1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152
|
guix (1.2.0-4+deb11u2) bullseye-security; urgency=medium
* debian/patches: guix-daemon: Protect against file descriptor escape
when building fixed-output derivations (CVE-2024-27297).
(Closes: #1066113)
-- Vagrant Cascadian <vagrant@debian.org> Wed, 17 Apr 2024 15:39:38 -0700
guix (1.2.0-4+deb11u1) bullseye; urgency=medium
[ Santiago Vila ]
* debian/patches: Remove expiration dates on openpgp keys used in test
suite. (Closes: #1011863).
-- Vagrant Cascadian <vagrant@debian.org> Sat, 08 Apr 2023 18:35:36 -0700
guix (1.2.0-4) unstable; urgency=medium
* debian/patches: Fix privilege escalation issue in
guix-daemon. (Closes: #985467)
* debian/patches: Update init script to fix guix-daemon path. Thanks to
florine forine. (Closes: #983248)
* Add README.Debian documenting running with sysvinit and describing
differences with other methods of installing guix. (Closes: #983248)
* debian/patches: Adjust init script to use the _guixbuild group.
* sysusers.d/guix-daemon.conf: Explicitly create _guixbuild group to
workaround a bug in opensysusers.
* Install /etc/profile.d/guix.sh to ensure proper functioning of guix
profiles. (Closes: #985916)
-- Vagrant Cascadian <vagrant@debian.org> Sat, 27 Mar 2021 19:18:29 -0700
guix (1.2.0-3) unstable; urgency=medium
* Upload to unstable.
* Fix lintian overrides to be independent of architecture or guile
version.
-- Vagrant Cascadian <vagrant@debian.org> Fri, 22 Jan 2021 18:29:29 -0800
guix (1.2.0-2) experimental; urgency=medium
* debian/patches: Add description for skip-use-of-bootstrap-binary.
* debian/patches: Patch init script to use /usr/bin/guix-daemon.
* debian/patches: Patch init script to use /lib/lsb/init-functions.
* debian/rules: Disable parallel builds, as guile may embed the names of
files being concurrently compiled into each resulting binary.
* Add lintian overrides for various false positives about spelling, man
pages, license files, and documentation.
* sysusers.d/guix-daemon.conf: Quote the GECOS field.
* debian/control: Update Build-Depends/Depends to guile-git 0.4.0-2.
* debian/patches: Reenable tests that break with guile-git built against
old libgit2 version.
* debian/control: Drop Build-Depends and Depends on libgit2-dev, as this
is pulled in from the versioned guile-git dependency.
* debian/control: Update guile-gcrypt version that Depends on
libgcrypt-dev.
* debian/control: Update Build-Depends and Depends to versions of
guile-sqlite3 that Depend on libsqlite3-dev.
* debian/patches: Add patch to remove embedded build path.
* Switch to guile-2.2.
* debian/patches: Disable container tests.
* debian/patches: Disable guix environment test for containers.
* debian/patches: Disable syscall tests relying on user namespaces.
* debian/patches: Disable lint tests that fail with guile-2.2.
* debian/patches: Disable software heritage tests that fail with
guile-2.2.
-- Vagrant Cascadian <vagrant@debian.org> Thu, 21 Jan 2021 00:00:05 -0800
guix (1.2.0-1) experimental; urgency=medium
[ Vagrant Cascadian ]
* New upstream version 1.2.0
* debian/copyright: Update for 1.2.0.
* debian/patches:
- Use proper comments in patch for tests/graph.scm, and
drop patch disabling tests/graph.scm.
- Disable some channels tests due to failures on 32bit architectures.
* debian/rules: Pass GZIP and BZIP2 in the configure target to avoid
embedding different paths on usrmerge systems.
* debian/control: Bump versioned Build-Depends on libgit2-dev >= 1.0.1.
-- Vagrant Cascadian <vagrant@debian.org> Mon, 23 Nov 2020 12:52:35 -0800
guix (1.2.0~rc2-1) experimental; urgency=medium
* sysusers.d/guix-daemon.conf: Fix spelling of "empty" in home
directories (Closes: #974818). Thanks to Axel Beckert.
* debian/patches: Disable script using bootstrap binaries.
* debian/patches: Update tests-that-fail-with-tilde-in-build-path,
partly fixed upstream.
* debian/copyright: Refresh for 1.2.0~rc2.
-- Vagrant Cascadian <vagrant@debian.org> Wed, 18 Nov 2020 15:40:40 -0800
guix (1.2.0~rc1-2) experimental; urgency=medium
* debian/guix.postinst: Only call systemd-sysusers if
installed. (Closes: #974751). Thanks to Axel Beckert.
* debian/control:
- Recommend systemd for systemd-sysusers command.
- Build-Depends/Depends: Allow slightly older versions of
guile-gnutls.
* debian/rules: Adjust guix architecture for armhf.
-- Vagrant Cascadian <vagrant@debian.org> Sat, 14 Nov 2020 20:06:42 -0800
guix (1.2.0~rc1-1) experimental; urgency=medium
* debian/control:
- Depends on libgit2-dev >= 1.0.
- Recommend nscd.
- Restrict architecture to amd64 arm64 armhf i386.
* debian/rules:
- Increase verbosity of test suite.
- Add a default /etc/guix/acl.
* debian/patches:
- Disable tests that fail when build path contains a tilde.
* debian/guix.postinst:
- Run systemd-sysusers.
-- Vagrant Cascadian <vagrant@debian.org> Fri, 13 Nov 2020 19:27:03 -0800
guix (1.1.0+67260.9e2523-2) experimental; urgency=medium
* debian/control:
- Update description. Thanks to Paul Wise!
- Add git and gnupg to Build-Depends for tests.
- Update Vcs-* headers.
* debian/patches:
- Drop ineffective patch to use /bin/guile.
- Drop patch to tests using git, was fixed upstream.
- Update patches to disable tests when when network is unavailable.
- Disable some non-deterministic tests.
* debian/rules:
- Disable network tests by passing RES_OPTIONS=attempts:0 instead of
bespoke variable, effectively disabling hostname resolution. Thanks
to jwilk!
- Copy copy system binaries for tests, to avoid downloading bootstrap
binaries over the network.
- Disable parallelism in dh_auto_test.
* Add lintian override for wrong-path-for-interpreter.
-- Vagrant Cascadian <vagrant@debian.org> Wed, 11 Nov 2020 17:21:48 -0800
guix (1.1.0+67260.9e2523-1) experimental; urgency=medium
* Initial release. Closes: #850644.
* git snapshot from commit 9e2523c25f7b8d6e8c29c679ad899703a120eed8.
-- Vagrant Cascadian <vagrant@debian.org> Sat, 07 Nov 2020 16:27:55 -0800
|