;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2014, 2015 Sou Bunnbu <iyzsong@gmail.com>
;;; Copyright © 2016 Ricardo Wurmus <rekado@elephly.net>
;;; Copyright © 2016, 2017, 2018 Efraim Flashner <efraim@flashner.co.il>
;;; Copyright © 2017, 2018, 2019 Rutger Helling <rhelling@mykolab.com>
;;; Copyright © 2017 Nicolas Goaziou <mail@nicolasgoaziou.fr>
;;; Copyright © 2018, 2019 Tobias Geerinckx-Rice <me@tobias.gr>
;;; Copyright © 2019 Pierre Neidhardt <mail@ambrevar.xyz>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;</td></tr></table>
<table class='tabs'><tr><td>
<a class='active' href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=f46ae49b13b78e054e402db778a86ccfafdf7eab'>refs</a><a href='/guix/log/'>log</a><a href='/guix/tree/?id=f46ae49b13b78e054e402db778a86ccfafdf7eab'>tree</a><a href='/guix/commit/?id=f46ae49b13b78e054e402db778a86ccfafdf7eab'>commit</a><a href='/guix/diff/?id=f46ae49b13b78e054e402db778a86ccfafdf7eab'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/'>
<input type='hidden' name='id' value='f46ae49b13b78e054e402db778a86ccfafdf7eab'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='content'><div id='summary'><pre>
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2019, 2020, 2021, 2022 Christopher Baines &lt;mail@cbaines.net&gt;
;;; Copyright © 2024 Andrew Tropin &lt;andrew@trop.in&gt;
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify
;;; it under the terms of the GNU General Public License as published by
;;; the Free Software Foundation, either version 3 of the License, or
;;; (at your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful,
;;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see &lt;http://www.gnu.org/licenses/&gt;.

(define-module (gnu services guix)
  #:use-module (srfi srfi-1)
  #:use-module (ice-9 match)
  #:use-module (guix gexp)
  #:use-module (guix records)
  #:use-module (guix packages)
  #:use-module ((gnu packages base)
                #:select (libc-utf8-locales-for-target))
  #:use-module (gnu packages admin)
  #:use-module (gnu packages databases)
  #:use-module (gnu packages web)
  #:use-module (gnu packages guile)
  #:use-module (gnu packages guile-xyz)
  #:use-module (gnu packages package-management)
  #:use-module (gnu services)
  #:use-module (gnu services base)
  #:use-module (gnu services admin)
  #:use-module (gnu services shepherd)
  #:use-module (gnu services getmail)
  #:use-module (gnu system shadow)
  #:export (guix-build-coordinator-configuration
            guix-build-coordinator-configuration?
            guix-build-coordinator-configuration-package
            guix-build-coordinator-configuration-user
            guix-build-coordinator-configuration-group
            guix-build-coordinator-configuration-datastore-uri-string
            guix-build-coordinator-configuration-agent-communication-uri-string
            guix-build-coordinator-configuration-client-communication-uri-string
            guix-build-coordinator-configuration-allocation-strategy
            guix-build-coordinator-configuration-hooks
            guix-build-coordinator-configuration-parallel-hooks
            guix-build-coordinator-configuration-guile
            guix-build-coordinator-configuration-extra-environment-variables

            guix-build-coordinator-service-type

            guix-build-coordinator-agent-configuration
            guix-build-coordinator-agent-configuration?
            guix-build-coordinator-agent-configuration-package
            guix-build-coordinator-agent-configuration-user
            guix-build-coordinator-agent-configuration-coordinator
            guix-build-coordinator-agent-configuration-authentication
            guix-build-coordinator-agent-configuration-systems
            guix-build-coordinator-agent-configuration-max-parallel-builds
            guix-build-coordinator-agent-configuration-max-parallel-uploads
            guix-build-coordinator-agent-configuration-max-allocated-builds
            guix-build-coordinator-agent-configuration-max-1min-load-average
            guix-build-coordinator-agent-configuration-derivation-substitute-urls
            guix-build-coordinator-agent-configuration-non-derivation-substitute-urls
            guix-build-coordinator-agent-configuration-extra-options

