Use the newly-published channel for unattended upgrades

1 files changed, 41 insertions, 0 deletions

diff --git a/tw/channels.scm b/tw/channels.scm
new file mode 100644
index 00000000..b9d243b8
--- /dev/null
+++ b/tw/channels.scm
@@ -0,0 +1,41 @@
+(define-module (tw channels)
+  #:use-module (gnu services)
+  #:use-module (gnu services base)
+  #:use-module (guix gexp)
+  #:use-module (guix modules))
+
+(define-public %system-channels
+  ;; Channel `tw' depends on `nonguix'.
+  ;; See also `.guix-channel' in this repo.
+  #~(cons* (channel
+            (name 'tw)
+            (url "git://lud.wg/~timo/guix-decls.git")
+            (branch "master")
+            (introduction
+             (make-channel-introduction
+              "f26d5f53db3ec351d5d44814b587f1c5f698b155"
+              (openpgp-fingerprint
+               "53EC 3C06 8568 83DD 9235  5BC2 2FC7 8504 681F 69B0"))))
+           %default-channels))
+
+;; Nonguix substitute server's signing key.
+;; From <https://substitutes.nonguix.org/signing-key.pub>.
+(define %nonguix-signing-key
+  (plain-file "nonguix-signing-key.pub" "\
+(public-key
+ (ecc
+  (curve Ed25519)
+  (q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#)
+  )
+ )
+"))
+
+(define-public %system-channel-services
+  ;; The gaming channel (https://gitlab.com/guix-gaming-channels) is per-user only.
+  (list (simple-service 'nonguix guix-service-type
+          (guix-extension
+           (authorized-keys (list %nonguix-signing-key))
+           (substitute-urls '("https://substitutes.nonguix.org"))))
+
+        (extra-special-file "/etc/guix/channels.scm"
+                            (scheme-file "channels.scm" %system-channels))))