Commit | Line | Data |
---|---|---|
033adfe7 | 1 | ;;; GNU Guix --- Functional package management for GNU |
a43aca97 | 2 | ;;; Copyright © 2013, 2014, 2015, 2016, 2017 Ludovic Courtès <ludo@gnu.org> |
5e738ac2 | 3 | ;;; Copyright © 2015 Mark H Weaver <mhw@netris.org> |
5dccaffe | 4 | ;;; Copyright © 2015, 2016 Alex Kost <alezost@gmail.com> |
1ef8b72a | 5 | ;;; Copyright © 2016 Chris Marusich <cmmarusich@gmail.com> |
033adfe7 LC |
6 | ;;; |
7 | ;;; This file is part of GNU Guix. | |
8 | ;;; | |
9 | ;;; GNU Guix is free software; you can redistribute it and/or modify it | |
10 | ;;; under the terms of the GNU General Public License as published by | |
11 | ;;; the Free Software Foundation; either version 3 of the License, or (at | |
12 | ;;; your option) any later version. | |
13 | ;;; | |
14 | ;;; GNU Guix is distributed in the hope that it will be useful, but | |
15 | ;;; WITHOUT ANY WARRANTY; without even the implied warranty of | |
16 | ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
17 | ;;; GNU General Public License for more details. | |
18 | ;;; | |
19 | ;;; You should have received a copy of the GNU General Public License | |
20 | ;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>. | |
21 | ||
22 | (define-module (gnu system) | |
23 | #:use-module (guix store) | |
24 | #:use-module (guix monads) | |
02100028 | 25 | #:use-module (guix gexp) |
033adfe7 LC |
26 | #:use-module (guix records) |
27 | #:use-module (guix packages) | |
28 | #:use-module (guix derivations) | |
29fce8b6 | 29 | #:use-module (guix profiles) |
84765839 | 30 | #:use-module (guix ui) |
033adfe7 LC |
31 | #:use-module (gnu packages base) |
32 | #:use-module (gnu packages bash) | |
bdb36958 | 33 | #:use-module (gnu packages guile) |
9de46ffb | 34 | #:use-module (gnu packages admin) |
8a07c289 | 35 | #:use-module (gnu packages linux) |
a96a82d7 | 36 | #:use-module (gnu packages pciutils) |
033adfe7 | 37 | #:use-module (gnu packages package-management) |
6f436c54 LC |
38 | #:use-module (gnu packages less) |
39 | #:use-module (gnu packages zile) | |
55e70e65 LC |
40 | #:use-module (gnu packages nano) |
41 | #:use-module (gnu packages lsof) | |
a68c6967 | 42 | #:use-module (gnu packages gawk) |
18316d86 | 43 | #:use-module (gnu packages man) |
939c5c31 | 44 | #:use-module (gnu packages texinfo) |
a68c6967 | 45 | #:use-module (gnu packages compression) |
f34c56be | 46 | #:use-module (gnu packages firmware) |
db4fdc04 | 47 | #:use-module (gnu services) |
0190c1c0 | 48 | #:use-module (gnu services shepherd) |
db4fdc04 | 49 | #:use-module (gnu services base) |
033adfe7 LC |
50 | #:use-module (gnu system grub) |
51 | #:use-module (gnu system shadow) | |
996ed739 | 52 | #:use-module (gnu system nss) |
598e19dc | 53 | #:use-module (gnu system locale) |
6e828634 | 54 | #:use-module (gnu system pam) |
735c6dd7 | 55 | #:use-module (gnu system linux-initrd) |
c5df1839 | 56 | #:use-module (gnu system file-systems) |
060d62a7 | 57 | #:use-module (gnu system mapped-devices) |
033adfe7 LC |
58 | #:use-module (ice-9 match) |
59 | #:use-module (srfi srfi-1) | |
60 | #:use-module (srfi srfi-26) | |
598e19dc LC |
61 | #:use-module (srfi srfi-34) |
62 | #:use-module (srfi srfi-35) | |
3382bfe9 | 63 | #:use-module (rnrs bytevectors) |
033adfe7 LC |
64 | #:export (operating-system |
65 | operating-system? | |
d5b429ab LC |
66 | |
67 | operating-system-bootloader | |
033adfe7 | 68 | operating-system-services |
217a5b85 | 69 | operating-system-user-services |
033adfe7 | 70 | operating-system-packages |
fd3bfc44 | 71 | operating-system-host-name |
c65e1834 | 72 | operating-system-hosts-file |
fd3bfc44 | 73 | operating-system-kernel |
44d5f54e | 74 | operating-system-kernel-file |
ee2a6304 | 75 | operating-system-kernel-arguments |
fd3bfc44 LC |
76 | operating-system-initrd |
77 | operating-system-users | |
78 | operating-system-groups | |
548d4c13 | 79 | operating-system-issue |
fd3bfc44 LC |
80 | operating-system-timezone |
81 | operating-system-locale | |
598e19dc | 82 | operating-system-locale-definitions |
34760ae7 | 83 | operating-system-locale-libcs |
5dae0186 | 84 | operating-system-mapped-devices |
83bcd0b8 | 85 | operating-system-file-systems |
6b779207 | 86 | operating-system-store-file-system |
2bdd7ac1 LC |
87 | operating-system-user-mapped-devices |
88 | operating-system-boot-mapped-devices | |
b25937e3 | 89 | operating-system-activation-script |
b2fef041 LC |
90 | operating-system-user-accounts |
91 | operating-system-shepherd-service-names | |
033adfe7 | 92 | |
1aa0033b | 93 | operating-system-derivation |
83bcd0b8 | 94 | operating-system-profile |
6f436c54 | 95 | operating-system-grub.cfg |
239db054 DT |
96 | operating-system-etc-directory |
97 | operating-system-locale-directory | |
98 | operating-system-boot-script | |
99 | ||
b8300494 AK |
100 | boot-parameters |
101 | boot-parameters? | |
102 | boot-parameters-label | |
103 | boot-parameters-root-device | |
1ef8b72a CM |
104 | boot-parameters-store-device |
105 | boot-parameters-store-mount-point | |
b8300494 AK |
106 | boot-parameters-kernel |
