114 lines
3.2 KiB
Scheme
114 lines
3.2 KiB
Scheme
(define-module (hosts kirsty system)
|
||
#:use-module (gnu)
|
||
#:use-module (gnu packages bash)
|
||
#:use-module (gnu packages certs)
|
||
#:use-module (gnu packages linux)
|
||
#:use-module (gnu packages ncurses)
|
||
#:use-module (gnu packages rsync)
|
||
#:use-module (gnu packages xdisorg)
|
||
#:use-module (gnu services desktop)
|
||
#:use-module (gnu services networking)
|
||
#:use-module (gnu services security-token)
|
||
#:use-module (gnu services sound)
|
||
#:use-module (gnu services virtualization)
|
||
#:use-module (gnu system locale)
|
||
#:use-module (gnu system setuid)
|
||
#:use-module (nongnu packages linux)
|
||
#:use-module (nongnu system linux-initrd)
|
||
#:use-module (packages linux)
|
||
#:use-module (util))
|
||
|
||
(define host "kirsty")
|
||
(define config (host-dir host))
|
||
|
||
(operating-system
|
||
(host-name host)
|
||
(timezone "Europe/Ljubljana")
|
||
|
||
(locale-definitions
|
||
(cons*
|
||
(locale-definition (name "sl_SI.utf8") (source "sl_SI"))
|
||
%default-locale-definitions))
|
||
(locale "en_US.utf8")
|
||
|
||
(kernel (linux/config linux (string-append config "/kernel.config")))
|
||
(kernel-arguments '("mitigations=auto"))
|
||
|
||
(firmware
|
||
(cons* intel-microcode linux-firmware wireless-regdb %base-firmware))
|
||
|
||
(initrd microcode-initrd)
|
||
(initrd-modules '("dm-crypt"))
|
||
|
||
(bootloader
|
||
(bootloader-configuration
|
||
(bootloader grub-bootloader)
|
||
(targets '("/dev/nvme0n1"))))
|
||
|
||
(mapped-devices
|
||
(list
|
||
(mapped-device
|
||
(source "/dev/nvme0n1p2")
|
||
(target "root")
|
||
(type luks-device-mapping))))
|
||
|
||
(file-systems
|
||
(cons*
|
||
(file-system
|
||
(device "/dev/mapper/root")
|
||
(mount-point "/")
|
||
(type "ext4"))
|
||
%base-file-systems))
|
||
|
||
(swap-devices '("/swap"))
|
||
|
||
(users
|
||
(cons*
|
||
(user-account
|
||
(name "timotej")
|
||
(comment "Timotej Lazar")
|
||
(group "users")
|
||
(supplementary-groups '("audio" "cdrom" "input" "kvm" "netdev" "video" "wheel"))
|
||
(home-directory "/home/timotej"))
|
||
%base-user-accounts))
|
||
|
||
(packages
|
||
(cons* ncurses nss-certs rsync rxvt-unicode %base-packages))
|
||
|
||
(setuid-programs
|
||
(cons*
|
||
(setuid-program
|
||
(program (file-append xsecurelock "/libexec/xsecurelock/authproto_pam")))
|
||
%setuid-programs))
|
||
|
||
(services
|
||
(cons*
|
||
(extra-special-file "/usr/bin/env" (file-append coreutils "/bin/env"))
|
||
(extra-special-file "/bin/bash" (file-append bash "/bin/bash"))
|
||
|
||
;; Networking.
|
||
(service network-manager-service-type)
|
||
(service wpa-supplicant-service-type)
|
||
(service modem-manager-service-type)
|
||
(service usb-modeswitch-service-type)
|
||
(service openntpd-service-type
|
||
(openntpd-configuration (servers '("pool.ntp.org"))))
|
||
(service tor-service-type)
|
||
|
||
;; Desktop.
|
||
(elogind-service)
|
||
(udisks-service)
|
||
(service upower-service-type)
|
||
(service alsa-service-type)
|
||
(service pcscd-service-type)
|
||
|
||
(service qemu-binfmt-service-type
|
||
(qemu-binfmt-configuration
|
||
(platforms (lookup-qemu-platforms "arm" "aarch64" "mips64el" "x86"))))
|
||
|
||
(modify-services %base-services
|
||
;; Don’t use up all CPU (and RAM) when compiling.
|
||
(guix-service-type config =>
|
||
(guix-configuration
|
||
(inherit config)
|
||
(extra-options '("--cores=2"))))))))
|