Paste number 331870: | guixsd config with openssh |
Pasted by: | paroneayea |
When: | 5 years, 5 months ago |
Share: | Tweet this! | http://paste.lisp.org/+742M |
Channel: | None |
Paste contents: |
;; This is an operating system configuration template
;; for a "desktop" setup with X11.
(use-modules (gnu) (gnu system nss))
(use-service-modules desktop databases xorg ssh)
(use-package-modules xfce certs pulseaudio databases linux xdisorg gnome guile-wm
lisp ssh)
(define ssh-service
(service openssh-service-type
(openssh-configuration
(x11-forwarding? #f)
(password-authentication? #f)
(permit-root-login 'without-password))))
(operating-system
(host-name "oolong")
(timezone "America/Chicago")
(locale "en_US.UTF-8")
;; (kernel linux-libre-4.1)
(kernel-arguments '("modprobe.blacklist=kvm_intel")) ; also ",kvm"?
;; Assuming /dev/sdX is the target hard disk, and "root" is
;; the label of the target root file system.
(bootloader (grub-configuration
(device "/dev/sda")))
(mapped-devices (list (mapped-device
(source "/dev/sda6")
(target "home-luks")
(type luks-device-mapping))))
(file-systems `(,(file-system
(device "guix")
(title 'label)
(mount-point "/")
(type "ext4"))
,(file-system
(device "/dev/mapper/home-luks")
(mount-point "/home")
(type "ext4"))
,(file-system
(device "debian")
(title 'label)
(mount-point "/mnt/debian")
(type "ext4"))
;;; Not quite the right way to mount this...
;; ,(file-system
;; (device "/dev/disk/by-uuid/e9b11604-c044-400b-9dd5-97b40158a928")
;; (title 'label)
;; (mount-point "/mnt/backup")
;; (type "ext4")
;; (mount? #f))
,@%base-file-systems))
(users (cons (user-account
(name "cwebber")
(uid 1000)
(comment "Christopher Allan Webber")
(group "cwebber")
(supplementary-groups '("users"
"wheel" "netdev"
"audio" "video"))
(home-directory "/home/cwebber"))
%base-user-accounts))
(groups (cons (user-group
(name "cwebber")
(id 1000))
%base-groups))
;; Add Xfce and Ratpoison; that allows us to choose
;; sessions using either of these at the log-in screen.
(packages (cons* xfce ;desktop environments
sbcl-stumpwm
gnome
guile-wm
nss-certs ;for HTTPS access
pulseaudio
postgresql
xf86-input-wacom
libwacom
xscreensaver
%base-packages))
;; Use the "desktop" services, which include the X11
;; log-in service, networking with Wicd, and more.
(services (cons*
(postgresql-service)
(screen-locker-service xscreensaver)
ssh-service
%desktop-services))
;; Allow resolution of '.local' host names with mDNS.
(name-service-switch %mdns-host-lookup-nss))
This paste has no annotations.