172 lines
6.9 KiB
Scheme
172 lines
6.9 KiB
Scheme
(define-module (default)
|
|
#:use-module (gnu)
|
|
#:use-module (gnu system nss)
|
|
#:use-module (gnu system mapped-devices)
|
|
#:use-module (nongnu packages linux)
|
|
#:use-module (gnu packages linux) ; For ntfs-3g
|
|
#:use-module (gnu packages mtools) ; For exfat
|
|
#:use-module (gnu packages emacs-xyz) ; For EXWM
|
|
#:use-module (gnu packages lisp) ; For stumpwm
|
|
;; #:use-module (gnu services docker)
|
|
;; For tor
|
|
#:use-module (gnu services networking))
|
|
|
|
(use-service-modules desktop)
|
|
(use-package-modules certs)
|
|
(use-package-modules gnome)
|
|
;; (use-service-modules nix)
|
|
;; (use-package-modules bootloaders certs suckless) ; xorg
|
|
|
|
(define %ambrevar/cdemu-vhba-udev-rule
|
|
;; For the "uaccess" tag to be applied properly, the rule must be executed
|
|
;; before the uaccess rule
|
|
;; (/run/current-system/profile/lib/udev/rules.d/70-uaccess.rules).
|
|
(udev-rule
|
|
"69-cdemu-vhba.rules"
|
|
(string-append "KERNEL==\"vhba_ctl\", SUBSYSTEM==\"misc\", TAG+=\"uaccess\"")))
|
|
|
|
;; Mount Nitrokey
|
|
;; TODO: Check if plugdev works instead of users. If not, report to Nitrokey.
|
|
;; https://www.nitrokey.com/sites/default/files/41-nitrokey.rules
|
|
(define %nitrokey-udev-rule
|
|
(udev-rule
|
|
"41-nitrokey.rules"
|
|
(string-append "ACTION==\"add\", SUBSYSTEM==\"usb\", "
|
|
"ATTR{idVendor}==\"20a0\", ATTR{idProduct}==\"4211\", "
|
|
"ENV{ID_SMARTCARD_READER}=\"1\", ENV{ID_SMARTCARD_READER_DRIVER}=\"gnupg\", GROUP+=\"users\", MODE=\"0666\"")))
|
|
;; (define %nitrokey-udev-rule
|
|
;; (file->udev-rule
|
|
;; "41-nitrokey.rules"
|
|
;; (let ((version "20170910"))
|
|
;; (origin
|
|
;; (method url-fetch)
|
|
;; (uri "https://www.nitrokey.com/sites/default/files/41-nitrokey.rules")
|
|
;; (sha256
|
|
;; (base32 "127nghkfd4dl5mkf5xl1mij2ylxhkgg08nlh912xwrrjyjv4y9sa"))))))
|
|
|
|
(define-public %ambrevar/tor-config
|
|
"ExitNodes {se},{nl},{fr},{ee},{no},{dk},{fi}
|
|
StrictNodes 1")
|
|
|
|
(define-public %ambrevar/services
|
|
(cons*
|
|
;; (service nix-service-type)
|
|
;; (service docker-service-type)
|
|
;; (service cups-service-type
|
|
;; (cups-configuration
|
|
;; (web-interface? #t)
|
|
;; ;; hplip depends on a lot of Qt libraries. Use hplip-minimal instead?
|
|
;; ;; (extensions
|
|
;; ;; (list cups-filters escpr hplip))
|
|
;; ))
|
|
(service tor-service-type
|
|
(tor-configuration
|
|
(config-file (plain-file "tor.conf" %ambrevar/tor-config))))
|
|
;; Use the "desktop" services, which include the X11 log-in service, networking
|
|
;; with Wicd, and more.
|
|
(modify-services
|
|
%desktop-services
|
|
(guix-service-type config =>
|
|
(guix-configuration
|
|
(inherit config)
|
|
;; Don't clean build deps.
|
|
;; See (info "(guix) Invoking guix-daemon").
|
|
;; WARNING: This tends to yield an ever-growing store.
