;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2017 Sou Bunnbu <iyzsong@member.fsf.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu services sysctl)
  #:use-module (gnu services)
  #:use-module (gnu services shepherd)
  #:use-module (gnu packages linux)
  #:use-module (guix gexp)
  #:use-module (guix records)
  #:use-module (srfi srfi-1)
  #:use-module (ice-9 match)
  #:export (sysctl-configuration
            sysctl-configuration-sysctl
            sysctl-configuration-settings
            sysctl-service-type
            %default-sysctl-settings))


;;;
;;; System Control Service.
;;;

(define %default-sysctl-settings
  ;; Default kernel parameters enabled with sysctl.
  '(("fs.protected_hardlinks" . "1")
    ("fs.protected_symlinks" . "1")))

(define-record-type* <sysctl-configuration>
  sysctl-configuration make-sysctl-configuration
  sysctl-configuration?
  (sysctl   sysctl-configuration-sysctl    ; path of the 'sysctl' command
            (default (file-append procps "/sbin/sysctl")))
  (settings sysctl-configuration-settings  ; alist of string pairs
            (default %default-sysctl-settings)))

(define (sysctl-configuration-settings->sysctl.conf settings)
  "Return a file for @command{sysctl} to set kernel parameters as specified by
@var{settings}."
  (apply mixed-text-file "sysctl.conf"
         (append-map (match-lambda
                       ((key . value)
                        (list key "=" value "\n")))
                     settings)))

(define sysctl-shepherd-service
  (match-lambda
    (($ <sysctl-configuration> sysctl settings)
     (let ((sysctl.conf
            (sysctl-configuration-settings->sysctl.conf settings)))
       (shepherd-service
        (documentation "Configure kernel parameters at boot.")
        (provision '(sysctl))
        (start #~(lambda _
                   (zero? (system* #$sysctl "--load" #$sysctl.conf))))
        (one-shot? #t))))))

(define sysctl-service-type
  (service-type
   (name 'sysctl)
   (extensions
    (list (service-extension shepherd-root-service-type
                             (compose list sysctl-shepherd-service))))
   (compose concatenate)
   (extend (lambda (config settings)
             (sysctl-configuration
              (inherit config)
              (settings (append (sysctl-configuration-settings config)
                                settings)))))
   (default-value (sysctl-configuration))))
24 +0100'>2022-01-14</span></td><td><a href='/guix/commit/tests/gremlin.scm?id=e7ad192de008a6a21638def6eb973b9cc0c91116'>gremlin: Adjust tests for i686 and beyond.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://issues.guix.gnu.org/52752&gt;.
Reported by Denis 'GNUtoo' Carikli &lt;GNUtoo@cyberdimension.org&gt;.

* tests/gremlin.scm ("file-needed/recursive"): Augment the list of vDSO
names.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-01-08 15:51:22 -0800'>2022-01-08</span></td><td><a href='/guix/commit/tests/gremlin.scm?id=6a2050b1e1c7f09ef9b6af43044b7c0e4786d39d'>tests: Fix file-needed/recursive on powerpc64le-linux.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes: &lt;https://issues.guix.gnu.org/52940&gt;.

* tests/gremlin.scm (file-needed/recursive): Consider two entries to be
equivalent not when they are the same string, but rather when they refer to
the same file.
[ground-truth]: In addition to strings that begin with "linux-vdso.so", remove
strings that begin with "linux-vdso64.so".
</span></span></td><td>Chris Marusich</td></tr>
<tr><td><span title='2021-06-23 20:30:22 -0700'>2021-06-23</span></td><td><a href='/guix/commit/tests/gremlin.scm?id=e4b5a23841bc6a92e2e21dd8b1038addee55eb02'>tests: gremlin: Skip file-needed/recursive if DT_NEEDED is empty.</a><span class='msg-avail'>...<span class='msg-tooltip'>* tests/gremlin.scm (file-needed/recursive): Skip the test when (file-runpath
%guile-executable) evaluates to the empty list.  This causes the test to be
correctly skipped in the case where Guix has been built using a foreign
distro's toolchain and libraries.
</span></span></td><td>Chris Marusich</td></tr>
<tr><td><span title='2021-04-22 14:04:27 +0200'>2021-04-22</span></td><td><a href='/guix/commit/tests/gremlin.scm?id=1010171280cb34c8dc361644b66fdd1a041d297a'>gremlin: 'elf-dynamic-info' returns a file name rathern than a dynamic entry.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/build/gremlin.scm (elf-dynamic-info): Return the dynamic entry
value, not the dynamic entry.
* tests/gremlin.scm ("elf-dynamic-info-soname"): New test.

Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Dion Mendel</td></tr>
<tr><td><span title='2020-12-01 21:30:28 +0100'>2020-12-01</span></td><td><a href='/guix/commit/tests/gremlin.scm?id=53fd256e5ba43e516fb9d6eaf085b88fe8bd12b6'>gremlin: Add 'file-needed/recursive'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/build/gremlin.scm (file-needed/recursive): New procedure.
* tests/gremlin.scm ("file-needed/recursive"): New test.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2020-09-19 17:28:46 +0200'>2020-09-19</span></td><td><a href='/guix/commit/tests/gremlin.scm?id=49a1203d67a90a6a7ce4e4537697a6da96ceb213'>gremlin: Add 'set-file-runpath', 'file-runpath', and 'file-needed'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/build/gremlin.scm (file-dynamic-info, file-runpath, file-needed):
New procedures.
(&amp;missing-runpath-error, &amp;runpath-too-long-error): New condition types.
(set-file-runpath): New procedure.
* tests/gremlin.scm ("set-file-runpath + file-runpath"): New test.
</span></span></td><td>Ludovic Courtès</td></tr>