gnu: Add the Hurd.

* gnu/packages/hurd.scm (hurd): New variable.
* gnu/packages/patches/hurd-fix-eth-multiplexer-dependency.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.

gnu: hurd: Add hurd-source-url procedure.

* gnu/packages/hurd.scm (hurd-source-url): New procedure.
  (hurd-headers)[source]: Adjust accordingly.

system: Rename operating-system-parameters-file to operating-system-boot-parameters-file.

* gnu/system.scm (operating-system-parameters-file): Rename to ...
(operating-system-boot-parameters-file): ... this.
(operating-system-directory-base-entries): Adapt call site.

system: Rename operating-system-kernel-arguments to operating-system-user-kernel-arguments.

* gnu/system.scm (operating-system-kernel-arguments): Rename to ...
(operating-system-user-kernel-arguments): ... this.
(<operating-system>): Adapt accordingly.
(operating-system-bootcfg): Adapt accordingly.
(operating-system-parameters-file): Adapt accordingly.
* gnu/system/vm.scm (system-qemu-image/shared-store-script): Adapt
accordingly.

gnu: weechat: Update to 1.7.1.

* gnu/packages/irc.scm (weechat): Update to 1.7.1.
[source, home-page]: Use HTTPS.

gnu: weechat: Mention ‘IRC’.

* gnu/packages/irc.scm (weechat)[description]: Mention the search term
‘IRC’, split into paragraphs, and other small tweaks.

gnu: hyperrogue: Update to 9.4g.

* gnu/packages/games.scm (hyperrogue): Update to 9.4g.

gnu: gnuplot: Update to 5.0.6.

* gnu/packages/maths.scm (gnuplot): Update to 5.0.6.

cache: Work around 'time-monotonic' bug in Guile 2.2.2.

* guix/cache.scm (time-monotonic) [guile-2.2]: New variable.
* tests/cache.scm (time-monotonic) [guile-2.2]: Likewise.
* guix/build/download.scm (time-monotonic) [guile-2.2]: Adjust comment:
it's a 2.2.2 bug.

derivations: Adjust builder encoding test.

This is a followup to 9231ef12f2a595b8f1e677dbe50cc499555302b6.

* tests/derivations.scm ("build-expression->derivation and builder
encoding"): Set '%default-port-encoding' to "UTF-8".

gnu: xf86-video-nouveau: Update to 1.0.15.

* gnu/packages/xorg.scm (xf86-video-nouveau): Update to 1.0.15.
[home-page]: Use HTTPS.

gnu: emacs: Update to 25.2.

* gnu/packages/emacs.scm (emacs, emacs-minimal, emacs-no-x,
emacs-no-x-toolkit): Update to 25.2.

gnu: xdg-utils: Update to 1.1.1.

* gnu/packages/freedesktop.scm (xdg-utils): Update to 1.1.1.
[source]: Adjust file name.
[native-inputs]: Add DOCBOOK-XSL, DOCBOOK-XML-4.1.2, LIBXSLT, W3M and XMLTO.
[arguments]<#:phases>: Add 'patch-hardcoded-paths' and 'locate-catalog-files'
phases. New parameter.
[home-page]: Update to new home.

gnu: linux-libre: Update to 4.10.12.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.10.12.
(%linux-libre-hash): Update hash.

gnu: linux-libre@4.9: Update to 4.9.24.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.24.

gnu: linux-libre@4.4: Update to 4.4.63.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.63.

gnu: Add guile2.2-ssh.

* gnu/packages/ssh.scm (guile2.2-ssh): New variable.

download: Work around Guile 2.2 bug with 'time-monotonic' objects.

* guix/build/download.scm (time-monotonic) [guile-2.2]: New variable.

gnu: Add policycoreutils.

* gnu/packages/selinux.scm (policycoreutils): New variable.

gnu: Add python-setools.

