diff options
| author | Ludovic Courtès <ludo@gnu.org> | 2015-09-17 23:44:26 +0200 |
|---|---|---|
| committer | Ludovic Courtès <ludo@gnu.org> | 2015-10-10 22:55:15 +0200 |
| commit | 0adfe95a3eee335847c3127edde3de550e692440 (patch) | |
| tree | 1c5a059d8f261f09254c0e420e61e1344c9edb45 /gnu/services/ssh.scm | |
| parent | e79467f63a06811ba5dd8c8b0cc79553c5dd4e3a (diff) | |
services: Introduce extensible services.
This patch rewrites GuixSD services to make them extensible.
* gnu-system.am (GNU_SYSTEM_MODULES): Add gnu/services/dbus.scm.
* gnu/services.scm (<service>): Replace with new record type.
(<service-extension>, <service-type>): New record types.
(write-service-type, compute-boot-script, second-argument): New
procedures.
(%boot-service, boot-service-type): New variables.
(file-union, directory-union, modprobe-wrapper,
activation-service->script, activation-script,
gexps->activation-gexp): New procedures.
(activation-service-type, %activation-service): New variables.
(etc-directory, files->etc-directory, etc-service): New procedures.
(etc-service-type, setuid-program-service, firmware-service-type): New
variables.
(firmware->activation-gexp): New procedure.
(&service-error, &missing-target-service-error,
&ambiguous-target-service-error): New condition types.
(service-back-edges, fold-services): New procedures.
* gnu/services/avahi.scm (<avahi-configuration>): New record type.
(configuration-file): Replace keyword parameters with a single
'config' parameter.
(%avahi-accounts, %avahi-activation, avahi-service-type): New
variables.
(avahi-dmd-service): New procedure.
(avahi-service): Rewrite using 'service' and 'avahi-configuration'.
* gnu/services/base.scm (%root-file-system-dmd-service,
root-file-system-service-type): New variables.
(root-file-system-service): Use them.
(file-system->dmd-service-name): New procedure.
(file-system-service-type): New variable.
(file-system-service): Use it. Replace keyword parameters with a
single 'file-system' object.
(user-unmount-service-type): New variable.
(user-unmount-service): Use it.
(user-processes-service-type): New variable.
(user-processes-service): Use it.
(host-name-service-type): New variable.
(host-name-service): Use it.
(console-keymap-service-type): New variable.
(console-keymap-service): Use it.
(console-font-service-type): New variable.
(console-font-service): Use it.
(mingetty-pam-service, mingetty-dmd-service): New procedures.
(mingetty-service-type): New variable.
(mingetty-service): Use it.
(nscd-dmd-service): New procedure.
(nscd-activation, nscd-service-type): New variables.
(nscd-service): Use the latter.
(syslog-service-type): New variable.
(syslog-service): Use it.
(<guix-configuration>): New record type.
(%default-guix-configuration): New variable.
(guix-dmd-service, guix-accounts, guix-activation): New procedures.
(guix-service-type): New variable.
(guix-service): Replace list of keyword parameters with a single
'config' parameter. Rewrite using 'service'.
(<udev-configuration>): New record type.
(udev-dmd-service): New procedure.
(udev-service-type): New variable.
(udev-service): Use it.
(device-mapping-service-type): New variable.
(device-mapping-service): Use it.
(swap-service-type): New variable.
(swap-service): Use it.
* gnu/services/databases.scm (<postgresql-configuration>): New record
type.
(%postgresql-accounts, postgresql-activation): New variables.
(postgresql-dmd-service): New procedure.
(postgresql-service): Rewrite using 'service' and
'postgresql-configuration'.
* gnu/services/dbus.scm: New file.
* gnu/services/desktop.scm (dbus-configuration-directory, dbus-service):
Remove.
(wrapped-dbus-service): New procedure.
(<upower-configuration>): New record type.
(upower-configuration-file): Replace keyword parameters with single
<upower-configuration> parameter.
(%upower-accounts, %upower-activation): New variables.
(upower-dbus-service, upower-dmd-service): New procedures.
(upower-service-type): New variable.
(upower-service): Rewrite using 'service' and 'upower-configuration'.
(%colord-activation, %colord-accounts): New variables.
(colord-dmd-service): New procedure.
(colord-service-type): New variable.
(colord-service): Rewrite using 'service'.
(<geoclue-configuration>): New record type.
(geoclue-configuration-file): Replace keyword parameters with a single
'config' parameter.
