* gnu/packages/nss.scm (nsncd): New variable. Introducing Nsncd, a non-caching
alternative of Glibc Nscd.
Change-Id: I18ba7ffbb6fb59c4928829bb98a8da4e6963e587
Co-authored-by: Ludovic Courtès <ludo@gnu.org>
This causes the test suite to run in about in nearly a third of the original
time (from 145 min to 52 minutes on a particular machine).
* gnu/packages/nss.scm (nss/fixed) [phases] {check}: Set NSS_CYCLES
environment variable to 'standard'.
Change-Id: I5dab1ed16b302af2276b0f075a790f6193edbe95
As I'm seeing this test fail with results of 5 to 7 seconds.
* gnu/packages/nss.scm (nss/fixed)[arguments]: Tweak a test to have a higher
time threshold.
Change-Id: Icb0551cd986acf67b2ba17dc8772a67b9747d31a
This fixes CVE-2023-5388, CVE-2023-6135 and CVE-2024-0743.
* gnu/packages/nss.scm (nss) [replacement]: New field.
(nss-3.98): Rename variable to...
(nss/fixed): ... this. Make it a hidden package.
* gnu/packages/librewolf.scm (librewolf) [inputs]: Replace nss-3.98 with
nss/fixed.
Change-Id: I8cc667c53a270dfe00738bf731923f1342036624
* gnu/packages/nss.scm (nss)[arguments]: Adjust configure-flags when
cross-compiling to correctly set the target architecture and kernel.
Adjust the custom 'configure-phase when cross-compiling to use the
correct C++ compiler.
* gnu/packages/nss.scm (nss)[arguments]: Skip tests on powerpc-linux.
Adjust the configure-flags when building for powerpc-linux to not use
features unavailable for that architecture.
With "conflicts" resolved in (mostly in favor of master/staging):
gnu/packages/admin.scm
gnu/packages/gnuzilla.scm
gnu/packages/gtk.scm
gnu/packages/kerberos.scm
gnu/packages/linux.scm
guix/lint.scm
This is the only hammer I know for dealing with module cycles and
effectively fixes, for example, ‘guix show nss’ today.
It's also a very poor solution.
* gnu/packages/certs.scm (nss-certs)[version, source]: Copy verbatim
from the nss package rather than referring to it at the top level.
Reported by several users of #guix.
* gnu/packages/patches/nss-CVE-2021-43527.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/nss.scm (nss/fixed): New variable
(nss)[replacement]: New field.
This is made in an attempt to get rid of non-deterministic test failures,
namely:
[ FAILED ] TlsConnectDatagram13.AeadLimit
* gnu/packages/nss.scm (nss): Update comment about nss-certs. Update to 3.71.
[phases]{check}: Update faketime date.
[inputs]{sqlite}: Use the regular version.
* gnu/packages/certs.scm (nss-certs): Inherit version and source from nss.
* gnu/packages/nss.scm (mozjs)[inputs]: Always include 'perl" and
'bash-minimal', even when compiling natively.
Signed-off-by: Mathieu Othacehe <othacehe@gnu.org>
* gnu/packages/nss.scm
(nspr)[inputs]: Add 'perl' and 'bash-minimal' when cross-compiling.
(nspr)[arguments]{#:disallowed-references}: Add native 'perl' when
cross-compiling.
...in order to avoid a top-level variable reference. This reverts commit
18c38c18989aab28a654c9e546243603690cc75e.
* gnu/packages/certs.scm (nss-certs)[version, source]: Do not inherit from NSS.
