home.social

#gnuguix — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #gnuguix, aggregated by home.social.

fetched live
  1. 💪 GNU Guix Package Manager Improves Extension Loading, Adds New Commands linuxiac.com/nu-guix-package-m

    #gnuguix #guix

  2. GNU Guix is changing how it finds and loads extra commands: it can now use ready-made files instead of processing their code during loading.

    This may make the process faster; no measured performance gain is reported.

    The new guix-extension-collection currently brings together five additions: explore, removals, compose (Docker Compose compatibility), toys and xsearch (package search).

    Recent Guix installations can try the…

    en.hacks.gr/oi-prosthetes-ento

    #GNUGuix #GuixSystem #DockerCompose #Codeberg

  3. #GNUBoot, a libre and ethical replacement for the nonfree BIOS or UEFI, has joined #GNUToolchain and #GNUGuix, among others, in the FSF's Working Together for Free Software Fund: u.fsf.org/4cf #FSF #GNU #FreeSoftware

  4. I have recently falling into the freedom dimension with GNUGuix and I don't think I want to leave! I have been a long time GNU/Linux user and I think I have finally found my Zen. :) #fsf #GNU #GNUGuix #Linux

  5. Today I talked about GNU Guix at MashhadLUG, our local Linux User Group. I’ve published the presentation files on GitHub. (Sadly, GitLab is unavailable for my country due to sanctions, and Codeberg is blocked by the Iranian government, otherwise I would have preferred to host them there.)

    I’m a big fan of Emacs and Org mode. This presentation was written in Org and delivered using org-tree-slide. It was a really enjoyable experience :)

    github.com/behdanisohrab/prese

    #GNUGuix #Emacs #OrgMode #FreeSoftware #OpenSource #Linux #GNU #FLOSS #LUG

  6. Four GNU Guix vulnerabilities in guix substitute and guix pull allow remote privilege escalation, file overwrite, and local file disclosure. Update now.

    #GNUGuix #Guix #Vulnerability #Linux #InfoSec

    securityonline.info/guix-subst

  7. 🛡️🪲 Managerul de pachete GNU Guix a fost lovit de patru vulnerabilități de securitate 🚀💻

    GNU Guix, managerul de pachete tranzacțional și avansat din ecosistemul GNU — apreciat la nivel global pentru abordarea sa puristă în privința libertății software, configurarea declarativă și reproductibilitatea absolută a build-urilor — se confruntă cu o provocare serioasă de securitate. Comunitatea de dezvoltatori a confirmat oficial descoperirea a patru vulnerabilități în logica sa de funcționare, forțând emiterea unor patch-uri de urgență.

    Deoarece GNU Guix folosește un demon de fundal cu privilegii ridicate (guix-daemon) pentru a compila și izola pachetele destinate utilizatorilor, aceste breșe reprezintă un risc considerabil pentru integritatea sistemelor afectate.

    Iată detaliile principale despre problemele identificate:

    🔹 Breșe la nivelul privilegiilor și izolării (Sandbox Escape):
    Vulnerabilitățile identificate vizează în mod special mecanismul de sandbox (mediul izolat) pe care Guix îl folosește în timpul compilării pachetelor din surse.

    Riscul: Anumite erori logice în gestionarea permisiunilor și a directoarelor temporare de build puteau permite unui pachet malițios să „evadeze” din containerul său izolat. Odată evadat, codul atacatorului ar fi putut interfața cu fișierele critice ale sistemului gazdă sau ar fi putut obține o escaladare neautorizată a privilegiilor până la nivelul de root.

    🔹 Manipularea reproducerii pachetelor (Build Poisoning):
    Una dintre cele mai mari calități ale GNU Guix este reproductibilitatea (același cod sursă generează bit cu bit același binar). Breșele raportate introduceau un risc de „otrăvire” a procesului de build local, permițând unui utilizator local neautorizat sau unui script malițios să modifice rezultatul compilării altor pachete de pe mașină, alterând binarul final fără ca administratorul să observe imediat.

    🔹 Remedierea și corecturile aplicate:
    Echipa GNU Guix a reacționat cu promptitudine imediat ce detaliile tehnice au fost verificate. A fost lansată o actualizare care modifică modul în care guix-daemon gestionează variabilele de mediu, legăturile simbolice (symlinks) și montarea directoarelor în sandbox, închizând complet portițele de evadare folosite în scenariile de atac testate.

    ⚠️ Acțiune obligatorie pentru utilizatori: Dacă rulezi GNU Guix ca manager de pachete independent pe o altă distribuție sau dacă folosești sistemul de operare complet Guix System, este critic să îți actualizezi demonul de sistem imediat.

    Pentru a securiza mașina, utilizatorii trebuie să ruleze comanda de actualizare a profilelor și, extrem de important, să repornească serviciul de fundal:

    Bash
    guix pull
    sudo systemctl restart guix-daemon
    Prin această intervenție rapidă, comunitatea demonstrează din nou că transparența totală a codului open-source și auditurile de securitate riguroase sunt cele mai bune mecanisme de protecție împotriva defectelor inevitabile de programare.

