;;; GNU Guix --- Functional package management for GNU ;;; Copyright © 2014, 2015, 2016, 2017, 2018 Ludovic Courtès ;;; ;;; This file is part of GNU Guix. ;;; ;;; GNU Guix is free software; you can redistribute it and/or modify it ;;; under the terms of the GNU General Public License as published by ;;; the Free Software Foundation; either version 3 of the License, or (at ;;; your option) any later version. ;;; ;;; GNU Guix is distributed in the hope that it will be useful, but ;;; WITHOUT ANY WARRANTY; without even the implied warranty of ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ;;; GNU General Public License for more details. ;;; ;;; You should have received a copy of the GNU General Public License ;;; along with GNU Guix. If not, see . ;;; ;;; Check whether important binaries are available. ;;; (use-modules (guix store) (guix grafts) (guix packages) (guix derivations) (guix ui) (gnu packages commencement) (ice-9 match) (srfi srfi-1) (srfi srfi-26)) (define (final-inputs store system) "Return the list of outputs directories of the final inputs for SYSTEM." (append-map (match-lambda ((or (name package) (name package _)) (let ((drv (package-derivation store package system))) ;; Libc's 'debug' output refers to gcc-cross-boot0, but it's ;; hard to avoid, so we tolerate it. This should be the ;; only exception. Likewise, 'bash:include' depends on ;; bootstrap-binaries via its 'Makefile.inc' (FIXME). (filter-map (match-lambda (("debug" . directory) (if (string=? "glibc" (package-name package)) #f directory)) (("include" . directory) (if (string=? "bash" (package-name package)) #f directory)) ((_ . directory) directory)) (derivation->output-paths drv))))) %final-inputs)) (define (assert-valid-substitute substitute) "Make sure SUBSTITUTE does not refer to any bootstrap inputs, and bail out if it does." (let ((references (substitutable-references substitute))) (when (any (cut string-contains <> "boot") references) (leave (G_ "'~a' refers to bootstrap inputs: ~s~%") (substitutable-path substitute) references)))) (define (test-final-inputs store system) "Check whether the final inputs for SYSTEM are clean---i.e., they don't refer to the bootstrap tools." (format #t "checking final inputs for '~a'...~%" system) (let* ((inputs (final-inputs store system)) (available (substitutable-path-info store inputs))) (for-each (lambda (dir) (unless (find (lambda (substitute) (string=? (substitutable-path substitute) dir)) available) (leave (G_ "~a (system: ~a) has no substitute~%") dir system))) inputs) (for-each assert-valid-substitute available))) ;; Entry point. (with-store store (parameterize ((%graft? #f)) (set-build-options store #:use-substitutes? #t) (for-each (cut test-final-inputs store <>) %cuirass-supported-systems))) 9-05-09 12:11:36 +0200'>2019-05-09services: Log-in services now require "pam_loginuid"....Fixes <https://bugs.gnu.org/35553>. Reported by Bruno Haible <bruno@clisp.org>. * gnu/services/base.scm (login-pam-service): Pass #:login-uid? #t to 'unix-pam-service'. * gnu/services/ssh.scm (lsh-pam-services, openssh-pam-services): Likewise. * gnu/services/xorg.scm (slim-pam-service): Likewise. (gdm-pam-service): Likewise for "gdm-autologin" and "gdm-password". * gnu/tests/base.scm (run-basic-test)["getlogin on tty1"]: New test. * gnu/tests/ssh.scm (run-ssh-test): Add #:test-getlogin? parameter. ["getlogin"]: New test. (%test-dropbear): Pass #:test-getlogin? #f. Ludovic Courtès 2019-04-07services: dropbear: Add default value....* gnu/services/ssh.scm (dropbear-service-type)[default-value]: New field. Ludovic Courtès 2019-03-04services: Use 'file-append' for user account shells....* gnu/services/cuirass.scm (cuirass-account): Use 'file-append' instead of #~(string-append #$shadow "/sbin/nologin"). * gnu/services/monitoring.scm (zabbix-server-account): Likewise. (zabbix-agent-account): Likewise. * gnu/services/rsync.scm (rsync-account): Likewise. * gnu/services/ssh.scm (%openssh-accounts): Likewise. Ludovic Courtès 2019-01-17services: openssh: Add escape hatch....* gnu/services/ssh.scm (<openssh-configuration>)[extra-content]: New field. * doc/guix.texi (Networking Services): Document it. Ricardo Wurmus 2018-11-26services: openssh: Install OpenSSH in the system profile....This ensures one can scp to or from the GuixSD machine that uses the service. * gnu/services/ssh.scm (openssh-service-type)[extensions]: Add PROFILE-SERVICE-TYPE extension. * gnu/system/examples/bare-bones.tmpl <packages>: Remove OPENSSH. * doc/guix.texi (Using the Configuration System): Adjust accordingly. Ludovic Courtès 2018-08-28services: openssh: Add 'log-level' field....* gnu/services/ssh.scm (<openssh-configuration>)[log-level]: New field. (openssh-config-file): Honor it. * doc/guix.texi (Networking Services): Document it. Ludovic Courtès