Planet Guix

Demystifying complex configurations

Guix system and Guix home introduce the concept of services. These provide users with a way to control background processes, commonly refereed as daemons , as well as ways of controlling the setup of files. For example, openssh-service-type is a service which controls a SSH daemon. In contrast, etc-service-type is a service that populates the contents of the /etc directory. One peculiarity of Guix services is that it's customary to provide Scheme bindings for the different fields. By that I mean that the different fields of the configuration of most services will be a…

Shepherd, not robot

This project, its code and its substance, have been brought to you by a small but dedicated herd of passionate and possibly stubborn human beings often referred to as “hackers.” This is how it all started more than 20 years ago and it hasn’t changed! I mean, why hack an init system, with a fringe programming language (best of breed, I must say), and with cutting-edge technology if not out of a passion for the good hack? Why make it free, with participation open to all, if not to share that passion with anyone curious enough?

Pay for Software That Respects You

I consider myself a pretty chill and calm person, I can endure and tolerate quite a lot, but I become furious when a program spits in my face with what I didn't ask for, take me for a dumbass or exploit legacy vulnurabilities of my brain. Annoying notification, algorithmic feeds and recommendations, unasked advices and tutorials, stolen out of my pocket data and attention. If I observe such behaviors from a person, I will politely ask them to fuck off at very least. I wouldn't tolerate it from a human, and I definitely won't let it slide from a program.

‘guix substitute’ and ‘guix pull’ Vulnerabilities

Several security issues (CVE IDs pending) have been identified in guix substitute , a helper utility invoked by guix-daemon , which enable a variety of harmful activities including remote privilege escalation to the build daemon user , remote store corruption , and potentially local disclosure of sensitive files accessible to the build daemon user. All systems are affected, whether or not guix-daemon is running with root privileges; the harm that can be done when guix-daemon runs without root privileges is more limited. You are strongly advised to upgrade your daemon now (see…

One year with Codeberg

A year ago, Guix migrated to Codeberg for source code hosting, issue tracking, and pull requests. This is a significant change for a project with more than 400 people contributing code each year, after more than decade hosting code at Savannah and dealing with bug reports and patches by email, tracked by a Debbugs instance . This article discusses the process that led to this change and lists some takeaways, a year later. The non-obvious choice For years before, the question of our choice of source code hosting and collaboration tools would regularly come up. However, with…