* gnu/packages/selinux.scm (python-setools): New variable.

gnu: Add python-ipy.

* gnu/packages/networking.scm (python-ipy): New variable.

gnu: Add python-sepolgen.

* gnu/packages/selinux.scm (python-sepolgen): New variable.

gnu: Add secilc.

* gnu/packages/selinux.scm (secilc): New variable.

gnu: Add libsemanage.

* gnu/packages/selinux.scm (libsemanage): New variable.

gnu: Add libselinux.

* gnu/packages/selinux.scm (libselinux): New variable.

gnu: Add checkpolicy.

* gnu/packages/selinux.scm (checkpolicy): New variable.

gnu: Add libsepol.

* gnu/packages/selinux.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.

gnu: ibus-libpinyin: Update to 1.9.0.

* gnu/packages/ibus.scm (ibus-libpinyin): Update to 1.9.0.

gnu: libpinyin: Adjust indentation.

* gnu/packages/ibus.scm (libpinyin)[arguments]: Adjust indentation.

gnu: libpinyin: Update to 2.0.0.

* gnu/packages/ibus.scm (libpinyin): Update to 2.0.0.

gnu: Remove unused patches.

* gnu/packages/patches/gcc-libiberty-printf-decl.patch,
gnu/packages/patches/grub-CVE-2015-8370.patch,
gnu/packages/patches/grub-freetype.patch,
gnu/packages/patches/grub-gets-undeclared.patch,
gnu/packages/patches/guile-arm-fixes.patch,
gnu/packages/patches/mplayer2-theora-fix.patch,
gnu/packages/patches/soprano-find-clucene.patch,
gnu/packages/patches/util-linux-CVE-2017-2616.patch,
gnu/packages/patches/xf86-video-intel-compat-api.patch,
gnu/packages/patches/xf86-video-intel-glibc-2.20.patch: Delete files.
* gnu/local.mk (dist_patch_DATA): Remove them.

tests: Adjust to the addition of a new Coreutils version.

* tests/scripts-build.scm ("options->transformation, with-input"): Use
'specification->package' rather than refer to Coreutils by its
variable.  This is a followup to e162050dfc0dee708a7ac5bfcf37d2afd6081604.

derivations: Restore UTF-8 encoding of build scripts.

Reported by Mark H Weaver <mhw@netris.org>
at <https://lists.gnu.org/archive/html/guix-devel/2017-04/msg00457.html>.

* guix/derivations.scm (build-expression->derivation): Use a string
output port for the expression.  This reverts part of
2dce88d5bbe7a65e101c0734d1c6db44ecc8c299.
* tests/derivations.scm ("build-expression->derivation and builder
encoding"): New test.

gnu: libsodium: Update to 1.0.12.

* gnu/packages/crypto.scm (libsodium): Update to 1.0.12.

gnu: Add crawl.

* gnu/packages/games.scm (crawl): New variable.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>

gnu: Add libbson.

* gnu/packages/serialization.scm (libbson): New variables.

Signed-off-by: Leo Famulari <leo@famulari.name>

gnu: mutt: Update to 1.8.2.

* gnu/packages/mail.scm (mutt): Update to 1.8.2.

gnu: neomutt: Don't rewrite the source file-name.

* gnu/packages/mail.scm (neomutt)[file-name]: Remove field.

gnu: neomutt: Update to 20170421.

* gnu/packages/mail.scm (neomutt): Update to 20170421.
[native-inputs]: Add 'gettext-minimal'.
[description]: Clarify the state of neomutt as it is now a microfork of mutt.

Signed-off-by: Leo Famulari <leo@famulari.name>

gnu: icecat: Fix GTK 3 file chooser crash.

* gnu/packages/gnuzilla.scm (icecat)[arguments]: Add a 'wrap-program' phase to
set XDG_DATA_DIRS.

gnu: Add mcomix.

