bug#22274: GuixSD resets hardware clock (on Lenovo x200 with libreboot)

2016-01-04 Thread Christopher Allan Webber
Ludovic Courtès writes: > Christopher Allan Webber <cweb...@dustycloud.org> skribis: > >> If I reboot into GuixSD, at some point in the boot process it resets my >> hardware clock to 1970! If I reboot into Debian again after that, it's >> 1970 there also. > >

bug#22274: GuixSD resets hardware clock (on Lenovo x200 with libreboot)

2016-01-04 Thread Christopher Allan Webber
Mark H Weaver writes: > Very strange. FWIW, I've used Libreboot X60 and X200 laptops running > GuixSD quite extensively -- they are my primary development machines -- > and I've never seen anything like this. > > One possibility that comes to mind is that perhaps your hardware clock > battery is

bug#22274: GuixSD resets hardware clock (on Lenovo x200 with libreboot)

2015-12-30 Thread Christopher Allan Webber
,@%base-file-systems)) (users (cons (user-account (name "cwebber") (uid 1000) (comment "Christopher Allan Webber") (group "cwebber") (supplementary-groups '("users"

bug#22883: Authenticating a Git checkout

2016-06-05 Thread Christopher Allan Webber
Ludovic Courtès writes: >>> Second, even if it did, it would be a shallow check: as Mike notes in >>> with the ‘signchk’ >>> script, you actually have to traverse the whole commit history and >>> authenticate them one by one. But that’s OK, it

bug#22274: GuixSD resets hardware clock (on Lenovo x200 with libreboot)

2016-01-18 Thread Christopher Allan Webber
Christopher Allan Webber writes: > Ludovic Courtès writes: > >> Christopher Allan Webber <cweb...@dustycloud.org> skribis: >> >>> My config is attached. Hackily, I copy-pasta'ed the kernel packages >>> entirely from guix v0.9.0's release. I can confirm

bug#22274: GuixSD resets hardware clock (on Lenovo x200 with libreboot)

2016-01-18 Thread Christopher Allan Webber
Ludovic Courtès writes: > Christopher Allan Webber <cweb...@dustycloud.org> skribis: > >> From e60db8323c57ec5c44de7c99cee8e4e353ff Mon Sep 17 00:00:00 2001 >> From: Christopher Allan Webber <cweb...@dustycloud.org> >> Date: Sun, 17 Jan 2016 20:34:25 -080

bug#22633: Provide a kvm-less qemu / guix system vm

2016-02-12 Thread Christopher Allan Webber
Ludovic Courtès writes: > Jookia <166...@gmail.com> skribis: > >> We should probably also blacklist kvm on Libreboot machines too somehow, > > A simple way to achieve this is with: > > (operating-system > ;; … > (kernel-arguments '("modprobe.blacklist=kvm-intel,kvm"))) I tried this:

bug#22633: Provide a kvm-less qemu / guix system vm

2016-02-12 Thread Christopher Allan Webber
Leo Famulari writes: > On Fri, Feb 12, 2016 at 09:50:09AM +1100, Jookia wrote: >> On Thu, Feb 11, 2016 at 09:26:12AM -0800, Christopher Allan Webber wrote: >> > So on my Libreboot-enabled machine, KVM does not work. In fact, even >> > starting qemu with KVM enable

bug#22633: Provide a kvm-less qemu / guix system vm

2016-02-22 Thread Christopher Allan Webber
Jookia writes: > On Mon, Feb 22, 2016 at 11:35:30AM -0800, Christopher Allan Webber wrote: >>#~(string-append >> - " -enable-kvm -no-reboot -net nic,model=virtio \ >> + ;; Only enable kvm if we see /dev/kvm exists. >> + ;; This allows uers without

bug#22633: Provide a kvm-less qemu / guix system vm

2016-02-22 Thread Christopher Allan Webber
Christopher Allan Webber writes: > Ludovic Courtès writes: > >> Libkmod honors ‘modprobe.blacklist’ (in ‘kcmdline_parse_result’ in >> libkmod-config.c) and eudev passes KMOD_PROBE_APPLY_BLACKLIST >> unconditionally in udev-builtin-kmod.c (meaning it honors it too.) >>

bug#22633: Provide a kvm-less qemu / guix system vm

2016-02-22 Thread Christopher Allan Webber
Ludovic Courtès writes: > Christopher Allan Webber <cweb...@dustycloud.org> skribis: > >> Christopher Allan Webber writes: >> >>> Ludovic Courtès writes: >>> >>>> Libkmod honors ‘modprobe.blacklist’ (in ‘kcmdline_parse_result’ in >>>