107 | boot-parameters-kernel-arguments | |
d7b342d8 | 108 | boot-parameters-initrd |
b8300494 AK |
109 | read-boot-parameters |
110 | ||
568841d4 | 111 | local-host-aliases |
df5ce088 | 112 | %setuid-programs |
5dae0186 | 113 | %base-packages |
374f14c2 | 114 | %base-firmware)) |
033adfe7 LC |
115 | |
116 | ;;; Commentary: | |
117 | ;;; | |
118 | ;;; This module supports whole-system configuration. | |
119 | ;;; | |
120 | ;;; Code: | |
121 | ||
122 | ;; System-wide configuration. | |
123 | ;; TODO: Add per-field docstrings/stexi. | |
124 | (define-record-type* <operating-system> operating-system | |
125 | make-operating-system | |
126 | operating-system? | |
127 | (kernel operating-system-kernel ; package | |
57082417 | 128 | (default linux-libre)) |
ee2a6304 LC |
129 | (kernel-arguments operating-system-kernel-arguments |
130 | (default '())) ; list of gexps/strings | |
d5b429ab LC |
131 | (bootloader operating-system-bootloader) ; <grub-configuration> |
132 | ||
83bcd0b8 | 133 | (initrd operating-system-initrd ; (list fs) -> M derivation |
060238ae | 134 | (default base-initrd)) |
f34c56be LC |
135 | (firmware operating-system-firmware ; list of packages |
136 | (default %base-firmware)) | |
033adfe7 LC |
137 | |
138 | (host-name operating-system-host-name) ; string | |
24e02c28 | 139 | (hosts-file operating-system-hosts-file ; file-like | #f |
c65e1834 | 140 | (default #f)) |
033adfe7 | 141 | |
5dae0186 LC |
142 | (mapped-devices operating-system-mapped-devices ; list of <mapped-device> |
143 | (default '())) | |
8a6d2731 | 144 | (file-systems operating-system-file-systems) ; list of fs |
2a13d05e LC |
145 | (swap-devices operating-system-swap-devices ; list of strings |
146 | (default '())) | |
033adfe7 LC |
147 | |
148 | (users operating-system-users ; list of user accounts | |
bf87f38a | 149 | (default %base-user-accounts)) |
033adfe7 | 150 | (groups operating-system-groups ; list of user groups |
773e956d | 151 | (default %base-groups)) |
033adfe7 | 152 | |
40281c54 LC |
153 | (skeletons operating-system-skeletons ; list of name/monadic value |
154 | (default (default-skeletons))) | |
548d4c13 LC |
155 | (issue operating-system-issue ; string |
156 | (default %default-issue)) | |
40281c54 | 157 | |
033adfe7 | 158 | (packages operating-system-packages ; list of (PACKAGE OUTPUT...) |
6f436c54 | 159 | (default %base-packages)) ; or just PACKAGE |
033adfe7 LC |
160 | |
161 | (timezone operating-system-timezone) ; string | |
8a6d2731 | 162 | (locale operating-system-locale ; string |
598e19dc LC |
163 | (default "en_US.utf8")) |
164 | (locale-definitions operating-system-locale-definitions ; list of <locale-definition> | |
165 | (default %default-locale-definitions)) | |
34760ae7 LC |
166 | (locale-libcs operating-system-locale-libcs ; list of <packages> |
167 | (default %default-locale-libcs)) | |
996ed739 LC |
168 | (name-service-switch operating-system-name-service-switch ; <name-service-switch> |
169 | (default %default-nss)) | |
033adfe7 | 170 | |
217a5b85 | 171 | (services operating-system-user-services ; list of monadic services |
09e028f4 LC |
172 | (default %base-services)) |
173 | ||
174 | (pam-services operating-system-pam-services ; list of PAM services | |
175 | (default (base-pam-services))) | |
176 | (setuid-programs operating-system-setuid-programs | |
69689380 | 177 | (default %setuid-programs)) ; list of string-valued gexps |
033adfe7 | 178 | |
f5a9ffa0 AK |
179 | (sudoers-file operating-system-sudoers-file ; file-like |
180 | (default %sudoers-specification))) | |
033adfe7 | 181 | |
2717a89a | 182 | \f |
40281c54 LC |
183 | ;;; |
184 | ;;; Services. | |
185 | ;;; | |
186 | ||
aa1145df LC |
187 | (define (non-boot-file-system-service os) |
188 | "Return the file system service for the file systems of OS that are not | |
189 | marked as 'needed-for-boot'." | |
023f391c | 190 | (define file-systems |
4d6b879c | 191 | (remove file-system-needed-for-boot? |
023f391c LC |
192 | (operating-system-file-systems os))) |
193 | ||
5dae0186 | 194 | (define (device-mappings fs) |
ab64483f | 195 | (let ((device (file-system-device fs))) |
29824d80 | 196 | (if (string? device) ;title is 'device |
ab64483f LC |
197 | (filter (lambda (md) |
198 | (string=? (string-append "/dev/mapper/" | |
199 | (mapped-device-target md)) | |
200 | device)) | |
201 | (operating-system-mapped-devices os)) | |
202 | '()))) | |
5dae0186 | 203 | |
e502bf89 LC |
204 | (define (add-dependencies fs) |
205 | ;; Add the dependencies due to device mappings to FS. | |
206 | (file-system | |
207 | (inherit fs) | |
208 | (dependencies | |
209 | (delete-duplicates (append (device-mappings fs) | |
210 | (file-system-dependencies fs)) | |
211 | eq?)))) | |
212 | ||
aa1145df LC |
213 | (service file-system-service-type |
214 | (map add-dependencies file-systems))) | |
023f391c | 215 | |
de1c158f LC |
216 | (define (mapped-device-user device file-systems) |
217 | "Return a file system among FILE-SYSTEMS that uses DEVICE, or #f." | |
218 | (let ((target (string-append "/dev/mapper/" (mapped-device-target device)))) | |
