MoneyPrinterTurbo generates short-form videos from a topic: an language model writes the script and keywords, stock B-roll is pulled from Pexels/Pixabay, edge-tts adds a voice-over, subtitles are burned in, and FFmpeg assembles the final clip. This package ships the upstream v1.3.7 source (bundled fonts and music removed; WenQuanYi Zen Hei supplied as the default subtitle font) plus self-contained moneyprinterturbo (Streamlit WebUI) and moneyprinterturbo-api (FastAPI) launchers. On first run each launcher copies the app into $XDG_DATA_HOME/moneyprinterturbo and pip-installs the pinned requirements.txt into a local virtualenv, fetched over Tor via torsocks; thereafter all egress (language model, material, TTS) is routed through Tor, the local server binds 127.0.0.1, and the store ffmpeg is pinned so no binaries are auto-downloaded. Keep subtitle_provider = "edge" to avoid a multi-GB Whisper model download.

Turbo Recorder captures the screen and audio into a quality-first FFmpeg pipeline, auto-detecting the best hardware encoder (NVIDIA NVENC, then Intel/AMD VAAPI, then software x264), the native screen resolution, and the default microphone and system-audio sources. turborec is a cross-platform Python CLI with a Tkinter GUI (turborec gui); turborecorder is a Linux X11/Wayland bash launcher. Built from source and self-contained: the launchers pin the store python3/bash and the tools they call (ffmpeg, pactl, xrandr, xdpyinfo, lspci). This optional variant pins a matched NVIDIA-enabled wf-recorder and FFmpeg 8 backend for Wayland capture while retaining FFmpeg 9 for other pipelines. Its NVIDIA userspace libraries must match the running kernel driver. It does not install or replace the kernel module.

Client, server, agent, and key tools from the official Evelin x86_64 musl-static release: ML-KEM-1024 key exchange, ML-DSA-87 authentication, ChaCha20-Poly1305 AEAD. Binaries are fully static and carry no runtime dependencies.

Zupt is a pure-C11 backup compressor with post-quantum hybrid encryption. Since 4.1.0 it is a source-only build with no vendored binary SDKs: recipient modes are the native ML-KEM-768 + X25519 hybrid (--pq, recommended) and pure ML-KEM-768 with no classical component (--pq-only, for CNSA 2.0-style postures); the SDK-backed --pq-sdk and --pq-box modes are unsupported stubs, and password mode uses PBKDF2-SHA256. 5.0.0 makes the ML-KEM-768 implementation genuinely FIPS 203-conformant (earlier releases shipped round-3 CRYSTALS-Kyber under that label), cross-validated byte-for-byte against OpenSSL 3.5 during this package's build; BREAKING: --pq/--pq-only keys and archives from 4.2.1 or earlier no longer decrypt — regenerate keys and re-encrypt (password mode and plain compression are unaffected). 4.2.0 fixed a critical AES-CTR keystream-reuse flaw in --dedup archives (re-encrypt any written by 4.1.0 or earlier). Payload protection is AES-256-CTR + HMAC-SHA256 Encrypt-then-MAC with measured constant-time tag comparison and runtime AES-NI/SHA-NI dispatch; it embeds the VaptVupt LZ+ANS codec, which is a codec component rather than a compatibility command.

PySide6 (Qt 6) graphical frontend for Zupt: create, inspect and extract .zupt archives with password (PBKDF2-SHA256) or post-quantum recipient encryption via the native ML-KEM-768 + X25519 hybrid (--pq). The launcher pins the matching zupt CLI from the store via ZUPT_BIN, so GUI and CLI versions can never drift apart.

Turbo Recorder captures the screen and audio into a quality-first FFmpeg pipeline, auto-detecting the best hardware encoder (NVIDIA NVENC, then Intel/AMD VAAPI, then software x264), the native screen resolution, and the default microphone and system-audio sources. turborec is a cross-platform Python CLI with a Tkinter GUI (turborec gui); turborecorder is a Linux X11/Wayland bash launcher. Built from source and self-contained: the launchers pin the store python3/bash and the tools they call (ffmpeg, pactl, xrandr, xdpyinfo, lspci).

Mirim is an embedded SQL database encrypted at rest with XChaCha20-Poly1305 and Argon2id. It supports ML-KEM-768 sealed exports, ML-DSA-87 detached signatures and a durable write-ahead log. This package installs the mirim command line interface and mirim-sign.

Loopback web GUI that forces one local user's traffic through Tor's TransPort and DNSPort and drops everything else from that user (a fail-closed killswitch). It automates the upstream torando iptables rules together with torrc and resolv.conf management, adds an ip6tables IPv6 killswitch so v6 cannot leak around Tor, and reports live bootstrap, DNS-leak and exit status. Built from source (pure Python); the shims and systemd unit are rewired to the store, so the package is self-contained. This is the Linux build of a project that also targets macOS, the BSDs and Windows.

btpctl (command-line client) and btpd (daemon) from the BTP project, built from the v0.7 source release. Built-from-source dynamic binaries relinked against Guix's glibc.

guixvis indexes GNU Guix packages for a keyboard-first terminal UI, a local web application, and an Emacs library. The terminal has per-tab filters, exact dependency and reverse-dependency searches, and quieter dependency graphs. The web UI (guixvis web) serves bubble and rectangle graph views on 127.0.0.1 with right-click Back navigation, deep links, and browser history. The Emacs libraries provide terminal and browser commands, native package search with exact variant selection, and keyboard-driven dependency and reverse-dependency graphs with local filtering and navigation history.

