etc/guix-gc.service.in

   1 # This is a "service unit file" for the systemd init system to perform a
   2 # one-shot 'guix gc' operation.  It is meant to be triggered by a timer.
   3 # Drop it in /etc/systemd/system or similar together with 'guix-gc.timer'
   4 # to set it up.
   5
   6 [Unit]
   7 Description=Discard unused Guix store items
   8
   9 [Service]
  10 Type=oneshot
  11 # Customize the 'guix gc' arguments to fit your needs.
  12 ExecStart=@localstatedir@/guix/profiles/per-user/root/current-guix/bin/guix gc -d 1m -F 10G
  13 PrivateDevices=yes
  14 PrivateNetwork=yes
  15 PrivateUsers=no
  16 ProtectKernelTunables=yes
  17 ProtectKernelModules=yes
  18 ProtectControlGroups=yes
  19 MemoryDenyWriteExecute=yes
  20 SystemCallFilter=@default @file-system @basic-io @system-service