aboutsummaryrefslogtreecommitdiff
path: root/etc/guix-daemon.service.in
blob: 17b54eaeb062f64771b0e66c3f64ff2505f88a23 (about) (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
# This is a "service unit file" for the systemd init system to launch
# 'guix-daemon'.  Drop it in /etc/systemd/system or similar to have
# 'guix-daemon' automatically started.

[Unit]
Description=Build daemon for GNU Guix

[Service]
ExecStart=@localstatedir@/guix/profiles/per-user/root/current-guix/bin/guix-daemon \
    --build-users-group=guixbuild --discover=no
Environment='GUIX_LOCPATH=@localstatedir@/guix/profiles/per-user/root/guix-profile/lib/locale' LC_ALL=en_US.utf8
RemainAfterExit=yes
StandardOutput=syslog
StandardError=syslog

# See <https://lists.gnu.org/archive/html/guix-devel/2016-04/msg00608.html>.
# Some package builds (for example, go@1.8.1) may require even more than
# 1024 tasks.
TasksMax=8192

[Install]
WantedBy=multi-user.target
sources of non-determinism in builds + strengthen guix-daemon containers to further increase reproducibility + trusting-trust: bootstrap with different tool chains + fixed-point: re-bootstrap until fixed point is reached + distributed validation: compare contents of store items with others * resist a hydra.gnu.org compromise - reproducible containers: mix of 'guix environment' and 'guix system vm' - execute code with least privilege + build containers like guix-daemon does + provide a Plash-like interface in Bash - daemon rewritten in Guile - more shepherd integration + monitor network interfaces and start/stop events based on that + include a DHCP client written in Scheme