|
|
;; (extra-options '("--gc-keep-outputs"))
|
|
;; Specify substitutes manually. Defaults
|
|
;; should be good enough in most cases.
|
|
(substitute-urls
|
|
(list
|
|
"https://ci.guix.gnu.org"
|
|
;; "https://qualif.ci.guix.gnu.org"
|
|
;; "https://berlin.guixsd.org"
|
|
;; "https://mirror.hydra.gnu.org"
|
|
;; "https://hydra.gnu.org"
|
|
"https://gx.bufio.org"))
|
|
(extra-options '("--max-jobs=2"))))
|
|
(udev-service-type config =>
|
|
(udev-configuration
|
|
(inherit config)
|
|
(rules (append (udev-configuration-rules config)
|
|
(list ;; %nitrokey-udev-rule
|
|
%ambrevar/cdemu-vhba-udev-rule))))))))
|
|
|
|
(define-public default-operating-system
|
|
(operating-system
|
|
(host-name "ambrevar-system")
|
|
(timezone "Europe/Paris")
|
|
(locale "en_US.utf8")
|
|
|
|
;; TODO: Remove this once everything has been rebuilt using 2.29.
|
|
(locale-libcs (list glibc-2.28 (canonical-package glibc)))
|
|
|
|
;; Use the UEFI variant of GRUB with the EFI System
|
|
;; Partition mounted on /boot/efi.
|
|
(bootloader (bootloader-configuration
|
|
(bootloader grub-efi-bootloader)
|
|
(timeout 1)
|
|
(target "/boot/efi")))
|
|
|
|
(kernel linux)
|
|
;; (kernel-arguments
|
|
;; '("modprobe.blacklist=pcspkr"
|
|
;; "modprobe.blacklist=nouveau"
|
|
;; "pcie_port_pm=off"))
|
|
(firmware (append (list iwlwifi-firmware
|
|
vhba-module)
|
|
%base-firmware))
|
|
;; TODO: Remove all virtio modules.
|
|
(initrd-modules (delete "virtio-rng" %base-initrd-modules))
|
|
|
|
;; Assume the target root file system is labelled "guix",
|
|
;; and the EFI System Partition is specified by its UUID.
|
|
(file-systems (cons* (file-system
|
|
(device (file-system-label "guix"))
|
|
(mount-point "/")
|
|
(type "ext4"))
|
|
;; (file-system
|
|
;; (device (file-system-label "home"))
|
|
;; (mount-point "/home")
|
|
;; (type "ext4"))
|
|
(file-system
|
|
(device (uuid "4E30-891F" 'fat))
|
|
(mount-point "/boot/efi")
|
|
(type "vfat"))
|
|
(file-system
|
|
(mount-point "/tmp")
|
|
(device "none")
|
|
(type "tmpfs")
|
|
(check? #f))
|
|
%base-file-systems))
|
|
|
|
;; (groups (cons* (user-group
|
|
;; (name "plugdev")
|
|
;; (system? #t))
|
|
;; %base-groups))
|
|
(users (cons* (user-account
|
|
(name "ambrevar")
|
|
(group "users")
|
|
(supplementary-groups '("wheel" "netdev" ; netdev is needed for networking.
|
|
;; "plugdev" ; TODO: Needed for nitrokey?
|
|
;; "audio"
|
|
"lp" ; TODO: Needed for bluetooth?
|
|
"video"))
|
|
;; TODO: Can we default to name?
|
|
(home-directory "/home/ambrevar"))
|
|
%base-user-accounts))
|
|
|
|
(packages (cons* nss-certs ; for HTTPS access
|
|
;; gvfs ; for user mounts
|
|
;; nix
|
|
ntfs-3g
|
|
exfat-utils ; TODO: Needed for macOS drives?
|
|
fuse-exfat
|
|
stumpwm
|
|
emacs-exwm
|
|
%base-packages))
|
|
|
|
(services %ambrevar/services)
|
|
|
|
;; Allow resolution of '.local' host names with mDNS.
|
|
(name-service-switch %mdns-host-lookup-nss)))
|