doc: Update Guix installation instructions for Debian/Ubuntu

ToRyVand commented at 6:05 am on February 10, 2026: none

The guix package was removed from Debian repositories due to security vulnerabilities (CVE-2025-46415, CVE-2025-46416) affecting guix-daemon. See https://lwn.net/Articles/1035491/

Ubuntu and Debian derivatives will likely follow.

Updates the Debian/Ubuntu section to warn users and redirect to alternative installation methods already documented in the file.

Fixes #33982

DrahtBot added the label Docs on Feb 10, 2026

DrahtBot commented at 6:05 am on February 10, 2026: contributor

The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.

Reviews

See the guideline for information on the review process.

Type	Reviewers
Stale ACK	maflcko

If your review is incorrectly listed, please copy-paste <!–meta-tag:bot-skip–> into the comment that the bot should ignore.

janb84 commented at 9:07 am on February 10, 2026: contributor

~0 for me, PR #33574 has already updated this documentation with the hope that things would change with release 1.5.0 of Guix. Without more clarity on this issue i would not update the documentation for now.

Also the wording of in this PR would make it so that we have to update the documentation (soon) when Guix status on ubuntu is more defined.

maflcko commented at 9:16 am on February 10, 2026: member

I guess guix upstream hasn’t really committed to providing easy-to-backport security patches, so debian is unlikely to re-add this package?

maflcko added the label DrahtBot Guix build requested on Feb 13, 2026

maflcko removed the label DrahtBot Guix build requested on Feb 13, 2026

DrahtBot added the label CI failed on Feb 14, 2026

ToRyVand commented at 2:13 am on February 15, 2026: none

Thanks for your feedback! @janb84 - Current situation: Debian stable and testing have no guix package. Sid has version 1.4.0-9, which predates the June 2025 security patches for CVE-2025-46415/46416. Guix 1.5.0 (with patches) is not yet packaged in Debian.

Source: https://packages.debian.org/search?keywords=guix

Users who run sudo apt install guix get no package (stable/testing) or vulnerable versions (sid).

I’m happy to soften Ubuntu’s wording to simply “Ubuntu 25.10 does not include it.”

Would that work? @maflcko - Correct. Without secure packages, users need alternative methods.

(CI: Problem with the vs2026 preset, unrelated to Markdown changes).

in contrib/guix/INSTALL.md:81 in ca427362ba

80+For Debian/Ubuntu users, we recommend using one of the following alternative
81+installation methods:
82+
83+- **Option 1 (Recommended):** Use the [official shell installer script](#options-1-and-2-using-the-official-shell-installer-script-or-binary-tarball)
84+- **Option 2:** Use the [official binary tarball](#options-1-and-2-using-the-official-shell-installer-script-or-binary-tarball)
85+- **Option 3:** [Build from source](#option-5-building-from-source)

maflcko commented at 7:13 am on February 16, 2026:

i don’t think this needs to re-list all options on this page. it can just say “Debian/Ubuntu users may use any other option mentioned in this doc.” (or so)

maflcko commented at 10:20 am on February 20, 2026: member

Are you still working on this, or can it be closed?

ToRyVand commented at 1:44 pm on February 20, 2026: none

@maflcko - Yes, still working on this. Apologies for the delay.

You’re right about avoiding redundancy. I’ll replace lines 76-81 with:

“Debian/Ubuntu users may use any other installation option mentioned in this document (see options 1, 2, 3, or 5 above).”

maflcko commented at 1:48 pm on February 20, 2026: member

I don’t think we need to enumerate all options other than 4, if 4 is the only option documented not to be applicable. The is just redundant overhead

maflcko commented at 1:49 pm on February 20, 2026: member

Please squash your commits according to https://github.com/bitcoin/bitcoin/blob/master/CONTRIBUTING.md#squashing-commits

doc: Update Guix installation instructions for Debian/Ubuntu

The 'guix' package was removed from Debian repositories (see
https://lwn.net/Articles/1035491/). Ubuntu and other Debian derivatives
will likely follow.

Update INSTALL.md to reflect this change and redirect users to
alternative installation methods (shell script, binary tarball, or
build from source).

Fixes #33982

4004a2ba3f

ToRyVand force-pushed on Feb 20, 2026

maflcko commented at 3:51 pm on February 20, 2026: member

lgtm ACK 4004a2ba3f0821113b66ee17d090bde20114d8f5

doc: Update Guix installation instructions for Debian/Ubuntu

The 'guix' package was removed from Debian repositories (see
https://lwn.net/Articles/1035491/). Ubuntu 25.10 (Questing) and later
no longer include the package either.

Update INSTALL.md to reflect this change and redirect users to
alternative installation methods (shell script, binary tarball, or
build from source).

Fixes #33982

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

45e9d2022d

in contrib/guix/INSTALL.md:73 in 4004a2ba3f

68@@ -69,13 +69,15 @@ distros, please see: https://repology.org/project/guix/versions
69 
70 ### Debian / Ubuntu
71 
72-Guix is available as a distribution package in various versions of [Debian
73-](https://packages.debian.org/search?keywords=guix) and [Ubuntu
74-](https://packages.ubuntu.com/search?keywords=guix).
75+**Note:** As of early 2026, the `guix` package has been removed from Debian
76+repositories and Ubuntu repositories will likely follow. See

sipa commented at 4:19 pm on February 20, 2026:

Not “likely”, guix is already no longer present in Ubuntu 25.10 Questing.

in contrib/guix/INSTALL.md:73 in 45e9d2022d

68@@ -69,13 +69,15 @@ distros, please see: https://repology.org/project/guix/versions
69 
70 ### Debian / Ubuntu
71 
72-Guix is available as a distribution package in various versions of [Debian
73-](https://packages.debian.org/search?keywords=guix) and [Ubuntu
74-](https://packages.ubuntu.com/search?keywords=guix).
75+**Note:** As of early 2026, the `guix` package has been removed from Debian
76+repositories and from Ubuntu 25.10 (Questing) and later. See

ToRyVand commented at 10:40 pm on February 21, 2026:

You’re right, thank you for the correction. Updated the wording to: "removed from Debian repositories and from Ubuntu 25.10 (Questing) and later."

maflcko commented at 8:58 am on February 23, 2026:

0repositories and from Ubuntu repositories. See

DrahtBot removed the label CI failed on Feb 22, 2026

maflcko commented at 8:58 am on February 23, 2026: member

Please squash your commits according to https://github.com/bitcoin/bitcoin/blob/master/CONTRIBUTING.md#squashing-commits

maflcko commented at 6:43 pm on February 25, 2026: member

Thx, but I’ll go ahead and close this for now. We don’t really have the resources to remotely prompt copilot. If we wanted to prompt an LLM bot, we could do so locally.

maflcko closed this on Feb 25, 2026

doc: Update Guix installation instructions for Debian/Ubuntu #34545

Reviews