Blog (Page 1 of 7)
Build User Takeover Vulnerability
October 21, 2024
A security issue has been identified in guix-daemon which allows for a local user to gain the privileges of any of the build users and subsequently use…
The European Union must keep funding free software
July 23, 2024
Guix is the fruit of a combination of volunteer work by an amazing number of people, work paid for by employers, but also work sponsored by public institutions. The…
Source code archiving in Guix: new publication
May 31, 2024
We are glad to announce the publication of a new research paper entitled Source Code Archiving to the Rescue of Reproducible Deployment for the ACM…
Authenticate your Git checkouts!
May 7, 2024
You clone a Git repository, then pull from it. How can you tell its contents are “authentic”—i.e., coming from the “genuine” project you think you’re pulling from, written by…
Adventures on the quest for long-term reproducible deployment
March 13, 2024
Rebuilding software five years later, how hard can it be? It can’t be that hard, especially when you pride yourself on having a tool that can …
Fixed-Output Derivation Sandbox Bypass (CVE-2024-27297)
March 12, 2024
A security issue has been identified in guix-daemon which allows for fixed-output derivations , such as source code tarballs or Git checkouts, to be corrupted by an unprivileged…
Identifying software
March 4, 2024
What does it take to “identify software”? How can we tell what software is running on a machine to determine, for example, what security vulnerabilities might affect it? …
Guix Days 2024 and FOSDEM recap
February 10, 2024
Guix contributors and users got together in Brussels to explore Guix's status, chat about new ideas and spend some time together enjoying Belgian beer! Here's a recap of…
Guix at FOSDEM 2024
January 19, 2024
It's not long to FOSDEM 2024, where Guixers will come together to learn and hack. As usual there's some great talks and opportunities to meet other users and contributors. …
Building packages targeting psABIs
January 14, 2024
Starting with version 2.33, the GNU C library (glibc) grew the capability to search for shared libraries using additional paths, based on the hardware capabilities of the machine running the…
Write package definitions in a breeze
November 24, 2023
More than 28,000 packages are available in Guix today, not counting third-party channels. That’s a lot—the 5th largest GNU/Linux distro ! But it’s nothing if the one…
A build daemon in Guile
October 30, 2023
When using Guix, you might be aware of the daemon . It runs in the background but it's a key component in Guix. Whenever you've been using Guix to…
A new Quality Assurance tool for Guix
September 12, 2023
Maintaining and expanding Guix's collection of packages can be complicated. As a distribution with around 22,000 packages, spanning across around 7 architectures and with support for cross-compilation, it's quite common…
Parameterized Packages for GNU Guix
June 9, 2023
Hello Guix! I'm Sarthak and I'll be working on implementing Parameterized Packages for GNU Guix as a Google Summer of Code intern under the guidance of Pjotr Prins…
From development environments to continuous integration—the ultimate guide to software development with Guix
June 5, 2023
Guix is a handy tool for developers; guix shell , in particular, gives a standalone development environment for your package, no matter what language(s) it’s written in.…
The Full-Source Bootstrap: Building from source all the way down
April 26, 2023
We are delighted and somewhat relieved to announce that the third reduction of the Guix bootstrap binaries has now been merged in the main branch of Guix! …
Dissecting Guix, Part 3: G-Expressions
April 19, 2023
Welcome back to Dissecting Guix ! Last time, we discussed monads , the functional programming idiom used by Guix to thread a store connection through a series of store-related…
Reinstating an iconic error message
April 1, 2023
Software development is a social process. What might be a “bug” for someone might well be a “feature” for someone else. The Guix project rediscovered it the hard…
Building Toolchains with Guix
March 15, 2023
In order to deploy embedded software using Guix we first need to teach Guix how to cross-compile it. Since Guix builds everything from source, this means we must teach…
Dissecting Guix, Part 2: The Store Monad
February 20, 2023
Hello again! In the last post , we briefly mentioned the with-store and run-with-store macros. Today, we'll be looking at those in further…
Meet Guix at FOSDEM
January 23, 2023
GNU Guix will be present at FOSDEM next week, February 4th and 5th. This is the first time since the pandemic that FOSDEM takes place again “in the…
The Filesystem Hierarchy Standard Comes to Guix Containers
January 6, 2023
GNU Guix is different from most other GNU/Linux distributions and perhaps nowhere is that more obvious than the organization of the filesystem: Guix does not conform to the Filesystem…
Dissecting Guix, Part 1: Derivations
January 4, 2023
To a new user, Guix's functional architecture can seem quite alien, and possibly offputting. With a combination of extensive #guix -querying, determined manual-reading, and plenty of source-perusing, they…
GNU Guix 1.4.0 released
December 19, 2022
We are pleased to announce the release of GNU Guix version 1.4.0! The release comes with ISO-9660 installation images, a virtual machine image, and with tarballs to install the…
Wrapping up Ten Years of Guix in Paris
September 28, 2022
Two weeks ago, some of us were in Paris, France, to celebrate ten years of Guix ! The event included 22 talks and 12 lightning talks, covering topics…
Celebrating 10 years of Guix in Paris, 16–18 September
June 13, 2022
It’s been ten years of GNU Guix ! To celebrate, and to share knowledge and enthusiasm, a birthday event will take place on September 16–18th, 2022 , in…
10 years of stories behind Guix
April 18, 2022
It’s been ten years today since the very first commit to what was already called Guix—the unimaginative name is a homage to Guile and Nix , which…
Keeping one’s home tidy
March 21, 2022
How much effort to recreate your work environment when you switch to a new machine? What would it take to roll back to your previous environment once you’ve noticed…
Online Guix Day Conference: schedule released!
February 14, 2022
The Guix hackers are very happy to announce the second online Guix Days Conference on Saturday and Sunday, 19 & 20 February 2022 . This conference is open…
Sunsetting gzip substitutes availability
February 9, 2022
Starting next month (2022/03/01), the build farm known as ci.guix.gnu.org will no longer offer gzip-compressed binary substitutes. The Guix daemon has known to use lzip for substitutes since 2019…