From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id cKCAFKdQDWJD0wAAgWs5BA (envelope-from ) for ; Wed, 16 Feb 2022 20:29:43 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id WN8gEadQDWImEAAAauVa8A (envelope-from ) for ; Wed, 16 Feb 2022 20:29:43 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id EC43245B2A for ; Wed, 16 Feb 2022 20:29:42 +0100 (CET) Received: from localhost ([::1]:55310 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nKPzh-00050G-5D for larch@yhetil.org; Wed, 16 Feb 2022 14:29:41 -0500 Received: from eggs.gnu.org ([209.51.188.92]:52804) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nKPyo-000504-D4 for help-guix@gnu.org; Wed, 16 Feb 2022 14:28:48 -0500 Received: from mout01.posteo.de ([185.67.36.65]:49507) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nKPyh-0003Jb-H0 for help-guix@gnu.org; Wed, 16 Feb 2022 14:28:44 -0500 Received: from submission (posteo.de [185.67.36.169]) by mout01.posteo.de (Postfix) with ESMTPS id DDC9C240027 for ; Wed, 16 Feb 2022 20:28:37 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017; t=1645039717; bh=9B7oWOjwYLMni2IeiIKeD+V29uTyKdk5cLuQGHwHaJc=; h=Date:Subject:To:Cc:From:From; b=jfrlu9YJD+3iwaOGes01dR1WetesfeLELuqLuHB9CXNYtObOBBEVrg8IP/dfS9h6A LZ69VGCPbQNtdzcRugdQYbLABBh7AmEiUG/kHF4S9HdoPs9Y89Tj1RyD9co6cegVck /egPmGqDRM3D/HkkXrgg7kATEJSK/83G5gvv1YPAEROYB0uwJVn2rlC6ObuvSHo1mN 9YDDZoVTYecxZvo1q9sPxTnFNI31h17DKLeDa0cAgBCqpIUA/TXbl+L5VIncLB08Q4 LuWxacSdLAd95qnewJm5VNcFRia2wbmysrEkcY1SXXBNQLIW83EjyP84DqWUpwRj+9 yVtOcYTvOnapQ== Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4JzSg86k2Lz6tm9; Wed, 16 Feb 2022 20:28:36 +0100 (CET) Message-ID: <2b539a93-d9e8-a561-2bf4-15b62717965a@posteo.de> Date: Wed, 16 Feb 2022 19:28:35 +0000 MIME-Version: 1.0 Subject: Re: guix pull Content-Language: en-GB To: Leo Famulari References: <678d7b85-d8b3-6d84-b569-d3e3298ec95f@posteo.de> From: Gottfried In-Reply-To: Received-SPF: pass client-ip=185.67.36.65; envelope-from=gottfried@posteo.de; helo=mout01.posteo.de X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix@gnu.org Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1645039783; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=H0xdrAvl8NRuRkja3rtM49WO8fGILe6SrZ+ovTreraA=; b=u6fxACQxLwVMHf8LftERlIcZDbhu4hHF0S+NxUZFtQZmKj15U/6aYiOG2VaSlK7+N6Mq32 dZVlkW6/rtmPo5aFvbRTS9Tly50/xnVF0FsmsEK17ovH9pe61XXZX5mvtzKEElWOsrLlN/ z0cw+FhCX+046vqPgxWBP/QDw6yFz5zgfKRB45WTdyvRiiSS7fHQVdzLJSgi31meKTUxta aLJeWBslZU/5CXsPkF1FvkwL6bMjzdbwlF54ZPZB2UbDQWSpCj47pirE1BPCCEmudl7zkd 3ZAinGKcUxj1dNfqLR6pMNY5xOYuP0/WMxw1XnCg6uoAOch9caWkXRDOGOmo6w== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1645039783; a=rsa-sha256; cv=none; b=mCfUt4cV8S8ngSgYYxxBST1Y1OssQzzbvC2RjvR2b9HMyShJmmgm+hyzrGCdhqfvLPn0Ih TuRHzDf6sw8irR8qdTbnBCc8RUynMAow7lI+Ub6NYGPu6dNEWFzndXsWRcnCa0xZMio7mq Wr2KTW4Ni5rzM2OrFSRaQ8N1lUVPtoQjVRxDWFJtjAdYZajR+9fQsfr2I+SLjjRCNNQc+q 4hDjG7WF5Z2DcpqGhN7YCnNI6Zbwr0ivNBmJ+T9HIv8V4Vvf9Ln7eKDzW7bIAzZWucfYa0 mj4tr+DEOqe7Kfs3s3sMfkuOPUKskylu5zc3IlDmfPHpKlwDKGrLHL79gcijSw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=posteo.de header.s=2017 header.b=jfrlu9YJ; dmarc=fail reason="SPF not aligned (strict)" header.from=posteo.de (policy=none); spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -2.23 Authentication-Results: aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=posteo.de header.s=2017 header.b=jfrlu9YJ; dmarc=fail reason="SPF not aligned (strict)" header.from=posteo.de (policy=none); spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: EC43245B2A X-Spam-Score: -2.23 X-Migadu-Scanner: scn1.migadu.com X-TUID: g4UVDt9Ft6Oi In other Linux distros there is always an immediate announcement if there are security updates and package updates available. In guix system it seems, according to Your answer, it does not happen.      (May be in future if it will be developed?) regards Gottfried Am 16.02.22 um 18:19 schrieb Leo Famulari: > On Wed, Feb 16, 2022 at 04:28:08PM +0000, Gottfried wrote: >> how often do I have to do a "guix pull"? Once a week, or twice a week, or >> every second week? > You never *have* to do it, but I recommend you do it at least once a > week, if that works for you. There are security problems fixed in every > update of packages with big codebases, such as browsers, kernels, etc. > >> Are there possibilities to know, when security updates are made and I should >> do a guix pull? > Currently we only announce security fixes in Guix itself. That is, we > do not announce security updates of packages, although we do often > mention them in the Git log: > > https://git.savannah.gnu.org/cgit/guix.git/log/ > >> Should I do a guix pull basically in my user account? >> >> Or should I do a guix pull basically in the root account? >> >> As far as I understood if I do a gux pull in my user account, it has no >> influence to the root account? > Correct. > > `guix pull` is per-user. Every user can do their own `guix pull`, and it > doesn't affect any other user. Root is just another user. There is > nothing special about root from this perspective. > >> But If I do a guix pull only in my user account, it would mean, as far as I >> understand it, the root account would not get security updates? > Correct. > >> What should be the procedure? > As each user that you wish to update, do `guix pull` to update Guix and > the list of available packages and services, and then do `guix upgrade` > to actually upgrade your packages. If you use Guix System, you upgrade > the system with `guix system reconfigure`.