            guix-build-coordinator-agent-password-auth
            guix-build-coordinator-agent-password-auth?
            guix-build-coordinator-agent-password-auth-uuid
            guix-build-coordinator-agent-password-auth-password

            guix-build-coordinator-agent-password-file-auth
            guix-build-coordinator-agent-password-file-auth?
            guix-build-coordinator-agent-password-file-auth-uuid
            guix-build-coordinator-agent-password-file-auth-password-file

            guix-build-coordinator-agent-dynamic-auth
            guix-build-coordinator-agent-dynamic-auth?
            guix-build-coordinator-agent-dynamic-auth-agent-name
            guix-build-coordinator-agent-dynamic-auth-token

            guix-build-coordinator-agent-dynamic-auth-with-file
            guix-build-coordinator-agent-dynamic-auth-with-file?
            guix-build-coordinator-agent-dynamic-auth-with-file-agent-name
            guix-build-coordinator-agent-dynamic-auth-with-file-token-file

            guix-build-coordinator-agent-service-type

            &lt;guix-data-service-configuration&gt;
            guix-data-service-configuration
            guix-data-service-configuration?
            guix-data-service-package
            guix-data-service-user
            guix-data-service-group
            guix-data-service-port
            guix-data-service-host
            guix-data-service-getmail-idle-mailboxes
            guix-data-service-commits-getmail-retriever-configuration
            guix-data-service-configuration-git-repositories
            guix-data-service-configuration-build-servers

            guix-data-service-type

            guix-home-service-type

            nar-herder-service-type
            nar-herder-configuration
            nar-herder-configuration?
            nar-herder-configuration-package
            nar-herder-configuration-user
            nar-herder-configuration-group
            nar-herder-configuration-mirror
            nar-herder-configuration-database
            nar-herder-configuration-database-dump
            nar-herder-configuration-host
            nar-herder-configuration-port
            nar-herder-configuration-storage
            nar-herder-configuration-storage-limit
            nar-herder-configuration-storage-nar-removal-criteria
            nar-herder-configuration-log-level
            nar-herder-configuration-cached-compressions
            nar-herder-configuration-cached-compression-min-uses
            nar-herder-configuration-cached-compression-workers
            nar-herder-configuration-cached-compression-nar-source
            nar-herder-configuration-extra-environment-variables

            nar-herder-cached-compression-configuration
            nar-herder-cached-compression-configuration?
            nar-herder-cached-compression-configuration-type
            nar-herder-cached-compression-configuration-level
            nar-herder-cached-compression-configuration-directory
            nar-herder-cached-compression-configuration-directory-max-size

            bffe-configuration
            bffe-configuration?
            bffe-configuration-package
            bffe-configuration-user
            bffe-configuration-group
            bffe-configuration-arguments
            bffe-configuration-extra-environment-variables

            bffe-service-type))

;;;; Commentary:
;;;
;;; Services specifically related to GNU Guix.
;;;
;;;; Code:

(define-record-type* &lt;guix-build-coordinator-configuration&gt;
  guix-build-coordinator-configuration make-guix-build-coordinator-configuration
  guix-build-coordinator-configuration?
  (package                         guix-build-coordinator-configuration-package
                                   (default guix-build-coordinator))
  (user                            guix-build-coordinator-configuration-user
                                   (default &quot;guix-build-coordinator&quot;))
  (group                           guix-build-coordinator-configuration-group
                                   (default &quot;guix-build-coordinator&quot;))
  (database-uri-string
   guix-build-coordinator-configuration-datastore-uri-string
   (default &quot;sqlite:///var/lib/guix-build-coordinator/guix_build_coordinator.db&quot;))
  (agent-communication-uri-string
   guix-build-coordinator-configuration-agent-communication-uri-string
   (default &quot;http://0.0.0.0:8745&quot;))
  (client-communication-uri-string
   guix-build-coordinator-configuration-client-communication-uri-string
   (default &quot;http://127.0.0.1:8746&quot;))
  (allocation-strategy
   guix-build-coordinator-configuration-allocation-strategy
   (default #~basic-build-allocation-strategy))
  (hooks                           guix-build-coordinator-configuration-hooks
                                   (default &apos;()))
  (parallel-hooks                  guix-build-coordinator-configuration-parallel-hooks
                                   (default &apos;()))
  (guile                           guix-build-coordinator-configuration-guile
                                   (default guile-next))
  (extra-environment-variables
   guix-build-coordinator-configuration-extra-environment-variables
   (default &apos;())))

