1257 lines
50 KiB
Scheme
1257 lines
50 KiB
Scheme
;;; GNU Guix --- Functional package management for GNU
|
||
;;; Copyright © 2014, 2015, 2016, 2017, 2018, 2019, 2020 Ludovic Courtès <ludo@gnu.org>
|
||
;;; Copyright © 2015 Andy Wingo <wingo@igalia.com>
|
||
;;; Copyright © 2015 Mark H Weaver <mhw@netris.org>
|
||
;;; Copyright © 2016 Sou Bunnbu <iyzsong@gmail.com>
|
||
;;; Copyright © 2017 Maxim Cournoyer <maxim.cournoyer@gmail.com>
|
||
;;; Copyright © 2017 ng0 <ng0@n0.is>
|
||
;;; Copyright © 2018, 2020 Efraim Flashner <efraim@flashner.co.il>
|
||
;;; Copyright © 2018 Ricardo Wurmus <rekado@elephly.net>
|
||
;;; Copyright © 2017, 2019 Christopher Baines <mail@cbaines.net>
|
||
;;; Copyright © 2019 Tim Gesthuizen <tim.gesthuizen@yahoo.de>
|
||
;;; Copyright © 2019 David Wilson <david@daviwil.com>
|
||
;;; Copyright © 2020 Tobias Geerinckx-Rice <me@tobias.gr>
|
||
;;;
|
||
;;; This file is part of GNU Guix.
|
||
;;;
|
||
;;; GNU Guix is free software; you can redistribute it and/or modify it
|
||
;;; under the terms of the GNU General Public License as published by
|
||
;;; the Free Software Foundation; either version 3 of the License, or (at
|
||
;;; your option) any later version.
|
||
;;;
|
||
;;; GNU Guix is distributed in the hope that it will be useful, but
|
||
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
;;; GNU General Public License for more details.
|
||
;;;
|
||
;;; You should have received a copy of the GNU General Public License
|
||
;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
|
||
|
||
(define-module (gnu services desktop)
|
||
#:use-module (gnu services)
|
||
#:use-module (gnu services shepherd)
|
||
#:use-module (gnu services base)
|
||
#:use-module (gnu services dbus)
|
||
#:use-module (gnu services avahi)
|
||
#:use-module (gnu services xorg)
|
||
#:use-module (gnu services networking)
|
||
#:use-module (gnu services sound)
|
||
#:use-module ((gnu system file-systems)
|
||
#:select (%elogind-file-systems file-system))
|
||
#:use-module (gnu system)
|
||
#:use-module (gnu system shadow)
|
||
#:use-module (gnu system pam)
|
||
#:use-module (gnu packages glib)
|
||
#:use-module (gnu packages admin)
|
||
#:use-module (gnu packages cups)
|
||
#:use-module (gnu packages freedesktop)
|
||
#:use-module (gnu packages gnome)
|
||
#:use-module (gnu packages xfce)
|
||
#:use-module (gnu packages avahi)
|
||
#:use-module (gnu packages xdisorg)
|
||
#:use-module (gnu packages scanner)
|
||
#:use-module (gnu packages suckless)
|
||
#:use-module (gnu packages linux)
|
||
#:use-module (gnu packages libusb)
|
||
#:use-module (gnu packages mate)
|
||
#:use-module (gnu packages enlightenment)
|
||
#:use-module (guix deprecation)
|
||
#:use-module (guix records)
|
||
#:use-module (guix packages)
|
||
#:use-module (guix store)
|
||
#:use-module (guix utils)
|
||
#:use-module (guix gexp)
|
||
#:use-module (srfi srfi-1)
|
||
#:use-module (ice-9 match)
|
||
#:export (<upower-configuration>
|
||
upower-configuration
|
||
upower-configuration?
|
||
upower-configuration-upower
|
||
upower-configuration-watts-up-pro?
|
||
upower-configuration-poll-batteries?
|
||
upower-configuration-ignore-lid?
|
||
upower-configuration-use-percentage-for-policy?
|
||
upower-configuration-percentage-low
|
||
upower-configuration-percentage-critical
|
||
upower-configuration-percentage-action
|
||
upower-configuration-time-low
|
||
upower-configuration-time-critical
|
||
upower-configuration-time-action
|
||
upower-configuration-critical-power-action
|
||
|
||
upower-service
|
||
upower-service-type
|
||
|
||
udisks-configuration
|
||
udisks-configuration?
|
||
udisks-service
|
||
udisks-service-type
|
||
|
||
colord-service-type
|
||
colord-service
|
||
|
||
geoclue-application
|
||
geoclue-configuration
|
||
geoclue-configuration?
|
||
%standard-geoclue-applications
|
||
geoclue-service
|
||
geoclue-service-type
|
||
|
||
bluetooth-service-type
|
||
bluetooth-configuration
|
||
bluetooth-configuration?
|
||
bluetooth-service
|
||
|
||
elogind-configuration
|
||
elogind-configuration?
|
||
elogind-service
|
||
elogind-service-type
|
||
|
||
%fontconfig-file-system
|
||
fontconfig-file-system-service
|
||
|
||
accountsservice-service-type
|
||
accountsservice-service
|
||
|
||
cups-pk-helper-service-type
|
||
sane-service-type
|
||
|
||
gnome-desktop-configuration
|
||
gnome-desktop-configuration?
|
||
gnome-desktop-service
|
||
gnome-desktop-service-type
|
||
|
||
mate-desktop-configuration
|
||
mate-desktop-configuration?
|
||
mate-desktop-service
|
||
mate-desktop-service-type
|
||
|
||
xfce-desktop-configuration
|
||
xfce-desktop-configuration?
|
||
xfce-desktop-service
|
||
xfce-desktop-service-type
|
||
|
||
x11-socket-directory-service
|
||
|
||
enlightenment-desktop-configuration
|
||
enlightenment-desktop-configuration?
|
||
enlightenment-desktop-service-type
|
||
|
||
inputattach-configuration
|
||
inputattach-configuration?
|
||
inputattach-service-type
|
||
|
||
polkit-wheel-service
|
||
|
||
gnome-keyring-configuration
|
||
gnome-keyring-configuration?
|
||
gnome-keyring-service-type
|
||
|
||
%desktop-services))
|
||
|
||
;;; Commentary:
|
||
;;;
|
||
;;; This module contains service definitions for a "desktop" environment.
|
||
;;;
|
||
;;; Code:
|
||
|
||
|
||
;;;
|
||
;;; Helpers.
