;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2017 Sou Bunnbu <iyzsong@member.fsf.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu services sysctl)
  #:use-module (gnu services)
  #:use-module (gnu services shepherd)
  #:use-module (gnu packages linux)
  #:use-module (guix gexp)
  #:use-module (guix records)
  #:use-module (srfi srfi-1)
  #:use-module (ice-9 match)
  #:export (sysctl-configuration
            sysctl-configuration-sysctl
            sysctl-configuration-settings
            sysctl-service-type
            %default-sysctl-settings))


;;;
;;; System Control Service.
;;;

(define %default-sysctl-settings
  ;; Default kernel parameters enabled with sysctl.
  '(("fs.protected_hardlinks" . "1")
    ("fs.protected_symlinks" . "1")))

(define-record-type* <sysctl-configuration>
  sysctl-configuration make-sysctl-configuration
  sysctl-configuration?
  (sysctl   sysctl-configuration-sysctl    ; path of the 'sysctl' command
            (default (file-append procps "/sbin/sysctl")))
  (settings sysctl-configuration-settings  ; alist of string pairs
            (default %default-sysctl-settings)))

(define (sysctl-configuration-settings->sysctl.conf settings)
  "Return a file for @command{sysctl} to set kernel parameters as specified by
@var{settings}."
  (apply mixed-text-file "sysctl.conf"
         (append-map (match-lambda
                       ((key . value)
                        (list key "=" value "\n")))
                     settings)))

(define sysctl-shepherd-service
  (match-lambda
    (($ <sysctl-configuration> sysctl settings)
     (let ((sysctl.conf
            (sysctl-configuration-settings->sysctl.conf settings)))
       (shepherd-service
        (documentation "Configure kernel parameters at boot.")
        (provision '(sysctl))
        (start #~(lambda _
                   (zero? (system* #$sysctl "--load" #$sysctl.conf))))
        (one-shot? #t))))))

(define sysctl-service-type
  (service-type
   (name 'sysctl)
   (extensions
    (list (service-extension shepherd-root-service-type
                             (compose list sysctl-shepherd-service))))
   (compose concatenate)
   (extend (lambda (config settings)
             (sysctl-configuration
              (inherit config)
              (settings (append (sysctl-configuration-settings config)
                                settings)))))
   (default-value (sysctl-configuration))))
* config-daemon.ac: Don't output 'nix/scripts/download'.
* nix/libstore/builtins.cc (builtinDownload): Invoke 'guix
perform-download' directly.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-02-04 16:20:01 +0100'>2019-02-04</span></td><td><a href='/guix/commit/nix/libstore/builtins.cc?id=959eaa1eb834fd47ceab3c5bbbe4967e808d530b'>daemon: Add "/guix" to default 'nixLibexecDir'.</a><span class='msg-avail'>...<span class='msg-tooltip'>This makes it easier to run the uninstalled daemon.

* nix/local.mk (libstore_a_CPPFLAGS): Append "/guix" to
NIX_LIBEXEC_DIR.
* build-aux/pre-inst-env.in (NIX_LIBEXEC_DIR): Adjust comment.
* nix/libstore/builtins.cc (builtinDownload): Remove SUBDIR and its
use.
* nix/libstore/local-store.cc (runAuthenticationProgram): Ditto.
* nix/libstore/gc.cc (addAdditionalRoots): Remove "/guix" prefix.
* nix/nix-daemon/guix-daemon.cc (main): Ditto.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-09-27 23:21:53 +0200'>2018-09-27</span></td><td><a href='/guix/commit/nix/libstore/builtins.cc?id=240a9c69a6064544a616acc521c993542c364948'>perform-download: Optionally report a "download-progress" trace.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/scripts/perform-download.scm (perform-download): Add
 #:print-build-trace? and pass it to 'url-fetch'.
(guix-perform-download): Define 'print-build-trace?' and pass it to
'perform-download'.
* guix/build/download.scm (ftp-fetch): Add #:print-build-trace? and
honor it.
(url-fetch): Likewise.
* nix/libstore/builtins.cc (builtinDownload): Set _NIX_OPTIONS
environment variable.
</span></span></td><td>Ludovic Courtès</td></tr>
X specifies that license identifiers (unlike the 'AND', 'OR', and
'WITH' operators) are matched case-insensitively.

* guix/import/utils.scm (%spdx-license-identifiers): New variable.
(spdx-string-&gt;license): Search in '%spdx-license-identifiers' using
'string-ci=?'.
* tests/import-utils.scm ("spdx-string-&gt;license"): New test.

Co-authored-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Philip McGrath</td></tr>
<tr><td><span title='2022-10-05 23:59:48 +0200'>2022-10-05</span></td><td><a href='/guix/commit/tests/import-utils.scm?id=421a87a68a992a78127e0c2f4aa2e18c731c9e63'>tests: Add new test cases for beautify-description.</a><span class='msg-avail'>...<span class='msg-tooltip'>* tests/import-utils.scm ("beautify-description: use double spacing"): Update.
("beautify-description: remove single quotes",
"beautify-description: escape @"): New tests.
</span></span></td><td>Ricardo Wurmus</td></tr>
<tr><td><span title='2022-09-29 22:59:48 +0200'>2022-09-29</span></td><td><a href='/guix/commit/tests/import-utils.scm?id=61bd7bf4690329a10e0a1d3fd1425a73d1823576'>import/utils: alist-&gt;package: Include properties.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/import/utils.scm (alist-&gt;package): Process properties field in input
data and include it in the generated package.
* tests/import-utils.scm ("alist-&gt;package with properties"): New test.

Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>itd</td></tr>
<tr><td><span title='2021-09-01 23:41:42 +0200'>2021-09-01</span></td><td><a href='/guix/commit/tests/import-utils.scm?id=f95bdeb93a30b89c821627aa91da4ef3afaeb5af'>import: utils: Skip not found packages.</a><span class='msg-avail'>...<span class='msg-tooltip'>* guix/import/utils.scm (recursive-import): Skip packages when the
package returned by 'repo-&gt;guix-package' is false.
* tests/import-utils.scm: New tests.

Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Sarah Morgensen</td></tr>
<tr><td><span title='2020-12-27 12:06:49 +0100'>2020-12-27</span></td><td><a href='/guix/commit/tests/import-utils.scm?id=5aae614868b8a7e3097ae70f6024352aa5c8de21'>import/utils: alist-&gt;package: Handle SPDX license names only as fallback.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://bugs.gnu.org/45453&gt;.

* guix/import/utils.scm (alist-&gt;package): Find plain license names in (guix
licenses) first, and only fall back to SPDX names on error.
* tests/import-utils.scm ("alist-&gt;package with SPDX license name 1/2",
"alist-&gt;package with SPDX license name 2/2"): New tests.
</span></span></td><td>Ricardo Wurmus</td></tr>