(geoclue-dbus-service, geoclue-dmd-service): New procedures.
(%geoclue-accounts, geoclue-service-type): New variables.
(geoclue-service): Rewrite using 'service' and
'geoclue-configuration'.
(%polkit-accounts, %polkit-pam-services, polkit-service-type): New
variables.
(polkit-dmd-service): New procedure.
(polkit-service): Rewrite using 'service'.
(<elogind-configuration>)[elogind]: New field.
(elogind-dmd-service): New procedure.
(elogind-service-type): New variable.
(elogind-service): Rewrite using 'service'.
(%desktop-services): Remove argument to 'dbus-service'. Remove 'map'
over %BASE-SERVICES.
* gnu/services/dmd.scm (dmd-boot-gexp): New procedure.
(dmd-root-service-type, %dmd-root-service): New variables.
(dmd-service-type): New macro.
(<dmd-service>): New record type.
* gnu/services/lirc.scm (<lirc-configuration>): New record type.
(%lirc-activation): New variable.
(lirc-dmd-service): New procedure.
(lirc-service-type): New variable.
(lirc-service): Rewrite using 'service' and 'lirc-configuration'.
* gnu/services/networking.scm (<static-networking>): New record type.
(static-networking-service-type): New variable.
(static-networking-service): Rewrite using 'service' and
'static-networking'.
(dhcp-client-service-type): New variable.
(dhcp-client-service): Rewrite using 'service'.
(<ntp-configuration>): New record type.
(ntp-dmd-service): New procedure.
(ntp-service-type): New variable.
(ntp-service): New procedure.
(%tor-accounts, tor-service-type): New variable.
(tor-dmd-service): New procedure.
(tor-service): Rewrite using 'service'.
(<bitlbee-configuration>): New record type.
(bitlbee-dmd-service): New procedure.
(%bitlbee-accounts, %bitlbee-activation, bitlbee-service-type): New
variables.
(bitlbee-service): Rewrite using 'service'.
(%wicd-activation): New variable.
(wicd-dmd-service): New procedure.
(wicd-service-type): New variable.
(wicd-service): Rewrite using 'service'.
* gnu/services/ssh.scm (<lsh-configuration>): New record type.
(activation): Rename to...
(lsh-initialization): ... this.
(lsh-activation, lsh-dmd-service, lsh-pam-services): New procedures.
(lsh-service-type): New variable.
(lsh-service): Rewrite using 'service' and 'lsh-configuration'.
* gnu/services/web.scm (<nginx-configuration>): New record type.
(%nginx-accounts): New variable.
(nginx-activation, nginx-dmd-service): New procedures.
(nginx-service-type): New variable.
(nginx-service): Rewrite using 'service' and 'nginx-configuration'.
* gnu/services/xorg.scm (<slim-configuration>): New record type.
(slim-pam-service, slim-dmd-service): New procedures.
(slim-service-type): New variable.
(slim-service): Rewrite using 'service' and 'slim-configuration'.
* gnu/system.scm (file-union): Remove.
(other-file-system-services): Adjust to new 'file-system-service'
signature.
(essential-services): Add #:container? parameter. Add
%DMD-ROOT-SERVICE, %ACTIVATION-SERVICE, and calls to
'pam-root-service', 'account-service', 'operating-system-etc-service',
and a SETUID-PROGRAM-SERVICE instance.
(operating-system-services): Pass #:container? to 'essential-services.
(etc-directory): Remove.
(operating-system-etc-service): New procedure. Rewrite as a call to
'etc-service'.
(operating-system-accounts): Change to not return accounts required by
services.
(operating-system-etc-directory): Rewrite as a call to 'fold-services'
and 'etc-directory'.
(user-group->gexp, user-account->gexp, modprobe-wrapper): Remove.
(operating-system-activation-script): Rewrite as a call to
'fold-services' and 'activation-service->script'.
(operating-system-boot-script): Likewise.
(operating-system-derivation): Add call to 'lower-object'.
(emacs-site-file, emacs-site-directory, shells-file): Change to use
'computed-file' and 'scheme-file' instead of the monadic procedures.
* gnu/system/install.scm (cow-store-service-type): New variable.
(cow-store-service): Rewrite using 'service'.
(/etc/configuration-files): New procedure.
(configuration-template-service-type,
%configuration-template-service): New variables.
(configuration-template-service): Remove.
(installation-services): Adjust accordingly. Adjust argument to
'guix-service'.