219 | (find (lambda (fs) | |
2bdd7ac1 LC |
220 | (or (member device (file-system-dependencies fs)) |
221 | (and (eq? 'device (file-system-title fs)) | |
222 | (string=? (file-system-device fs) target)))) | |
de1c158f LC |
223 | file-systems))) |
224 | ||
225 | (define (operating-system-user-mapped-devices os) | |
226 | "Return the subset of mapped devices that can be installed in | |
227 | user-land--i.e., those not needed during boot." | |
9cb426b8 LC |
228 | (let ((devices (operating-system-mapped-devices os)) |
229 | (file-systems (operating-system-file-systems os))) | |
230 | (filter (lambda (md) | |
231 | (let ((user (mapped-device-user md file-systems))) | |
232 | (or (not user) | |
233 | (not (file-system-needed-for-boot? user))))) | |
234 | devices))) | |
de1c158f LC |
235 | |
236 | (define (operating-system-boot-mapped-devices os) | |
237 | "Return the subset of mapped devices that must be installed during boot, | |
238 | from the initrd." | |
9cb426b8 LC |
239 | (let ((devices (operating-system-mapped-devices os)) |
240 | (file-systems (operating-system-file-systems os))) | |
241 | (filter (lambda (md) | |
242 | (let ((user (mapped-device-user md file-systems))) | |
243 | (and user (file-system-needed-for-boot? user)))) | |
244 | devices))) | |
de1c158f | 245 | |
5dae0186 | 246 | (define (device-mapping-services os) |
be1c2c54 | 247 | "Return the list of device-mapping services for OS as a list." |
4da8c19e | 248 | (map device-mapping-service |
be1c2c54 | 249 | (operating-system-user-mapped-devices os))) |
5dae0186 | 250 | |
2a13d05e | 251 | (define (swap-services os) |
be1c2c54 LC |
252 | "Return the list of swap services for OS." |
253 | (map swap-service (operating-system-swap-devices os))) | |
2a13d05e | 254 | |
44d5f54e LC |
255 | (define* (system-linux-image-file-name #:optional (system (%current-system))) |
256 | "Return the basename of the kernel image file for SYSTEM." | |
257 | ;; FIXME: Evaluate the conditional based on the actual current system. | |
258 | (if (string-prefix? "mips" (%current-system)) | |
259 | "vmlinuz" | |
260 | "bzImage")) | |
261 | ||
262 | (define (operating-system-kernel-file os) | |
263 | "Return an object representing the absolute file name of the kernel image of | |
264 | OS." | |
265 | (file-append (operating-system-kernel os) | |
266 | "/" (system-linux-image-file-name os))) | |
267 | ||
d62e201c LC |
268 | (define* (operating-system-directory-base-entries os #:key container?) |
269 | "Return the basic entries of the 'system' directory of OS for use as the | |
270 | value of the SYSTEM-SERVICE-TYPE service." | |
af4c3fd5 | 271 | (mlet %store-monad ((locale (operating-system-locale-directory os))) |
d62e201c | 272 | (if container? |
af4c3fd5 | 273 | (return `(("locale" ,locale))) |
d62e201c LC |
274 | (mlet %store-monad |
275 | ((kernel -> (operating-system-kernel os)) | |
276 | (initrd (operating-system-initrd-file os)) | |
277 | (params (operating-system-parameters-file os))) | |
278 | (return `(("kernel" ,kernel) | |
279 | ("parameters" ,params) | |
280 | ("initrd" ,initrd) | |
d62e201c LC |
281 | ("locale" ,locale))))))) ;used by libc |
282 | ||
0adfe95a | 283 | (define* (essential-services os #:key container?) |
217a5b85 LC |
284 | "Return the list of essential services for OS. These are special services |
285 | that implement part of what's declared in OS are responsible for low-level | |
0adfe95a LC |
286 | bookkeeping. CONTAINER? determines whether to return the list of services for |
287 | a container or that of a \"bare metal\" system." | |
d6e2a622 LC |
288 | (define known-fs |
289 | (map file-system-mount-point (operating-system-file-systems os))) | |
290 | ||
be1c2c54 LC |
291 | (let* ((mappings (device-mapping-services os)) |
292 | (root-fs (root-file-system-service)) | |
aa1145df | 293 | (other-fs (non-boot-file-system-service os)) |
be1c2c54 LC |
294 | (unmount (user-unmount-service known-fs)) |
295 | (swaps (swap-services os)) | |
a43aca97 | 296 | (procs (user-processes-service)) |
d62e201c LC |
297 | (host-name (host-name-service (operating-system-host-name os))) |
298 | (entries (operating-system-directory-base-entries | |
299 | os #:container? container?))) | |
300 | (cons* (service system-service-type entries) | |
301 | %boot-service | |
0adfe95a | 302 | |
d4053c71 AK |
303 | ;; %SHEPHERD-ROOT-SERVICE must come first so that the gexp that |
304 | ;; execs shepherd comes last in the boot script (XXX). Likewise, | |
305 | ;; the cleanup service must come last so that its gexp runs before | |
306 | ;; activation code. | |
307 | %shepherd-root-service | |
be7be9e8 LC |
308 | %activation-service |
309 | (service cleanup-service-type #f) | |
0adfe95a LC |
310 | |
311 | (pam-root-service (operating-system-pam-services os)) | |
312 | (account-service (append (operating-system-accounts os) | |
313 | (operating-system-groups os)) | |
314 | (operating-system-skeletons os)) | |
315 | (operating-system-etc-service os) | |
e43e84ba | 316 | (service fstab-service-type '()) |
6bad7524 SB |
317 | (session-environment-service |