WhatsAppel provides an Emacs conversation workspace, bounded Python workers and a Guile HTTP bridge to a separately configured wuzapi backend. The whatsappel launcher uses the graphical Emacs already selected in the user's environment. whatsappel-bridge starts the bridge using runtime environment configuration. Installing this package does not create credentials or start services. External media playback needs mpv separately; the optional Rust pqenv encryption helper is not included.

Arduino IDE 2 provides an editor, Board and Library Managers, debugging, and sketch compilation through Arduino CLI. This package preserves the official upstream binary bundle, including its Electron 30.1.2 runtime. Electron 30 no longer receives upstream security support. A stable Arduino release does not imply a security-supported Electron runtime. Upstream Theia disables the Electron renderer sandbox. The FHS container is not a substitute for renderer isolation. The launcher provides an FHS container for Board Manager toolchains and requires unprivileged user namespaces and a running Guix daemon. User files, display sockets and connected serial devices are shared with the IDE. arduino-ide-cli runs the bundled CLI in the same environment.

PipeWire is a project that aims to greatly improve handling of audio and video under Linux. It aims to support the usecases currently handled by both PulseAudio and Jack and at the same time provide same level of powerful handling of Video input and output. It also introduces a security model that makes interacting with audio and video devices from containerized applications easy, with supporting Flatpak applications being the primary goal. Alongside Wayland and Flatpak we expect PipeWire to provide a core building block for the future of Linux application development.

WirePlumber is a modular session / policy manager for PipeWire and a GObject-based high-level library that wraps PipeWire's API, providing convenience for writing the daemon's modules as well as external tools for managing PipeWire.

This application is developed and issued by the German government to be used for online authentication with electronic German ID cards and residence titles. To use this app, a supported RFID card reader or NFC-enabled smart phone and a running pcscd service are required.

AutoFirma signs electronic documents from its graphical interface or command line and provides the afirma:// browser protocol handler. This package repacks the official Linux release, retaining its signed JAR and bundled Java libraries, and uses a private, security-updated Temurin 17 runtime with Guix's NSS and PC/SC libraries. A source build would require separately packaging the upstream Maven dependency graph, including its snapshot dependencies. Upstream's certificate configurator, certificate installation scripts, and Firefox preference overrides are not installed or executed. Browser integration requires separately provisioning and trusting AutoFirma's local-service certificate; installing this package does not change any certificate store. Smart-card access requires a running PC/SC service. The GUI and NSS-backed command-line operations require available unprivileged user namespaces and use Bubblewrap only to provide compatible NSS paths and a readable /opt, not as a security sandbox. The real user home and selected display, session-bus and PC/SC sockets remain accessible. Directories outside the home can be shared explicitly using the colon-separated AUTOFIRMA_SHARED_DIRECTORIES environment variable; broad system roots are rejected.

The Belgian eID middleware is required to authenticate with online services and sign digital documents with Belgian identity cards.

It requires a running pcscd service and a compatible card reader.

This package provides the 52 unmodified eSocial S-1.3 event schemas through Technical Note 06/2026, effective July 1, 2026, including alphanumeric CNPJ support. Data is installed in share/esocial/events with the original archive and attribution. XML Schema checks validate document structure only: they do not verify digital signatures, apply all business rules or submit events to the government. The schemas do not modify certificate trust or activate a service.

This package provides the unmodified eSocial communication package version 1.6: XML schemas, WSDL files, a response example and the upstream change log. Data is installed in share/esocial/communication with the original archive and attribution. Its envelope schemas retain their upstream numeric registration restrictions; alphanumeric CNPJ support in event layout S-1.3 must not be inferred for these envelopes. The submission envelope deliberately does not validate its embedded event, which must be validated separately. Schema validation does not check digital signatures or government business rules, and this package does not contact or activate a service.

ungoogled-chromium is Google Chromium with the Google-integration and privacy-affecting code removed. This package adapts the upstream portable Linux x86_64 binary to Guix library paths. The binary release can lag behind the source release. Chromium uses its unprivileged user-namespace sandbox; this package does not install a setuid sandbox helper.

Google Chrome is a cross-platform web browser developed by Google.

Ungoogled-Chromium is the Chromium web browser, with some functionality disabled in order to protect the users privacy. This package also includes the chromedriver command, which can be useful for automated web testing.

LibreWolf is designed to increase protection against tracking and fingerprinting techniques, while also including a few security improvements. This is achieved through our privacy and security oriented settings and patches. LibreWolf also aims to remove all the telemetry, data collection and annoyances, as well as disabling anti-freedom features like DRM.

This application provides support for using private and governmental e-services, signing and encrypting DigiDoc documents, and configuring Estonian ID cards. It requires a running pcscd service and a compatible card reader.