;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2017 Sou Bunnbu <iyzsong@member.fsf.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu services sysctl)
  #:use-module (gnu services)
  #:use-module (gnu services shepherd)
  #:use-module (gnu packages linux)
  #:use-module (guix gexp)
  #:use-module (guix records)
  #:use-module (srfi srfi-1)
  #:use-module (ice-9 match)
  #:export (sysctl-configuration
            sysctl-configuration-sysctl
            sysctl-configuration-settings
            sysctl-service-type
            %default-sysctl-settings))


;;;
;;; System Control Service.
;;;

(define %default-sysctl-settings
  ;; Default kernel parameters enabled with sysctl.
  '(("fs.protected_hardlinks" . "1")
    ("fs.protected_symlinks" . "1")))

(define-record-type* <sysctl-configuration>
  sysctl-configuration make-sysctl-configuration
  sysctl-configuration?
  (sysctl   sysctl-configuration-sysctl    ; path of the 'sysctl' command
            (default (file-append procps "/sbin/sysctl")))
  (settings sysctl-configuration-settings  ; alist of string pairs
            (default %default-sysctl-settings)))

(define (sysctl-configuration-settings->sysctl.conf settings)
  "Return a file for @command{sysctl} to set kernel parameters as specified by
@var{settings}."
  (apply mixed-text-file "sysctl.conf"
         (append-map (match-lambda
                       ((key . value)
                        (list key "=" value "\n")))
                     settings)))

(define sysctl-shepherd-service
  (match-lambda
    (($ <sysctl-configuration> sysctl settings)
     (let ((sysctl.conf
            (sysctl-configuration-settings->sysctl.conf settings)))
       (shepherd-service
        (documentation "Configure kernel parameters at boot.")
        (provision '(sysctl))
        (start #~(lambda _
                   (zero? (system* #$sysctl "--load" #$sysctl.conf))))
        (one-shot? #t))))))

(define sysctl-service-type
  (service-type
   (name 'sysctl)
   (extensions
    (list (service-extension shepherd-root-service-type
                             (compose list sysctl-shepherd-service))))
   (compose concatenate)
   (extend (lambda (config settings)
             (sysctl-configuration
              (inherit config)
              (settings (append (sysctl-configuration-settings config)
                                settings)))))
   (default-value (sysctl-configuration))))
wiki/.DS_Store

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Pavel Shlyak</td></tr>
<tr><td><span title='2021-10-16 01:44:34 -0400'>2021-10-16</span></td><td><a href='/guix/commit/.gitignore?id=066b1b8f781c7739f8056b81e20adf0b979614bc'>.gitignore: Ignore more autotools directories.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .gitignore: Add pattern to ignore ".am[0-9]*/".

Signed-off-by: Maxim Cournoyer &lt;maxim.cournoyer@gmail.com&gt;
</span></span></td><td>Sarah Morgensen</td></tr>
<tr><td><span title='2021-10-16 01:44:30 -0400'>2021-10-16</span></td><td><a href='/guix/commit/.gitignore?id=a599fcd4b09f3df3d6be66b4e64512e482697a96'>.gitignore: Ignore more temporary test directories.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .gitignore: Add pattern to ignore "/t-*/".

Signed-off-by: Maxim Cournoyer &lt;maxim.cournoyer@gmail.com&gt;
</span></span></td><td>Sarah Morgensen</td></tr>
<tr><td><span title='2021-09-20 14:18:21 +0000'>2021-09-20</span></td><td><a href='/guix/commit/.gitignore?id=5c4fd77097e2cecfd4780e099af7954f86779fe1'>etc: Add systemd files for running ‘guix gc’ periodically</a><span class='msg-avail'>...<span class='msg-tooltip'>* etc/guix-gc.service.in: New file.
* etc/guix-gc.timer: Likewise.
* .gitignore: Ignore generated ‘guix-gc.service’.
* nix/local.mk (nodist_systemdservice_DATA): Add ‘guix-gc.service’ and
‘guix-gc.timer’.
(EXTRA_DIST): Add ‘guix-gc.service.in’ and ‘guix-gc.timer’.
* doc/guix.texi (Binary Installation): Mention the new systemd files.

Signed-off-by: Mathieu Othacehe &lt;othacehe@gnu.org&gt;
</span></span></td><td>Thiago Jung Bauermann</td></tr>
<tr><td><span title='2021-05-10 22:33:08 -0400'>2021-05-10</span></td><td><a href='/guix/commit/.gitignore?id=abff6f0fac2104c3ba2129166a4409568e9c7b16'>.gitignore: Ignore .mo files.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .gitignore: Ignore files matching the *.mo pattern.
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2021-05-05 16:31:05 -0400'>2021-05-05</span></td><td><a href='/guix/commit/.gitignore?id=214b77b5e749e2ca5891bfc87f946031cf8934e6'>.gitignore: Ignore .tarball-ignore.</a><span class='msg-avail'>...<span class='msg-tooltip'>This file can be useful to fix a version string when experimenting with 'make
release'.

* .gitignore: Add a pattern to ignore .tarball-version.
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2021-04-23 23:39:33 -0400'>2021-04-23</span></td><td><a href='/guix/commit/.gitignore?id=8b5339acfe381dca887b38634dcfdecae738ce7b'>.gitignore: Ignore release artifacts.</a><span class='msg-avail'>...<span class='msg-tooltip'>Not ignoring these in the tree leads to the next generated version (.version)
being suffixed with '-dirty', which confuses things.

* .gitignore [/guix-*]: New pattern.
[/doc/stamp-[0-9]]: Adjust to ...
[/doc/stamp-*]: ... this.
[/release-*]: New pattern.
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2021-04-23 21:32:46 -0400'>2021-04-23</span></td><td><a href='/guix/commit/.gitignore?id=129823c4997c65ad0ee711ab2fcfc91d00e6278c'>.gitignore: Ignore generated .pot files.</a><span class='msg-avail'>...<span class='msg-tooltip'>These files are automatically-extracted templates rather than source, hence
shouldn't be checked in.

* .gitignore: Add a glob pattern to ignore .pot files.
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2020-10-20 19:16:21 +0200'>2020-10-20</span></td><td><a href='/guix/commit/.gitignore?id=e6994bff2ef461a2860e4207095746a5565cbf0e'>gitignore: Ignore generated guile binary and intermediate products.</a><span class='msg-avail'>...<span class='msg-tooltip'>* .gitignore: Ignore guile, guile-guile-launcher.o, .deps and .dirstamp.
</span></span></td><td>Julien Lepiller</td></tr>