Re: bug#47867: [1.2.1 pre-release testing] substitute downloading and TLS errors

2021-04-23 Thread pelzflorian (Florian Pelz)
Success! Thank you. 65;6003;1c On Fri, Apr 23, 2021 at 11:19:28AM +0200, Ludovic Courtès wrote: > Florian, could you try again with the attached patch? It succeeds on two full installs of Enlightenment, no errors, no prolonged getting stuck. > If you have the courage, it would be awesome if

Organizing Tui Apps

2021-04-23 Thread jgart
This is a continuation of the thread started at http://issues.guix.gnu.org/47852 Ekaitz: What do we want to be the main point of the programs: their UI or their goal? jgart: I would prefer for them to be catalogued based on their intended usage or goal, as Ekaitz suggested. What do people

What's the meaning of the percent sign in variable names

2021-04-23 Thread Luis Felipe
Hi, Are all these constants (%base-packages, for example)? Is this a Guix convention or does it come from Guile? Although looking at Guile's Variable index I see many constants in uppercase, and also some variables prefixed with the percent sign, while Guix' Programming index doesn't seem to

Re: What's the meaning of the percent sign in variable names

2021-04-23 Thread Leo Prikler
Am Freitag, den 23.04.2021, 14:22 + schrieb Luis Felipe: > Hi, > > Are all these constants (%base-packages, for example)? Is this a Guix > convention or does it come from Guile? Although looking at Guile's > Variable index I see many constants in uppercase, and also some > variables prefixed

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Maxim Cournoyer
Hi, Mark H Weaver writes: > Hi Léo, > > Léo Le Bouter writes: > >> I don't share your analysis, the security fixes werent stripped because >> glib/cairo was also updated to latest version in subsequent commits >> which were pushed all at once. > > 'glib' was updated, but 'cairo' wasn't,

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Raghav Gururajan
Hi Maxim! Actually, there *is* a "new" stable release available on their release page, 1.17.2 It seems 1.16.0 is the latest+stable version. Quoting their download, "Please download one of the latest [releases](https://cairographics.org/releases/) in order to get an API-stable version of

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Leo Famulari
On Fri, Apr 23, 2021 at 09:33:07PM +0200, Léo Le Bouter wrote: > I knew about this but I didnt feel like telling Raghav to do yet > another rebase. I felt like Raghav was taking on with so much already. > The rebase was specially complicated because Raghav's commit changed > indentation, git has

Re: Outreachy - Guix Data Service: questions about improving the data for derivation comparisons.

2021-04-23 Thread Luciana Lima Brito
Hi, On Thu, 22 Apr 2021 22:15:34 +0100 Christopher Baines wrote: I'm stuck. > I'd suggest avoiding '() as the value for hash and hash-algorithm when > they're NULL in the database. One option here that I've used in some > places is to return a alist rather than a list. This can simplify JSON

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Raghav Gururajan
Hi Maxim! Oh, indeed, sorry for the confusion. I think I got tricked by seeing the changelog for 1.17.2 under their releases/ directory (https://www.cairographics.org/releases/ChangeLog.cairo-1.17.2). No worries! I was confused by that too, while I was working on cairo package. Regards,

Re: Outreachy - Guix Data Service: questions about improving the data for derivation comparisons.

2021-04-23 Thread Christopher Baines
Luciana Lima Brito writes: > Hi, > > On Thu, 22 Apr 2021 22:15:34 +0100 > Christopher Baines wrote: > > I'm stuck. > >> I'd suggest avoiding '() as the value for hash and hash-algorithm when >> they're NULL in the database. One option here that I've used in some >> places is to return a alist

Re: go-build-system possible improvments

2021-04-23 Thread François
Hello Maxim, On Tue, Apr 20, 2021 at 10:00:15PM -0400, Maxim Cournoyer wrote: > That's exactly what we're doing now (disable Go module with > GO11MODULE=off and use GOPATH to find the sources). Debian does > something lazy like just calling 'go module vendor', which builds a huge > directory

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Maxim Cournoyer
Hello Raghav, Raghav Gururajan writes: > Hi Maxim! > >> Actually, there *is* a "new" stable release available on their release >> page, 1.17.2 > > It seems 1.16.0 is the latest+stable version. > > Quoting their download, "Please download one of the latest >

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Leo Famulari
On Fri, Apr 23, 2021 at 08:50:37PM +0200, Léo Le Bouter wrote: > I think there is no problem in accepting criticism but there is a > certain way Mark presents criticism and I don't feel like I can respond > to it when it is written in such way. Over several emails Mark was > looking to point to

Re: Security related tooling project

2021-04-23 Thread Christopher Baines
Ludovic Courtès writes: > Hello Chris! > > Christopher Baines skribis: > >> In May last year (2020), I submitted an application to NLNet. The work I >> set out wasn't something I was doing at the time, but something I hadn't >> yet found time to work on, tooling specifically around security

Re: Security related tooling project

2021-04-23 Thread Christopher Baines
Bengt Richter writes: > Given that crims monitor developer discussions to discover > unfixed vulnerabilities and clues re exploiting them, > what are your ideas to avoid building a tool that can be abused? > > E.g., How will your tool avoid leaking info during an embargo window > while trusted

