haskell-web.
* gnu/packages/haskell.scm (ghc-tagsoup, ghc-cookie, ghc-http-types, ghc-http,
ghc-http-client, ghc-http-client-tls, ghc-http-date, ghc-http2,
ghc-http-conduit, ghc-wai, ghc-wai-logger, ghc-wai-extra, ghc-wai-conduit,
ghc-warp, ghc-warp-tls, ghc-xss-sanitize, ghc-css-text, ghc-mime-types,
ghc-html, ghc-xhtml, ghc-blaze-html, ghc-aeson, ghc-aeson-pretty,
ghc-aeson-qq, ghc-multipart): Move variables to ...
* gnu/packages/haskell-web.scm: ... this new file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* gnu/packages/haskell.scm,
gnu/packages/idris.scm,
gnu/packages/version-control.scm,
gnu/packages/wm.scm: Include haskell-web module.
2017-11-13 18:12:37 +01:00
Ricardo Wurmus
a06b9b5007
gnu: Move testing packages from haskell to haskell-check.
* gnu/packages/haskell.scm (ghc-clock-bootstrap, ghc-tasty-ant-xml,
ghc-tasty-smallcheck, ghc-tasty-quickcheck, ghc-tasty-golden, ghc-tasty,
ghc-tasty-hunit, ghc-tasty-kat, ghc-tasty-th, ghc-tasty-rerun,
ghc-quickcheck-instances, ghc-quickcheck-unicode, ghc-quickcheck-io,
ghc-quickcheck, ghc-test-framework, ghc-test-framework-hunit,
ghc-test-framework-quickcheck2, ghc-test-framework-th, ghc-hunit,
hspec-discover, ghc-hspec-core, ghc-hspec-meta, ghc-hspec, ghc-hspec-contrib,
ghc-hspec-expectations): Move variables to ...
* gnu/packages/haskell-check.scm: ... this new file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* gnu/packages/haskell.scm,
gnu/packages/idris.scm,
gnu/packages/version-control.scm,
gnu/packages/wm.scm: Include haskell-check module.
2017-11-13 18:12:27 +01:00
Ricardo Wurmus
d4735e8c65
gnu: cd-hit: Update source tarball hash.
* gnu/packages/bioinformatics.scm (cd-hit)[source]: Update hash.
2017-11-13 16:02:35 +01:00
Kei Kebreau
62f0806f4c
Revert "gnu: totem: Enable parallel build."
This reverts commit e5f748a6c0.
2017-11-13 07:47:23 -05:00
Ludovic Courtès
a0fea77dbb
services: guix: Remove dependency on 'lsof'.
This is a followup to b8f59cdc20:
'list-runtime-roots' no longer depends on 'lsof'.

* gnu/services/base.scm (<guix-configuration>)[lsof]: Remove.
(guix-shepherd-service): Adjust accordingly.
* doc/guix.texi (Base Services): Adjust accordingly.
* gnu/system.scm (%base-packages): Remove LSOF.
2017-11-13 11:36:28 +01:00
Ludovic Courtès
b918473189
gnu: guix: Update snapshot.
* gnu/packages/package-management.scm (guix): Update to ff23b47.
2017-11-13 11:31:27 +01:00
Ludovic Courtès
ff23b47dbe
tests: 'guix-gc.sh' passes even when 'out' or 'drv' are defined as env vars.
This fixes a test failure exhibited by
fb17a89912 whereby assignments to 'out' in
guix-gc.sh would go to the 'out' environment variable, when it exists,
which in turn prevents garbage collection of $out.

* tests/guix-gc.sh: Add 'unset' invocations.
2017-11-13 10:10:13 +01:00
Efraim Flashner
6b7490b340
gnu: ibus: Update to 1.5.17.
* gnu/packages/ibus.scm (ibus): Update to 1.5.17.
2017-11-13 10:19:26 +02:00
Efraim Flashner
ce12b31157
gnu: ibus: Enable wayland support.
* gnu/packages/ibus.scm (ibus)[arguments]: Add configure flag to enable
wayland support.
[inputs]: Add wayland.
2017-11-13 10:19:26 +02:00
Kei Kebreau
f35bb0711c
gnu: libsoup: Update to 2.60.2.
* gnu/packages/gnome.scm (libsoup): Update to 2.60.2.
2017-11-12 21:20:24 -05:00
Ludovic Courtès
856b68bda9
list-runtime-roots: Ignore PIDs we cannot access.
This allows running as non-root.
Fixes a regression introduced in b8f59cdc20.

* nix/scripts/list-runtime-roots.in (referenced-files): Handle EACCES in
addition to ENOENT.
2017-11-12 23:53:12 +01:00
Leo Famulari
d0b87779f0
download: Use HTTPS for the first ImageMagick mirror.
* guix/download.scm (%mirrors)[imagemagick]: Use HTTPS for <sunsite.icm.edu.pl>.
2017-11-12 17:50:01 -05:00
Leo Famulari
ecc585711e
download: Try FTP servers last.
* guix/download.scm (%mirrors)[savannah, kernel.org, apache, xorg, imagemagick]:
Re-arrange so that FTP is last.
2017-11-12 17:50:01 -05:00
Leo Famulari
c0d1fa64d0
gnu: imagemagick: Update to 6.9.9-23.
* gnu/packages/imagemagick.scm (imagemagick): Update to 6.9.9-23.
2017-11-12 17:50:01 -05:00
Ludovic Courtès
fb17a89912
list-runtime-roots: Canonicalize store items.
Looking at 'addAdditionalRoots' in libstore/gc.cc, it looks like it
should always have been this way.  In practice it probably doesn't make
much of a difference.

* nix/scripts/list-runtime-roots.in (canonicalize-store-item): New
procedure.
<top level>: Use it.
2017-11-12 22:42:17 +01:00
Ludovic Courtès
b8f59cdc20
list-runtime-roots: Do not use 'lsof'.
This makes things a bit faster (0.8s instead of 1.4s on my laptop).

* nix/scripts/list-runtime-roots.in (lsof-roots): Remove.
(proc-fd-roots): Return the empty list when 'scandir' returns #f.
(referenced-files): New procedure.
Use it at the top level.
2017-11-12 22:42:17 +01:00
Ludovic Courtès
6a98b9f34e
doc: Better explain GC roots.
Fixes <https://bugs.gnu.org/24194>.
Reported by J. Eppler <j.eppler@openmailbox.org>.

* doc/guix.texi (Invoking guix-daemon): Add index entries for GC roots.
Add xref to "Invoking guix gc".
(Invoking guix gc): Add the string "GC roots"; mention /var/guix/gcroots.
(Additional Build Options): Add index entries.  Better explain --root.
(Invoking guix environment): Add xref to "Invoking guix gc".
2017-11-12 22:42:17 +01:00
Leo Famulari
2560aa7adb
gnu: Remove unrar.
This package is abandoned upstream and contains serious bugs:

http://seclists.org/oss-sec/2017/q3/329
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14120
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14121
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14122

* gnu/packages/compression.scm (unrar): Remove variable.
2017-11-12 16:17:08 -05:00
Rutger Helling
8420c7a356
gnu: linux-libre: Change URL to HTTPS.
* gnu/packages/linux.scm (linux-libre): Change URL to HTTPS.

Signed-off-by: Leo Famulari <leo@famulari.name>
2017-11-12 15:46:44 -05:00