* gnu/packages/image-viewers.scm (mcomix): New variable.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>

store: Support 'ssh://' URIs in 'GUIX_DAEMON_SOCKET'.

This allows 'guix' commands to talk to a remote store over SSH.

* guix/store.scm (connect-to-daemon)[connect]: Call 'resolve-interface'
for unknown URI schemes.
* guix/store/ssh.scm: New file.
* Makefile.am (MODULES): Add it.
* doc/guix.texi (The Store): Document it.  Mark remote access as
experimental.

ssh: Decompose 'connect-to-remote-daemon'.

* guix/ssh.scm (remote-daemon-channel): New procedure.
(connect-to-remote-daemon): Implement in terms of it.

ssh: Move 'open-ssh-session' to (guix ssh).

* guix/scripts/copy.scm (%compression, open-ssh-session): Move to...
* guix/ssh.scm: ... here.  Use '&message' conditions instead of calling
'leave'.

offload: Avoid using '_' as a 'match' pattern.

* guix/scripts/offload.scm (host-key->type+key, machine-load)
(process-request, guix-offload): Do not use '_' as a 'match' pattern.

store: Add support for remote connections via 'guix://' URIs.

* guix/store.scm (open-inet-socket): New procedure.
(connect-to-daemon): Support the 'guix' URI scheme.
* doc/guix.texi (The Store): Document it.

store: Add 'system-error-to-connection-error' macro.

* guix/store.scm (system-error-to-connection-error): New macro.
(open-unix-domain-socket): Use it instead of 'catch'.

store: 'GUIX_DAEMON_SOCKET' can now be a URI.

* guix/store.scm (%daemon-socket-file): Rename to...
(%daemon-socket-uri): ... this.
(connect-to-daemon): New procedure.
(open-connection): Rename 'file' to 'uri'.  Use 'connect-to-daemon'
instead of 'open-unix-domain-socket'.
* guix/tests.scm (open-connection-for-tests): Rename 'file' to 'uri'.
* tests/guix-build.sh: Add tests.
* tests/store.scm ("open-connection with file:// URI"): New tests.

gnu: guile: Update to 2.2.2.

* gnu/packages/guile.scm (guile-2.2): Update to 2.2.2.

gnu: imlib2: Update to 1.4.10.

* gnu/packages/image.scm (imlib2): Update to 1.4.10.

gnu: sdl-gfx: Update to 2.0.26.

* gnu/packages/sdl.scm (sdl-gfx): Update to 2.0.26.

gnu: portaudio: Update to 190600.20161030.

* gnu/packages/audio.scm (portaudio): Update to 190600.20161030.
* gnu/packages/patches/portaudio-audacity-compat.patch: Adjust line endings.

gnu: soxr: Update to 0.1.2.

* gnu/packages/audio.scm (soxr): Update to 0.1.2.

gnu: python-pyopenssl: Update to 17.0.0.

* gnu/packages/python.scm (python-pyopenssl, python2-pyopenssl): Update to 17.0.0.
[native-inputs]: Change PYTHON-PYTEST to PYTHON-PYTEST-3.0.
* gnu/packages/patches/python-pyopenssl-skip-network-test.patch: Adjust.

gnu: proteinortho: Update to 5.16.

* gnu/packages/bioinformatics.scm (proteinortho): Update to 5.16.

gnu: diamond: Update to 0.8.38.

* gnu/packages/bioinformatics.scm (diamond): Update to 0.8.38.

gnu: miniupnpc: Use @dfn mark-up.

gnu/packages/upnp.scm (miniupnpc)[description]: Use @dfn.

gnu: miniupnpc: Update to 2.0.20170421.

gnu/packages/upnp.scm (miniupnpc): Update to 2.0.20170421.

gnu: fortify-headers: Use @code mark-up.

* gnu/packages/suckless.scm (fortify-headers)[description]: Use @code.

gnu: Use HTTPS on 2f30.org.