|
||
;;;
|
||
|
||
(define (bool value)
|
||
(if value "true\n" "false\n"))
|
||
|
||
(define (package-direct-input-selector input)
|
||
(lambda (package)
|
||
(match (assoc-ref (package-direct-inputs package) input)
|
||
((package . _) package))))
|
||
|
||
|
||
|
||
;;;
|
||
;;; Upower D-Bus service.
|
||
;;;
|
||
|
||
(define-record-type* <upower-configuration>
|
||
upower-configuration make-upower-configuration
|
||
upower-configuration?
|
||
(upower upower-configuration-upower
|
||
(default upower))
|
||
(watts-up-pro? upower-configuration-watts-up-pro?
|
||
(default #f))
|
||
(poll-batteries? upower-configuration-poll-batteries?
|
||
(default #t))
|
||
(ignore-lid? upower-configuration-ignore-lid?
|
||
(default #f))
|
||
(use-percentage-for-policy? upower-configuration-use-percentage-for-policy?
|
||
(default #f))
|
||
(percentage-low upower-configuration-percentage-low
|
||
(default 10))
|
||
(percentage-critical upower-configuration-percentage-critical
|
||
(default 3))
|
||
(percentage-action upower-configuration-percentage-action
|
||
(default 2))
|
||
(time-low upower-configuration-time-low
|
||
(default 1200))
|
||
(time-critical upower-configuration-time-critical
|
||
(default 300))
|
||
(time-action upower-configuration-time-action
|
||
(default 120))
|
||
(critical-power-action upower-configuration-critical-power-action
|
||
(default 'hybrid-sleep)))
|
||
|
||
(define* upower-configuration-file
|
||
;; Return an upower-daemon configuration file.
|
||
(match-lambda
|
||
(($ <upower-configuration> upower
|
||
watts-up-pro? poll-batteries? ignore-lid? use-percentage-for-policy?
|
||
percentage-low percentage-critical percentage-action time-low
|
||
time-critical time-action critical-power-action)
|
||
(plain-file "UPower.conf"
|
||
(string-append
|
||
"[UPower]\n"
|
||
"EnableWattsUpPro=" (bool watts-up-pro?)
|
||
"NoPollBatteries=" (bool (not poll-batteries?))
|
||
"IgnoreLid=" (bool ignore-lid?)
|
||
"UsePercentageForPolicy=" (bool use-percentage-for-policy?)
|
||
"PercentageLow=" (number->string percentage-low) "\n"
|
||
"PercentageCritical=" (number->string percentage-critical) "\n"
|
||
"PercentageAction=" (number->string percentage-action) "\n"
|
||
"TimeLow=" (number->string time-low) "\n"
|
||
"TimeCritical=" (number->string time-critical) "\n"
|
||
"TimeAction=" (number->string time-action) "\n"
|
||
"CriticalPowerAction=" (match critical-power-action
|
||
('hybrid-sleep "HybridSleep")
|
||
('hibernate "Hibernate")
|
||
('power-off "PowerOff"))
|
||
"\n")))))
|
||
|
||
(define %upower-activation
|
||
#~(begin
|
||
(use-modules (guix build utils))
|
||
(mkdir-p "/var/lib/upower")))
|
||
|
||
(define (upower-dbus-service config)
|
||
(list (wrapped-dbus-service (upower-configuration-upower config)
|
||
"libexec/upowerd"
|
||
`(("UPOWER_CONF_FILE_NAME"
|
||
,(upower-configuration-file config))))))
|
||
|
||
(define (upower-shepherd-service config)
|
||
"Return a shepherd service for UPower with CONFIG."
|
||
(let ((upower (upower-configuration-upower config))
|
||
(config (upower-configuration-file config)))
|
||
(list (shepherd-service
|
||
(documentation "Run the UPower power and battery monitor.")
|
||
(provision '(upower-daemon))
|
||
(requirement '(dbus-system udev))
|
||
|
||
(start #~(make-forkexec-constructor
|
||
(list (string-append #$upower "/libexec/upowerd"))
|
||
#:environment-variables
|
||
(list (string-append "UPOWER_CONF_FILE_NAME="
|
||
#$config))))
|
||
(stop #~(make-kill-destructor))))))
|
||
|
||
(define upower-service-type
|
||
(let ((upower-package (compose list upower-configuration-upower)))
|
||
(service-type (name 'upower)
|
||
(description
|
||
"Run @command{upowerd}}, a system-wide monitor for power
|
||
consumption and battery levels, with the given configuration settings. It
|
||
implements the @code{org.freedesktop.UPower} D-Bus interface, and is notably
|
||
used by GNOME.")
|
||
(extensions
|
||
(list (service-extension dbus-root-service-type
|
||
upower-dbus-service)
|
||
(service-extension shepherd-root-service-type
|
||
upower-shepherd-service)
|
||
(service-extension activation-service-type
|
||
(const %upower-activation))
|
||
(service-extension udev-service-type
|
||
upower-package)
|
||
|
||
;; Make the 'upower' command visible.
|
||
(service-extension profile-service-type
|
||
upower-package)))
|
||
(default-value (upower-configuration)))))
|
||
|
||
(define-deprecated (upower-service #:key (upower upower)
|
||
(watts-up-pro? #f)
|
||
(poll-batteries? #t)
|
||
(ignore-lid? #f)
|
||
(use-percentage-for-policy? #f)
|
||
(percentage-low 10)
|
||
(percentage-critical 3)
|
||
(percentage-action 2)
|
||
(time-low 1200)
|
||
(time-critical 300)
|
||
(time-action 120)
|
||
(critical-power-action 'hybrid-sleep))
|
||
upower-service-type
|
||
"Return a service that runs @uref{http://upower.freedesktop.org/,
|
||
@command{upowerd}}, a system-wide monitor for power consumption and battery
|
||
levels, with the given configuration settings. It implements the
|
||
@code{org.freedesktop.UPower} D-Bus interface, and is notably used by GNOME."
|
||
(let ((config (upower-configuration
|
||
(watts-up-pro? watts-up-pro?)
|
||
(poll-batteries? poll-batteries?)
|
||
(ignore-lid? ignore-lid?)
|
||
(use-percentage-for-policy? use-percentage-for-policy?)
|
||
(percentage-low percentage-low)
|
||
(percentage-critical percentage-critical)
|
||
(percentage-action percentage-action)
|
||
(time-low time-low)
|
||
(time-critical time-critical)
|
||
(time-action time-action)
|
||
(critical-power-action critical-power-action))))
|
||
(service upower-service-type config)))
|
||
|
||
|
||
;;;
|
||
;;; GeoClue D-Bus service.
|
||
;;;
|
||
|
||
;; TODO: Export.
|
||
(define-record-type* <geoclue-configuration>
|
||
geoclue-configuration make-geoclue-configuration
|
||
geoclue-configuration?
