We are pleased to announce the release of GNU Guix 1.3.0! This release corresponds to 8,300 commits over almost 6 months by 212 people. Support for the POWER9 platform is now offered as technological preview. This release adds new features, refines the user experience and improves performance. It also includes many new packages and services along bug fixes--see below for a list of changes. Read more about today’s announcement at: https://guix.gnu.org/en/blog/2021/gnu-guix-1.3.0-released • About GNU Guix is a transactional package manager and an advanced distribution of the GNU system that respects user freedom. Guix can be used on top of any system running the Hurd or the Linux kernel, or it can be used as a standalone operating system distribution for i686, x86_64, ARMv7, AArch64 and POWER9 machines. In addition to standard package management features, Guix supports transactional upgrades and roll-backs, unprivileged package management, per-user profiles, and garbage collection. When used as a standalone GNU/Linux distribution, Guix offers a declarative, stateless approach to operating system configuration management. Guix is highly customizable and hackable through Guile programming interfaces and extensions to the Scheme language. https://guix.gnu.org • Download Here are the compressed sources and a GPG detached signature[*]: https://ftp.gnu.org/gnu/guix/guix-1.3.0.tar.gz (39MB) https://ftp.gnu.org/gnu/guix/guix-1.3.0.tar.gz.sig Here are the bootable USB installation images and their signatures[*]: https://ftp.gnu.org/gnu/guix/guix-system-install-1.3.0.i686-linux.iso (610MB) https://ftp.gnu.org/gnu/guix/guix-system-install-1.3.0.i686-linux.iso.sig https://ftp.gnu.org/gnu/guix/guix-system-install-1.3.0.x86_64-linux.iso (612MB) https://ftp.gnu.org/gnu/guix/guix-system-install-1.3.0.x86_64-linux.iso.sig Here is the QCOW2 virtual machine (VM) image and its signature[*]: https://ftp.gnu.org/gnu/guix/guix-system-vm-image-1.3.0.x86_64-linux.qcow2 (972MB) https://ftp.gnu.org/gnu/guix/guix-system-vm-image-1.3.0.x86_64-linux.qcow2.sig Here are the binary tarballs and their signatures[*]: https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.aarch64-linux.tar.xz (83MB) https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.aarch64-linux.tar.xz.sig https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.armhf-linux.tar.xz (83MB) https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.armhf-linux.tar.xz.sig https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.i686-linux.tar.xz (88MB) https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.i686-linux.tar.xz.sig https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.powerpc64le-linux.tar.xz (85MB) https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.powerpc64le-linux.tar.xz.sig https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.x86_64-linux.tar.xz (87MB) https://ftp.gnu.org/gnu/guix/guix-binary-1.3.0.x86_64-linux.tar.xz.sig Use a mirror for higher download bandwidth: https://www.gnu.org/order/ftp.html Here are the MD5 and SHA1 checksums: 406fc1948b8147fa8047a661e3544d4c guix-1.3.0.tar.gz b4820b4c9fc85e2980201bf2e9e9eeb9 guix-binary-1.3.0.aarch64-linux.tar.xz 5b5e76c48a886866fa2c4267b25107e4 guix-binary-1.3.0.armhf-linux.tar.xz 79fba3f8f6b1a4c71ba8a1ec394e6e56 guix-binary-1.3.0.i686-linux.tar.xz d5f638e498a73d7b238981aef1258a42 guix-binary-1.3.0.powerpc64le-linux.tar.xz 99ea26fb47b2a8a1ed04a60b30d4fd8c guix-binary-1.3.0.x86_64-linux.tar.xz 7565231d32dedcd417fae4985b4ca486 guix-system-vm-image-1.3.0.x86_64-linux.qcow2 7d0c42c7b53507b4fccabe865dbd78fa guix-system-install-1.3.0.i686-linux.iso d1aa177eafb9becf2fdcd86f9e1f9790 guix-system-install-1.3.0.x86_64-linux.iso 6c4536c0995d5c487d281cddc63ddda9df2eb749 guix-1.3.0.tar.gz 414916ebfb8504e9b608d62c22c9f21c9ee6f243 guix-binary-1.3.0.aarch64-linux.tar.xz 5753f12bdc400e5b848c5c8042f79da7efd390ad guix-binary-1.3.0.armhf-linux.tar.xz ad8ab3957d00add7d0133084dee3d3f00d671246 guix-binary-1.3.0.i686-linux.tar.xz fd20ff962ceae612d5c1f19ccb8d9a8068372173 guix-binary-1.3.0.powerpc64le-linux.tar.xz c2a805775a6490b2546c30faf967a2db87d8806b guix-binary-1.3.0.x86_64-linux.tar.xz 1fbda19d14d8291d13a4bb1ed8a50516fac220c4 guix-system-vm-image-1.3.0.x86_64-linux.qcow2 87f94f0d656fbca8bafdeabef52d69f52bffb898 guix-system-install-1.3.0.i686-linux.iso 56cfb1d413344479590bc788ffb99d35dd526d90 guix-system-install-1.3.0.x86_64-linux.iso [*] Use a .sig file to verify that the corresponding file (without the .sig suffix) is intact. First, be sure to download both the .sig file and the corresponding tarball. Then, run a command like this: gpg --verify guix-1.3.0.tar.gz.sig If that command fails because you don't have the required public key, then run this command to import it: gpg --keyserver keys.gnupg.net --recv-keys 27D586A4F8900854329FF09F1260E46482E63562 and rerun the 'gpg --verify' command. • Changes in 1.3.0 (since 1.2.0) ** Package management *** POWER9 (powerpc64le-linux) is now supported as a technology preview *** New ‘--export-manifest’ and ‘--export-channels’ options of ‘guix package’ *** New ‘--profile’ option for ‘guix environment’ *** New ‘--discover’ option of ‘guix-daemon’, for local substitute discovery *** New ‘--advertise’ option of ‘guix publish’ *** New ‘--with-patch’ and ‘--with-latest’ package transformation options *** ‘guix system image’ supersedes the ‘disk-image’ and ‘vm-image’ sub-commands *** ‘--verbosity=1’ no longer displays download URLs *** ‘guix publish -C’ now supports zstd compression via Guile-zstd *** ‘guix-daemon’ now supports zstd substitutes, which decompress faster *** New ‘guix import go’ command, to import Go packages *** ‘guix import opam’ now supports Coq packages and has a ‘--repo’ option *** ‘guix import crate’ now honors semantic versioning (“semver”) *** ‘guix import nix’ has been removed *** New updaters (see ‘guix refresh’): ‘sourceforge’ and ‘generic-html’ *** Substitute installation has been optimized *** ‘guix’ commands suggest alternative sub-commands or options upon typos *** Offloading no longer requires ‘guile’ to be in $PATH on build machines *** ‘GUIX_EXTENSIONS_PATH’ is honored when looking for extensions such as GWL *** New ‘--format’ option for ‘guix processes’ *** ‘guix upgrade’ can now be passed several regexps ** Distribution *** The Guix System demonstration VM now supports the SPICE protocol *** The installation script can now run in a fully automated manner *** ‘qemu-binfmt-service-type’ now relies on statically-linked QEMU *** ‘sysctl-service-type’ enables Linux protected hardlinks/symlinks by default *** ‘%base-services’ now includes a default ‘sysctl-service-type’ instance *** Linux Logical Volumne Manager (LVM) now supported, via ‘lvm-device-mapping’ *** ‘guix system init’ has been optimized *** ‘guix system’ warns when users/groups appear more than once *** ‘guix system image -t rock64-raw’ produces images for Rock64 devices *** ‘herd discover guix-daemon on’ turns on substitute server discovery *** Default initrd now supports bcachefs *** CUPS service includes ‘brlaser’ extension by default *** “lp” group is no longer included in ‘%base-groups’ *** New ‘--graph-backend’ option for ‘guix system {extension,shepherd}-graph’ *** New services agate, cuirass-remote-worker, ipfs, keepalived, laminar, radicale, syncthing, transmission-daemon, wireguard, xorg-server *** 2009 new packages *** 3100 package updates Noteworthy updates: emacs 27.2, gcc-toolchain 10.3.0, ghc 8.8.3, glibc 2.31, gnome 3.34.5, gnupg 2.2.27, go 1.14.15, guile 3.0.5, icecat 78.10.0-guix0-preview1, icedtea 3.7.0, inkscape 1.0.2, julia 1.5.3, libreoffice 6.4.7.2, linux-libre 5.11.15, ocaml 4.11.1, octave 6.2.0, openjdk 14.0, python 3.8.2, racket 8.0, rust 1.51.0, r 4.0.4, sbcl 2.1.3, xfce 4.16.0, xorg-server 1.20.10 ** Programming interfaces *** New ‘channel-with-substitutes-available’ procedure in (guix channels) *** New modules (guix substitutes), (guix narinfo), and (guix avahi) *** records can be passed to ‘guix system image’ *** New (guix ipfs) module to interact with an IPFS gateway ** Noteworthy bug fixes *** Risk of local privilege escalation via guix-daemon fixed (, CVE-2021-27851) *** Setuid programs on Guix System are no longer setgid root () *** Risk of local privilege escalation during reconfigure fixed () *** Grafting recognizes UTF-16 and UTF-32 store references () *** (guix git) honors HTTP/HTTPS proxy settings for Git submodules () *** Fix ‘guix substitute’ crash when interleaving lzip and gzip () *** Fix GnuTLS memory corruption when used from Guile () *** Update GnuTLS to 3.6.15, addressing a time-dependent test failure () *** Booted system is fully protected from garbage collection () *** Add MSDOS disk label support on UEFI systems () *** Installer’s kmscon no longer uses up 100% CPU () *** Git checkouts can be updated to the remote’s default HEAD () *** ‘guix pull’ correctly displays early builds and downloads () *** Fix OpenRC init scripts for ‘guix-daemon’ () *** Activate system when switching generations () *** ‘guix environment -C’ preserves original mount flags () *** Remove duplicates in profile transactions () *** Fix sound problems with ALSA plugins on foreign distros () ** Native language support *** Updated translations of the manual The manual is fully translated into French and German, 90% translated into Spanish, and has preliminary translations into Chinese, Brazilian Portuguese, and Russian. *** Update translations of the cookbook The cookbook is fully translated in French and German and has a preliminary translation into Korean. *** Updated translations of messages This version of Guix is fully translated in French, German, and Slovak; it has good translation into Brazilian Portuguese and Spanish, and preliminary translations in a dozen other languages. *** Translations now hosted on Fedora’s Weblate instance Translations are now handled at (thanks, Fedora!). You can join to help improve translations in your native language of messages, documentation, package descriptions, and the web site. Please report bugs to bug-guix@gnu.org Join guix-devel@gnu.org and #guix on Freenode for discussions. Thanks to everyone who contributed to this release! Maxim, on behalf of the Guix team.