aboutsummaryrefslogtreecommitdiff
path: root/tw/system/installer/nonfree.scm
blob: 14dffccb38791f9ebd94c89f8b5bb43cca68d436 (about) (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
(define-module (tw system installer nonfree)
  #:use-module (gnu packages admin)
  #:use-module (gnu packages linux)
  #:use-module (gnu packages package-management)
  #:use-module (gnu packages version-control)
  #:use-module (gnu services)
  #:use-module (gnu services base)
  #:use-module (gnu services ssh)
  #:use-module (gnu system)
  #:use-module (guix gexp)
  #:use-module ((nongnu packages linux)
                #:prefix nongnu:)   ; don't interfere with (gnu packages linux)
  #:use-module ((nongnu system install)
                #:select (installation-os-nonfree))
  #:use-module ((nongnu system linux-initrd)
                #:prefix nongnu:)
  #:use-module ((srfi srfi-26) #:select (cut))
  #:use-module (tw channels)
  #:use-module (tw packages firmware))

(operating-system
  (inherit installation-os-nonfree)
  (host-name "guixinstall")
  (timezone "Europe/Paris")
  (locale "en_GB.utf8")

  ;; Use non-free kernel to load non-free firmware (e.g. for wifi).
  ;; Enable MT7921 module for Mediatek MT7922 (AMD RZ616) WiFi card.
  ;; The MT7921E module is for the card connected via PCIe, which it is
  ;; (it's in an M.2 slot).  Alternatives are S (SDIO) and U (USB).
  (kernel (nongnu:corrupt-linux linux-libre #:configs '("CONFIG_MT7921E=m")))
  (kernel-loadable-modules (list ddcci-driver-linux))
  (initrd nongnu:microcode-initrd)
  (firmware (cons* nongnu:amdgpu-firmware mt7922-firmware %base-firmware))

  (packages
   (cons* efibootmgr htop git
          (operating-system-packages installation-os-nonfree)))

  (services
   (cons*
    ;; Add this channel, so we can install nonfree packages directly.
    (extra-special-file "/etc/guix/channels.scm"
      (scheme-file "channels.scm" %system-channels))

    ;; Use nonguix' substitute server.
    (simple-service 'nonguix guix-service-type
      (guix-extension
       (authorized-keys (list %nonguix-signing-key))
       (substitute-urls '("https://substitutes.nonguix.org"))))

    (modify-services ((@@ (gnu system install) %installation-services))
      ;; Set up an SSH server to facilitate remote installs.
      (openssh-service-type
       config =>
       (openssh-configuration
        (inherit config)
        (port-number 22)
        (%auto-start? #t)
        (permit-root-login #t)
        ;; The root account is passwordless, so make sure
        ;; a password is set before allowing logins.
        (allow-empty-passwords? #f)
        (password-authentication? #f)
        (authorized-keys
         `(("root" ,(local-file "../files/timo.pub"))))))))))