|
||
(geoclue geoclue-configuration-geoclue
|
||
(default geoclue))
|
||
(whitelist geoclue-configuration-whitelist)
|
||
(wifi-geolocation-url geoclue-configuration-wifi-geolocation-url)
|
||
(submit-data? geoclue-configuration-submit-data?)
|
||
(wifi-submission-url geoclue-configuration-wifi-submission-url)
|
||
(submission-nick geoclue-configuration-submission-nick)
|
||
(applications geoclue-configuration-applications))
|
||
|
||
(define* (geoclue-application name #:key (allowed? #t) system? (users '()))
|
||
"Configure default GeoClue access permissions for an application. NAME is
|
||
the Desktop ID of the application, without the .desktop part. If ALLOWED? is
|
||
true, the application will have access to location information by default.
|
||
The boolean SYSTEM? value indicates that an application is a system component
|
||
or not. Finally USERS is a list of UIDs of all users for which this
|
||
application is allowed location info access. An empty users list means all
|
||
users are allowed."
|
||
(string-append
|
||
"[" name "]\n"
|
||
"allowed=" (bool allowed?)
|
||
"system=" (bool system?)
|
||
"users=" (string-join users ";") "\n"))
|
||
|
||
(define %standard-geoclue-applications
|
||
(list (geoclue-application "gnome-datetime-panel" #:system? #t)
|
||
(geoclue-application "epiphany" #:system? #f)
|
||
(geoclue-application "firefox" #:system? #f)))
|
||
|
||
(define* (geoclue-configuration-file config)
|
||
"Return a geoclue configuration file."
|
||
(plain-file "geoclue.conf"
|
||
(string-append
|
||
"[agent]\n"
|
||
"whitelist="
|
||
(string-join (geoclue-configuration-whitelist config)
|
||
";") "\n"
|
||
"[wifi]\n"
|
||
"url=" (geoclue-configuration-wifi-geolocation-url config) "\n"
|
||
"submit-data=" (bool (geoclue-configuration-submit-data? config))
|
||
"submission-url="
|
||
(geoclue-configuration-wifi-submission-url config) "\n"
|
||
"submission-nick="
|
||
(geoclue-configuration-submission-nick config)
|
||
"\n"
|
||
(string-join (geoclue-configuration-applications config)
|
||
"\n"))))
|
||
|
||
(define (geoclue-dbus-service config)
|
||
(list (wrapped-dbus-service (geoclue-configuration-geoclue config)
|
||
"libexec/geoclue"
|
||
`(("GEOCLUE_CONFIG_FILE"
|
||
,(geoclue-configuration-file config))))))
|
||
|
||
(define %geoclue-accounts
|
||
(list (user-group (name "geoclue") (system? #t))
|
||
(user-account
|
||
(name "geoclue")
|
||
(group "geoclue")
|
||
(system? #t)
|
||
(comment "GeoClue daemon user")
|
||
(home-directory "/var/empty")
|
||
(shell "/run/current-system/profile/sbin/nologin"))))
|
||
|
||
(define geoclue-service-type
|
||
(service-type (name 'geoclue)
|
||
(extensions
|
||
(list (service-extension dbus-root-service-type
|
||
geoclue-dbus-service)
|
||
(service-extension account-service-type
|
||
(const %geoclue-accounts))))))
|
||
|
||
(define* (geoclue-service #:key (geoclue geoclue)
|
||
(whitelist '())
|
||
(wifi-geolocation-url
|
||
;; Mozilla geolocation service:
|
||
"https://location.services.mozilla.com/v1/geolocate?key=geoclue")
|
||
(submit-data? #f)
|
||
(wifi-submission-url
|
||
"https://location.services.mozilla.com/v1/submit?key=geoclue")
|
||
(submission-nick "geoclue")
|
||
(applications %standard-geoclue-applications))
|
||
"Return a service that runs the @command{geoclue} location service. This
|
||
service provides a D-Bus interface to allow applications to request access to
|
||
a user's physical location, and optionally to add information to online
|
||
location databases. By default, only the GNOME date-time panel and the Icecat
|
||
and Epiphany web browsers are able to ask for the user's location, and in the
|
||
case of Icecat and Epiphany, both will ask the user for permission first. See
|
||
@uref{https://wiki.freedesktop.org/www/Software/GeoClue/, the geoclue web
|
||
site} for more information."
|
||
(service geoclue-service-type
|
||
(geoclue-configuration
|
||
(geoclue geoclue)
|
||
(whitelist whitelist)
|
||
(wifi-geolocation-url wifi-geolocation-url)
|
||
(submit-data? submit-data?)
|
||
(wifi-submission-url wifi-submission-url)
|
||
(submission-nick submission-nick)
|
||
(applications applications))))
|
||
|
||
|
||
;;;
|
||
;;; Bluetooth.
|
||
;;;
|
||
|
||
(define-record-type* <bluetooth-configuration>
|
||
bluetooth-configuration make-bluetooth-configuration
|
||
bluetooth-configuration?
|
||
(bluez bluetooth-configuration-bluez (default bluez))
|
||
(auto-enable? bluetooth-configuration-auto-enable? (default #f)))
|
||
|
||
(define (bluetooth-configuration-file config)
|
||
"Return a configuration file for the systemd bluetooth service, as a string."
|
||
(string-append
|
||
"[Policy]\n"
|
||
"AutoEnable=" (bool (bluetooth-configuration-auto-enable?
|
||
config))))
|
||
|
||
(define (bluetooth-directory config)
|
||
(computed-file "etc-bluetooth"
|
||
#~(begin
|
||
(mkdir #$output)
|
||
(chdir #$output)
|
||
(call-with-output-file "main.conf"
|
||
(lambda (port)
|
||
(display #$(bluetooth-configuration-file config)
|
||
port))))))
|
||
|
||
(define (bluetooth-shepherd-service config)
|
||
"Return a shepherd service for @command{bluetoothd}."
|
||
(shepherd-service
|
||
(provision '(bluetooth))
|
||
(requirement '(dbus-system udev))
|
||
(documentation "Run the bluetoothd daemon.")
|
||
(start #~(make-forkexec-constructor
|
||
(list #$(file-append (bluetooth-configuration-bluez config)
|
||
"/libexec/bluetooth/bluetoothd"))))
|
||
(stop #~(make-kill-destructor))))
|
||
|
||
(define bluetooth-service-type
|
||
(service-type
|
||
(name 'bluetooth)
|
||
(extensions
|
||
(list (service-extension dbus-root-service-type
|
||
(compose list bluetooth-configuration-bluez))
|
||
(service-extension udev-service-type
|
||
(compose list bluetooth-configuration-bluez))
|
||
(service-extension etc-service-type
|
||
(lambda (config)
|
||
`(("bluetooth"
|
||
,(bluetooth-directory config)))))
|
||
(service-extension shepherd-root-service-type
|
||
(compose list bluetooth-shepherd-service))))
|
||
(description "Run the @command{bluetoothd} daemon, which manages all the
|
||
Bluetooth devices and provides a number of D-Bus interfaces.")))