* gnu/system/linux.scm (/etc-entry, pam-root-service): New procedures.
(pam-root-service-type): New variable.
* gnu/system/shadow.scm (user-group->gexp, user-account->gexp,
account-activation, etc-skel, account-service): New procedures.
(account-service-type): New variable.
* tests/services.scm: New file.
* doc/guix.texi (Base Services, Desktop Services): Adjust accordingly.
(Defining Services): Rewrite.
* doc/images/service-graph.dot: New file.
* doc.am (DOT_FILES): Add it.
* po/guix/POTFILES.in: Add gnu/services.scm.
Diffstat (limited to 'gnu/services/ssh.scm')
| -rw-r--r-- | gnu/services/ssh.scm | 178 |
1 files changed, 122 insertions, 56 deletions
diff --git a/gnu/services/ssh.scm b/gnu/services/ssh.scm index 3fa0976054d..d3a6cfb33ac 100644 --- a/gnu/services/ssh.scm +++ b/gnu/services/ssh.scm | |||
| @@ -18,8 +18,9 @@ | |||
| 18 | 18 | ||
| 19 | (define-module (gnu services ssh) | 19 | (define-module (gnu services ssh) |
| 20 | #:use-module (guix gexp) | 20 | #:use-module (guix gexp) |
| 21 | #:use-module (guix store) | 21 | #:use-module (guix records) |
| 22 | #:use-module (gnu services) | 22 | #:use-module (gnu services) |
| 23 | #:use-module (gnu services dmd) | ||
| 23 | #:use-module (gnu system linux) ; 'pam-service' | 24 | #:use-module (gnu system linux) ; 'pam-service' |
| 24 | #:use-module (gnu packages lsh) | 25 | #:use-module (gnu packages lsh) |
| 25 | #:export (lsh-service)) | 26 | #:export (lsh-service)) |
| @@ -30,11 +31,32 @@ | |||
| 30 | ;;; | 31 | ;;; |
| 31 | ;;; Code: | 32 | ;;; Code: |
| 32 | 33 | ||
| 34 | ;; TODO: Export. | ||
| 35 | (define-record-type* <lsh-configuration> | ||
| 36 | lsh-configuration make-lsh-configuration | ||
| 37 | lsh-configuration? | ||
| 38 | (lsh lsh-configuration-lsh | ||
| 39 | (default lsh)) | ||
| 40 | (daemonic? lsh-configuration-daemonic?) | ||
| 41 | (host-key lsh-configuration-host-key) | ||
| 42 | (interfaces lsh-configuration-interfaces) | ||
| 43 | (port-number lsh-configuration-port-number) | ||
| 44 | (allow-empty-passwords? lsh-configuration-allow-empty-passwords?) | ||
| 45 | (root-login? lsh-configuration-root-login?) | ||
| 46 | (syslog-output? lsh-configuration-syslog-output?) | ||
| 47 | (pid-file? lsh-configuration-pid-file?) | ||
| 48 | (pid-file lsh-configuration-pid-file) | ||
| 49 | (x11-forwarding? lsh-configuration-x11-forwarding?) | ||
| 50 | (tcp/ip-forwarding? lsh-configuration-tcp/ip-forwarding?) | ||
| 51 | (password-authentication? lsh-configuration-password-authentication?) | ||
| 52 | (public-key-authentication? lsh-configuration-public-key-authentication?) | ||
| 53 | (initialize? lsh-configuration-initialize?)) | ||
| 54 | |||
| 33 | (define %yarrow-seed | 55 | (define %yarrow-seed |
| 34 | "/var/spool/lsh/yarrow-seed-file") | 56 | "/var/spool/lsh/yarrow-seed-file") |
| 35 | 57 | ||
| 36 | (define (activation lsh host-key) | 58 | (define (lsh-initialization lsh host-key) |
| 37 | "Return the gexp to activate the LSH service for HOST-KEY." | 59 | "Return the gexp to initialize the LSH service for HOST-KEY." |
| 38 | #~(begin | 60 | #~(begin |
| 39 | (unless (file-exists? #$%yarrow-seed) | 61 | (unless (file-exists? #$%yarrow-seed) |
| 40 | (system* (string-append #$lsh "/bin/lsh-make-seed") | 62 | (system* (string-append #$lsh "/bin/lsh-make-seed") |
| @@ -70,6 +92,88 @@ | |||
| 70 | (waitpid keygen) | 92 | (waitpid keygen) |
| 71 | (waitpid write-key)))))))))) | 93 | (waitpid write-key)))))))))) |
