summaryrefslogtreecommitdiff
path: root/tw/system/installer/nonfree.scm
blob: 60ec244cff3d3c64e30cd199188995281e74569b (about) (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
(define-module (tw system installer nonfree)
  #:use-module (gnu packages admin)
  #:use-module (gnu packages linux)
  #:use-module (gnu packages package-management)
  #:use-module (gnu packages version-control)
  #:use-module (gnu services)
  #:use-module (gnu services base)
  #:use-module (gnu services ssh)
  #:use-module (gnu system)
  #:use-module (guix gexp)
  #:use-module ((nongnu system install)
                #:select (installation-os-nonfree))
  #:use-module ((srfi srfi-26) #:select (cut))
  #:use-module (tw channels))

(operating-system
  (inherit installation-os-nonfree)
  (host-name "guixinstall")
  (timezone "Europe/Paris")
  (locale "en_GB.utf8")
  (packages
   (cons* efibootmgr htop git
          (operating-system-packages installation-os-nonfree)))

  (services
   (cons*
    ;; Add the nonguix channel, so we can install nonfree packages directly.
    (extra-special-file "/etc/guix/channels.scm"
      (scheme-file "channels.scm"
        #~(cons*
           (channel
            (name 'nonguix)
            (url "https://gitlab.com/nonguix/nonguix")
            (introduction
             (channel-introduction
              (version 0)
              (commit "897c1a470da759236cc11798f4e0a5f7d4d59fbc")
              (signer "2A39 3FFF 68F4 EF7A 3D29  12AF 6F51 20A0 22FB B2D5"))))
           %system-channels)))

    ;; Use nonguix' substitute server.
    (simple-service 'nonguix guix-service-type
      (guix-extension
       (authorized-keys (list %nonguix-signing-key))
       (substitute-urls '("https://substitutes.nonguix.org"))))

    ;; Add an SSH server to facilitate remote installs.
    (service openssh-service-type
      (openssh-configuration
       (port-number 22)
       (%auto-start? #t)
       (permit-root-login #t)
       ;; The root account is passwordless, so make sure
       ;; a password is set before allowing logins.
       (allow-empty-passwords? #f)
       (password-authentication? #f)
       (authorized-keys
        `(("root" ,(local-file "../files/timo.pub"))))))

    ;; Make sure to remove the SSH service from the base services,
    ;; so we can override it fully.
    (filter
     (compose not (cut eq? openssh-service-type <>) service-kind)
     ((@@ (gnu system install) %installation-services))))))