(define-record-type* &lt;guix-build-coordinator-agent-configuration&gt;
  guix-build-coordinator-agent-configuration
  make-guix-build-coordinator-agent-configuration
  guix-build-coordinator-agent-configuration?
  (package             guix-build-coordinator-agent-configuration-package
                       (default guix-build-coordinator/agent-only))
  (user                guix-build-coordinator-agent-configuration-user
                       (default &quot;guix-build-coordinator-agent&quot;))
  (coordinator         guix-build-coordinator-agent-configuration-coordinator
                       (default &quot;http://localhost:8745&quot;))
  (authentication      guix-build-coordinator-agent-configuration-authentication)
  (systems             guix-build-coordinator-agent-configuration-systems
                       (default #f))
  (max-parallel-builds
   guix-build-coordinator-agent-configuration-max-parallel-builds
   (default #f))
  (max-parallel-uploads
   guix-build-coordinator-agent-configuration-max-parallel-uploads
   (default #f))
  (max-allocated-builds
   guix-build-coordinator-agent-configuration-max-allocated-builds
   (default #f))
  (max-1min-load-average
   guix-build-coordinator-agent-configuration-max-1min-load-average
   (default #f))
  (derivation-substitute-urls
   guix-build-coordinator-agent-configuration-derivation-substitute-urls
   (default #f))
  (non-derivation-substitute-urls
   guix-build-coordinator-agent-configuration-non-derivation-substitute-urls
   (default #f))
  (extra-options
   guix-build-coordinator-agent-configuration-extra-options
   (default &apos;())))

(define-record-type* &lt;guix-build-coordinator-agent-password-auth&gt;
  guix-build-coordinator-agent-password-auth
  make-guix-build-coordinator-agent-password-auth
  guix-build-coordinator-agent-password-auth?
  (uuid                guix-build-coordinator-agent-password-auth-uuid)
  (password            guix-build-coordinator-agent-password-auth-password))

(define-record-type* &lt;guix-build-coordinator-agent-password-file-auth&gt;
  guix-build-coordinator-agent-password-file-auth
  make-guix-build-coordinator-agent-password-file-auth
  guix-build-coordinator-agent-password-file-auth?
  (uuid                guix-build-coordinator-agent-password-file-auth-uuid)
  (password-file
   guix-build-coordinator-agent-password-file-auth-password-file))

(define-record-type* &lt;guix-build-coordinator-agent-dynamic-auth&gt;
  guix-build-coordinator-agent-dynamic-auth
  make-guix-build-coordinator-agent-dynamic-auth
  guix-build-coordinator-agent-dynamic-auth?
  (agent-name          guix-build-coordinator-agent-dynamic-auth-agent-name)
  (token               guix-build-coordinator-agent-dynamic-auth-token))

(define-record-type* &lt;guix-build-coordinator-agent-dynamic-auth-with-file&gt;
  guix-build-coordinator-agent-dynamic-auth-with-file
  make-guix-build-coordinator-agent-dynamic-auth-with-file
  guix-build-coordinator-agent-dynamic-auth-with-file?
  (agent-name      guix-build-coordinator-agent-dynamic-auth-with-file-agent-name)
  (token-file      guix-build-coordinator-agent-dynamic-auth-with-file-token-file))

