;; -*- mode: scheme; -*-
;; This is an operating system configuration template
;; for a "bare bones" setup for an ASUS C201PA.

(use-modules (gnu) (gnu bootloader depthcharge))
(use-service-modules networking ssh)
(use-package-modules linux screen)

(operating-system
  (host-name "komputilo")
  (timezone "Europe/Berlin")
  (locale "en_US.utf8")

  ;; Assuming /dev/mmcblk0p1 is the kernel partition, and
  ;; "my-root" is the label of the target root file system.
  (bootloader (bootloader-configuration
                (bootloader depthcharge-bootloader)
                (targets '("/dev/mmcblk0p1"))))

  ;; The ASUS C201PA requires a very particular kernel to boot,
  ;; as well as the following arguments.
  (kernel linux-libre-arm-generic)
  (kernel-arguments '("console=tty1"))

  ;; We do not need any special modules for initrd, and the
  ;; PrawnOS kernel does not include many of the normal ones.
  (initrd-modules '())

  (file-systems (cons (file-system
                        (device (file-system-label "my-root"))
                        (mount-point "/")
                        (type "ext4"))
                      %base-file-systems))

  ;; This is where user accounts are specified.  The "root"
  ;; account is implicit, and is initially created with the
  ;; empty password.
  (users (cons (user-account
                (name "alice")
                (comment "Bob's sister")
                (group "users")

                ;; Adding the account to the "wheel" group
                ;; makes it a sudoer.  Adding it to "audio"
                ;; and "video" allows the user to play sound
                ;; and access the webcam.
                (supplementary-groups '("wheel"
                                        "audio" "video"))
                (home-directory "/home/alice"))
               %base-user-accounts))

  ;; Globally-installed packages.
  (packages (cons screen %base-packages))

  ;; Add services to the baseline: a DHCP client and
  ;; an SSH server.
  (services (append (list (service dhcp-client-service-type)
                          (service openssh-service-type
                                   (openssh-configuration
                                    (port-number 2222))))
                    %base-services)))
href='/guix/log/gnu/build?id=ae2213ed989051a680cf76582b758fd748838688'>build</a>/<a href='/guix/log/gnu/build/linux-container.scm?id=ae2213ed989051a680cf76582b758fd748838688'>linux-container.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/build/linux-container.scm?id=ae2213ed989051a680cf76582b758fd748838688&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-01-30 22:24:27 +0100'>2023-01-30</span></td><td><a href='/guix/commit/gnu/build/linux-container.scm?id=0ef8fe22ed8985c9656835fc25ab3463d55b6669'>linux-container: 'container-excursion' forks to join the PID namespace.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://issues.guix.gnu.org/61156&gt;.

* gnu/build/linux-container.scm (container-excursion): Add extra call to
'primitive-fork' and invoke THUNK in the child process.
* tests/containers.scm ("container-excursion"): Remove extra
'primitive-fork' call, now unnecessary.
("container-excursion*, /proc"): New test.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2023-01-30 22:24:27 +0100'>2023-01-30</span></td><td><a href='/guix/commit/gnu/build/linux-container.scm?id=52eb3db19cb9e5c294c86a8552a4baaa5b473672'>container: Correctly report exit status.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/linux-container.scm (container-excursion): Return the raw
status value.
* tests/containers.scm ("container-excursion, same namespaces"): Add
'status:exit-val' call.
* guix/scripts/container/exec.scm (guix-container-exec): Correctly
handle the different cases.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-09-24 17:59:04 +0200'>2022-09-24</span></td><td><a href='/guix/commit/gnu/build/linux-container.scm?id=00d5bb5d7f18555c250b4a6ef0b33b628acc3a3a'>linux-container: Mark socket pair as SOCK_CLOEXEC.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/linux-container.scm (run-container): Pass SOCK_CLOEXEC to
'socketpair'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-09-20 19:24:31 +0200'>2022-09-20</span></td><td><a href='/guix/commit/gnu/build/linux-container.scm?id=6abdcef4a68e98f538ab69fde096adc5f5ca4ff4'>linux-container: 'container-excursion*' marks its FDs as FD_CLOEXEC.</a><span class='msg-avail'>...<span class='msg-tooltip'>Fixes &lt;https://issues.guix.gnu.org/57827&gt;.
Reported by Mathieu Othacehe &lt;othacehe@gnu.org&gt;.

Fixes a regression introduced with the Shepherd 0.9.2 upgrade in
1ba0e38267c9ff8bb476285091be6e297bbf136e, whereby IN and OUT would no
longer be closed when 'fork+exec-command/container' would call
'exec-command*' as part of the THUNK passed to 'container-excursion*'.

This is because the Shepherd 0.9.2 assumes file descriptors are properly
marked as O_CLOEXEC and, consequently, 'exec-command' no longer run the
close(2) loop prior to 'exec'.

* gnu/build/linux-container.scm (container-excursion*): Add calls to
'fcntl'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-05-01 21:30:35 +0200'>2022-05-01</span></td><td><a href='/guix/commit/gnu/build/linux-container.scm?id=391bd143592241a5bf3555918a5188c789c1c771'>linux-container: Add #:child-is-pid1? parameter to 'call-with-container'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/linux-container.scm (wait-child-process)
(status-&gt;exit-status): New procedures.
(call-with-container): Add #:child-is-pid1? parameter and honor it.
[thunk*]: New variable.  Pass it to 'run-container'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-05-01 21:30:35 +0200'>2022-05-01</span></td><td><a href='/guix/commit/gnu/build/linux-container.scm?id=f6c9763984dafe5023e171878231cbcc6cc1edfa'>linux-container: Ensure signal-handling asyncs get a chance to run.</a><span class='msg-avail'>...<span class='msg-tooltip'>Previously we could enter the blocking 'waitpid' call and miss an
opportunity to run the signal handler async.

* gnu/build/linux-container.scm (call-with-container)
[periodically-schedule-asyncs]: New procedure.
[install-signal-handlers]: Call it.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-05-01 21:30:34 +0200'>2022-05-01</span></td><td><a href='/guix/commit/gnu/build/linux-container.scm?id=a76fa226c8761dd349aaacca7ba041429bce4e73'>linux-container: 'call-with-container' relays SIGTERM and SIGINT.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/build/linux-container.scm (call-with-container): Add #:relayed-signals.
[install-signal-handlers]: New procedure.
Call it.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-01-05 23:44:18 +0100'>2022-01-05</span></td><td><a href='/guix/commit/gnu/build/linux-container.scm?id=bfdeba11f86b18172194b416c6eb59b7cc7ef355'>linux-container: Handle CLONE_NEWCGROUP and use it by default.</a><span class='msg-avail'>...<span class='msg-tooltip'>Adds low-level support for launching Linux containers with cgroup namespaces.

* gnu/build/linux-container.scm (%namespaces): Add 'cgroup.
(namespaces-&gt;bit-mask): Handle it.
* guix/build/syscalls.scm (CLONE_NEWCGROUP): New variable.

Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Ryan Sundberg</td></tr>