guix/doc, branch hpc-team

doc: Improve documentation of ‘trivial-build-system’.

2026-08-20T16:25:42+00:00

* doc/guix.texi (Build Systems): Fold the trivial build system intro under
‘trivial-build-system’; refer to gexps instead of
‘build-expression->derivation’; add an example; add cross-reference to
‘copy-build-system’.

Signed-off-by: Ludovic Courtès 
Merges: #10608

daemon: Bypass authentication when importing content-addressed store items.

2026-08-17T14:47:36+00:00

This puts ‘importPaths’ on par with ‘addToStore’ and ‘addTextToStore’: since
the two latter RPCs let anyone add content-addressed items in the store,
there’s no reason for ‘importPaths’ to require signatures by authorized keys
on these content-addressed items.

This will allow for things like ‘guix copy’ of .drv items without
authorization, or ‘guix deploy’ with (build-locally? #f) without
authorization.

* nix/libstore/store-api.hh (isContentAddressedPath): New prototype.
* nix/libstore/store-api.cc (isContentAddressedPath): New function.
* nix/libutil/util.hh (isPlainFile): New prototype.
* nix/libutil/util.cc (isPlainFile): New function.
* nix/libstore/local-store.cc (LocalStore::importPath): Define ‘narHash’ and
‘contentAddressed’.  Allow unsigned imports when ‘contentAddressed’ is true;
bypass signature verification when ‘contentAddressed’ is true.
* tests/store.scm ("import not signed"): Rewrite to not use a
content-addressed store item.
("import signed by unauthorized key"): Likewise.
("import not signed but content-addressed tree"): New test.
("import not signed but content-addressed regular file"): New test.
("import signed by unauthorized key but content-addressed"): New test.
("import with corrupt signature"): New test.
("import signed by authorized key but hash doesn't match"): New test.
("import with corrupt signature but content-addressed"): New test.
("import signed by authorized key, hash doesn't match, but content-addressed"):
New test.
* doc/guix.texi (Invoking guix archive): Document the exception for
content-addressed store items.  Add anchor for ‘--authorize’.
(Invoking guix deploy): Document the benefit of (build-locally? #f).
Add cross-reference for ‘authorize?’.

Co-authored-by: Reepca Russelstein 
Signed-off-by: Ludovic Courtès 
Merges: #8979

services: vmware-vmtoolsd: Add vmware-vmtoolsd service.

2026-08-14T10:07:36+00:00

Reasoning on running these executables outside a VMWare hypervisor is
difficult, which mean we can't implement service tests in current state
of the art in upstream QEMU.

Essentially the first thing any `open-vm-tools' executable checks is
whether it is executing in a VMWare hypervisor via
`CPUID_VMWARE_HYPERVISOR_VENDOR_STRING' [1]. This would fail for any
machine not running inside VMWare.

Marionette evaluations in Guix use QEMU to run the virtual machines that
some tests run on. QEMU emulates and allow configuration of some CPUID
flags and vendor strings. It does not emulate the hypervisor flag, or
allow configuration of the hypervisor vendor flag, which would be
required for this program to run and output anything observable, other
than a non-zero exit code.

In the case someone added upstream QEMU support for custom CPUID
hypervisor flags and vendor strings, these executables would initialize
a log file, but could not test anything meaningful without a hypercall
interface. QEMU sort-of emulates such an interface when it is told to
act like the Xen hypervisor, but doesn't seem to support the required
`vmcall', `vmmcall', or `inl' x86 assembly instruction communication
mechanism between the host and guest.

The Linux KVM supports a limited set of hypercalls [2], but certainly
not the ones required for these executables, the same applies for
Hurd. Since the KVM project already has a functional serial interface
between the guest and host [3], it is a low possibility upstream would
want to greatly expand the `vmcall' hypercall support in any case.

An alternative path would be to add the `USE_VALGRIND' define when
compiling the `vmware-open-vm-tools' package, which skips the hypervisor
CPUID flag checking, but still would require proper hypercall support to
test anything useful.  Additionally, this would require another package,
or perhaps a "testing" output of the `vmware-open-vm-tools' pacakge,
which would be a nearly entire duplicate of the executables and would be
used exclusively for whichever test is written.