* gnu/packages/suckless.scm (spoon, xbattmon, wificurse, skroll, sbm)
(prout, noice, fortify-headers, colors)[source, home-page]: Use HTTPS.
(human)[home-page]: Likewise.
* gnu/packages/version-control.scm (stagit)[source, home-page]: Likewise.

gnu: version-control: Use HTTPS where possible.

* gnu/packages/version-control.scm (git)[home-page]: Use HTTPS.
(cvs)[source, home-page]: Likewise.

gnu: git-crypt: Double-space Texinfo mark-up.

* gnu/packages/version-control.scm (git-crypt)[description]: Use two spaces
where one would suffice.

gnu: diffstat: Use @command mark-up.

* gnu/packages/version-control.scm (diffstat)[synopsis, description]:
Use @command.

gnu: diffstat: Update to 1.61.

* gnu/packages/version-control.scm (diffstat): Update to 1.61.
[source]: Add http://invisible-mirror.net mirror.

gnu: neon: Use @enumerate mark-up.

* gnu/packages/version-control.scm (neon)[description]: Use @enumerate.

gnu: neon: Update to 0.30.2.

* gnu/packages/version-control.scm (neon): Update to 0.30.2.

gnu: cgit: Update to 1.1.

* gnu/packages/version-control.scm (cgit): Update to 1.1.
(git@2.9): Rename to...
(git@2.10): ... this.  Update to 2.10.
(cgit)[inputs]: Replace git@2.9 with git@2.10.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: tmux: Update to 2.4.

* gnu/packages/tmux.scm (tmux): Update to 2.4.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: cargo: Simplify unpacking.

Fixes <http://bugs.gnu.org/26166>.

* gnu/packages/rust.scm (cargo)
[arguments]<:modules>: Add (srfi srfi-1).
[arguments]<:phases>: Adapt 'unpack-submodule-sources' phase to more clearly
seperate the tasks it does.  Add helper procedures 'unpack', 'touch',
'install-rust-library'.
[arguments]<:phases>: Rename 'set-cargo-home' to 'set-environment-up' and
make it use official cargo directories.
[arguments]<:phases>: Remove 'configure' phase.

gnu: icecat: Update to 52.0.2-gnu1; add fixes from ESR 52.1.

* gnu/packages/gnuzilla.scm (icecat): Update to 52.0.2-gnu1.
[source]: Remove all patches except "icecat-avoid-bundled-libraries.patch".
Add selected fixes from the upstream mozilla-esr52 repository, up to 52.1.
Remove "dom/devicestorage" in the snippet.
[inputs]: Remove gstreamer and gst-plugins-base.  Add ffmpeg and gtk+3.  Move
yasm to native-inputs.
[native-inputs]: Add autoconf-2.13 and yasm.
[arguments]: In configure-flags, remove the following switches which are no
longer accepted: --enable-{pango,svg,canvas,mathml,gstreamer=1.0} and
"--disable-gnomevfs".  Use "--enable-default-toolkit=cairo-gtk3" to switch to
Gtk+3.  Remove the 'remove-h264parse-from-blacklist' phase.  Adapt the
'arrange-to-link-libxul-with-libraries-it-might-dlopen' phase as needed.  In
the 'configure' phase, set the AUTOCONF environment variable.
(mozilla-patch): Update the URL pattern to fetch from the mozilla-esr52
repository.
* gnu/packages/patches/icecat-avoid-bundled-libraries.patch: Adapt to mozilla-esr52.
* gnu/packages/patches/icecat-binutils.patch: Remove file.
* gnu/packages/patches/icecat-bug-1299500-pt10.patch: New file.
* gnu/local.mk (dist_patch_DATA): Remove "icecat-binutils.patch".
Add "icecat-bug-1299500-pt10.patch".

gnu: Add autoconf@2.13.

* gnu/packages/autotools.scm (autoconf-2.13): New variable.

gnu: nss: Disable long b64 tests.