    #GNUGuix #GuixSystem #GNULinux #Cybersecurity #PackageManager #SandboxEscape #PrivilegeEscalation #OpenSource #TechNews

  8. The February #GNU Spotlight by Amin Bandali is now available! Read it here: u.fsf.org/4ab #FSF #GRUB #Units #GNUGuix

  9. This week's Linux and FOSS news:

    LINUX NEWS

    Draft code submitted to KDE Plasma turns it into a full VR desktop:
    gamingonlinux.com/2026/01/draf

    KDE Plasma 6.7 will have a global push-to-talk feature:
    gamingonlinux.com/2026/01/kde-

    GNOME's AI Assistant Newelle Adds Llama.cpp Support, Command Execution Tool:
    phoronix.com/news/GNOME-AI-New

    Window Shadows Finally Arrive on COSMIC Desktop:
    omgubuntu.co.uk/2026/01/cosmic

    CachyOS Starts 2026 By Switching To Plasma Login Manager & Live ISO Using Wayland:
    phoronix.com/news/CachyOS-Janu

    Myrlyn 1.0 Released For Package Manager GUI Spawned By SUSE's Hack Week:
    phoronix.com/news/Myrlyn-1.0-S

    GNU Guix 1.5 Released With RISC-V Support, Experimental x86_64 GNU Hurd Kernel:
    phoronix.com/news/GNU-Guix-1.5

    Deepin 25.0.10 update includes data-retaining installer and file manager improvements:
    alternativeto.net/news/2026/1/

    14 Years Later than Planned, NexPhone is Up for Preorder:
    omgubuntu.co.uk/2026/01/nexpho

    (more Linux and FOSS news in comment)

    #WeeklyNews #News #Linux #LinuxNews #KDE #GNOME #COSMIC #CachyOS #Myrlyn #SUSE #Guix #GNUGuix #Deepin #NexPhone #KDEPlasma #Newelle #AI #ArtificialIntelligence #Plasma6 #LinuxPhone #LinuxDistro #DistroRelease #DesktopEnvironment #LinuxDesktop #DesktopLinux #FosseryTech

  10. #XLibre runs on #GNUGuix. Seen below:

    XLibre, #AMD #ATI #Radeon RX 5600/5700, #Linux 6.15.6, #xmonad window manager, #fishshell. You can find a tutorial for the third-party packages at github.com/X11Libre/packaging/.

    More #liberatedscreens at github.com/orgs/X11Libre/discu.

  11. Thanks to the @fsf for promoting GNU Guix's fundraising.

    Like many other Free Software project's we depend on our users and fans support to pay for the project's expenses.

    We're running a campaign to 'sustain and strengthen' Guix. As a #linux distribution we have a lot of #packages which costs quite a bit to build and distribute to users. And, as we use the declarative and reproducible system pioneered by #Nix we rebuild packages whenever there's a change.

    If you'd like to know more about what we're doing, or support the project you can check out the blog post:

    guix.gnu.org/en/blog/2025/fund

    We appreciate any support that people can give!

    #linux #guix #gnuguix #scheme #guile #freesoftware #declarative #reproducible

  12. If you've used the #GNUSystem at all, consider donating a few bucks to help sustain future development u.fsf.org/2t0 #FSF #FreeSoftware #GNUGuix

  13. 💰 Fundraising campaign to sustain GNU Guix / @guix

    「 As a package manager and GNU/Linux distribution Guix has some unique needs. As the distribution grows and becomes more popular our costs also grow. Each package that's added to the distribution increases the number of builds. And, as more people use Guix the cost of delivering those packages also grows 」

    guix.gnu.org/en/blog/2025/fund

    #gnuguix #linux #guix #opensource

  14. Читаю про GNU Guix. Виглядає дуже непогано! З того що дізнався це як кращий Nix. Команди деякі вбудовані guix import <-> nix-init.

    Згадую як учив Nix, розумію чому люди не дуже активно хочуть пробувати такі пакетні менеджери.

    #gnuguix #guix

  15. I am one screen I to the #GNUGuix install and its yelling at me about my graphics card. Sorry for assuming AMD would be fine I guess xD

  16. Are your #software environments truly #reproducible? Can the data obtained using complex software pipelines really pass the proof of time? Is your #research transparent and its results reproducible? Have a look at this nice article: nature.com/articles/s41597-022 . The approach outlined in the article goes beyond research. I use #GNU #Guix in my daily work to test software. Try to replicate my bit-to-bit reproducible @irods test environment at github.com/ll4strw/irods_guix
    #FreeSoftware #GNUGuix #iRODS

  17. I would need some stickers for my #FrameworkLaptop #Framework expansion cards to distinguish them.
    I would like to have some for
    - #guix #gnuguix
    - #NixOS
    - #Pop_OS

    Does anyone have sources for those? Max size is 28 mm x 26 mm.
    Of course i can pay a fee.

  18. GNU Guix has a new post "Keeping one’s home tidy," which explores a new system of keeping your config files tidy, archivable, and even shareable. u.fsf.org/3ix #GNUGuix #GNU #Guix

Share on Mastodon

Enter the server where you have an account.