(define* (make-guix-build-coordinator-start-script database-uri-string
                                                   allocation-strategy
                                                   pid-file
                                                   guix-build-coordinator-package
                                                   #:key
                                                   agent-communication-uri-string
                                                   client-communication-uri-string
                                                   (hooks &apos;())
                                                   (parallel-hooks &apos;())
                                                   (guile guile-next))
  (program-file
   &quot;start-guix-build-coordinator&quot;
   (with-extensions (cons guix-build-coordinator-package
                          ;; This is a poorly constructed Guile load path,
                          ;; since it contains things that aren&apos;t Guile
                          ;; libraries, but it means that the Guile libraries
                          ;; needed for the Guix Build Coordinator don&apos;t need
                          ;; to be individually specified here.
                          (append
                           (map second (package-inputs
                                        guix-build-coordinator-package))
                           (map second (package-propagated-inputs
                                        guix-build-coordinator-package))))
     #~(begin
         (use-modules (srfi srfi-1)
                      (ice-9 match)
                      (web uri)
                      (prometheus)
                      (guix-build-coordinator hooks)
                      (guix-build-coordinator datastore)
                      (guix-build-coordinator build-allocator)
                      (guix-build-coordinator coordinator))

         (setvbuf (current-output-port) &apos;line)
         (setvbuf (current-error-port) &apos;line)

         (simple-format #t &quot;starting the guix-build-coordinator:\n  ~A\n&quot;
                        (current-filename))
         (let* ((hooks
                 (list #$@(map (match-lambda
                                 ((name . hook-gexp)
                                  #~(cons &apos;#$name #$hook-gexp)))
                               hooks)))
                (hooks-with-defaults
                 `(,@hooks
                   ,@(remove (match-lambda
                               ((name . _) (assq-ref hooks name)))
                             %default-hooks)))
                (build-coordinator (make-build-coordinator
                                    #:database-uri-string #$database-uri-string
                                    #:hooks hooks-with-defaults
                                    #:allocation-strategy #$allocation-strategy
                                    #:timestamp-log-output? #f)))

           (run-coordinator-service
            build-coordinator
            #:update-datastore? #t
            #:pid-file #$pid-file
            #:agent-communication-uri (string-&gt;uri
                                       #$agent-communication-uri-string)
            #:client-communication-uri (string-&gt;uri
                                        #$client-communication-uri-string)
            #:parallel-hooks (list #$@(map (match-lambda
                                             ((name . val)
                                              #~(cons &apos;#$name #$val)))
                                           parallel-hooks))))))
   #:guile guile))

(define (guix-build-coordinator-shepherd-services config)
  (match-record config &lt;guix-build-coordinator-configuration&gt;
    (package user group database-uri-string
             agent-communication-uri-string
             client-communication-uri-string
             allocation-strategy
             hooks
             parallel-hooks
             guile
             extra-environment-variables)
    (list
     (shepherd-service
      (documentation &quot;Guix Build Coordinator&quot;)
      (provision &apos;(guix-build-coordinator))
      (requirement &apos;(networking))
      (start #~(lambda args
                 (parameterize ((%current-logfile-date-format &quot;&quot;))
                   (apply
                    (make-forkexec-constructor
                     (list #$(make-guix-build-coordinator-start-script
                              database-uri-string
                              allocation-strategy
                              &quot;/var/run/guix-build-coordinator/pid&quot;
                              package
                              #:agent-communication-uri-string
                              agent-communication-uri-string
                              #:client-communication-uri-string
                              client-communication-uri-string
                              #:hooks hooks
                              #:parallel-hooks parallel-hooks
                              #:guile guile))
                     #:user #$user
                     #:group #$group
                     #:directory &quot;/var/lib/guix-build-coordinator&quot;
                     #:pid-file &quot;/var/run/guix-build-coordinator/pid&quot;
                     ;; Allow time for migrations to run
                     #:pid-file-timeout 60
                     #:environment-variables
                     `(&quot;LC_ALL=en_US.utf8&quot;
                       &quot;PATH=/run/current-system/profile/bin&quot; ; for hooks
                       #$@extra-environment-variables)
                     #:log-file &quot;/var/log/guix-build-coordinator/coordinator.log&quot;)
                    args))))
      (stop #~(make-kill-destructor))
      (modules
       `((shepherd comm)
         ,@%default-modules))))))