|
||
|
||
(define* (bluetooth-service #:key (bluez bluez) (auto-enable? #f))
|
||
"Return a service that runs the @command{bluetoothd} daemon, which manages
|
||
all the Bluetooth devices and provides a number of D-Bus interfaces. When
|
||
AUTO-ENABLE? is true, the bluetooth controller is powered automatically at
|
||
boot.
|
||
|
||
Users need to be in the @code{lp} group to access the D-Bus service.
|
||
"
|
||
(service bluetooth-service-type
|
||
(bluetooth-configuration
|
||
(bluez bluez)
|
||
(auto-enable? auto-enable?))))
|
||
|
||
|
||
;;;
|
||
;;; Colord D-Bus service.
|
||
;;;
|
||
|
||
(define %colord-activation
|
||
#~(begin
|
||
(use-modules (guix build utils))
|
||
(mkdir-p "/var/lib/colord")
|
||
(let ((user (getpwnam "colord")))
|
||
(chown "/var/lib/colord"
|
||
(passwd:uid user) (passwd:gid user)))))
|
||
|
||
(define %colord-accounts
|
||
(list (user-group (name "colord") (system? #t))
|
||
(user-account
|
||
(name "colord")
|
||
(group "colord")
|
||
(system? #t)
|
||
(comment "colord daemon user")
|
||
(home-directory "/var/empty")
|
||
(shell (file-append shadow "/sbin/nologin")))))
|
||
|
||
(define colord-service-type
|
||
(service-type (name 'colord)
|
||
(extensions
|
||
(list (service-extension account-service-type
|
||
(const %colord-accounts))
|
||
(service-extension activation-service-type
|
||
(const %colord-activation))
|
||
|
||
;; Colord is a D-Bus service that dbus-daemon can
|
||
;; activate.
|
||
(service-extension dbus-root-service-type list)
|
||
|
||
;; Colord provides "color device" rules for udev.
|
||
(service-extension udev-service-type list)
|
||
|
||
;; It provides polkit "actions".
|
||
(service-extension polkit-service-type list)))
|
||
(default-value colord)
|
||
(description
|
||
"Run @command{colord}, a system service with a D-Bus
|
||
interface to manage the color profiles of input and output devices such as
|
||
screens and scanners.")))
|
||
|
||
(define-deprecated (colord-service #:key (colord colord))
|
||
colord-service-type
|
||
"Return a service that runs @command{colord}, a system service with a D-Bus
|
||
interface to manage the color profiles of input and output devices such as
|
||
screens and scanners. It is notably used by the GNOME Color Manager graphical
|
||
tool. See @uref{http://www.freedesktop.org/software/colord/, the colord web
|
||
site} for more information."
|
||
(service colord-service-type colord))
|
||
|
||
|
||
;;;
|
||
;;; UDisks.
|
||
;;;
|
||
|
||
(define-record-type* <udisks-configuration>
|
||
udisks-configuration make-udisks-configuration
|
||
udisks-configuration?
|
||
(udisks udisks-configuration-udisks
|
||
(default udisks)))
|
||
|
||
(define %udisks-activation
|
||
(with-imported-modules '((guix build utils))
|
||
#~(begin
|
||
(use-modules (guix build utils))
|
||
|
||
(let ((run-dir "/var/run/udisks2"))
|
||
(mkdir-p run-dir)
|
||
(chmod run-dir #o700)))))
|
||
|
||
(define udisks-service-type
|
||
(let ((udisks-package (lambda (config)
|
||
(list (udisks-configuration-udisks config)))))
|
||
(service-type (name 'udisks)
|
||
(extensions
|
||
(list (service-extension polkit-service-type
|
||
udisks-package)
|
||
(service-extension dbus-root-service-type
|
||
udisks-package)
|
||
(service-extension udev-service-type
|
||
udisks-package)
|
||
(service-extension activation-service-type
|
||
(const %udisks-activation))
|
||
|
||
;; Profile 'udisksctl' & co. in the system profile.
|
||
(service-extension profile-service-type
|
||
udisks-package))))))
|
||
|
||
(define* (udisks-service #:key (udisks udisks))
|
||
"Return a service for @uref{http://udisks.freedesktop.org/docs/latest/,
|
||
UDisks}, a @dfn{disk management} daemon that provides user interfaces with
|
||
notifications and ways to mount/unmount disks. Programs that talk to UDisks
|
||
include the @command{udisksctl} command, part of UDisks, and GNOME Disks."
|
||
(service udisks-service-type
|
||
(udisks-configuration (udisks udisks))))
|
||
|
||
|
||
;;;
|
||
;;; Elogind login and seat management service.
|
||
;;;
|
||
|
||
(define-record-type* <elogind-configuration> elogind-configuration
|
||
make-elogind-configuration
|
||
elogind-configuration?
|
||
(elogind elogind-package
|
||
(default elogind))
|
||
(kill-user-processes? elogind-kill-user-processes?
|
||
(default #f))
|
||
(kill-only-users elogind-kill-only-users
|
||
(default '()))
|
||
(kill-exclude-users elogind-kill-exclude-users
|
||
(default '("root")))
|
||
(inhibit-delay-max-seconds elogind-inhibit-delay-max-seconds
|
||
(default 5))
|
||
(handle-power-key elogind-handle-power-key
|
||
(default 'poweroff))
|
||
(handle-suspend-key elogind-handle-suspend-key
|
||
(default 'suspend))
|
||
(handle-hibernate-key elogind-handle-hibernate-key
|
||
;; (default 'hibernate)
|
||
;; XXX Ignore it for now, since we don't
|
||
;; yet handle resume-from-hibernation in
|
||
;; our initrd.
|
||
(default 'ignore))
|
||
(handle-lid-switch elogind-handle-lid-switch
|
||
(default 'suspend))
|
||
(handle-lid-switch-docked elogind-handle-lid-switch-docked
|
||
(default 'ignore))
|
||
(power-key-ignore-inhibited? elogind-power-key-ignore-inhibited?
|
||
(default #f))
|
||
(suspend-key-ignore-inhibited? elogind-suspend-key-ignore-inhibited?
|
||
(default #f))
|
||
(hibernate-key-ignore-inhibited? elogind-hibernate-key-ignore-inhibited?
