;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2018 Arun Isaac <arunisaac@systemreboot.net>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu services security-token)
  #:use-module (gnu services)
  #:use-module (gnu services shepherd)
  #:use-module (gnu packages admin)
  #:use-module (gnu packages base)
  #:use-module (gnu packages security-token)
  #:use-module (gnu system shadow)
  #:use-module (guix gexp)
  #:use-module (guix modules)
  #:use-module (guix records)
  #:use-module (ice-9 match)
  #:use-module (srfi srfi-26)
  #:export (pcscd-configuration
            pcscd-configuration?
            pcscd-configuration-pcsc-lite
            pcscd-configuration-usb-drivers
            pcscd-service-type))

;;;
;;; PC/SC Smart Card Daemon
;;;

(define-record-type* <pcscd-configuration>
  pcscd-configuration make-pcscd-configuration pcscd-configuration?
  (pcsc-lite pcscd-configuration-pcsc-lite
             (default pcsc-lite))
  (usb-drivers pcscd-configuration-usb-drivers
               (default (list ccid))))

(define pcscd-shepherd-service
  (match-lambda
    (($ <pcscd-configuration> pcsc-lite)
     (with-imported-modules (source-module-closure
                             '((gnu build shepherd)))
       (shepherd-service
        (documentation "PC/SC Smart Card Daemon")
        (provision '(pcscd))
        (requirement '(syslogd))
        (modules '((gnu build shepherd)))
        (start #~(lambda _
                   (invoke #$(file-append pcsc-lite "/sbin/pcscd"))
                   (call-with-input-file "/var/run/pcscd/pcscd.pid" read)))
        (stop #~(make-kill-destructor)))))))

(define pcscd-activation
  (match-lambda
    (($ <pcscd-configuration> pcsc-lite usb-drivers)
     (with-imported-modules (source-module-closure
                             '((guix build utils)))
       #~(begin
           (use-modules (guix build utils))
           ;; XXX: We can't use (guix utils) because it requires a
           ;; dynamically-linked Guile, hence the duplicate switch-symlinks.
           (define (switch-symlinks link target)
             (let ((pivot (string-append link ".new")))
               (symlink target pivot)
               (rename-file pivot link)))
           (mkdir-p "/var/lib")
           (switch-symlinks "/var/lib/pcsc"
                            #$(directory-union
                               "pcsc"
                               (map (cut file-append <> "/pcsc")
                                    usb-drivers))))))))

(define pcscd-service-type
  (service-type
   (name 'pcscd)
   (description
    "Run @command{pcscd}, the PC/SC smart card daemon.")
   (extensions
    (list (service-extension shepherd-root-service-type
                             (compose list pcscd-shepherd-service))
          (service-extension activation-service-type
                             pcscd-activation)))
   (default-value (pcscd-configuration))))
?id=e3f0155c41b28510f77e113ca2d37f0e7d90a2ca'>image: Do not use VM to create disk-images.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2020-05-05 20:43:21 +0200'>2020-05-05</span></td><td><a href='/guix/commit/gnu/ci.scm?id=87a40d7203a813921b3ef0805c2b46c0026d6c31'>Merge branch 'master' into core-updates</a></td><td>Marius Bakke</td></tr>
<tr><td><span title='2020-05-05 16:13:53 +0200'>2020-05-05</span></td><td><a href='/guix/commit/gnu/ci.scm?id=f19cf27c2b9ff92e2c0fd931ef7fde39c376adaa'>image: Add a new API.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2020-04-08 13:00:50 +0200'>2020-04-08</span></td><td><a href='/guix/commit/gnu/ci.scm?id=27783023993f9272ce422868d14529159c4a5218'>Merge branch 'master' into core-updates</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2020-04-07 12:31:36 +0200'>2020-04-07</span></td><td><a href='/guix/commit/gnu/ci.scm?id=8f41f192364ce0e3c3c90251e1ad89974a14f3d4'>ci: Remove "mips64el-linux-gnuabi64" from '%cross-targets'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-14 13:13:40 +0100'>2020-03-14</span></td><td><a href='/guix/commit/gnu/ci.scm?id=961d2ee2695b38503b463d055e9c7edbcc0bf307'>Merge branch 'master' into core-updates</a></td><td>Marius Bakke</td></tr>
<tr><td><span title='2020-03-13 17:33:38 +0100'>2020-03-13</span></td><td><a href='/guix/commit/gnu/ci.scm?id=f292c5019111f92b6850afdca4b59f4146b9be3b'>maint: Add 'etc/release-manifest.scm'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-10 20:50:02 +0100'>2020-03-10</span></td><td><a href='/guix/commit/gnu/ci.scm?id=50b99c90c87642f664f9c9523a6e40fc8542ddcf'>Merge branch 'master' into core-updates</a></td><td>Marius Bakke</td></tr>
<tr><td><span title='2020-03-05 23:40:24 +0100'>2020-03-05</span></td><td><a href='/guix/commit/gnu/ci.scm?id=bc8b2ffdac3f55414629ace5b1a0db32e9656c0a'>ci: Adjust 'channel-build-system' for when the source is a file name.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-05 16:33:37 +0100'>2020-03-05</span></td><td><a href='/guix/commit/gnu/ci.scm?id=dd1ee160be8ba4e211432c08e161c24901cd670e'>tests: "make check-system" no longer interns source upfront.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-03-05 16:33:37 +0100'>2020-03-05</span></td><td><a href='/guix/commit/gnu/ci.scm?id=3046e73b4c773a43ffa9ea583c0b469aaa8c5256'>ci: Move 'cross-jobs' procedure to the top level.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-02-24 15:42:05 +0100'>2020-02-24</span></td><td><a href='/guix/commit/gnu/ci.scm?id=668a519870237d3472e5724089d570458874e5b5'>ci: Don't cross build bootstrap tarballs to MinGW.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-01-31 17:06:16 +0100'>2020-01-31</span></td><td><a href='/guix/commit/gnu/ci.scm?id=2032d8473d11711b88fd3e48644c569dee32fa42'>ci: Cross-build for riscv64-linux-gnu.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-12-01 11:26:11 +0100'>2019-12-01</span></td><td><a href='/guix/commit/gnu/ci.scm?id=f71b0a0012d46bd30ead1a14ed58fd59647415e2'>ci: Make sure the Guix checkout is the one providing Cuirass proc.</a><span class='msg-avail'>...</span></td><td>Clément Lassieur</td></tr>
<tr><td><span title='2019-11-13 23:26:35 +0100'>2019-11-13</span></td><td><a href='/guix/commit/gnu/ci.scm?id=887fd835a7c90f720d36a211478012547feaead0'>tests: "make check-system" uses Guix built with (guix self).</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>