318 | (operating-system-environment-variables os)) | |
0adfe95a LC |
319 | host-name procs root-fs unmount |
320 | (service setuid-program-service-type | |
321 | (operating-system-setuid-programs os)) | |
af4c3fd5 LC |
322 | (service profile-service-type |
323 | (operating-system-packages os)) | |
aa1145df LC |
324 | other-fs |
325 | (append mappings swaps | |
0adfe95a LC |
326 | |
327 | ;; Add the firmware service, unless we are building for a | |
328 | ;; container. | |
329 | (if container? | |
330 | '() | |
a241a7ac LC |
331 | (list %linux-bare-metal-service |
332 | (service firmware-service-type | |
0adfe95a LC |
333 | (operating-system-firmware os)))))))) |
334 | ||
335 | (define* (operating-system-services os #:key container?) | |
217a5b85 LC |
336 | "Return all the services of OS, including \"internal\" services that do not |
337 | explicitly appear in OS." | |
be1c2c54 | 338 | (append (operating-system-user-services os) |
0adfe95a | 339 | (essential-services os #:container? container?))) |
217a5b85 | 340 | |
40281c54 LC |
341 | \f |
342 | ;;; | |
343 | ;;; /etc. | |
344 | ;;; | |
345 | ||
f34c56be LC |
346 | (define %base-firmware |
347 | ;; Firmware usable by default. | |
52db41af EB |
348 | (list ath9k-htc-firmware |
349 | openfwwf-firmware)) | |
f34c56be | 350 | |
6f436c54 LC |
351 | (define %base-packages |
352 | ;; Default set of packages globally visible. It should include anything | |
353 | ;; required for basic administrator tasks. | |
55e70e65 | 354 | (cons* procps psmisc which less zile nano |
55e70e65 | 355 | lsof ;for Guix's 'list-runtime-roots' |
a96a82d7 | 356 | pciutils usbutils |
be681773 LC |
357 | util-linux inetutils isc-dhcp |
358 | ||
359 | ;; wireless-tools is deprecated in favor of iw, but it's still what | |
360 | ;; many people are familiar with, so keep it around. | |
16cc9961 | 361 | iw wireless-tools rfkill |
be681773 | 362 | |
5dccaffe | 363 | iproute |
9b762b8d | 364 | net-tools ; XXX: remove when Inetutils suffices |
18316d86 | 365 | man-db |
02683c33 | 366 | info-reader ;the standalone Info reader (no Perl) |
03e9998f | 367 | |
a8a086e3 LC |
368 | ;; The 'sudo' command is already in %SETUID-PROGRAMS, but we also |
369 | ;; want the other commands and the man pages (notably because | |
370 | ;; auto-completion in Emacs shell relies on man pages.) | |
371 | sudo | |
372 | ||
03e9998f LC |
373 | ;; Get 'insmod' & co. from kmod, not module-init-tools, since udev |
374 | ;; already depends on it anyway. | |
255f7308 | 375 | kmod eudev |
03e9998f | 376 | |
b63dbd44 | 377 | e2fsprogs kbd |
9b762b8d | 378 | |
1d167b6e LC |
379 | bash-completion |
380 | ||
9b762b8d LC |
381 | ;; The packages below are also in %FINAL-INPUTS, so take them from |
382 | ;; there to avoid duplication. | |
383 | (map canonical-package | |
a68c6967 | 384 | (list guile-2.0 bash coreutils findutils grep sed |
4b164c45 | 385 | diffutils patch gawk tar gzip bzip2 xz lzip)))) |
6f436c54 | 386 | |
548d4c13 LC |
387 | (define %default-issue |
388 | ;; Default contents for /etc/issue. | |
389 | " | |
390 | This is the GNU system. Welcome.\n") | |
391 | ||
568841d4 LC |
392 | (define (local-host-aliases host-name) |
393 | "Return aliases for HOST-NAME, to be used in /etc/hosts." | |
394 | (string-append "127.0.0.1 localhost " host-name "\n" | |
395 | "::1 localhost " host-name "\n")) | |
396 | ||
c65e1834 LC |
397 | (define (default-/etc/hosts host-name) |
398 | "Return the default /etc/hosts file." | |
24e02c28 | 399 | (plain-file "hosts" (local-host-aliases host-name))) |
c65e1834 | 400 | |
0adfe95a LC |
401 | (define* (operating-system-etc-service os) |
402 | "Return a <service> that builds containing the static part of the /etc | |
403 | directory." | |
404 | (let ((login.defs (plain-file "login.defs" "# Empty for now.\n")) | |
405 | ||
0adfe95a LC |
406 | (issue (plain-file "issue" (operating-system-issue os))) |
407 | (nsswitch (plain-file "nsswitch.conf" | |
408 | (name-service-switch->string | |
409 | (operating-system-name-service-switch os)))) | |
410 | ||
411 | ;; Startup file for POSIX-compliant login shells, which set system-wide | |
412 | ;; environment variables. | |
413 | (profile (mixed-text-file "profile" "\ | |
c05c4321 | 414 | # Crucial variables that could be missing in the profiles' 'etc/profile' |
d9959421 LC |
415 | # because they would require combining both profiles. |
416 | # FIXME: See <http://bugs.gnu.org/20255>. | |
97ab2c0f | 417 | export MANPATH=$HOME/.guix-profile/share/man:/run/current-system/profile/share/man |
95f92d4e | 418 | export INFOPATH=$HOME/.guix-profile/share/info:/run/current-system/profile/share/info |
00239d05 SB |
419 | export XDG_DATA_DIRS=$HOME/.guix-profile/share:/run/current-system/profile/share |
420 | export XDG_CONFIG_DIRS=$HOME/.guix-profile/etc/xdg:/run/current-system/profile/etc/xdg | |
421 | ||
d9959421 LC |
422 | # Ignore the default value of 'PATH'. |
423 | unset PATH | |
424 | ||
425 | # Load the system profile's settings. | |
426 | GUIX_PROFILE=/run/current-system/profile \\ | |
669786da | 427 | . /run/current-system/profile/etc/profile |