Re: licensing problem with "On Lisp" and code from a github gist

2021-04-23 Thread Pierre Neidhardt
Hi, A quick search got me this: https://github.com/DalekBaldwin/on-lisp/blob/master/on-lisp.asd So it seems that the license is an informal > As long as you tell people it's modified and link to the original, > that's fine. --pg Not sure what to make of it. I've heard of a few libraries

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Léo Le Bouter
On Fri, 2021-04-23 at 15:18 -0400, Leo Famulari wrote: > Léo and Raghav, you need to keep learning our workflow around > security > updates. It's not okay to remove security patches and later update a > package to a fixed version in a different commit. `git rebase` is the > tool to learn for

Re: Organizing Tui Apps

2021-04-23 Thread Leo Prikler
Am Freitag, den 23.04.2021, 15:04 + schrieb jgart: > This is a continuation of the thread started at > http://issues.guix.gnu.org/47852 > > Ekaitz: What do we want to be the main point of the programs: their > UI or their goal? > > jgart: I would prefer for them to be catalogued based on

Re: Organizing Tui Apps

2021-04-23 Thread Leo Famulari
On Fri, Apr 23, 2021 at 10:00:14PM +0200, Leo Prikler wrote: > Spreadsheets sounds fine to me, but I think the most important ones > (libreoffice and org-mode) are already excluded from that module for > obvious reasons ;) > Perhaps an even more generic "office" module might be better, because >

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Léo Le Bouter
On Fri, 2021-04-23 at 13:52 -0400, Maxim Cournoyer wrote: > Actually, there *is* a "new" stable release available on their > release > page, 1.17.2 [0] > > According to NVD [1], that latest version has no known CVE [1]. > > Léo, could it be that you had planned to do this update, but it >

Re: A "cosmetic changes" commit that removes security fixes

2021-04-23 Thread Leo Prikler
Hi, Am Freitag, den 23.04.2021, 20:50 +0200 schrieb Léo Le Bouter: > I think there is no problem in accepting criticism but there is a > certain way Mark presents criticism and I don't feel like I can > respond > to it when it is written in such way. Over several emails Mark was > looking to

Re: go-build-system possible improvments

2021-04-23 Thread Maxim Cournoyer
Hi François, François writes: > Hello Maxim, > > On Tue, Apr 20, 2021 at 10:00:15PM -0400, Maxim Cournoyer wrote: >> That's exactly what we're doing now (disable Go module with >> GO11MODULE=off and use GOPATH to find the sources). Debian does >> something lazy like just calling 'go module

Re: Organizing Tui Apps

2021-04-23 Thread Ryan Prior
On April 23, 2021, Leo Famulari wrote: > On Fri, Apr 23, 2021 at 10:00:14PM +0200, Leo Prikler wrote: > > Spreadsheets sounds fine to me, but I think the most important ones > > (libreoffice and org-mode) are already excluded from that module for > > obvious reasons ;) > > Perhaps an even more

Re: Add a way to disable serialization support to (guix services configuration)

2021-04-23 Thread Xinglu Chen
Hi, On Fri, Apr 23 2021, Ludovic Courtès wrote: > Hi, > > Maxim Cournoyer skribis: > >>> +(define-syntax-rule (without-field-serialization definition) >>> + (syntax-parameterize ((configuration-field-serialization? >>> + (identifier-syntax #f))) >>> +definition >>>

Re: Best practices for writing services

2021-04-23 Thread Xinglu Chen
Hi, On Fri, Apr 23 2021, Maxim Cournoyer wrote: >> But the problem here is that it doesn’t force the user to configure the >> field. In a Git config for example, the user should be forced to set >> ‘user.name’ and ‘user.email’, otherwise they can’t commit anything. You >> will just have to set

Re: [Outreachy] - Guix Data Service - Set a more informative page title

2021-04-23 Thread Canan Talayhan
It seems after testing lots of pages this one escaped me since I only tested the working case. Please find the quick fix in the link below. https://pastebin.ubuntu.com/p/s7tWyPHZ8F/ I'm looking forward to making another contribution. Could you please review it as soon as possible? Thanks, Canan

Re: bug#47867: [1.2.1 pre-release testing] substitute downloading and TLS errors

2021-04-23 Thread Ludovic Courtès
Hi Florian, (Cc: Chris who’s also familiar with (guix http-client).) "pelzflorian (Florian Pelz)" skribis: > It still gets stuck (sometimes with enlightenment, one time with > udisks, restarting the install fixed it once). After getting stuck, > this different error message is shown now; no

Re: [Outreachy] - Guix Data Service - Set a more informative page title

2021-04-23 Thread Christopher Baines
Canan Talayhan writes: > It seems after testing lots of pages this one escaped me since I only > tested the working case. > > Please find the quick fix in the link below. > https://pastebin.ubuntu.com/p/s7tWyPHZ8F/ Great, that fixes the issue with the revision comparison page. > I'm looking