bug#22633: Provide a kvm-less qemu / guix system vm

2016-02-22 Thread Christopher Allan Webber
Ludovic Courtès writes: > Libkmod honors ‘modprobe.blacklist’ (in ‘kcmdline_parse_result’ in > libkmod-config.c) and eudev passes KMOD_PROBE_APPLY_BLACKLIST > unconditionally in udev-builtin-kmod.c (meaning it honors it too.) > > However, there’s a hyphen-vs-underscore issue, I think. Namely,

bug#22808: Add a function to simplify many of the new python2-foo definitions

2016-02-25 Thread Christopher Allan Webber
Right now we have a lot of these that look very similar: (define-public python2-chardet (package (inherit (package-with-python2 (strip-python2-variant python-chardet))) (native-inputs `(("python2-setuptools" ,python2-setuptools) (define-public

bug#22858: Patch security vulnerability in python-pillow

2016-02-29 Thread Christopher Allan Webber
See: https://lwn.net/Articles/677914/ > Package: pillow > CVE ID : CVE-2016-0740 CVE-2016-0775 CVE-2016-2533 > > Multiple security vulnerabilities have been found in Pillow, a Python > imaging library, which may result in denial of service or the execution > of arbitrary code if

bug#22858: Patch security vulnerability in python-pillow

2016-02-29 Thread Christopher Allan Webber
I think so. Here's a patch to remove it. Look good? (Not sure if this needs a review or not :)) - Chris >From cbeb28d364bf2df3ef95c547b80830611254fd5c Mon Sep 17 00:00:00 2001 From: Christopher Allan Webber <cweb...@dustycloud.org> Date: Mon, 29 Feb 2016 14:36:01 -0800 Subject:

bug#22858: Patch security vulnerability in python-pillow

2016-02-29 Thread Christopher Allan Webber
Christopher Allan Webber writes: > Leo Famulari writes: > >>> I'm trying to figure out where the patches for this are, but I can't >>> find them. I expected them to maybe be here, but I don't see them here: >> >> I updated python-pillow to 3.1.1 with 16095d272

bug#22139: Indirect dependencies are not grafted

2016-02-17 Thread Christopher Allan Webber
Mark Weaver laid out a plan that he thinks would work on IRC a couple of years ago, and referenced it yesterday on #guix. Here it is: https://gnunet.org/bot/log/guix/2014-09-25#T480219 Some further conversation: https://gnunet.org/bot/log/guix/2014-10-27#T502706

bug#22626: Postgres service fails on adding user

2016-02-10 Thread Christopher Allan Webber
Heya all... guix system config attached. I tried doing a guix system reconfigure and it failboat'ed. Here's what happened: adding user 'postgres'... useradd: group 'postgres' does not exist Backtrace: In ice-9/boot-9.scm: 63: 19 [call-with-prompt prompt0 ...] In ice-9/eval.scm:

bug#22633: Provide a kvm-less qemu / guix system vm

2016-02-11 Thread Christopher Allan Webber
So on my Libreboot-enabled machine, KVM does not work. In fact, even starting qemu with KVM enabled on it appears to crash my whole system. Not only does "guix system vm" not work, even "guix system vm-image" can take the whole machine down! It would be nice to have a --no-kvm switch, because

bug#22626: Postgres service fails on adding user

2016-02-11 Thread Christopher Allan Webber
Ludovic Courtès writes: > Christopher Allan Webber <cweb...@dustycloud.org> skribis: > >> Heya all... guix system config attached. I tried doing a guix system >> reconfigure and it failboat'ed. Here's what happened: >> >> adding user 'postgres'... >>

bug#22876: Python can't use https with recent grafts

2016-03-01 Thread Christopher Allan Webber
Most of Guix seems to be working just fine with the grafts support and grafting of openssl. However, unlike most grafts that will be done probably, this one removes a feature, and that seems to be creating problems in Python land. >>> from urllib.request import HTTPSHandler Traceback (most

bug#23256: vlc not building after update to ffmpeg 3.0

2016-04-09 Thread Christopher Allan Webber
vlc is failing to build after the update recently to ffmpeg 3.0. I verified that it builds prior to this change. Should we include an older version of ffmpeg to build vlc with for now? Or should we try to figure out what to do to to get vlc to build with ffmpeg 3.0? Maybe for now we should do

bug#23256: vlc not building after update to ffmpeg 3.0

2016-04-09 Thread Christopher Allan Webber
Christopher Allan Webber writes: > vlc is failing to build after the update recently to ffmpeg 3.0. I > verified that it builds prior to this change. > > Should we include an older version of ffmpeg to build vlc with for now? > Or should we try to figure out what to do to to g

bug#23103: A number of corrupt packages on Hydra?