d9959421 LC |
428 | |
429 | # Prepend setuid programs. | |
430 | export PATH=/run/setuid-programs:$PATH | |
431 | ||
cad7e6ab CSLL |
432 | # Since 'lshd' does not use pam_env, /etc/environment must be explicitly |
433 | # loaded when someone logs in via SSH. See <http://bugs.gnu.org/22175>. | |
434 | # We need 'PATH' to be defined here, for 'cat' and 'cut'. Do this before | |
435 | # reading the user's 'etc/profile' to allow variables to be overridden. | |
436 | if [ -f /etc/environment -a -n \"$SSH_CLIENT\" \\ | |
437 | -a -z \"$LINUX_MODULE_DIRECTORY\" ] | |
438 | then | |
439 | . /etc/environment | |
440 | export `cat /etc/environment | cut -d= -f1` | |
441 | fi | |
442 | ||
507c71d6 | 443 | if [ -f \"$HOME/.guix-profile/etc/profile\" ] |
d9959421 LC |
444 | then |
445 | # Load the user profile's settings. | |
446 | GUIX_PROFILE=\"$HOME/.guix-profile\" \\ | |
669786da | 447 | . \"$HOME/.guix-profile/etc/profile\" |
d9959421 LC |
448 | else |
449 | # At least define this one so that basic things just work | |
450 | # when the user installs their first package. | |
451 | export PATH=\"$HOME/.guix-profile/bin:$PATH\" | |
452 | fi | |
453 | ||
11202482 LC |
454 | # Set the umask, notably for users logging in via 'lsh'. |
455 | # See <http://bugs.gnu.org/22650>. | |
456 | umask 022 | |
2a5f0db4 | 457 | |
4af7c83b LC |
458 | # Allow GStreamer-based applications to find plugins. |
459 | export GST_PLUGIN_PATH=\"$HOME/.guix-profile/lib/gstreamer-1.0\" | |
460 | ||
1d167b6e LC |
461 | if [ -n \"$BASH_VERSION\" -a -f /etc/bashrc ] |
462 | then | |
463 | # Load Bash-specific initialization code. | |
669786da | 464 | . /etc/bashrc |
1d167b6e | 465 | fi |
40281c54 | 466 | ")) |
1d167b6e | 467 | |
0adfe95a | 468 | (bashrc (plain-file "bashrc" "\ |
1d167b6e LC |
469 | # Bash-specific initialization. |
470 | ||
471 | # The 'bash-completion' package. | |
472 | if [ -f /run/current-system/profile/etc/profile.d/bash_completion.sh ] | |
473 | then | |
474 | # Bash-completion sources ~/.bash_completion. It installs a dynamic | |
475 | # completion loader that searches its own completion files as well | |
476 | # as those in ~/.guix-profile and /run/current-system/profile. | |
477 | source /run/current-system/profile/etc/profile.d/bash_completion.sh | |
0adfe95a LC |
478 | fi\n"))) |
479 | (etc-service | |
9e41130b LC |
480 | `(("services" ,(file-append net-base "/etc/services")) |
481 | ("protocols" ,(file-append net-base "/etc/protocols")) | |
482 | ("rpc" ,(file-append net-base "/etc/rpc")) | |
0adfe95a LC |
483 | ("login.defs" ,#~#$login.defs) |
484 | ("issue" ,#~#$issue) | |
485 | ("nsswitch.conf" ,#~#$nsswitch) | |
0adfe95a LC |
486 | ("profile" ,#~#$profile) |
487 | ("bashrc" ,#~#$bashrc) | |
488 | ("hosts" ,#~#$(or (operating-system-hosts-file os) | |
489 | (default-/etc/hosts (operating-system-host-name os)))) | |
9e41130b LC |
490 | ("localtime" ,(file-append tzdata "/share/zoneinfo/" |
491 | (operating-system-timezone os))) | |
0adfe95a | 492 | ("sudoers" ,(operating-system-sudoers-file os)))))) |
033adfe7 | 493 | |
ab6a279a LC |
494 | (define %root-account |
495 | ;; Default root account. | |
496 | (user-account | |
497 | (name "root") | |
498 | (password "") | |
499 | (uid 0) (group "root") | |
500 | (comment "System administrator") | |
501 | (home-directory "/root"))) | |
502 | ||
0b6f49ef | 503 | (define (operating-system-accounts os) |
0adfe95a LC |
504 | "Return the user accounts for OS, including an obligatory 'root' account, |
505 | and excluding accounts requested by services." | |
506 | ;; Make sure there's a root account. | |
507 | (if (find (lambda (user) | |
508 | (and=> (user-account-uid user) zero?)) | |
509 | (operating-system-users os)) | |
510 | (operating-system-users os) | |
511 | (cons %root-account (operating-system-users os)))) | |
0b6f49ef | 512 | |
84765839 LC |
513 | (define (maybe-string->file file-name thing) |
514 | "If THING is a string, return a <plain-file> with THING as its content. | |
515 | Otherwise just return THING. | |
516 | ||
517 | This is for backward-compatibility of fields that used to be strings and are | |
518 | now file-like objects.." | |
519 | (match thing | |
520 | ((? string?) | |
521 | (warning (_ "using a string for file '~a' is deprecated; \ | |
522 | use 'plain-file' instead~%") | |
523 | file-name) | |
524 | (plain-file file-name thing)) | |
525 | (x | |
526 | x))) | |
527 | ||
24e02c28 LC |
528 | (define (maybe-file->monadic file-name thing) |
529 | "If THING is a value in %STORE-MONAD, return it as is; otherwise return | |
530 | THING in the %STORE-MONAD. | |
531 | ||
532 | This is for backward-compatibility of fields that used to be monadic values | |
533 | and are now file-like objects." | |
534 | (with-monad %store-monad | |
535 | (match thing | |
536 | ((? procedure?) | |
537 | (warning (_ "using a monadic value for '~a' is deprecated; \ | |
538 | use 'plain-file' instead~%") | |
539 | file-name) | |
540 | thing) | |
541 | (x | |
542 | (return x))))) | |
543 | ||
0b6f49ef LC |