| 72 | 94 | ||
| 95 | (define (lsh-activation config) | ||
| 96 | "Return the activation gexp for CONFIG." | ||
| 97 | #~(begin | ||
| 98 | (use-modules (guix build utils)) | ||
| 99 | (mkdir-p "/var/spool/lsh") | ||
| 100 | #$(if (lsh-configuration-initialize? config) | ||
| 101 | (lsh-initialization (lsh-configuration-lsh config) | ||
| 102 | (lsh-configuration-host-key config)) | ||
| 103 | #t))) | ||
| 104 | |||
| 105 | (define (lsh-dmd-service config) | ||
| 106 | "Return a <dmd-service> for lsh with CONFIG." | ||
| 107 | (define lsh (lsh-configuration-lsh config)) | ||
| 108 | (define pid-file (lsh-configuration-pid-file config)) | ||
| 109 | (define pid-file? (lsh-configuration-pid-file? config)) | ||
| 110 | (define daemonic? (lsh-configuration-daemonic? config)) | ||
| 111 | (define interfaces (lsh-configuration-interfaces config)) | ||
| 112 | |||
| 113 | (define lsh-command | ||
| 114 | (append | ||
| 115 | (cons #~(string-append #$lsh "/sbin/lshd") | ||
| 116 | (if daemonic? | ||
| 117 | (let ((syslog (if (lsh-configuration-syslog-output? config) | ||
| 118 | '() | ||
| 119 | (list "--no-syslog")))) | ||
| 120 | (cons "--daemonic" | ||
| 121 | (if pid-file? | ||
| 122 | (cons #~(string-append "--pid-file=" #$pid-file) | ||
| 123 | syslog) | ||
| 124 | (cons "--no-pid-file" syslog)))) | ||
| 125 | (if pid-file? | ||
| 126 | (list #~(string-append "--pid-file=" #$pid-file)) | ||
| 127 | '()))) | ||
| 128 | (cons* #~(string-append "--host-key=" | ||
| 129 | #$(lsh-configuration-host-key config)) | ||
| 130 | #~(string-append "--password-helper=" #$lsh "/sbin/lsh-pam-checkpw") | ||
| 131 | #~(string-append "--subsystems=sftp=" #$lsh "/sbin/sftp-server") | ||
| 132 | "-p" (number->string (lsh-configuration-port-number config)) | ||
| 133 | (if (lsh-configuration-password-authentication? config) | ||
| 134 | "--password" "--no-password") | ||
| 135 | (if (lsh-configuration-public-key-authentication? config) | ||
| 136 | "--publickey" "--no-publickey") | ||
| 137 | (if (lsh-configuration-root-login? config) | ||
| 138 | "--root-login" "--no-root-login") | ||
| 139 | (if (lsh-configuration-x11-forwarding? config) | ||
| 140 | "--x11-forward" "--no-x11-forward") | ||
| 141 | (if (lsh-configuration-tcp/ip-forwarding? config) | ||
| 142 | "--tcpip-forward" "--no-tcpip-forward") | ||
| 143 | (if (null? interfaces) | ||
| 144 | '() | ||
| 145 | (list (string-append "--interfaces=" | ||
| 146 | (string-join interfaces ","))))))) | ||
| 147 | |||
| 148 | (define requires | ||
| 149 | (if (and daemonic? (lsh-configuration-syslog-output? config)) | ||
| 150 | '(networking syslogd) | ||
| 151 | '(networking))) | ||
| 152 | |||
| 153 | (list (dmd-service | ||
| 154 | (documentation "GNU lsh SSH server") | ||
| 155 | (provision '(ssh-daemon)) | ||
| 156 | (requirement requires) | ||
| 157 | (start #~(make-forkexec-constructor (list #$@lsh-command))) | ||
| 158 | (stop #~(make-kill-destructor))))) | ||
| 159 | |||
| 160 | (define (lsh-pam-services config) | ||
| 161 | "Return a list of <pam-services> for lshd with CONFIG." | ||
| 162 | (list (unix-pam-service | ||
| 163 | "lshd" | ||
| 164 | #:allow-empty-passwords? | ||
| 165 | (lsh-configuration-allow-empty-passwords? config)))) | ||
| 166 | |||
| 167 | (define lsh-service-type | ||
| 168 | (service-type (name 'lsh) | ||
| 169 | (extensions | ||
| 170 | (list (service-extension dmd-root-service-type | ||