2016-03-23 Thread Christopher Allan Webber
For at least boost and hydra I'm getting errors like the following: From http://hydra.gnunet.org/nar/jaf2s3paa3fswfpzi6amlqjxd3fwiw9x-ruby-2.3.0 Downloading jaf2s3...-ruby-2.3.0 (41.9MiB installed)... http://hydra.gnunet.org/nar/jaf2s3paa3fswfpzi6amlqjxd3fwiw9x-ruby-2.3.0 2.0MiB/s 00:02 |

bug#23103: A number of corrupt packages on Hydra?

2016-03-26 Thread Christopher Allan Webber
Allegedly, Ludo has fixed this, or at least https://lists.gnu.org/archive/html/guix-devel/2016-03/msg01039.html makes it sound like it :)

bug#22883: Trustable "guix pull"

2016-03-02 Thread Christopher Allan Webber
Leo Famulari writes: > On Wed, Mar 02, 2016 at 10:03:59AM -0800, Christopher Allan Webber wrote: >> Right now, when a user does a "guix pull", that pulls down the latest >> repository of code from git, which is kept in a tarball. Once you >> receive the latest cod

bug#22738: Build failure in vigra

2016-03-02 Thread Christopher Allan Webber
Andreas Enge writes: > On Thu, Feb 18, 2016 at 10:59:11PM -0500, Leo Famulari wrote: >> It looks like we need this module 'vigranumpy': >> https://ukoethe.github.io/vigra/doc-release/vigranumpy/index.html > > This is part of the vigra source code. There should soon be a new vigra > release: >

bug#22868: letsencrypt certs don't work for git repositories

2016-03-01 Thread Christopher Allan Webber
See: $ git clone https://git.dthompson.us/presentations.git davexunit-presentations Cloning into 'davexunit-presentations'... fatal: unable to access 'https://git.dthompson.us/presentations.git/': server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none

bug#25205: Guix package is using the GuixSD logo instead of the Guix logo

2016-12-15 Thread Christopher Allan Webber
Ludovic Courtès writes: > Hello Felipe! > > Luis Felipe López Acevedo skribis: > >> Steps to reproduce >> == >> >> 1. Go to https://www.gnu.org/software/guix/packages/g.html >> 2. Locate a guix package, and click on the "Expand" button >> >> >>

bug#26608: Provide --only-substitutes flag to "guix package --upgrade"

2017-04-22 Thread Christopher Allan Webber
Sometimes I do an upgrade and I want to get the latest security updates, but I also am not really available to burn through a lot of cpu time, (especially on my x200). I'd love it if thre were a flag so that I could specify "only bother to upgrade the packages where we only upgrade if a

bug#26610: python-gpg broke; python-gpg 1.9.0 does not exist

2017-04-22 Thread Christopher Allan Webber
Commit 8439c9c05e upgraded gpgme to 1.9.0. Unfortunately, python-gpg's version is tied to gpgme: (define-public python-gpg (package (name "python-gpg") (version (package-version gpgme)) ;; [...] This is a problem, because upgrading gpgme "automatically" upgraded python-gpg, and

bug#25961: Compiling new guix on old guix: 'waitpid' -1 failed unexpectedly: No child processes

2017-03-03 Thread Christopher Allan Webber
Hello! I'm getting this error while trying to compile latest guix master on one of my machines (fortunately, not my main one). I don't know why I'm hitting this error, since I'm not hitting it on my main machine. I'm upgrading from a few months back. I spoke on irc and found that Ricardo had

bug#25961: Compiling new guix on old guix: 'waitpid' -1 failed unexpectedly: No child processes

2017-03-05 Thread Christopher Allan Webber
Marius Bakke writes: > Which kernel version is this? Linux-Libre 4.8.1 And! As it turns out, I went to the last revision before I was hitting compilation isues (c90db25f4cf1f98f3f4f3af38d175a14ffb8c32a), did a make on the repo, and from there I did a "guix system

bug#27795: Issues with upstream source for guile-emacs

2017-07-29 Thread Christopher Allan Webber
Leo Famulari writes: > On Sun, Jul 23, 2017 at 04:22:06PM +0200, Ricardo Wurmus wrote: >> >> Ricardo Wurmus writes: >> >> > Leo Famulari writes: >> > >> >> While working on the bug 'Changing package source URLs from git:// to >> >> https://' [0], I

bug#26695: openssh password-authentication? should be #f by default

2017-04-28 Thread Christopher Allan Webber
Marius Bakke writes: >> We have discussed in the past having some service that just copies some >> static files on init. That would be enough to set up public keys >> appropriately. > > I think that can already be done with 'special-file-service-type'. > >

