;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2013, 2014, 2015 Ludovic Courtès <ludo@gnu.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu system shadow)
  #:use-module (guix records)
  #:use-module (guix gexp)
  #:use-module (guix store)
  #:use-module (guix sets)
  #:use-module (guix ui)
  #:use-module (gnu services)
  #:use-module ((gnu system file-systems)
     </td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>refs</a><a href='/guix/log/gnu/packages/aidc.scm'>log</a><a href='/guix/tree/gnu/packages/aidc.scm?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>tree</a><a class='active' href='/guix/commit/gnu/packages/aidc.scm?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>commit</a><a href='/guix/diff/gnu/packages/aidc.scm?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/aidc.scm'>
<input type='hidden' name='id' value='acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/commit/?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>root</a>/<a href='/guix/commit/gnu?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>gnu</a>/<a href='/guix/commit/gnu/packages?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>packages</a>/<a href='/guix/commit/gnu/packages/aidc.scm?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>aidc.scm</a></div><div class='content'><div class='cgit-panel'><b>diff options</b><form method='get'><input type='hidden' name='id' value='acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'/><table><tr><td colspan='2'/></tr><tr><td class='label'>context:</td><td class='ctrl'><select name='context' onchange='this.form.submit();'><option value='1'>1</option><option value='2'>2</option><option value='3' selected='selected'>3</option><option value='4'>4</option><option value='5'>5</option><option value='6'>6</option><option value='7'>7</option><option value='8'>8</option><option value='9'>9</option><option value='10'>10</option><option value='15'>15</option><option value='20'>20</option><option value='25'>25</option><option value='30'>30</option><option value='35'>35</option><option value='40'>40</option></select></td></tr><tr><td class='label'>space:</td><td class='ctrl'><select name='ignorews' onchange='this.form.submit();'><option value='0' selected='selected'>include</option><option value='1'>ignore</option></select></td></tr><tr><td class='label'>mode:</td><td class='ctrl'><select name='dt' onchange='this.form.submit();'><option value='0' selected='selected'>unified</option><option value='1'>ssdiff</option><option value='2'>stat only</option></select></td></tr><tr><td/><td class='ctrl'><noscript><input type='submit' value='reload'/></noscript></td></tr></table></form></div><table summary='commit info' class='commit-info'>
<tr><th>author</th><td>Ricardo Wurmus &lt;rekado@elephly.net&gt;</td><td class='right'>2019-01-23 17:02:41 +0100</td></tr>
<tr><th>committer</th><td>Ricardo Wurmus &lt;rekado@elephly.net&gt;</td><td class='right'>2019-01-23 18:13:29 +0100</td></tr>
<tr><th>commit</th><td colspan='2' class='oid'><a href='/guix/commit/gnu/packages/aidc.scm?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed</a> (<a href='/guix/patch/gnu/packages/aidc.scm?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>patch</a>)</td></tr>
<tr><th>tree</th><td colspan='2' class='oid'><a href='/guix/tree/?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>b69e241e08abccbd4feb391c2523fd21a7441ed1</a> /<a href='/guix/tree/gnu/packages/aidc.scm?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>gnu/packages/aidc.scm</a></td></tr>
<tr><th>parent</th><td colspan='2' class='oid'><a href='/guix/commit/gnu/packages/aidc.scm?id=d1c4f329d102ada27586a3430257d5c1e8d93b6b'>d1c4f329d102ada27586a3430257d5c1e8d93b6b</a> (<a href='/guix/diff/gnu/packages/aidc.scm?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed&amp;id2=d1c4f329d102ada27586a3430257d5c1e8d93b6b'>diff</a>)</td></tr><tr><th>download</th><td colspan='2' class='oid'><a href='/guix/snapshot/guix-acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed.tar.gz'>guix-acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed.tar.gz</a><br/><a href='/guix/snapshot/guix-acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed.zip'>guix-acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed.zip</a><br/></td></tr></table>
<div class='commit-subject'>gnu: python-pycparser: Use INVOKE.</div><div class='commit-msg'>* gnu/packages/python-xyz.scm (python-pycparser)[arguments]: Unconditionally
return #T from "check" phase.
</div><div class='diffstat-header'><a href='/guix/diff/?id=acb75c0328eccf30a3683a76d2bfed7ee5cfa9ed'>Diffstat</a> (limited to 'gnu/packages/aidc.scm')</div><table summary='diffstat' class='diffstat'></table><div class='diffstat-summary'>0 files changed, 0 insertions, 0 deletions</div><table summary='diff' class='diff'><tr><td></td></tr></table></div> <!-- class=content -->
                         <div class=footer>generated by
                             <a href="https://git.zx2c4.com/cgit/about/">
                                 cgit
                             </a>
                         </div>
                        </div> <!-- id=cgit -->
</body>
</html>
        (xdefaults (plain-file "Xdefaults" "\
XTerm*utf8: always
XTerm*metaSendsEscape: true\n"))
        (gdbinit   (plain-file "gdbinit" "\
# Tell GDB where to look for separate debugging files.
set debug-file-directory ~/.guix-profile/lib/debug\n")))
    `((".bash_profile" ,profile)
      (".bashrc" ,bashrc)
      (".zlogin" ,zlogin)
      (".Xdefaults" ,xdefaults)
      (".guile-wm" ,guile-wm)
      (".gdbinit" ,gdbinit))))