Suggested by Marius Bakke <mbakke@fastmail.com> in
<https://lists.gnu.org/archive/html/guix-devel/2017-04/msg00440.html>.

* gnu/packages/patches/nss-disable-long-b64-tests.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/gnuzilla.scm (nss)[source]: Add patch.

gnu: nss: Update to 3.30.2 [fixes CVE-2017-5461].

* gnu/packages/gnuzilla.scm (nss): Update to 3.30.2.

gnu: graphite2: Add fixes for CVE-2017-5436 and other bugs.

* gnu/packages/fontutils.scm (graphite2)[replacement]: New field.
(graphite2/fixed): New variable.
* gnu/packages/patches/graphite2-CVE-2017-5436.patch,
gnu/packages/patches/graphite2-check-code-point-limit.patch,
gnu/packages/patches/graphite2-fix-32-bit-wrap-arounds.patch,
gnu/packages/patches/graphite2-non-linear-classes-even-number.patch:
New files.
* gnu/local.mk (dist_patch_DATA): Add them.

gnu: hypre: Delete unused patches.

* gnu/packages/patches/hypre-doc-tables.patch,
gnu/packages/patches/hypre-ldflags.patch: Delete.
* gnu/local.mk (dist_patch_DATA): Remove them.

derivations: Avoid string-to-bytevector conversions.

On Guile 2.2.1, this yields a 5% speedup on:

  guix build libreoffice xmonad certbot -n --no-substitutes --no-build-hook

* guix/derivations.scm (derivation->string): Rename to...
(derivation->bytevector): ... this.  Use 'open-bytevector-output-port'
instead of 'call-with-output-string'.
(derivation-hash): Remove string-to-bytevector conversion before
'sha256' call.
(build-expression->derivation): Use 'add-data-to-store' and an
bytevector port instead of a string port for the expression.

gnu: ceph: Disable SSE3 instructions.

Some early 64-bit AMD processors do not support this instruction set.

* gnu/packages/patches/ceph-disable-cpu-optimizations.patch: Disable SSE3.

gnu: nss-certs: Update to 3.30.2.

* gnu/packages/certs.scm (nss-certs): Update to 3.30.2.

gnu: gst-plugins-base: Remove dead comment.

This is a followup to 1d8e7273578e95f6b5e4293ac34c4f6fe5d5c579.

* gnu/packages/gstreamer.scm (gst-plugins-base): Remove dead comment.

gnu: qemu: Update to 2.9.0 [security fixes].

Fixes CVE-2017-{5857,5973,5987,6058,6505,7377,7471,7718}.

* gnu/packages/qemu.scm (qemu): Update to 2.9.0.
[source]: Remove obsolete patches.
* gnu/packages/patches/qemu-CVE-2016-10155.patch,
gnu/packages/patches/qemu-CVE-2017-5525.patch,
gnu/packages/patches/qemu-CVE-2017-5526.patch,
gnu/packages/patches/qemu-CVE-2017-5552.patch,
gnu/packages/patches/qemu-CVE-2017-5578.patch,
gnu/packages/patches/qemu-CVE-2017-5579.patch,
gnu/packages/patches/qemu-CVE-2017-5856.patch,
gnu/packages/patches/qemu-CVE-2017-5898.patch: Delete files.
* gnu/local.mk (dist_patch_DATA): Remove them.

gnu: tuxpaint: Disable parallel build.

* gnu/packages/games.scm (tuxpaint)[arguments]<#:parallel-build?>: New parameter.

gnu: xorg-server: Hide the for-test variant.

* gnu/packages/xorg.scm (xorg-server-1.19.2): Wrap in 'hidden-package'
call.

gnu: Add Meson.

* gnu/packages/build-tools.scm (meson): New variables.

