aboutsummaryrefslogtreecommitdiff
path: root/gnu/system/examples/bare-hurd.tmpl
blob: 8bf6799b471bab956facfa1636e1c57424863bfb (about) (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
;; -*-scheme-*-

;; This is an operating system configuration template
;; for a "bare bones" QEMU setup, with no X11 display server.

;; To build a disk image for a virtual machine, do:
;;
;;     ./pre-inst-env guix system image --image-type=hurd-qcow2 \
;;         gnu/system/examples/bare-hurd.tmpl
;;
;; You may run it like so:
;;
;;     guix shell qemu -- qemu-system-i386 -m 2048                \
;;       --enable-kvm                                             \
;;       --device e1000,netdev=net0                               \
;;       --netdev user,id=net0,hostfwd=tcp:127.0.0.1:10022-:2222  \
;;       --snapshot                                               \
;;       --hda /gnu/store/...-disk-image
;;
;; and use it like:
;;
;;     ssh -p 10022 root@localhost
;;     guix build -e '(@@ (gnu packages commencement) gnu-make-boot0)'
;;
;; or even, if you build the image with at least --image-size=3G:
;;
;;     guix build hello

(use-modules (gnu) (gnu system hurd) (guix utils))
(use-service-modules ssh)
(use-package-modules ssh)

(define %hurd-os
  (operating-system
    (inherit %hurd-default-operating-system)
    (bootloader (bootloader-configuration
                 (bootloader grub-minimal-bootloader)
                 (targets '("/dev/sdX"))))
    (file-systems (cons (file-system
                          (device (file-system-label "hurd"))
                          (mount-point "/")
                          (type "ext2"))
                        %base-file-systems))
    (host-name "guixygnu")
    (timezone "Europe/Amsterdam")
    (users (cons (user-account
                  (name "guix")
                  (comment "Anonymous Hurd Hacker")
                  (group "users")
                  (supplementary-groups '("wheel")))
                 %base-user-accounts))
    (packages (cons openssh-sans-x %base-packages/hurd))
    (services (cons (service openssh-service-type
                             (openssh-configuration
                              (openssh openssh-sans-x)
                              (port-number 2222)
                              (permit-root-login #t)
                              (allow-empty-passwords? #t)
                              (password-authentication? #t)))
                    ;; For installing on a real (non-QEMU) machine, use:
                    ;; (static-networking-service-type
                    ;;   (list %loopback-static-networking
                    ;;        (static-networking
                    ;;         ...)))
                    ;; %base-services/hurd
                    %base-services+qemu-networking/hurd))))

%hurd-os
;;; under the terms of the GNU General Public License as published by ;;; the Free Software Foundation; either version 3 of the License, or (at ;;; your option) any later version. ;;; ;;; GNU Guix is distributed in the hope that it will be useful, but ;;; WITHOUT ANY WARRANTY; without even the implied warranty of ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ;;; GNU General Public License for more details. ;;; ;;; You should have received a copy of the GNU General Public License ;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>. (define-module (gnu tests ldap) #:use-module (gnu tests) #:use-module (gnu system) #:use-module (gnu system nss) #:use-module (gnu system vm) #:use-module (gnu services) #:use-module (gnu services authentication) #:use-module (gnu services networking) #:use-module (gnu packages base) #:use-module (gnu packages openldap) #:use-module (guix gexp) #:use-module (guix store) #:export (%test-ldap)) (define %ldap-os (let ((simple (simple-operating-system (service dhcp-client-service-type) (service nslcd-service-type)))) (operating-system (inherit simple) (name-service-switch (let ((services (list (name-service (name "db")) (name-service (name "files")) (name-service (name "ldap"))))) (name-service-switch (inherit %mdns-host-lookup-nss) (password services) (shadow services) (group services) (netgroup services) (gshadow services))))))) (define (run-ldap-test) "Run tests in %LDAP-OS." (define os (marionette-operating-system %ldap-os #:imported-modules '((gnu services herd) (guix combinators)))) (define vm (virtual-machine os)) (define test (with-imported-modules '((gnu build marionette)) #~(begin (use-modules (srfi srfi-11) (srfi srfi-64) (gnu build marionette)) (define marionette (make-marionette (list #$vm))) (mkdir #$output) (chdir #$output) (test-begin "ldap") ;; Set up LDAP directory server (test-assert "LDAP server instance running" (marionette-eval '(begin (with-output-to-file "instance.inf" (lambda () (display "[general] config_version = 2 \n[slapd] root_password = SECRET user = root group = root \n[backend-userroot] sample_entries = yes suffix = dc=example,dc=com"))) (and ;; Create instance (zero? (system* #$(file-append 389-ds-base "/sbin/dscreate") "-v" "from-file" "instance.inf")) ;; Start instance (zero? (system* #$(file-append 389-ds-base "/sbin/dsctl") "localhost" "start")) ;; Create user account (zero? (system* #$(file-append 389-ds-base "/sbin/dsidm") "-b" "dc=example,dc=com" "localhost" "user" "create" "--uid" "eva" "--cn" "Eva Lu Ator" "--displayName" "Eva Lu Ator" "--uidNumber" "1234" "--gidNumber" "2345" "--homeDirectory" "/home/eva")))) marionette)) (test-assert "Manager can bind to LDAP server instance" (marionette-eval '(zero? (system* #$(file-append openldap "/bin/ldapwhoami") "-H" "ldap://localhost" "-D" "cn=Directory Manager" "-w" "SECRET")) marionette)) ;; Wait for nslcd to be up and running. (test-assert "nslcd service running" (marionette-eval '(begin (use-modules (gnu services herd)) (match (start-service 'nslcd) (#f #f) (('service response-parts ...) (match (assq-ref response-parts 'running) ((pid) (number? pid)))))) marionette)) (test-assert "nslcd produces a log file" (marionette-eval '(file-exists? "/var/log/nslcd") marionette)) (test-assert "Can query LDAP user accounts" (marionette-eval '(begin ;; TODO: This shouldn't be necessary, but unfortunately it ;; really is needed to discover LDAP accounts with "id". (setenv "LD_LIBRARY_PATH" #$(file-append nss-pam-ldapd "/lib")) (zero? (system* #$(file-append coreutils "/bin/id") "eva"))) marionette)) (test-assert "Can become LDAP user" (marionette-eval '(zero? (system* "/run/setuid-programs/su" "eva" "-c" #$(file-append coreutils "/bin/true"))) marionette)) (test-end) (exit (= (test-runner-fail-count (test-runner-current)) 0))))) (gexp->derivation "ldap-test" test)) (define %test-ldap (system-test (name "ldap") (description "Run an LDAP directory server and authenticate against it.") (value (run-ldap-test))))