(define (skeleton-directory skeletons)
  "Return a directory containing SKELETONS, a list of name/derivation tuples."
  (computed-file "skel"
                 #~(begin
                     (use-modules (ice-9 match))

                     (mkdir #$output)
                     (chdir #$output)

                     ;; Note: copy the skeletons instead of symlinking
                     ;; them like 'file-union' does, because 'useradd'
                     ;; would just copy the symlinks as is.
                     (for-each (match-lambda
                                 ((target source)
                                  (copy-file source target)))
                               '#$skeletons)
                     #t)))

(define (assert-valid-users/groups users groups)
  "Raise an error if USERS refer to groups not listed in GROUPS."
  (let ((groups (list->set (map user-group-name groups))))
    (define (validate-supplementary-group user group)
      (unless (set-contains? groups group)
        (raise (condition
                (&message
                 (message
                  (format #f (_ "supplementary group '~a' \
of user '~a' is undeclared")
                          group
                          (user-account-name user))))))))

    (for-each (lambda (user)
                (unless (set-contains? groups (user-account-group user))
                  (raise (condition
                          (&message
                           (message
                            (format #f (_ "primary group '~a' \
of user '~a' is undeclared")
                                    (user-account-group user)
                                    (user-account-name user)))))))

                (for-each (cut validate-supplementary-group user <>)
                          (user-account-supplementary-groups user)))
              users)))


;;;
;;; Service.
;;;

(define (user-group->gexp group)
  "Turn GROUP, a <user-group> object, into a list-valued gexp suitable for
'active-groups'."
  #~(list #$(user-group-name group)
          #$(user-group-password group)
          #$(user-group-id group)
          #$(user-group-system? group)))

(define (user-account->gexp account)
  "Turn ACCOUNT, a <user-account> object, into a list-valued gexp suitable for
'activate-users'."
  #~`(#$(user-account-name account)
      #$(user-account-uid account)
      #$(user-account-group account)
      #$(user-account-supplementary-groups account)
      #$(user-account-comment account)
      #$(user-account-home-directory account)
      ,#$(user-account-shell account)             ; this one is a gexp
      #$(user-account-password account)
      #$(user-account-system? account)))

(define (account-activation accounts+groups)
  "Return a gexp that activates ACCOUNTS+GROUPS, a list of <user-account> and
<user-group> objects.  Raise an error if a user account refers to a undefined
group."
  (define accounts
    (filter user-account? accounts+groups))

  (define user-specs
    (map user-account->gexp accounts))

  (define groups
    (filter user-group? accounts+groups))

  (define group-specs
    (map user-group->gexp groups))

  (assert-valid-users/groups accounts groups)

  ;; Add users and user groups.
  #~(begin
      (setenv "PATH"
              (string-append #$(@ (gnu packages admin) shadow) "/sbin"))
      (activate-users+groups (list #$@user-specs)
                             (list #$@group-specs))))

(define (shells-file shells)
  "Return a file-like object that builds a shell list for use as /etc/shells
based on SHELLS.  /etc/shells is used by xterm, polkit, and other programs."
  (computed-file "shells"
                 #~(begin
                     (use-modules (srfi srfi-1))

                     (define shells
                       (delete-duplicates (list #$@shells)))

                     (call-with-output-file #$output
                       (lambda (port)
                         (display "\
/bin/sh
/run/current-system/profile/bin/sh
/run/current-system/profile/bin/bash\n" port)
                         (for-each (lambda (shell)
                                     (display shell port)
                                     (newline port))
                                   shells))))))
(define (etc-files arguments)
  "Filter out among ARGUMENTS things corresponding to skeletons, and return
the /etc/skel directory for those."
  (let ((skels (filter pair? arguments))
        (users (filter user-account? arguments)))
    `(("skel" ,(skeleton-directory skels))
      ("shells" ,(shells-file (map user-account-shell users))))))

(define account-service-type
  (service-type (name 'account)

                ;; Concatenate <user-account>, <user-group>, and skeleton
                ;; lists.
                (compose concatenate)
                (extend append)

                (extensions
                 (list (service-extension activation-service-type
                                          account-activation)
                       (service-extension etc-service-type
                                          etc-files)))))

(define (account-service accounts+groups skeletons)
  "Return a <service> that takes care of user accounts and user groups, with
ACCOUNTS+GROUPS as its initial list of accounts and groups."
  (service account-service-type
           (append skeletons accounts+groups)))

;;; shadow.scm ends here