GNU Guix
Blog posts about GNU Guix.
- Posts
- 44 from 8 Aug 2016 to 8 Oct 2026
- Posting
- monthly (23 in the last year)
- Kind
- project news
- Feed
- https://guix.gnu.org/feeds/blog.atom
2026 20
- Extending Guix
- ‘guix substitute’ and ‘guix pull’ VulnerabilitiesJuly 2, 2026 Several security issues (CVE IDs pending) have been identified in guix substitute , a helper utility invoked by guix-daemon , which enable a variety of harmful…
- Demystifying complex configurations
- Demystifying complex configurationsSeptember 7, 2026 Guix system and Guix home introduce the concept of services. These provide users with a way to control background processes, commonly refereed as daemons , as well as ways…
- Fixed-Output Derivation Sandbox Bypass (CVE-2024-27297)March 12, 2024 A security issue has been identified in guix-daemon which allows for fixed-output derivations , such as source code tarballs or Git checkouts, to be corrupted by an unprivileged…
- ‘guix substitute’ and ‘guix pull’ Vulnerabilities
- Extending GuixOctober 8, 2026 Guix is all about empowering people, so it should come as no surprise that one can extend it with new guix commands . You can show the commands…
- Authenticate your Git checkouts!May 7, 2024 You clone a Git repository, then pull from it. How can you tell its contents are “authentic”—i.e., coming from the “genuine” project you think you’re pulling from, written by…
- One year with Codeberg
- Build User Takeover Vulnerability (CVE-2024-52867)October 21, 2024 A security issue, known as CVE-2024-52867 , has been identified in guix-daemon which allows for a local user to gain the privileges of…
- Time travel without borders
- The Shepherd 1.0.0 released!December 12, 2024 Finally, twenty-one years after its inception (twenty-one!), the Shepherd leaves ZeroVer territory to enter a glorious 1.0 era. This 1.0.0 release is published today because we think…
- The 64-bit Hurd is Here!
- Adding a fully-bootstrapped MonoDecember 29, 2024 We used to have a Mono package. It was introduced on August 8 2016 by commit 763b3d50b6249b43fceda51445bbeb1f5f5fd7d0, at Mono version 4.4.1.0, but it was later discovered in…
- Result of Sustain and Strengthen Fundraising
- Guix User and Contributor Survey 2024: The Results (part 1)January 16, 2025 The results from the Guix User and Contributor Survey (2024) are in! This is the first time the Guix community has run this type of survey, and we're…
- GNU Guix 1.5.0 released
- Guix User and Contributor Survey 2024: The Results (part 2)January 24, 2025 The results from the Guix User and Contributor Survey (2024) are in and we're digging into them in a series of posts! Check out the first post…
- Meet Guix at FOSDEM
- Guix User and Contributor Survey 2024: The Results (part 3)January 28, 2025 Today we're looking at the results from the Contributor section of the Guix User and Contributor Survey (2024). The goal was to understand how people contribute to Guix…
2025 12
- A Planet for Guix
- Privilege Escalation Vulnerabilities (CVE-2025-46415, CVE-2025-46416)June 24, 2025 Two security issues, known as CVE-2025-46415 and CVE-2025-46416 , have been identified in guix-daemon , which allow for a local user to gain…
- The 64-bit Hurd is Here!March 1, 2026 Fifteen months have passed since our last Guix/Hurd on a Thinkpad X60 post and a lot has happened with respect to the Hurd . And…
- Adventures on the quest for long-term reproducible deploymentMarch 13, 2024 Rebuilding software five years later, how hard can it be? It can’t be that hard, especially when you pride yourself on having a tool that can …
- Source code archiving in Guix: new publicationMay 31, 2024 We are glad to announce the publication of a new research paper entitled Source Code Archiving to the Rescue of Reproducible Deployment for the ACM…
- The European Union must keep funding free softwareJuly 23, 2024 Guix is the fruit of a combination of volunteer work by an amazing number of people, work paid for by employers, but also work sponsored by public institutions. The…
- Take the Guix User and Contributor SurveyNovember 10, 2024 To understand the views of the Guix community we're running a survey that we'd love you to take part in! The Guix User and Contributor Survey …
- Guix/Hurd on a Thinkpad X60November 24, 2024 A lot has happened with respect to the Hurd since our Childhurds and GNU/Hurd Substitutes post. As long as two years ago some of…
- Meet Guix at FOSDEMJanuary 21, 2025 Next week will be FOSDEM time for Guix! As in previous years , a sizable delegation of Guix community members will be in Brussels. Right before…
- Migrating to CodebergMay 11, 2025 The Guix project will be migrating all its repositories along with bug tracking and patch tracking to Codeberg within a month. This decision is the result of…
- A New Rust Packaging ModelJune 7, 2025 If you've ever struggled with Rust packaging, here's some good news! We have changed to a simplified Rust packaging model that is easier to automate and allows for…
- Privilege Escalation VulnerabilitySeptember 1, 2025 A security issue, CVE-2025-59378 , has been identified in guix-daemon , which allows for a local user to gain the privileges of any of the build users and subsequently…
2024 7
- Fundraising campaign to sustain GNU GuixOctober 3, 2025 Today we're launching a fundraising campaign to sustain and strengthen GNU Guix. Guix is completely independent from any company or institution, we rely on…
- A Planet for GuixDecember 5, 2025 I am pleased to announce the availability of Planet Guix , an Atom and RSS aggregator covering all things Guix. You can browse posts on the website or use…
- Meet Guix at FOSDEMJanuary 22, 2026 It’s that time of the year again: next week is FOSDEM time! As in previous years , many Guix people will be in Brussels. Right after…
- GNU Guix 1.5.0 releasedJanuary 23, 2026 We are pleased to announce the release of GNU Guix version 1.5.0! The release comes with ISO-9660 installation images, virtual machine images, and with tarballs to install the package…
- Result of Sustain and Strengthen FundraisingFebruary 17, 2026 Results from Guix Fundraising We're on course to beat our fundraising target to sustain and strength Guix. We're bringing the fundraising…
- Time travel without bordersMay 12, 2026 When offered the option to run other people’s code, a prime consideration is often ease of deployment. While much progress has been made in support of rapid deployment, the…
- One year with CodebergJune 22, 2026 A year ago, Guix migrated to Codeberg for source code hosting, issue tracking, and pull requests. This is a significant change for a project with more than 400…