544 | (define (operating-system-etc-directory os) |
545 | "Return that static part of the /etc directory of OS." | |
0adfe95a LC |
546 | (etc-directory |
547 | (fold-services (operating-system-services os) | |
548 | #:target-type etc-service-type))) | |
033adfe7 | 549 | |
6bad7524 SB |
550 | (define (operating-system-environment-variables os) |
551 | "Return the environment variables of OS for | |
552 | @var{session-environment-service-type}, to be used in @file{/etc/environment}." | |
553 | `(("LANG" . ,(operating-system-locale os)) | |
554 | ("TZ" . ,(operating-system-timezone os)) | |
9e41130b | 555 | ("TZDIR" . ,(file-append tzdata "/share/zoneinfo")) |
6bad7524 SB |
556 | ;; Tell 'modprobe' & co. where to look for modules. |
557 | ("LINUX_MODULE_DIRECTORY" . "/run/booted-system/kernel/lib/modules") | |
558 | ;; These variables are honored by OpenSSL (libssl) and Git. | |
559 | ("SSL_CERT_DIR" . "/etc/ssl/certs") | |
560 | ("SSL_CERT_FILE" . "/etc/ssl/certs/ca-certificates.crt") | |
561 | ("GIT_SSL_CAINFO" . "/etc/ssl/certs/ca-certificates.crt") | |
ae05e366 LC |
562 | |
563 | ;; 'GTK_DATA_PREFIX' must name one directory where GTK+ themes are | |
564 | ;; searched for. | |
565 | ("GTK_DATA_PREFIX" . "/run/current-system/profile") | |
566 | ||
6bad7524 SB |
567 | ;; By default, applications that use D-Bus, such as Emacs, abort at startup |
568 | ;; when /etc/machine-id is missing. Make sure these warnings are non-fatal. | |
946465bb LC |
569 | ("DBUS_FATAL_WARNINGS" . "0") |
570 | ||
571 | ;; XXX: Normally we wouldn't need to do this, but our glibc@2.23 package | |
572 | ;; used to look things up in 'PREFIX/lib/locale' instead of | |
573 | ;; '/run/current-system/locale' as was intended. Keep this hack around so | |
574 | ;; that people who still have glibc@2.23-using packages in their profiles | |
575 | ;; can use them correctly. | |
576 | ;; TODO: Remove when glibc@2.23 is long gone. | |
577 | ("GUIX_LOCPATH" . "/run/current-system/locale"))) | |
6bad7524 | 578 | |
09e028f4 LC |
579 | (define %setuid-programs |
580 | ;; Default set of setuid-root programs. | |
3b65abac | 581 | (let ((shadow (@ (gnu packages admin) shadow))) |
9e41130b LC |
582 | (list (file-append shadow "/bin/passwd") |
583 | (file-append shadow "/bin/su") | |
584 | (file-append inetutils "/bin/ping") | |
585 | (file-append inetutils "/bin/ping6") | |
586 | (file-append sudo "/bin/sudo") | |
587 | (file-append fuse "/bin/fusermount")))) | |
69689380 LC |
588 | |
589 | (define %sudoers-specification | |
590 | ;; Default /etc/sudoers contents: 'root' and all members of the 'wheel' | |
591 | ;; group can do anything. See | |
592 | ;; <http://www.sudo.ws/sudo/man/1.8.10/sudoers.man.html>. | |
593 | ;; TODO: Add a declarative API. | |
84765839 LC |
594 | (plain-file "sudoers" "\ |
595 | root ALL=(ALL) ALL | |
596 | %wheel ALL=(ALL) ALL\n")) | |
09e028f4 | 597 | |
239db054 | 598 | (define* (operating-system-activation-script os #:key container?) |
484a2b3a LC |
599 | "Return the activation script for OS---i.e., the code that \"activates\" the |
600 | stateful part of OS, including user accounts and groups, special directories, | |
601 | etc." | |
0adfe95a LC |
602 | (let* ((services (operating-system-services os #:container? container?)) |
603 | (activation (fold-services services | |
604 | #:target-type activation-service-type))) | |
605 | (activation-service->script activation))) | |
484a2b3a | 606 | |
239db054 | 607 | (define* (operating-system-boot-script os #:key container?) |
484a2b3a | 608 | "Return the boot script for OS---i.e., the code started by the initrd once |
239db054 DT |
609 | we're running in the final root. When CONTAINER? is true, skip all |
610 | hardware-related operations as necessary when booting a Linux container." | |
0adfe95a | 611 | (let* ((services (operating-system-services os #:container? container?)) |
d62e201c | 612 | (boot (fold-services services #:target-type boot-service-type))) |
0adfe95a LC |
613 | ;; BOOT is the script as a monadic value. |
614 | (service-parameters boot))) | |
2106d3fc | 615 | |
b2fef041 LC |
616 | (define (operating-system-user-accounts os) |
617 | "Return the list of user accounts of OS." | |
618 | (let* ((services (operating-system-services os)) | |
619 | (account (fold-services services | |
620 | #:target-type account-service-type))) | |
621 | (filter user-account? | |
622 | (service-parameters account)))) | |
623 | ||
624 | (define (operating-system-shepherd-service-names os) | |
625 | "Return the list of Shepherd service names for OS." | |
626 | (append-map shepherd-service-provision | |
627 | (service-parameters | |
628 | (fold-services (operating-system-services os) | |
629 | #:target-type | |
630 | shepherd-root-service-type)))) | |
631 | ||
d62e201c LC |
632 | (define* (operating-system-derivation os #:key container?) |
633 | "Return a derivation that builds OS." | |
634 | (let* ((services (operating-system-services os #:container? container?)) | |
635 | (system (fold-services services))) | |
636 | ;; SYSTEM contains the derivation as a monadic value. | |