1. 
2. 
3. 

* gnu/services/virtualization.scm
(vmware-vmtoolsd-shepherd-service): new procedures.
(vmware-vmtoolsd-service-type): new service type
(vmware-vmtoolsd-configuration): new struct.
update copyright commentary.
* doc/guix.texi (Virtualization Services): document it.

Merges: guix/guix!5098
Modified-by: Sharlatan Hellseher 
Signed-off-by: Sharlatan Hellseher

doc: Fix -E option example of `guix shell'.

2026-08-07T01:26:47+00:00

The TERM variable had been changed to OMP_NUM_THREADS in the example, but the
text hadn't been adjusted.

* doc/guix.texi (Invoking guix shell): Replace TERM with OMP_NUM_THREADS, as
well as its associated value (from "no-color" to "16").

services: rsync: Remove deprecated configuration options.

2026-07-29T06:59:08+00:00

These have been deprecated since 2021.

* gnu/services/rsync.scm (warn-share-field-deprecation): Delete syntax.
() [use-chroot?, share-path, share-comment]
[read-only?, timeout]: Delete deprecated fields.
(rsync-configuration-modules): Delete compatibility procedure.
* doc/guix.texi (Networking Services) : Update doc.

Change-Id: Ia7742deaf61dc87824e70172647f2974c5ddb758

doc: Update dependency URLs.

2026-07-29T02:17:15+00:00

* doc/contributing.texi (Requirements): Update URLs.

Merges: https://codeberg.org/guix/guix/pulls/10206
Signed-off-by: Nguyễn Gia Phong

services: elogind: Fix runtime-directory-size field.

2026-07-28T16:32:32+00:00

Both runtime-directory-size and runtime-directory-size-percent field currently
cause an error if set.  A comment above the latter already calls for its
deprecation.  This patch combines both into a single field and fixes
their serialization.

* gnu/services/desktop.scm (percent?, percent, elogind-serialize-percent):
Replace with…
(non-negative-integer-and-suffix?, non-negative-integer-and-suffix)
(elogind-serialize-non-negative-integer-and-suffix): … these.
(elogind-configuration)[runtime-directory-size-percent]: Remove field,
integrating logic into …
[runtime-directory-size]: … here.  Serialize it.
* doc/guix.texi (Desktop Services): Adjust accordingly.

Signed-off-by: Liliana Marie Prikler 
Merges: guix/guix#9987

services: rabbitmq: Depend on epmd.

2026-07-26T06:25:57+00:00

* gnu/services/high-availability.scm (rabbitmq-shepherd-service):
  Change requirement to epmd service.
* doc/gnu.texi (High Availability Services): Document it.
* gnu/tests/high-availability.scm (%rabbitmq-os): Add epmd service.

Merges: https://codeberg.org/guix/guix/pulls/9607
Signed-off-by: Nguyễn Gia Phong

services: Add epmd-service-type.

2026-07-26T06:23:19+00:00

Add Erlang Port Mapper Daemon (epmd) service.
Run the service on localhost by default.

* gnu/services/high-availability.scm (): New record.
  (epmd-service-type): New variable.
* gnu/tests/high-availability.scm (run-epmd-test): New procedure.
  (%epmd-os, %tests-epmd): New variables.
* doc/gnu.texi (High Availability Services): Document it.

Merges: https://codeberg.org/guix/guix/pulls/9607
References: https://www.rabbitmq.com/blog/2024/12/18/epmd-public-exposure
References: https://erlef.org/blog/eef/epmd-public-exposure
Signed-off-by: Nguyễn Gia Phong

services: Add `zulip-irc-bridge-service-type'.

2026-07-24T23:30:26+00:00

* gnu/services/messaging.scm: (zulip-irc-bridge-configuration): New configuration record.
(%zulip-accounts): New variable.
(zulip-irc-bridge-services): New procedure.
(zulip-irc-bridge-service-type): New service.
* doc/guix.texi (Messaging Services): Document `zulip-irc-bridge-service-type'
and `zulip-irc-bridge-configuration'.

Change-Id: Ie74aa71f2912ccd905c0866ede9ead7b397f7c64
Signed-off-by: Ludovic Courtès 
Modified-by: Ludovic Courtès 
Merges: #7047