(define (guix-build-coordinator-activation config)
  #~(begin
      (use-modules (guix build utils))

      (define %user
        (getpw #$(guix-build-coordinator-configuration-user
                  config)))

      (chmod &quot;/var/lib/guix-build-coordinator&quot; #o755)

      (mkdir-p &quot;/var/log/guix-build-coordinator&quot;)

      ;; Allow writing the PID file
      (mkdir-p &quot;/var/run/guix-build-coordinator&quot;)
      (chown &quot;/var/run/guix-build-coordinator&quot;
             (passwd:uid %user)
             (passwd:gid %user))))

(define (guix-build-coordinator-account config)
  (match-record config &lt;guix-build-coordinator-configuration&gt;
    (user group)
    (list (user-group
           (name group)
           (system? #t))
          (user-account
           (name user)
           (group group)
           (system? #t)
           (comment &quot;Guix Build Coordinator user&quot;)
           (home-directory &quot;/var/lib/guix-build-coordinator&quot;)
           (shell (file-append shadow &quot;/sbin/nologin&quot;))))))

(define guix-build-coordinator-service-type
  (service-type
   (name &apos;guix-build-coordinator)
   (extensions
    (list
     (service-extension shepherd-root-service-type
                        guix-build-coordinator-shepherd-services)
     (service-extension activation-service-type
                        guix-build-coordinator-activation)
     (service-extension account-service-type
                        guix-build-coordinator-account)))
   (default-value
     (guix-build-coordinator-configuration))
   (description
    &quot;Run an instance of the Guix Build Coordinator.&quot;)))

(define (guix-build-coordinator-agent-shepherd-services config)
  (match-record config &lt;guix-build-coordinator-agent-configuration&gt;
    (package user coordinator authentication
             max-parallel-builds max-parallel-uploads
             max-allocated-builds max-1min-load-average
             derivation-substitute-urls non-derivation-substitute-urls
             extra-options
             systems)
    (list
     (shepherd-service
      (documentation &quot;Guix Build Coordinator Agent&quot;)
      (provision &apos;(guix-build-coordinator-agent))
      (requirement &apos;(networking user-processes))
      (start
       #~(lambda _
           (parameterize ((%current-logfile-date-format &quot;&quot;))
             (fork+exec-command
              (list #$(file-append package &quot;/bin/guix-build-coordinator-agent&quot;)
                    #$(string-append &quot;--coordinator=&quot; coordinator)
                    &quot;--timestamp-log-output=false&quot;
                    #$@(match authentication
                         (($ &lt;guix-build-coordinator-agent-password-auth&gt;
                             uuid password)
                          #~(#$(string-append &quot;--uuid=&quot; uuid)
                             #$(string-append &quot;--password=&quot; password)))
                         (($ &lt;guix-build-coordinator-agent-password-file-auth&gt;
                             uuid password-file)
                          #~(#$(string-append &quot;--uuid=&quot; uuid)
                             #$(string-append &quot;--password-file=&quot;
                                              password-file)))
                         (($ &lt;guix-build-coordinator-agent-dynamic-auth&gt;
                             agent-name token)
                          #~(#$(string-append &quot;--name=&quot; agent-name)
                             #$(string-append &quot;--dynamic-auth-token=&quot; token)))
                         (($
                           &lt;guix-build-coordinator-agent-dynamic-auth-with-file&gt;
                           agent-name token-file)
                          #~(#$(string-append &quot;--name=&quot; agent-name)
                             #$(string-append &quot;--dynamic-auth-token-file=&quot;
                                              token-file))))
                    #$@(if max-parallel-builds
                           #~(#$(simple-format #f &quot;--max-parallel-builds=~A&quot;
                                               max-parallel-builds))
                           #~())
                    #$@(if max-parallel-uploads
                           #~(#$(simple-format #f &quot;--max-parallel-uploads=~A&quot;
                                               max-parallel-uploads))
                           #~())
                    #$@(if max-allocated-builds
                           #~(#$(simple-format #f &quot;--max-allocated-builds=~A&quot;
                                               max-allocated-builds))
                           #~())
                    #$@(if max-1min-load-average
                           #~(#$(simple-format #f &quot;--max-1min-load-average=~A&quot;
                                               max-1min-load-average))
                           #~())
                    #$@(if derivation-substitute-urls
                           #~(#$(string-append
                                 &quot;--derivation-substitute-urls=&quot;
                                 (string-join derivation-substitute-urls &quot; &quot;)))
                           #~())
                    #$@(if non-derivation-substitute-urls
                           #~(#$(string-append
                                 &quot;--non-derivation-substitute-urls=&quot;
                                 (string-join non-derivation-substitute-urls &quot; &quot;)))
                           #~())
                    #$@extra-options
                    #$@(map (lambda (system)
                              (string-append &quot;--system=&quot; system))
                            (or systems &apos;())))
              #:user #$user
              #:environment-variables
              `(;; XDG_CACHE_HOME is used by Guix when caching narinfo files
                &quot;XDG_CACHE_HOME=/var/cache/guix-build-coordinator-agent&quot;
                &quot;LC_ALL=en_US.utf8&quot;)
              #:log-file &quot;/var/log/guix-build-coordinator/agent.log&quot;))))
      (stop #~(make-kill-destructor))
      (modules
       `((shepherd comm)
         ,@%default-modules))))))

