;; -*-scheme-*-

;; This is an operating system configuration template
;; for a "bare bones" QEMU setup, with no X11 display server.

;; To build a disk image for a virtual machine, do:
;;
;;     ./pre-inst-env guix system image --image-type=hurd64-qcow2 \
;;         gnu/system/examples/bare-hurd64.tmpl
;;
;; You may run it like so:
;;
;;     guix shell qemu -- qemu-system-x86_64 -m 2048              \
;;       --enable-kvm                                             \
;;       --device e1000,netdev=net0                               \
;;       --netdev user,id=net0,hostfwd=tcp:127.0.0.1:10022-:2222  \
;;       --snapshot                                               \
;;       --hda /gnu/store/...-disk-image
;;
;; (note that the 64bit Hurd does not seem to show a login prompt)
;;
;; and use it like:
;;
;;     ssh -p 10022 root@localhost
;;     guix build -e '(@@ (gnu packages commencement) gnu-make-boot0)'
;;
;; or even, if you build the image with at least --image-size=3G:
;;
;;     guix build hello

(use-modules (gnu) (gnu system hurd) (guix utils))
(use-service-modules ssh)
(use-package-modules ssh)

(define %hurd64-os
  (operating-system
    (inherit %hurd64-default-operating-system)
    (bootloader (bootloader-configuration
                 (bootloader grub-minimal-bootloader)
                 (targets '("/dev/sdX"))))
    (kernel-arguments '("noide")) ;use rumpdisk
    (file-systems (cons (file-system
                          (device (file-system-label "hurd"))
                          (mount-point "/")
                          (type "ext2"))
                        %base-file-systems))
    (host-name "guixygnu64")
    (timezone "Europe/Amsterdam")
    (users (cons (user-account
                  (name "guix")
                  (comment "Anonymous Hurd Hacker")
                  (group "users")
                  (supplementary-groups '("wheel")))
                 %base-user-accounts))
    (packages (cons openssh-sans-x %base-packages/hurd))
    (services (cons (service openssh-service-type
                             (openssh-configuration
                              (openssh openssh-sans-x)
                              (port-number 2222)
                              (permit-root-login #t)
                              (allow-empty-passwords? #t)
                              (password-authentication? #t)))
                    ;; For installing on a real (non-QEMU) machine, use:
                    ;; (static-networking-service-type
                    ;;   (list %loopback-static-networking
                    ;;        (static-networking
                    ;;         ...)))
                    ;; %base-services/hurd
                    %base-services+qemu-networking/hurd))))

%hurd64-os
-09-08</span></td><td><a href='/guix/commit/gnu/system/privilege.scm?id=0dd8e4c35109ed8bc2406a0bc13e18823a334937'>privilege: Add file-like-&gt;setuid-program helper.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/privilege.scm (file-like-&gt;setuid-program): New public
procedure.
* gnu/system/setuid.scm: Re-export it for compatibility.
(file-like-&gt;setuid-program): Remove this old version.
* gnu/services/docker.scm (singularity-setuid-programs): Use it (again).
* gnu/services/desktop.scm (enlightenment-privileged-programs): Likewise.

Change-Id: I8e41144438677a15cdadb3063651dbc780715497
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2024-08-11 02:00:00 +0200'>2024-08-11</span></td><td><a href='/guix/commit/gnu/system/privilege.scm?id=71f0676a295841e2cc662eec0d3e9b7e69726035'>privilege: Add POSIX capabilities(7) support.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/privilege.scm (&lt;privileged-program&gt;): Add a field
representing the program's POSIX capabilities.
(privileged-program-capabilities): New public procedure.
* doc/guix.texi (Privileged Programs): Document it.
* gnu/build/activation.scm (activate-privileged-programs): Take a LIBCAP
package argument providing setcap(8) to apply said capabilities.
* gnu/services.scm (privileged-program-&gt;activation-gexp): Pass said
package argument where supported.  Include privileged-program-capabilities
in the compatibility hack.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2024-08-11 02:00:00 +0200'>2024-08-11</span></td><td><a href='/guix/commit/gnu/system/privilege.scm?id=39471f2627bd63df0e9af02a46e5dda60e233ffc'>system: Add (gnu system privilege).</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/system/privilege.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
</span></span></td><td>Tobias Geerinckx-Rice</td></tr>