637 | (service-parameters system))) | |
638 | ||
af4c3fd5 LC |
639 | (define* (operating-system-profile os #:key container?) |
640 | "Return a derivation that builds the system profile of OS." | |
641 | (mlet* %store-monad | |
642 | ((services -> (operating-system-services os #:container? container?)) | |
643 | (profile (fold-services services | |
644 | #:target-type profile-service-type))) | |
645 | (match profile | |
646 | (("profile" profile) | |
647 | (return profile))))) | |
648 | ||
83bcd0b8 LC |
649 | (define (operating-system-root-file-system os) |
650 | "Return the root file system of OS." | |
651 | (find (match-lambda | |
d4c87617 | 652 | (($ <file-system> _ _ "/") #t) |
83bcd0b8 LC |
653 | (_ #f)) |
654 | (operating-system-file-systems os))) | |
655 | ||
b4140694 LC |
656 | (define (operating-system-initrd-file os) |
657 | "Return a gexp denoting the initrd file of OS." | |
83bcd0b8 | 658 | (define boot-file-systems |
4d6b879c | 659 | (filter file-system-needed-for-boot? |
83bcd0b8 LC |
660 | (operating-system-file-systems os))) |
661 | ||
de1c158f LC |
662 | (define mapped-devices |
663 | (operating-system-boot-mapped-devices os)) | |
664 | ||
665 | (define make-initrd | |
666 | (operating-system-initrd os)) | |
667 | ||
668 | (mlet %store-monad ((initrd (make-initrd boot-file-systems | |
0d275f4a | 669 | #:linux (operating-system-kernel os) |
de1c158f | 670 | #:mapped-devices mapped-devices))) |
ab20d74a | 671 | (return (file-append initrd "/initrd")))) |
b4140694 | 672 | |
f5582b2c LC |
673 | (define (locale-name->definition* name) |
674 | "Variant of 'locale-name->definition' that raises an error upon failure." | |
675 | (match (locale-name->definition name) | |
676 | (#f | |
677 | (raise (condition | |
678 | (&message | |
679 | (message (format #f (_ "~a: invalid locale name") name)))))) | |
680 | (def def))) | |
681 | ||
598e19dc LC |
682 | (define (operating-system-locale-directory os) |
683 | "Return the directory containing the locales compiled for the definitions | |
684 | listed in OS. The C library expects to find it under | |
685 | /run/current-system/locale." | |
f5582b2c LC |
686 | (define name |
687 | (operating-system-locale os)) | |
688 | ||
689 | (define definitions | |
690 | ;; While we're at it, check whether NAME is defined and add it if needed. | |
691 | (if (member name (map locale-definition-name | |
692 | (operating-system-locale-definitions os))) | |
693 | (operating-system-locale-definitions os) | |
694 | (cons (locale-name->definition* name) | |
695 | (operating-system-locale-definitions os)))) | |
696 | ||
697 | (locale-directory definitions | |
34760ae7 | 698 | #:libcs (operating-system-locale-libcs os))) |
598e19dc | 699 | |
2d23e6f0 LC |
700 | (define (kernel->grub-label kernel) |
701 | "Return a label for the GRUB menu entry that boots KERNEL." | |
42de9608 | 702 | (string-append "GNU with " |
2d23e6f0 LC |
703 | (string-titlecase (package-name kernel)) " " |
704 | (package-version kernel) | |
d0a65256 | 705 | " (beta)")) |
2d23e6f0 | 706 | |
6b779207 LC |
707 | (define (store-file-system file-systems) |
708 | "Return the file system object among FILE-SYSTEMS that contains the store." | |
709 | (match (filter (lambda (fs) | |
710 | (and (file-system-mount? fs) | |
711 | (not (memq 'bind-mount (file-system-flags fs))) | |
712 | (string-prefix? (file-system-mount-point fs) | |
713 | (%store-prefix)))) | |
714 | file-systems) | |
715 | ((and candidates (head . tail)) | |
716 | (reduce (lambda (fs1 fs2) | |
717 | (if (> (string-length (file-system-mount-point fs1)) | |
718 | (string-length (file-system-mount-point fs2))) | |
719 | fs1 | |
720 | fs2)) | |
721 | head | |
722 | candidates)))) | |
723 | ||
724 | (define (operating-system-store-file-system os) | |
725 | "Return the file system that contains the store of OS." | |
726 | (store-file-system (operating-system-file-systems os))) | |
727 | ||
fe6e3fe2 LC |
728 | (define* (operating-system-grub.cfg os #:optional (old-entries '())) |
729 | "Return the GRUB configuration file for OS. Use OLD-ENTRIES to populate the | |
730 | \"old entries\" menu." | |
0b6f49ef | 731 | (mlet* %store-monad |
b4140694 | 732 | ((system (operating-system-derivation os)) |
83bcd0b8 | 733 | (root-fs -> (operating-system-root-file-system os)) |
6b779207 | 734 | (store-fs -> (operating-system-store-file-system os)) |
44d5f54e LC |
735 | (label -> (kernel->grub-label (operating-system-kernel os))) |
736 | (kernel -> (operating-system-kernel-file os)) | |
0f65f54e | 737 | (initrd (operating-system-initrd-file os)) |
f453f637 LC |
738 | (root-device -> (if (eq? 'uuid (file-system-title root-fs)) |
739 | (uuid->string (file-system-device root-fs)) | |
740 | (file-system-device root-fs))) | |
033adfe7 | 741 | (entries -> (list (menu-entry |
44d5f54e | 742 | (label label) |
1ef8b72a CM |
743 | |
744 | ;; The device where the kernel and initrd live. | |
3382bfe9 | 745 | (device (grub-device store-fs)) |
1ef8b72a CM |
746 | (device-mount-point |
747 | (file-system-mount-point store-fs)) | |
748 | ||
033adfe7 | 749 | (linux kernel) |