(define (guix-build-coordinator-agent-activation config)
  #~(begin
      (use-modules (guix build utils))

      (define %user
        (getpw #$(guix-build-coordinator-agent-configuration-user
                  config)))

      (mkdir-p &quot;/var/log/guix-build-coordinator&quot;)

      ;; Create a cache directory for storing narinfo files if downloaded
      (mkdir-p &quot;/var/cache/guix-build-coordinator-agent&quot;)
      (chown &quot;/var/cache/guix-build-coordinator-agent&quot;
             (passwd:uid %user)
             (passwd:gid %user))))

(define (guix-build-coordinator-agent-account config)
  (list (user-account
         (name (guix-build-coordinator-agent-configuration-user config))
         (group &quot;nogroup&quot;)
         (system? #t)
         (comment &quot;Guix Build Coordinator agent user&quot;)
         (home-directory &quot;/var/empty&quot;)
         (shell (file-append shadow &quot;/sbin/nologin&quot;)))))

(define guix-build-coordinator-agent-service-type
  (service-type
   (name &apos;guix-build-coordinator-agent)
   (extensions
    (list
     (service-extension shepherd-root-service-type
                        guix-build-coordinator-agent-shepherd-services)
     (service-extension activation-service-type
                        guix-build-coordinator-agent-activation)
     (service-extension account-service-type
                        guix-build-coordinator-agent-account)))
   (description
    &quot;Run a Guix Build Coordinator agent.&quot;)))


;;;
;;; Guix Data Service
;;;

(define-record-type* &lt;guix-data-service-configuration&gt;
  guix-data-service-configuration make-guix-data-service-configuration
  guix-data-service-configuration?
  (package          guix-data-service-package
                    (default guix-data-service))
  (user             guix-data-service-configuration-user
                    (default &quot;guix-data-service&quot;))
  (group            guix-data-service-configuration-group
                    (default &quot;guix-data-service&quot;))
  (port             guix-data-service-port
                    (default 8765))
  (host             guix-data-service-host
                    (default &quot;127.0.0.1&quot;))
  (getmail-idle-mailboxes
   guix-data-service-getmail-idle-mailboxes
   (default #f))
  (commits-getmail-retriever-configuration
   guix-data-service-commits-getmail-retriever-configuration
   (default #f))
  (extra-options    guix-data-service-extra-options
                    (default &apos;()))
  (extra-process-jobs-options
   guix-data-service-extra-process-jobs-options
   (default &apos;()))
  (git-repositories guix-data-service-configuration-git-repositories
                    (default #f))
  (build-servers    guix-data-service-configuration-build-servers
                    (default #f)))

(define (guix-data-service-profile-packages config)
  &quot;Return the guix-data-service package, this will populate the
ca-certificates.crt file in the sys