1 ;;; GNU Guix --- Functional package management for GNU
2 ;;; Copyright © 2018, 2019, 2020, 2021 Christopher Baines <mail@cbaines.net>
3 ;;; Copyright © 2021, 2022 Arun Isaac <arunisaac@systemreboot.net>
5 ;;; This file is part of GNU Guix.
7 ;;; GNU Guix is free software; you can redistribute it and/or modify
8 ;;; it under the terms of the GNU General Public License as published by
9 ;;; the Free Software Foundation, either version 3 of the License, or
10 ;;; (at your option) any later version.
12 ;;; GNU Guix is distributed in the hope that it will be useful,
13 ;;; but WITHOUT ANY WARRANTY; without even the implied warranty of
14 ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 ;;; GNU General Public License for more details.
17 ;;; You should have received a copy of the GNU General Public License
18 ;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
20 (define-module (gnu services ci)
21 #:use-module (guix gexp)
22 #:use-module (guix records)
23 #:use-module (gnu packages admin)
24 #:use-module (gnu packages ci)
25 #:use-module (gnu services)
26 #:use-module (gnu services base)
27 #:use-module (gnu services shepherd)
28 #:use-module (gnu services admin)
29 #:use-module (gnu system shadow)
30 #:use-module (ice-9 match)
31 #:export (laminar-configuration
32 laminar-configuration?
33 laminar-configuration-home-directory
34 laminar-configuration-bind-http
35 laminar-configuration-bind-rpc
36 laminar-configuration-title
37 laminar-configuration-keep-rundirs
38 laminar-configuration-archive-url
39 laminar-configuration-base-url
41 laminar-service-type))
45 ;;; This module implements a service that to run instances of Laminar, a
46 ;;; continuous integration tool.
50 (define-record-type* <laminar-configuration>
51 laminar-configuration make-laminar-configuration
52 laminar-configuration?
53 (laminar laminars-configuration-laminar
55 (home-directory laminar-configuration-home-directory
56 (default "/var/lib/laminar"))
57 (bind-http laminar-configuration-bind-http
59 (bind-rpc laminar-configuration-bind-rpc
60 (default "unix-abstract:laminar"))
61 (title laminar-configuration-title
63 (keep-rundirs laminar-keep-rundirs
65 (archive-url laminar-archive-url
67 (base-url laminar-base-url
70 (define laminar-shepherd-service
72 (($ <laminar-configuration> laminar home-directory
74 title keep-rundirs archive-url
76 (list (shepherd-service
77 (documentation "Run Laminar.")
78 (provision '(laminar))
79 (requirement '(networking))
80 (start #~(make-forkexec-constructor
81 (list #$(file-append laminar "/sbin/laminard"))
82 #:environment-variables
83 `(,(string-append "LAMINAR_HOME="
85 ,(string-append "LAMINAR_BIND_HTTP="
87 ,(string-append "LAMINAR_BIND_RPC="
89 ,(string-append "LAMINAR_TITLE="
91 ,(string-append "LAMINAR_KEEP_RUNDIRS="
96 (string-append "LAMINAR_ARCHIVE_URL="
101 (string-append "LAMINAR_BASE_URL="
106 (stop #~(make-kill-destructor)))))))
108 (define (laminar-account config)
109 "Return the user accounts and user groups for CONFIG."
117 (comment "Laminar privilege separation user")
118 (home-directory (laminar-configuration-home-directory config))
119 (shell #~(string-append #$shadow "/sbin/nologin")))))
121 (define (laminar-activation config)
122 (let ((bind-http (laminar-configuration-bind-http config)))
124 ;; If listen is a unix socket, create its parent directory.
125 (when (string-prefix? "unix:" #$bind-http)
127 (dirname (substring #$bind-http (string-length "unix:"))))
128 (user (getpw "laminar")))
129 (mkdir-p run-directory)
130 (chown run-directory (passwd:uid user) (passwd:gid user)))))))
132 (define laminar-service-type
137 (service-extension shepherd-root-service-type laminar-shepherd-service)
138 (service-extension account-service-type laminar-account)
139 (service-extension activation-service-type laminar-activation)))
140 (default-value (laminar-configuration))
142 "Run the Laminar continuous integration service.")))