f6a7b21d | 750 | (linux-arguments |
f453f637 | 751 | (cons* (string-append "--root=" root-device) |
ee2a6304 LC |
752 | #~(string-append "--system=" #$system) |
753 | #~(string-append "--load=" #$system | |
754 | "/boot") | |
755 | (operating-system-kernel-arguments os))) | |
0f65f54e | 756 | (initrd initrd))))) |
1ef8b72a | 757 | (grub-configuration-file (operating-system-bootloader os) entries |
fe6e3fe2 | 758 | #:old-entries old-entries))) |
b4140694 | 759 | |
3382bfe9 CM |
760 | (define (grub-device fs) |
761 | "Given FS, a <file-system> object, return a value suitable for use as the | |
762 | device in a <menu-entry>." | |
763 | (case (file-system-title fs) | |
764 | ((uuid) (file-system-device fs)) | |
765 | ((label) (file-system-device fs)) | |
766 | (else #f))) | |
767 | ||
64e40dbb LC |
768 | (define (operating-system-parameters-file os) |
769 | "Return a file that describes the boot parameters of OS. The primary use of | |
770 | this file is the reconstruction of GRUB menu entries for old configurations." | |
771 | (mlet %store-monad ((initrd (operating-system-initrd-file os)) | |
772 | (root -> (operating-system-root-file-system os)) | |
1ef8b72a | 773 | (store -> (operating-system-store-file-system os)) |
64e40dbb LC |
774 | (label -> (kernel->grub-label |
775 | (operating-system-kernel os)))) | |
776 | (gexp->file "parameters" | |
1ef8b72a CM |
777 | #~(boot-parameters |
778 | (version 0) | |
779 | (label #$label) | |
780 | (root-device #$(file-system-device root)) | |
781 | (kernel #$(operating-system-kernel-file os)) | |
782 | (kernel-arguments | |
783 | #$(operating-system-kernel-arguments os)) | |
784 | (initrd #$initrd) | |
785 | (store | |
3382bfe9 | 786 | (device #$(grub-device store)) |
1ef8b72a | 787 | (mount-point #$(file-system-mount-point store)))) |
2b418579 | 788 | #:set-load-path? #f))) |
64e40dbb | 789 | |
b8300494 AK |
790 | \f |
791 | ;;; | |
792 | ;;; Boot parameters | |
793 | ;;; | |
794 | ||
795 | (define-record-type* <boot-parameters> | |
796 | boot-parameters make-boot-parameters boot-parameters? | |
797 | (label boot-parameters-label) | |
1ef8b72a CM |
798 | ;; Because we will use the 'store-device' to create the GRUB search command, |
799 | ;; the 'store-device' has slightly different semantics than 'root-device'. | |
800 | ;; The 'store-device' can be a file system uuid, a file system label, or #f, | |
801 | ;; but it cannot be a device path such as "/dev/sda3", since GRUB would not | |
802 | ;; understand that. The 'root-device', on the other hand, corresponds | |
803 | ;; exactly to the device field of the <file-system> object representing the | |
804 | ;; OS's root file system, so it might be a device path like "/dev/sda3". | |
b8300494 | 805 | (root-device boot-parameters-root-device) |
1ef8b72a CM |
806 | (store-device boot-parameters-store-device) |
807 | (store-mount-point boot-parameters-store-mount-point) | |
b8300494 | 808 | (kernel boot-parameters-kernel) |
d7b342d8 LC |
809 | (kernel-arguments boot-parameters-kernel-arguments) |
810 | (initrd boot-parameters-initrd)) | |
b8300494 AK |
811 | |
812 | (define (read-boot-parameters port) | |
813 | "Read boot parameters from PORT and return the corresponding | |
814 | <boot-parameters> object or #f if the format is unrecognized." | |
815 | (match (read port) | |
816 | (('boot-parameters ('version 0) | |
817 | ('label label) ('root-device root) | |
818 | ('kernel linux) | |
819 | rest ...) | |
820 | (boot-parameters | |
821 | (label label) | |
822 | (root-device root) | |
44d5f54e LC |
823 | |
824 | ;; In the past, we would store the directory name of the kernel instead | |
825 | ;; of the absolute file name of its image. Detect that and correct it. | |
826 | (kernel (if (string=? linux (direct-store-path linux)) | |
827 | (string-append linux "/" | |
828 | (system-linux-image-file-name)) | |
829 | linux)) | |
830 | ||
b8300494 AK |
831 | (kernel-arguments |
832 | (match (assq 'kernel-arguments rest) | |
833 | ((_ args) args) | |
d7b342d8 LC |
834 | (#f '()))) ;the old format |
835 | ||
836 | (initrd | |
837 | (match (assq 'initrd rest) | |
838 | (('initrd ('string-append directory file)) ;the old format | |
839 | (string-append directory file)) | |
840 | (('initrd (? string? file)) | |
1ef8b72a CM |
841 | file))) |
842 | ||
843 | (store-device | |
844 | (match (assq 'store rest) | |
845 | (('store ('device device) _ ...) | |
846 | device) | |
847 | (_ ;the old format | |
3382bfe9 CM |
848 | ;; Root might be a device path like "/dev/sda1", which is not a |
849 | ;; suitable GRUB device identifier. | |
850 | (if (string-prefix? "/" root) | |
851 | #f | |
852 | root)))) | |
1ef8b72a CM |
853 | |
854 | (store-mount-point | |
855 | (match (assq 'store rest) | |
856 | (('store ('device _) ('mount-point mount-point) _ ...) | |
857 | mount-point) | |
858 | (_ ;the old format | |
859 | "/"))))) | |
b8300494 AK |
860 | (x ;unsupported format |
861 | (warning (_ "unrecognized boot parameters for '~a'~%") | |
862 | system) | |
863 | #f))) | |
864 | ||
033adfe7 | 865 | ;;; system.scm ends here |