From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id ENMeEsUyDWL6MgAAgWs5BA (envelope-from ) for ; Wed, 16 Feb 2022 18:22:13 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id ABXhDsUyDWJ1aAAAauVa8A (envelope-from ) for ; Wed, 16 Feb 2022 18:22:13 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4933D4275E for ; Wed, 16 Feb 2022 18:22:12 +0100 (CET) Received: from localhost ([::1]:40286 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nKO0J-0001pm-Cz for larch@yhetil.org; Wed, 16 Feb 2022 12:22:11 -0500 Received: from eggs.gnu.org ([209.51.188.92]:47132) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nKNyG-0006PS-P9 for help-guix@gnu.org; Wed, 16 Feb 2022 12:20:04 -0500 Received: from out3-smtp.messagingengine.com ([66.111.4.27]:42081) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nKNyD-00045K-Lu for help-guix@gnu.org; Wed, 16 Feb 2022 12:20:04 -0500 Received: from compute1.internal (compute1.nyi.internal [10.202.2.41]) by mailout.nyi.internal (Postfix) with ESMTP id 493665C036C; Wed, 16 Feb 2022 12:20:00 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute1.internal (MEProxy); Wed, 16 Feb 2022 12:20:00 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:cc:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:sender :subject:subject:to:to; s=mesmtp; bh=utNmfES2NoTU3rEPV/To5dgl+rn fzPUuSm0Sf19S50c=; b=z/+sZ1N0g7bmJOt6R0Wo+vAFCu548cWo3wE6VYRGI+C RGUXNz7+DCY954gAsIKi723ZCuLOMDDPUyeKtzb7eHRblWVY0E+Kuq2t0ZqwP4SH auSEwGfGWD4sxeXxOP27HaCyrMicTohSwbe9p7duio2N27zxpOszMryitKQ7HS1g = DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:sender:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=utNmfES2NoTU3rEPV /To5dgl+rnfzPUuSm0Sf19S50c=; b=X1TYTvxRaoqfNy7xjWfabrc2RaGoUQDoJ ScfpMHjvojQotk+/6gsKAnJVQAW9jJ9QD7THjpwzk9pL6/HPaSaLZyN/pDHTO7xS AGaaLwGAIoMutmftQG2RLxWFfF0l5fzqN3dA4g4PZUz7aWYEgPbBAr5ApJwgiigs hJWXQYitjq7MT23nZCioSQIyW1K3DuCO31gFoTqhtVdpYf1MV3BH22ytcEBxTb2F xQuU3enIObVdhjNzWahvWYGicgwGpQQTLDXrq2E2z6L6qs0jEwDlH9qB6BSiI3b2 KqDZWdorw7ilGr0DL3UDmQIJdsDGkrwIHckLPH0C59AyNK0ZneCyA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvvddrjeeigdelkecutefuodetggdotefrodftvf curfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfghnecu uegrihhlohhuthemuceftddtnecunecujfgurhepfffhvffukfhfgggtuggjsehttdertd dttddvnecuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghr ihdrnhgrmhgvqeenucggtffrrghtthgvrhhnpedvvddugefffeeitddthfefvdeuhffgke eikeegkeevteeghfeftefggeeuudffieenucffohhmrghinhepghhnuhdrohhrghenucev lhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehlvghosehfrg hmuhhlrghrihdrnhgrmhgv X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 16 Feb 2022 12:19:59 -0500 (EST) Date: Wed, 16 Feb 2022 12:19:58 -0500 From: Leo Famulari To: Gottfried Subject: Re: guix pull Message-ID: References: <678d7b85-d8b3-6d84-b569-d3e3298ec95f@posteo.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <678d7b85-d8b3-6d84-b569-d3e3298ec95f@posteo.de> Received-SPF: pass client-ip=66.111.4.27; envelope-from=leo@famulari.name; helo=out3-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix@gnu.org Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1645032133; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=utNmfES2NoTU3rEPV/To5dgl+rnfzPUuSm0Sf19S50c=; b=jytTAHtKrB6CXVT+qnuDO37QhiLIYCSI6CWoSZA3/PptmiLRQ+QlGgUT4dQvaIVzPpQ4hE F6xYS5s3sCVilutGOxCyuv1xriypDZcI2siJ+bbPya/VtmSzUlifDu9V8tPep/lPfniwnk zfF1VJ01vIfAU4gE+Rkd6qdN1A610RjDfE8T/VF/FQxzIArev/g4dEnlMrMFTQlYwZqvZE alRWS/t/l6hAhIvmqAAeBEM/PCCk1cIPLsFB1itZyQDUan57JTaOXNiJKaTnx3Yvq7DDEi AGgz93mrkSNhTwnz0qRppfa/rvdODBylZsC+Br9FM7kKigZHqTb41ySka2B7nw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1645032133; a=rsa-sha256; cv=none; b=ZU6xiNoCEyq20AnHdm3UWm0uHYOIKiCHQ2r9tolpySnUFunKQTPPCaePU6GXRCFX5pdEJ4 TJZyMJLK4mA9OhUdWlI17HaiqYeyF9seh89NEuZLDFnz+3DXZ5wWcHpokHeePkvPyRwwHM gw+JjIKbYRKiA0JO7Ac9rfklMl/LeKmceTNVKd04S4dusIhKaTLDDM8oJG3r/tR1t4rI47 qYV2i/egpE5WoGtieu+LKbdKKjgQeTmaUBqd+ZxuZTsxK5XrsQ8qvUnhJ0GuwatZtCUqwD d+MVZ4NT2UY1Gpg34KrBoVermVyeR0+SkB6HYm9p57T6cAofdusZmmBo1zzcfA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b="z/+sZ1N0"; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=X1TYTvxR; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -2.23 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=famulari.name header.s=mesmtp header.b="z/+sZ1N0"; dkim=fail ("headers rsa verify failed") header.d=messagingengine.com header.s=fm2 header.b=X1TYTvxR; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 4933D4275E X-Spam-Score: -2.23 X-Migadu-Scanner: scn1.migadu.com X-TUID: dVx8ux6LMxds On Wed, Feb 16, 2022 at 04:28:08PM +0000, Gottfried wrote: > how often do I have to do a "guix pull"? Once a week, or twice a week, or > every second week? You never *have* to do it, but I recommend you do it at least once a week, if that works for you. There are security problems fixed in every update of packages with big codebases, such as browsers, kernels, etc. > Are there possibilities to know, when security updates are made and I should > do a guix pull? Currently we only announce security fixes in Guix itself. That is, we do not announce security updates of packages, although we do often mention them in the Git log: https://git.savannah.gnu.org/cgit/guix.git/log/ > Should I do a guix pull basically in my user account? > > Or should I do a guix pull basically in the root account? > > As far as I understood if I do a gux pull in my user account, it has no > influence to the root account? Correct. `guix pull` is per-user. Every user can do their own `guix pull`, and it doesn't affect any other user. Root is just another user. There is nothing special about root from this perspective. > But If I do a guix pull only in my user account, it would mean, as far as I > understand it, the root account would not get security updates? Correct. > What should be the procedure? As each user that you wish to update, do `guix pull` to update Guix and the list of available packages and services, and then do `guix upgrade` to actually upgrade your packages. If you use Guix System, you upgrade the system with `guix system reconfigure`.