/* GNU Guix --- Functional package management for GNU
   Copyright (C) 2012  Ludovic Courtès <ludo@gnu.org>

   This file is part of GNU Guix.

   GNU Guix is free software; you can redistribute it and/or modify it
   under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 3 of the License, or (at
   your option) any later version.

   GNU Guix is distributed in the hope that it will be useful, but
   WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

   You should have received a copy of the GNU General Public License
   along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.  */

#include <gcrypt-hash.hh>

#define SHA_CTX guix_hash_context

static inline void
SHA1_Init (struct SHA_CTX *ctx)
{
  guix_hash_init (ctx, GCRY_MD_SHA1);
}

#define SHA1_Update guix_hash_update

static inline void
SHA1_Final (void *resbuf, struct SHA_CTX *ctx)
{
  guix_hash_final (resbuf, ctx, GCRY_MD_SHA1);
}
x/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7'>refs</a><a class='active' href='/guix/log/gnu/build/shepherd.scm'>log</a><a href='/guix/tree/gnu/build/shepherd.scm?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7'>tree</a><a href='/guix/commit/gnu/build/shepherd.scm?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7'>commit</a><a href='/guix/diff/gnu/build/shepherd.scm?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/build/shepherd.scm'>
<input type='hidden' name='id' value='2ed8c23d9d785c6c39330dfe250e20001a2f3de7'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7'>root</a>/<a href='/guix/log/gnu?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7'>gnu</a>/<a href='/guix/log/gnu/build?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7'>build</a>/<a href='/guix/log/gnu/build/shepherd.scm?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7'>shepherd.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/build/shepherd.scm?id=2ed8c23d9d785c6c39330dfe250e20001a2f3de7&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2020-11-05 16:13:50 +0100'>2020-11-05</span></td><td><a href='/guix/commit/gnu/build/shepherd.scm?id=e6934c0429ed94c9d9e61f81520d11153bbb3f64'>shepherd: Remove dependency on (guix utils).</a><span class='msg-avail'>...<span class='msg-tooltip'>Since commit 8ce6f4dc2879919c12bc76a2f4b01200af97e019, importing this
module in a gexp would pull in (guix config) from the host, thereby
leading to non-reproducible derivations.  Users in (gnu services ...) do
not expect that so simply remove the (guix utils) dependency for now.

* gnu/build/shepherd.scm (fork+exec-command/container)[strip-pid]: New
procedure.
Use it instead of 'strip-keyword-arguments'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-21 10:22:12 +0200'>2020-09-21</span></td><td><a href='/guix/commit/gnu/build/shepherd.scm?id=6453915cf7729203ef9552c13cb4528c6f4ed122'>build: shepherd: Check for container support.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes: &lt;https://issues.guix.gnu.org/43533&gt;.

* gnu/build/shepherd.scm (fork+exec-command/container): Check if containers
are supported before joining PID namespaces.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2020-09-02 17:05:23 +0200'>2020-09-02</span></td><td><a href='/guix/commit/gnu/build/shepherd.scm?id=8ce6f4dc2879919c12bc76a2f4b01200af97e019'>installer: Run the installation inside a container.</a><span class='msg-avail'>...<span class='msg-tooltip'>When the store overlay is mounted, other processes such as kmscon, udev
and guix-daemon may open files from the store, preventing the
underlying install support from being umounted. See:
https://lists.gnu.org/archive/html/guix-devel/2018-12/msg00161.html.

To avoid this situation, mount the store overlay inside a container,
and run the installation from within that container.

* gnu/build/shepherd.scm (fork+exec-command/container): New procedure.
* gnu/services/base.scm (guix-shepherd-service): Support an optional PID
argument passed to the "start" method. If that argument is passed, ensure that
guix-daemon enters the given PID MNT namespace by using
fork+exec-command/container procedure.
* gnu/installer/final.scm (umount-cow-store): Remove it,
(install-system): run the installation from within a container.
* gnu/installer/newt/final.scm (run-install-shell): Remove the display hack.
</span></span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2020-06-12 00:04:42 +0200'>2020-06-12</span></td><td><a href='/guix/commit/gnu/build/shepherd.scm?id=8a02e45d93c2a825363da282791ac16f15b415e4'>shepherd: 'read-pid-file/container' terminates the whole process group.</a><span class='msg-avail'>...<span class='msg-tooltip'>This mirrors a change made in the Shepherd 0.8.0.  Previously, upon
startup failure, we could have left processes behind.

* gnu/build/shepherd.scm (read-pid-file/container): Kill (- PID) instead
of PID.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-06-12 00:04:42 +0200'>2020-06-12</span></td><td><a href='/guix/commit/gnu/build/shepherd.scm?id=b6b95685d0b478698d648f13afd927b1e1700d99'>shepherd: Unblock signals in the child process.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://bugs.gnu.org/41791&gt;.
Reported by Tobias Geerinckx-Rice &lt;me@tobias.gr&gt;.

This change mirrors changes made in the Shepherd 0.8.1, where signals
are blocked in the shepherd process in support of 'signalfd'.  The
regression was introduced with the switch to 0.8.1 in
3f9c62d1a8b345909adaeb22f454ad22554c55a1: child processes would not
receive SIGTERM upon 'herd stop SERVICE'.

* gnu/build/shepherd.scm &lt;top level&gt;: Autoload (shepherd system).
(make-forkexec-constructor/container): Call call to 'sigaction' and
'unblock-signals'.
</span></span></td><td>Ludovic Courtès</td></tr>