| 171 | lsh-dmd-service) | ||
| 172 | (service-extension pam-root-service-type | ||
| 173 | lsh-pam-services) | ||
| 174 | (service-extension activation-service-type | ||
| 175 | lsh-activation))))) | ||
| 176 | |||
| 73 | (define* (lsh-service #:key | 177 | (define* (lsh-service #:key |
| 74 | (lsh lsh) | 178 | (lsh lsh) |
| 75 | (daemonic? #t) | 179 | (daemonic? #t) |
| @@ -114,58 +218,20 @@ passwords, and @var{root-login?} specifies whether to accept log-ins as | |||
| 114 | root. | 218 | root. |
| 115 | 219 | ||
| 116 | The other options should be self-descriptive." | 220 | The other options should be self-descriptive." |
| 117 | (define lsh-command | 221 | (service lsh-service-type |
| 118 | (append | 222 | (lsh-configuration (lsh lsh) (daemonic? daemonic?) |
| 119 | (cons #~(string-append #$lsh "/sbin/lshd") | 223 | (host-key host-key) (interfaces interfaces) |
| 120 | (if daemonic? | 224 | (port-number port-number) |
| 121 | (let ((syslog (if syslog-output? '() | 225 | (allow-empty-passwords? allow-empty-passwords?) |
| 122 | (list "--no-syslog")))) | 226 | (root-login? root-login?) |
| 123 | (cons "--daemonic" | 227 | (syslog-output? syslog-output?) |
| 124 | (if pid-file? | 228 | (pid-file? pid-file?) (pid-file pid-file) |
| 125 | (cons #~(string-append "--pid-file=" #$pid-file) | 229 | (x11-forwarding? x11-forwarding?) |
| 126 | syslog) | 230 | (tcp/ip-forwarding? tcp/ip-forwarding?) |
| 127 | (cons "--no-pid-file" syslog)))) | 231 | (password-authentication? |
| 128 | (if pid-file? | 232 | password-authentication?) |
| 129 | (list #~(string-append "--pid-file=" #$pid-file)) | 233 | (public-key-authentication? |
| 130 | '()))) | 234 | public-key-authentication?) |
| 131 | (cons* #~(string-append "--host-key=" #$host-key) | 235 | (initialize? initialize?)))) |
| 132 | #~(string-append "--password-helper=" #$lsh "/sbin/lsh-pam-checkpw") | ||
| 133 | #~(string-append "--subsystems=sftp=" #$lsh "/sbin/sftp-server") | ||
| 134 | "-p" (number->string port-number) | ||
| 135 | (if password-authentication? "--password" "--no-password") | ||
| 136 | (if public-key-authentication? | ||
| 137 | "--publickey" "--no-publickey") | ||
| 138 | (if root-login? | ||
| 139 | "--root-login" "--no-root-login") | ||
| 140 | (if x11-forwarding? | ||
| 141 | "--x11-forward" "--no-x11-forward") | ||
| 142 | (if tcp/ip-forwarding? | ||
| 143 | "--tcpip-forward" "--no-tcpip-forward") | ||
| 144 | (if (null? interfaces) | ||
| 145 | '() | ||
| 146 | (list (string-append "--interfaces=" | ||
| 147 | (string-join interfaces ","))))))) | ||
| 148 | |||
| 149 | (define requires | ||
| 150 | (if (and daemonic? syslog-output?) | ||
| 151 | '(networking syslogd) | ||
| 152 | '(networking))) | ||
| 153 | |||
| 154 | (service | ||
| 155 | (documentation "GNU lsh SSH server") | ||
| 156 | (provision '(ssh-daemon)) | ||
| 157 | (requirement requires) | ||
| 158 | (start #~(make-forkexec-constructor (list #$@lsh-command))) | ||
| 159 | (stop #~(make-kill-destructor)) | ||
| 160 | (pam-services | ||
| 161 | (list (unix-pam-service | ||
| 162 | "lshd" | ||
| 163 | #:allow-empty-passwords? allow-empty-passwords?))) | ||
| 164 | (activate #~(begin | ||
| 165 | (use-modules (guix build utils)) | ||
| 166 | (mkdir-p "/var/spool/lsh") | ||
| 167 | #$(if initialize? | ||
| 168 | (activation lsh host-key) | ||
| 169 | #t))))) | ||
| 170 | 236 | ||
| 171 | ;;; ssh.scm ends here | 237 | ;;; ssh.scm ends here |