|
||
(default #f))
|
||
(lid-switch-ignore-inhibited? elogind-lid-switch-ignore-inhibited?
|
||
(default #t))
|
||
(holdoff-timeout-seconds elogind-holdoff-timeout-seconds
|
||
(default 30))
|
||
(idle-action elogind-idle-action
|
||
(default 'ignore))
|
||
(idle-action-seconds elogind-idle-action-seconds
|
||
(default (* 30 60)))
|
||
(runtime-directory-size-percent elogind-runtime-directory-size-percent
|
||
(default 10))
|
||
(runtime-directory-size elogind-runtime-directory-size
|
||
(default #f))
|
||
(remove-ipc? elogind-remove-ipc?
|
||
(default #t))
|
||
|
||
(suspend-state elogind-suspend-state
|
||
(default '("mem" "standby" "freeze")))
|
||
(suspend-mode elogind-suspend-mode
|
||
(default '()))
|
||
(hibernate-state elogind-hibernate-state
|
||
(default '("disk")))
|
||
(hibernate-mode elogind-hibernate-mode
|
||
(default '("platform" "shutdown")))
|
||
(hybrid-sleep-state elogind-hybrid-sleep-state
|
||
(default '("disk")))
|
||
(hybrid-sleep-mode elogind-hybrid-sleep-mode
|
||
(default
|
||
'("suspend" "platform" "shutdown"))))
|
||
|
||
(define (elogind-configuration-file config)
|
||
(define (yesno x)
|
||
(match x
|
||
(#t "yes")
|
||
(#f "no")
|
||
(_ (error "expected #t or #f, instead got:" x))))
|
||
(define char-set:user-name
|
||
(string->char-set "abcdefghijklmnopqrstuvwxyz0123456789_-"))
|
||
(define (valid-list? l pred)
|
||
(and-map (lambda (x) (string-every pred x)) l))
|
||
(define (user-name-list users)
|
||
(unless (valid-list? users char-set:user-name)
|
||
(error "invalid user list" users))
|
||
(string-join users " "))
|
||
(define (enum val allowed)
|
||
(unless (memq val allowed)
|
||
(error "invalid value" val allowed))
|
||
(symbol->string val))
|
||
(define (non-negative-integer x)
|
||
(unless (exact-integer? x) (error "not an integer" x))
|
||
(when (negative? x) (error "negative number not allowed" x))
|
||
(number->string x))
|
||
(define handle-actions
|
||
'(ignore poweroff reboot halt kexec suspend hibernate hybrid-sleep lock))
|
||
(define (handle-action x)
|
||
(enum x handle-actions))
|
||
(define (sleep-list tokens)
|
||
(unless (valid-list? tokens char-set:user-name)
|
||
(error "invalid sleep list" tokens))
|
||
(string-join tokens " "))
|
||
(define-syntax ini-file-clause
|
||
(syntax-rules ()
|
||
((_ config (prop (parser getter)))
|
||
(string-append prop "=" (parser (getter config)) "\n"))
|
||
((_ config str)
|
||
(string-append str "\n"))))
|
||
(define-syntax-rule (ini-file config file clause ...)
|
||
(plain-file file (string-append (ini-file-clause config clause) ...)))
|
||
(ini-file
|
||
config "logind.conf"
|
||
"[Login]"
|
||
("KillUserProcesses" (yesno elogind-kill-user-processes?))
|
||
("KillOnlyUsers" (user-name-list elogind-kill-only-users))
|
||
("KillExcludeUsers" (user-name-list elogind-kill-exclude-users))
|
||
("InhibitDelayMaxSec" (non-negative-integer elogind-inhibit-delay-max-seconds))
|
||
("HandlePowerKey" (handle-action elogind-handle-power-key))
|
||
("HandleSuspendKey" (handle-action elogind-handle-suspend-key))
|
||
("HandleHibernateKey" (handle-action elogind-handle-hibernate-key))
|
||
("HandleLidSwitch" (handle-action elogind-handle-lid-switch))
|
||
("HandleLidSwitchDocked" (handle-action elogind-handle-lid-switch-docked))
|
||
("PowerKeyIgnoreInhibited" (yesno elogind-power-key-ignore-inhibited?))
|
||
("SuspendKeyIgnoreInhibited" (yesno elogind-suspend-key-ignore-inhibited?))
|
||
("HibernateKeyIgnoreInhibited" (yesno elogind-hibernate-key-ignore-inhibited?))
|
||
("LidSwitchIgnoreInhibited" (yesno elogind-lid-switch-ignore-inhibited?))
|
||
("HoldoffTimeoutSec" (non-negative-integer elogind-holdoff-timeout-seconds))
|
||
("IdleAction" (handle-action elogind-idle-action))
|
||
("IdleActionSec" (non-negative-integer elogind-idle-action-seconds))
|
||
("RuntimeDirectorySize"
|
||
(identity
|
||
(lambda (config)
|
||
(match (elogind-runtime-directory-size-percent config)
|
||
(#f (non-negative-integer (elogind-runtime-directory-size config)))
|
||
(percent (string-append (non-negative-integer percent) "%"))))))
|
||
("RemoveIPC" (yesno elogind-remove-ipc?))
|
||
"[Sleep]"
|
||
("SuspendState" (sleep-list elogind-suspend-state))
|
||
("SuspendMode" (sleep-list elogind-suspend-mode))
|
||
("HibernateState" (sleep-list elogind-hibernate-state))
|
||
("HibernateMode" (sleep-list elogind-hibernate-mode))
|
||
("HybridSleepState" (sleep-list elogind-hybrid-sleep-state))
|
||
("HybridSleepMode" (sleep-list elogind-hybrid-sleep-mode))))
|
||
|
||
(define (elogind-dbus-service config)
|
||
(list (wrapped-dbus-service (elogind-package config)
|
||
"libexec/elogind/elogind"
|
||
`(("ELOGIND_CONF_FILE"
|
||
,(elogind-configuration-file config))))))
|
||
|
||
(define (pam-extension-procedure config)
|
||
"Return an extension for PAM-ROOT-SERVICE-TYPE that ensures that all the PAM
|
||
services use 'pam_elogind.so', a module that allows elogind to keep track of
|
||
logged-in users (run 'loginctl' to see elogind's world view of users and
|
||
seats.)"
|
||
(define pam-elogind
|
||
(pam-entry
|
||
(control "required")
|
||
(module (file-append (elogind-package config)
|
||
"/lib/security/pam_elogind.so"))))
|
||
|
||
(list (lambda (pam)
|
||
(pam-service
|
||
(inherit pam)
|
||
(session (cons pam-elogind (pam-service-session pam)))))))
|
||
|
||
(define (elogind-shepherd-service config)
|
||
"Return a Shepherd service to start elogind according to @var{config}."