Co-authored-by: Ludovic Courtès <ludo@gnu.org>

gnu: gnurl: Update to 7.54.0 [fixes CVE-2017-7468]

* gnu/packages/gnunet.scm (gnurl): Update to 7.54.0.

Signed-off-by: Leo Famulari <leo@famulari.name>

gnu: icu4c: Fix CVE-2017-{7867,7868}.

* gnu/packages/patches/icu4c-CVE-2017-7867-CVE-2017-7868.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/icu4c.scm (icu4c/fixed)[source]: Use it.

gnu: python-nbxmpp: Update to 0.5.5.

* gnu/packages/messaging.scm (python-nbxmpp): Update to 0.5.5.
[source]: Use PYPI-URI.
[home-page]: Use HTTPS.
[description]: Fix up.

mailmap: Update entries for ng0.

* .mailmap: Add new address for ng0 and map all existing commits to it.

Signed-off-by: Tobias Geerinckx-Rice <me@tobias.gr>

gnu: moreutils: Update to 0.60.

* gnu/packages/moreutils.scm (moreutils): Update to 0.60.

gnu: ffmpeg: Update to 3.3.

* gnu/packages/video.scm (ffmpeg): Update to 3.3.
[arguments]: Remove 'enable-x11grab' from #:configure-flags.

gnu: icecat: Label patches that have since been assigned CVEs.

Label patches that address the following CVEs: CVE-2017-5429, CVE-2017-5432,
CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5436, CVE-2017-5438,
CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443,
CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448,
CVE-2017-5459, CVE-2017-5460, CVE-2017-5464, CVE-2017-5465, and CVE-2017-5469.

* gnu/packages/gnuzilla.scm (icecat)[source][patches]: Add comments indicating
CVE assignments.

gnu: Delete unused patches.

* gnu/packages/patches/icu4c-CVE-2014-6585.patch,
gnu/packages/patches/icu4c-CVE-2015-1270.patch,
gnu/packages/patches/icu4c-CVE-2015-4760.patch: Delete files.
* gnu/local.mk (dist_patch_DATA): Remove them.

gnu: curl: Replace with curl@7.54.0 [fixes CVE-2017-7468]

* gnu/packages/curl.scm (curl)[replacement]: New field.
(curl-7.54.0): New variable.

gnu: guile: Update to 2.2.1.

* gnu/packages/guile.scm (guile-2.2): Update to 2.2.1.

publish: Add a handler for / and /index.html.

Suggested by Quiliro <quiliro@riseup.net>
in <https://bugs.gnu.org/26567>.

* guix/scripts/publish.scm (render-home-page): New procedure.
(make-request-handler): Handle it.

doc: Update exim service documentation.

* doc/guix.texi (Mail Services): Update exim service documentation to remove
mail-aliases, add mail-aliases-service-type documentation.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

tests: mail: Add test for exim

* gnu/tests/mail.scm (%exim-os, %test-exim): New variables.
(run-exim-test): New procedure.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

services: Make exim-service-type use mail-aliases-service-type

* gnu/services/mail.scm (exim-configuration)[aliases]: Remove field.
(exim-activation, exim-shepherd-service): Remove alias from matches.
(exim-etc): Remove procedure.
(exim-service-type): Extend mail-aliases-service-type instead of
etc-service-type.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

services: Add mail-aliases-service-type.

* gnu/services/mail.scm (mail-aliases-etc): New procedure.
(mail-aliases-service-type): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: Add workaround for `date` regression in coreutils@8.26.

See <https://bugs.gnu.org/23035> and <https://bugs.gnu.org/26238>.

* gnu/packages/base.scm (coreutils-8.27): New variable.
* gnu/system.scm (%base-packages): Use that instead of COREUTILS.

gnu: emacs-exwm: Let shell wrapper work with arguments.

* gnu/packages/emacs.scm (emacs-exwm): Pass shell wrapper arguments to emacs.

Signed-off-by: Arun Isaac <arunisaac@systemreboot.net>