67 lines
2.3 KiB
Cheetah
67 lines
2.3 KiB
Cheetah
;; This is an operating system configuration template
|
|
;; for a "desktop" setup with GNOME and Xfce where the
|
|
;; root partition is encrypted with LUKS.
|
|
|
|
(use-modules (gnu) (gnu system nss))
|
|
(use-service-modules desktop)
|
|
(use-package-modules certs gnome)
|
|
|
|
(operating-system
|
|
(host-name "antelope")
|
|
(timezone "Europe/Paris")
|
|
(locale "en_US.utf8")
|
|
|
|
;; Use the UEFI variant of GRUB with the EFI System
|
|
;; Partition mounted on /boot/efi.
|
|
(bootloader (bootloader-configuration
|
|
(bootloader grub-efi-bootloader)
|
|
(target "/boot/efi")))
|
|
|
|
;; Specify a mapped device for the encrypted root partition.
|
|
;; The UUID is that returned by 'cryptsetup luksUUID'.
|
|
(mapped-devices
|
|
(list (mapped-device
|
|
(source (uuid "12345678-1234-1234-1234-123456789abc"))
|
|
(target "my-root")
|
|
(type luks-device-mapping))))
|
|
|
|
(file-systems (append
|
|
(list (file-system
|
|
(device (file-system-label "my-root"))
|
|
(mount-point "/")
|
|
(type "ext4")
|
|
(dependencies mapped-devices))
|
|
(file-system
|
|
(device (uuid "1234-ABCD" 'fat))
|
|
(mount-point "/boot/efi")
|
|
(type "vfat")))
|
|
%base-file-systems))
|
|
|
|
(users (cons (user-account
|
|
(name "bob")
|
|
(comment "Alice's brother")
|
|
(group "users")
|
|
(supplementary-groups '("wheel" "netdev"
|
|
"audio" "video"))
|
|
(home-directory "/home/bob"))
|
|
%base-user-accounts))
|
|
|
|
;; This is where we specify system-wide packages.
|
|
(packages (append (list
|
|
;; for HTTPS access
|
|
nss-certs
|
|
;; for user mounts
|
|
gvfs)
|
|
%base-packages))
|
|
|
|
;; Add GNOME and/or Xfce---we can choose at the log-in
|
|
;; screen with F1. Use the "desktop" services, which
|
|
;; include the X11 log-in service, networking with
|
|
;; NetworkManager, and more.
|
|
(services (append (list (gnome-desktop-service)
|
|
(xfce-desktop-service))
|
|
%desktop-services))
|
|
|
|
;; Allow resolution of '.local' host names with mDNS.
|
|
(name-service-switch %mdns-host-lookup-nss))
|