|
||
(list (shepherd-service
|
||
(requirement '(dbus-system))
|
||
(provision '(elogind))
|
||
(start #~(make-forkexec-constructor
|
||
(list #$(file-append (elogind-package config)
|
||
"/libexec/elogind/elogind"))
|
||
#:environment-variables
|
||
(list (string-append "ELOGIND_CONF_FILE="
|
||
#$(elogind-configuration-file
|
||
config)))))
|
||
(stop #~(make-kill-destructor)))))
|
||
|
||
(define elogind-service-type
|
||
(service-type (name 'elogind)
|
||
(extensions
|
||
(list (service-extension dbus-root-service-type
|
||
elogind-dbus-service)
|
||
(service-extension udev-service-type
|
||
(compose list elogind-package))
|
||
(service-extension polkit-service-type
|
||
(compose list elogind-package))
|
||
|
||
;; Start elogind from the Shepherd rather than waiting
|
||
;; for bus activation. This ensures that it can handle
|
||
;; events like lid close, etc.
|
||
(service-extension shepherd-root-service-type
|
||
elogind-shepherd-service)
|
||
|
||
;; Provide the 'loginctl' command.
|
||
(service-extension profile-service-type
|
||
(compose list elogind-package))
|
||
|
||
;; Extend PAM with pam_elogind.so.
|
||
(service-extension pam-root-service-type
|
||
pam-extension-procedure)
|
||
|
||
;; We need /run/user, /run/systemd, etc.
|
||
(service-extension file-system-service-type
|
||
(const %elogind-file-systems))))
|
||
(default-value (elogind-configuration))))
|
||
|
||
(define* (elogind-service #:key (config (elogind-configuration)))
|
||
"Return a service that runs the @command{elogind} login and seat management
|
||
service. The @command{elogind} service integrates with PAM to allow other
|
||
system components to know the set of logged-in users as well as their session
|
||
types (graphical, console, remote, etc.). It can also clean up after users
|
||
when they log out."
|
||
(service elogind-service-type config))
|
||
|
||
|
||
;;;
|
||
;;; Fontconfig and other desktop file-systems.
|
||
;;;
|
||
|
||
(define %fontconfig-file-system
|
||
(file-system
|
||
(device "none")
|
||
(mount-point "/var/cache/fontconfig")
|
||
(type "tmpfs")
|
||
(flags '(read-only))
|
||
(check? #f)))
|
||
|
||
;; The global fontconfig cache directory can sometimes contain stale entries,
|
||
;; possibly referencing fonts that have been GC'd, so mount it read-only.
|
||
;; As mentioned https://debbugs.gnu.org/cgi/bugreport.cgi?bug=36924#8 and
|
||
;; https://debbugs.gnu.org/cgi/bugreport.cgi?bug=38046#10 and elsewhere.
|
||
(define fontconfig-file-system-service
|
||
(simple-service 'fontconfig-file-system
|
||
file-system-service-type
|
||
(list %fontconfig-file-system)))
|
||
|
||
;;;
|
||
;;; AccountsService service.
|
||
;;;
|
||
|
||
(define %accountsservice-activation
|
||
#~(begin
|
||
(use-modules (guix build utils))
|
||
(mkdir-p "/var/lib/AccountsService")))
|
||
|
||
(define accountsservice-service-type
|
||
(service-type (name 'accountsservice)
|
||
(extensions
|
||
(list (service-extension activation-service-type
|
||
(const %accountsservice-activation))
|
||
(service-extension dbus-root-service-type list)
|
||
(service-extension polkit-service-type list)))))
|
||
|
||
(define* (accountsservice-service #:key (accountsservice accountsservice))
|
||
"Return a service that runs AccountsService, a system service that
|
||
can list available accounts, change their passwords, and so on.
|
||
AccountsService integrates with PolicyKit to enable unprivileged users to
|
||
acquire the capability to modify their system configuration.
|
||
@uref{https://www.freedesktop.org/wiki/Software/AccountsService/, the
|
||
accountsservice web site} for more information."
|
||
(service accountsservice-service-type accountsservice))
|
||
|
||
|
||
;;;
|
||
;;; cups-pk-helper service.
|
||
;;;
|
||
|
||
(define cups-pk-helper-service-type
|
||
(service-type
|
||
(name 'cups-pk-helper)
|
||
(description
|
||
"PolicyKit helper to configure CUPS with fine-grained privileges.")
|
||
(extensions
|
||
(list (service-extension dbus-root-service-type list)
|
||
(service-extension polkit-service-type list)))
|
||
(default-value cups-pk-helper)))
|
||
|
||
|
||
;;;
|
||
;;; Scanner access via SANE.
|
||
;;;
|
||
|
||
(define %sane-accounts
|
||
;; The '60-libsane.rules' udev rules refers to the "scanner" group.
|
||
(list (user-group (name "scanner") (system? #t))))
|
||
|
||
(define sane-service-type
|
||
(service-type
|
||
(name 'sane)
|
||
(description
|
||
"This service provides access to scanners @i{via}
|
||
@uref{http://www.sane-project.org, SANE} by installing the necessary udev
|
||
rules.")
|
||
(default-value sane-backends-minimal)
|
||
(extensions
|
||
(list (service-extension udev-service-type list)
|
||
(service-extension account-service-type
|
||
(const %sane-accounts))))))
|
||
|
||
|
||
|
||
;;;
|
||
;;; GNOME desktop service.
|
||
;;;
|
||
|
||
(define-record-type* <gnome-desktop-configuration> gnome-desktop-configuration
|
||
make-gnome-desktop-configuration
|
||
gnome-desktop-configuration?
|
||
(gnome gnome-package (default gnome)))
|
||
|
||
(define (gnome-polkit-settings config)
|
||
"Return the list of GNOME dependencies that provide polkit actions and
|
||
rules."
|
||
(let ((gnome (gnome-package config)))
|
||
(map (lambda (name)
|
||
((package-direct-input-selector name) gnome))
|
||
'("gnome-settings-daemon"
|
||
"gnome-control-center"
|
||
"gnome-system-monitor"
|
||
"gvfs"))))
|
||
|
||
(define gnome-desktop-service-type
|
||
(service-type
|
||
(name 'gnome-desktop)
|
||
(extensions
|
||
(list (service-extension polkit-service-type
|
||
gnome-polkit-settings)
|
||
(service-extension profile-service-type
|
||
(compose list
|
||
gnome-package))))
|
||
(default-value (gnome-desktop-configuration))
|
||
(description "Run the GNOME desktop environment.")))