bug#26695: openssh password-authentication? should be #f by default

2017-04-28 Thread Christopher Allan Webber
Maxim Cournoyer writes: > +1. Although it means the keys will have to be copied by another mean > than the "ssh-copy-id" script. Maybe the configuration could accept > the public key? :) I haven't checked if this is already possible. We have discussed in the past having some service that just

bug#26695: openssh password-authentication? should be #f by default

2017-04-28 Thread Christopher Allan Webber
Our default permits password authentication for the openssh service (and the others it seems) by default in Guix. This is somewhat dangerous because this is a much easier to break in this way, and some users might not assume the default is reasonably safe. If users really want

bug#26696: openssh: root 'without-password & password-authentication #f both breaks service

2017-04-28 Thread Christopher Allan Webber
I wanted to permit root logins but only permit public key authentication in my openssh configuration. This was my original assumption of how to do it: (service openssh-service-type (openssh-configuration (permit-root-login 'without-password)

bug#28193: tome4 tiles are nonfree?

2017-08-22 Thread Christopher Allan Webber
I was excited to see tome4 packaged for Guix since that game is *incredible*. However, I'm not totally sure about the music, but as for the tiles, there's this message in tome4's COPYING-MEDIA which says: All the medias located in all the "/data/gfx" folders are granted to use with the Tales

bug#26917: [PATCH] Add thermald and thermald-service-type (for cpu frequency scaling)

2017-05-13 Thread Christopher Allan Webber
Bah, this should have been sent to guix-patches. Christopher Allan Webber writes: > Hello! I got tired of my laptop crashing so much due to overheating, so > here's a package for thermald as well as a service type. > >>From 56c7019d58d4a064fe44e626a1396b62cbf808b0 Mon Sep 1

bug#26917: [PATCH] Add thermald and thermald-service-type (for cpu frequency scaling)

2017-05-13 Thread Christopher Allan Webber
Hello! I got tired of my laptop crashing so much due to overheating, so here's a package for thermald as well as a service type. >From 56c7019d58d4a064fe44e626a1396b62cbf808b0 Mon Sep 17 00:00:00 2001 From: Christopher Allan Webber <cweb...@dustycloud.org> Date: Sat, 13 May 2017 19:36

bug#24087: recovery from suspend is broken with recent libreboot + linux-libre 4.7

2017-05-27 Thread Christopher Allan Webber
Clément Lassieur writes: > Clément Lassieur writes: > >>> I just flashed the latest stable of libreboot and for t400 it is fixed, >>> I can recover from suspend. Thanks to the amazing work of Leah and all >>> other libreboot contributors :) >> >> I still reproduce the bug

bug#28193: tome4 tiles are nonfree?

2017-09-04 Thread Christopher Allan Webber
Christopher Allan Webber writes: >> Thanks for bringing this to our attention. The GNU FSDG requirements >> for non-functional data are relatively permissive: >> >> Non-functional Data >> >> Data that isn't functional, that doesn't do a practic

bug#28578: xorg not starting on x200 due to recent commit

2017-09-25 Thread Christopher Allan Webber
Chris Marusich writes: > Christopher Allan Webber <cweb...@dustycloud.org> writes: > >> The following commit to guix makes it so that I can't start xorg: >> >> c68c201fdd429140da1c606861c9296b9cb01265 >> Author: Andy Wingo <wi...@igalia.com> >&

bug#28578: xorg not starting on x200 due to recent commit

2017-09-24 Thread Christopher Allan Webber
The following commit to guix makes it so that I can't start xorg: c68c201fdd429140da1c606861c9296b9cb01265 Author: Andy Wingo CommitDate: Wed Sep 20 15:40:31 2017 +0200 gnu: xorg-server: Prefer intel driver only for older GPUs. * gnu/packages/xorg.scm

bug#28578: xorg not starting on x200 due to recent commit

2017-09-26 Thread Christopher Allan Webber
Chris Marusich writes: > Leo Famulari <l...@famulari.name> writes: > >> On Sun, Sep 24, 2017 at 05:15:02PM -0700, Chris Marusich wrote: >>> Christopher Allan Webber <cweb...@dustycloud.org> writes: >>> >>> > The follow

bug#28193: tome4 tiles are nonfree?

2017-08-23 Thread Christopher Allan Webber
Mark H Weaver writes: > Hi Chris, > > Christopher Allan Webber <cweb...@dustycloud.org> writes: > >> I was excited to see tome4 packaged for Guix since that game is >> *incredible*. However, I'm not totally sure about the music, but as for >> the tiles, the