|
||
|
||
(define-deprecated (gnome-desktop-service #:key (config
|
||
(gnome-desktop-configuration)))
|
||
gnome-desktop-service-type
|
||
"Return a service that adds the @code{gnome} package to the system profile,
|
||
and extends polkit with the actions from @code{gnome-settings-daemon}."
|
||
(service gnome-desktop-service-type config))
|
||
|
||
;; MATE Desktop service.
|
||
;; TODO: Add mate-screensaver.
|
||
|
||
(define-record-type* <mate-desktop-configuration> mate-desktop-configuration
|
||
make-mate-desktop-configuration
|
||
mate-desktop-configuration?
|
||
(mate-package mate-package (default mate)))
|
||
|
||
(define (mate-polkit-extension config)
|
||
"Return the list of packages for CONFIG's MATE package that extend polkit."
|
||
(let ((mate (mate-package config)))
|
||
(map (lambda (input)
|
||
((package-direct-input-selector input) mate))
|
||
'("mate-system-monitor" ;kill, renice processes
|
||
"mate-settings-daemon" ;date/time settings
|
||
"mate-power-manager" ;modify brightness
|
||
"mate-control-center" ;RandR, display properties FIXME
|
||
"mate-applets")))) ;CPU frequency scaling
|
||
|
||
(define mate-desktop-service-type
|
||
(service-type
|
||
(name 'mate-desktop)
|
||
(extensions
|
||
(list (service-extension polkit-service-type
|
||
mate-polkit-extension)
|
||
(service-extension profile-service-type
|
||
(compose list
|
||
mate-package))))
|
||
(default-value (mate-desktop-configuration))
|
||
(description "Run the MATE desktop environment.")))
|
||
|
||
(define-deprecated (mate-desktop-service #:key
|
||
(config
|
||
(mate-desktop-configuration)))
|
||
mate-desktop-service-type
|
||
"Return a service that adds the @code{mate} package to the system profile,
|
||
and extends polkit with the actions from @code{mate-settings-daemon}."
|
||
(service mate-desktop-service-type config))
|
||
|
||
|
||
;;;
|
||
;;; XFCE desktop service.
|
||
;;;
|
||
|
||
(define-record-type* <xfce-desktop-configuration> xfce-desktop-configuration
|
||
make-xfce-desktop-configuration
|
||
xfce-desktop-configuration?
|
||
(xfce xfce-package (default xfce)))
|
||
|
||
(define (xfce-polkit-settings config)
|
||
"Return the list of XFCE dependencies that provide polkit actions and
|
||
rules."
|
||
(let ((xfce (xfce-package config)))
|
||
(map (lambda (name)
|
||
((package-direct-input-selector name) xfce))
|
||
'("thunar"
|
||
"xfce4-power-manager"))))
|
||
|
||
(define xfce-desktop-service-type
|
||
(service-type
|
||
(name 'xfce-desktop)
|
||
(extensions
|
||
(list (service-extension polkit-service-type
|
||
xfce-polkit-settings)
|
||
(service-extension profile-service-type
|
||
(compose list xfce-package))))
|
||
(default-value (xfce-desktop-configuration))
|
||
(description "Run the Xfce desktop environment.")))
|
||
|
||
(define-deprecated (xfce-desktop-service #:key (config
|
||
(xfce-desktop-configuration)))
|
||
xfce-desktop-service-type
|
||
"Return a service that adds the @code{xfce} package to the system profile,
|
||
and extends polkit with the ability for @code{thunar} to manipulate the file
|
||
system as root from within a user session, after the user has authenticated
|
||
with the administrator's password."
|
||
(service xfce-desktop-service-type config))
|
||
|
||
|
||
;;;
|
||
;;; X11 socket directory service
|
||
;;;
|
||
|
||
(define x11-socket-directory-service
|
||
;; Return a service that creates /tmp/.X11-unix. When using X11, libxcb
|
||
;; takes care of creating that directory. However, when using XWayland, we
|
||
;; need to create beforehand. Thus, create it unconditionally here.
|
||
(simple-service 'x11-socket-directory
|
||
activation-service-type
|
||
(with-imported-modules '((guix build utils))
|
||
#~(begin
|
||
(use-modules (guix build utils))
|
||
(let ((directory "/tmp/.X11-unix"))
|
||
(mkdir-p directory)
|
||
(chmod directory #o777))))))
|
||
|
||
;;;
|
||
;;; Enlightenment desktop service.
|
||
;;;
|
||
|
||
(define-record-type* <enlightenment-desktop-configuration>
|
||
enlightenment-desktop-configuration make-enlightenment-desktop-configuration
|
||
enlightenment-desktop-configuration?
|
||
;; <package>
|
||
(enlightenment enlightenment-package
|
||
(default enlightenment)))
|
||
|
||
(define (enlightenment-setuid-programs enlightenment-desktop-configuration)
|
||
(match-record enlightenment-desktop-configuration
|
||
<enlightenment-desktop-configuration>
|
||
(enlightenment)
|
||
(let ((module-arch (match (string-tokenize (%current-system)
|
||
(char-set-complement (char-set #\-)))
|
||
((arch "linux") (string-append "linux-gnu-" arch))
|
||
((arch "gnu") (string-append "gnu-" arch)))))
|
||
(list (file-append enlightenment
|
||
"/lib/enlightenment/utils/enlightenment_sys")
|
||
(file-append enlightenment
|
||
"/lib/enlightenment/utils/enlightenment_backlight")
|
||
;; TODO: Move this binary to a screen-locker service.
|
||
(file-append enlightenment
|
||
"/lib/enlightenment/utils/enlightenment_ckpasswd")
|
||
(file-append enlightenment
|
||
(string-append
|
||
"/lib/enlightenment/modules/cpufreq/"
|
||
module-arch "-"
|
||
(package-version enlightenment)
|
||
"/freqset"))
|
||
(file-append enlightenment
|
||
(string-append
|
||
"/lib/enlightenment/modules/sysinfo/"
|
||
module-arch "-"
|
||
(package-version enlightenment)
|
||
"/cpuclock_sysfs"))))))
|
||
|
||
(define enlightenment-desktop-service-type
|
||
(service-type
|
||
(name 'enlightenment-desktop)
|
||
(extensions
|
||
(list (service-extension dbus-root-service-type
|
||
(compose list
|
||
(package-direct-input-selector
|
||
"efl")
|
||
enlightenment-package))
|
||
(service-extension setuid-program-service-type
|
||
enlightenment-setuid-programs)
|
||
(service-extension profile-service-type
|
||
(compose list
|
||
enlightenment-package))))
|
||
(default-value (enlightenment-desktop-configuration))
|
||
(description
|
||
"Return a service that adds the @code{enlightenment} package to the system
|
||
profile, and extends dbus with the ability for @code{efl} to generate
|
||
thumbnails and makes setuid the programs which enlightenment needs to function
|
||
as expected.")))
|
||
|
||
|
||
;;;
|
||
;;; inputattach-service-type
|
||
;;;
|
||
|
||
(define-record-type* <inputattach-configuration>
|
||
inputattach-configuration
|
||
make-inputattach-configuration
|
||
inputattach-configuration?
|
||
(device-type inputattach-configuration-device-type
|
||
(default "wacom"))
|
||
(device inputattach-configuration-device
|
||
(default "/dev/ttyS0"))
|
||
(baud-rate inputattach-configuration-baud-rate
|
||
(default #f))
|
||
(log-file inputattach-configuration-log-file
|
||
(default #f)))
|
||
|
||
(define inputattach-shepherd-service
|
||
(match-lambda
|
||
(($ <inputattach-configuration> type device baud-rate log-file)
|
||
(let ((args (append (if baud-rate
|
||
(list "--baud" (number->string baud-rate))
|
||
'())
|
||
(list (string-append "--" type)
|
||
device))))
|
||
(list (shepherd-service
|
||
(provision '(inputattach))
|
||
(requirement '(udev))
|
||
(documentation "inputattach daemon")
|
||
(start #~(make-forkexec-constructor
|
||
(cons (string-append #$inputattach
|
||
"/bin/inputattach")
|
||
(quote #$args))
|
||
#:log-file #$log-file))
|
||
(stop #~(make-kill-destructor))))))))
|
||
|
||
(define inputattach-service-type
|
||
(service-type
|
||
(name 'inputattach)
|
||
(extensions
|
||
(list (service-extension shepherd-root-service-type
|
||
inputattach-shepherd-service)))
|
||
(default-value (inputattach-configuration))
|
||
(description "Return a service that runs inputattach on a device and
|
||
dispatches events from it.")))
|
||
|
||
|
||
;;;
|
||
;;; gnome-keyring-service-type
|
||
;;;
|
||
|
||
(define-record-type* <gnome-keyring-configuration> gnome-keyring-configuration
|
||
make-gnome-keyring-configuration
|
||
gnome-keyring-configuration?
|
||
(keyring gnome-keyring-package (default gnome-keyring))
|
||
(pam-services gnome-keyring-pam-services (default '(("gdm-password" . login)
|
||
("passwd" . passwd)))))
|
||
|
||
(define (pam-gnome-keyring config)
|
||
(define (%pam-keyring-entry . arguments)
|
||
(pam-entry
|
||
(control "optional")
|
||
(module (file-append (gnome-keyring-package config)
|
||
"/lib/security/pam_gnome_keyring.so"))
|
||
(arguments arguments)))
|
||
|
||
(list
|
||
(lambda (service)
|
||
(case (assoc-ref (gnome-keyring-pam-services config)
|
||
(pam-service-name service))
|
||
((login)
|
||
(pam-service
|
||
(inherit service)
|
||
(auth (append (pam-service-auth service)
|
||
(list (%pam-keyring-entry))))
|
||
(session (append (pam-service-session service)
|
||
(list (%pam-keyring-entry "auto_start"))))))
|
||
((passwd)
|
||
(pam-service
|
||
(inherit service)
|
||
(password (append (pam-service-password service)
|
||
(list (%pam-keyring-entry))))))
|
||
(else service)))))
|
||
|
||
(define gnome-keyring-service-type
|
||
(service-type
|
||
(name 'gnome-keyring)
|
||
(extensions (list
|
||
(service-extension pam-root-service-type pam-gnome-keyring)))
|
||
(default-value (gnome-keyring-configuration))
|
||
(description "Return a service, that adds the @code{gnome-keyring} package
|
||
to the system profile and extends PAM with entries using
|
||
@code{pam_gnome_keyring.so}, unlocking a user's login keyring when they log in
|
||
or setting its password with passwd.")))
|
||
|
||
|
||
;;;
|
||
;;; polkit-wheel-service -- Allow wheel group to perform admin actions
|
||
;;;
|
||
|
||
(define polkit-wheel
|
||
(file-union
|
||
"polkit-wheel"
|
||
`(("share/polkit-1/rules.d/wheel.rules"
|
||
,(plain-file
|
||
"wheel.rules"
|
||
"polkit.addAdminRule(function(action, subject) {
|
||
return [\"unix-group:wheel\"];
|
||
});
|
||
")))))
|
||
|
||
(define polkit-wheel-service
|
||
(simple-service 'polkit-wheel polkit-service-type (list polkit-wheel)))
|
||
|
||
|
||
;;;
|
||
;;; The default set of desktop services.
|
||
;;;
|
||
|
||
(define %desktop-services
|
||
;; List of services typically useful for a "desktop" use case.
|
||
(cons* (service gdm-service-type)
|
||
|
||
;; Screen lockers are a pretty useful thing and these are small.
|
||
(screen-locker-service slock)
|
||
(screen-locker-service xlockmore "xlock")
|
||
|
||
;; Add udev rules for MTP devices so that non-root users can access
|
||
;; them.
|
||
(simple-service 'mtp udev-service-type (list libmtp))
|
||
;; Add udev rules for scanners.
|
||
(service sane-service-type)
|
||
;; Add polkit rules, so that non-root users in the wheel group can
|
||
;; perform administrative tasks (similar to "sudo").
|
||
polkit-wheel-service
|
||
|
||
;; The global fontconfig cache directory can sometimes contain
|
||
;; stale entries, possibly referencing fonts that have been GC'd,
|
||
;; so mount it read-only.
|
||
fontconfig-file-system-service
|
||
|
||
;; NetworkManager and its applet.
|
||
(service network-manager-service-type)
|
||
(service wpa-supplicant-service-type) ;needed by NetworkManager
|
||
(simple-service 'network-manager-applet
|
||
profile-service-type
|
||
(list network-manager-applet))
|
||
(service modem-manager-service-type)
|
||
(service usb-modeswitch-service-type)
|
||
|
||
;; The D-Bus clique.
|
||
(service avahi-service-type)
|
||
(udisks-service)
|
||
(service upower-service-type)
|
||
(accountsservice-service)
|
||
(service cups-pk-helper-service-type)
|
||
(service colord-service-type)
|
||
(geoclue-service)
|
||
(service polkit-service-type)
|
||
(elogind-service)
|
||
(dbus-service)
|
||
|
||
(service ntp-service-type)
|
||
|
||
x11-socket-directory-service
|
||
|
||
(service pulseaudio-service-type)
|
||
(service alsa-service-type)
|
||
|
||
%base-services))
|
||
|
||
;;; desktop.scm ends here
|