Libération

This commit is contained in:
Adrien Bourmault 2023-11-07 11:03:48 +01:00
parent 1d54c72761
commit 8665a404ff
1 changed files with 9 additions and 29 deletions

View File

@ -10,11 +10,9 @@
;; Indique quels modules importer pour accéder aux variables ;; Indique quels modules importer pour accéder aux variables
;; utilisées dans cette configuration. ;; utilisées dans cette configuration.
(use-modules (gnu)) (use-modules (gnu))
(use-modules (guix inferior) (guix channels))
(use-modules (srfi srfi-1)) (use-modules (srfi srfi-1))
(use-modules (gnu system setuid) (gnu packages cups)) (use-modules (gnu system setuid) (gnu packages cups))
(use-modules (nongnu packages linux) (nongnu system linux-initrd)) (use-service-modules cups desktop networking ssh xorg virtualization vpn security-token)
(use-service-modules cups desktop networking ssh xorg virtualization vpn)
;; Configuration sudoer personnalisée ;; Configuration sudoer personnalisée
(define %sudoers-specification (define %sudoers-specification
@ -61,16 +59,11 @@ KERNEL==\"sd?1\", ATTRS{idVendor}==\"20a0\", ATTRS{idProduct}==\"4109\", SYMLINK
(keyboard-layout (keyboard-layout "fr" "oss")) (keyboard-layout (keyboard-layout "fr" "oss"))
(host-name "n-guix-fix") (host-name "n-guix-fix")
(kernel linux)
(initrd microcode-initrd)
(firmware (list linux-firmware))
;; Application de la configuration sudoer personnalisée (définie plus haut) ;; Application de la configuration sudoer personnalisée (définie plus haut)
(kernel-arguments (kernel-arguments
(list "modprobe.blacklist=nouveau,pcspkr,usbmouse,usbkbd" "iommu=pt")) (list "modprobe.blacklist=pcspkr,usbmouse,usbkbd" "iommu=pt"))
(initrd-modules (append (list "vfio-pci" "vfio_iommu_type1" "dm-raid" "dm-cache" "dm-crypt" "radeon") %base-initrd-modules)) (initrd-modules (append (list "vfio-pci" "vfio_iommu_type1" "dm-raid" "dm-cache" "dm-crypt") %base-initrd-modules))
(sudoers-file %sudoers-specification) (sudoers-file %sudoers-specification)
@ -121,11 +114,10 @@ KERNEL==\"sd?1\", ATTRS{idVendor}==\"20a0\", ATTRS{idProduct}==\"4109\", SYMLINK
(service openssh-service-type (service openssh-service-type
(openssh-configuration (openssh-configuration
(x11-forwarding? #t) (x11-forwarding? #t)
(permit-root-login 'prohibit-password) (permit-root-login 'prohibit-password)))
(authorized-keys
`(("neox" ,(local-file "/home/neox/.ssh/id_rsa.pub")))))) (service cups-service-type
(service cups-service-type
(cups-configuration (cups-configuration
(web-interface? #t) (web-interface? #t)
(extensions (extensions
@ -159,20 +151,7 @@ KERNEL==\"sd?1\", ATTRS{idVendor}==\"20a0\", ATTRS{idProduct}==\"4109\", SYMLINK
(guix-service-type config => (guix-configuration (guix-service-type config => (guix-configuration
(inherit config) (inherit config)
(extra-options '("--cores=10")) (extra-options '("--cores=10"))))))
(substitute-urls
(append (list "https://substitutes.nonguix.org")
%default-substitute-urls))
(authorized-keys
(append
(list
(plain-file "non-guix.pub"
(string-append
"(public-key"
" (ecc "
" (curve Ed25519)"
" (q #C1FD53E5D4CE971933EC50C9F307AE2171A2D3B52C804642A7A35F84F3A4EA98#)))")))
%default-authorized-guix-keys))))))
;; Chargeur de démarrage (GRUB) ;; Chargeur de démarrage (GRUB)
;; On indique ici où il doit être installé et comment le configurer ;; On indique ici où il doit être installé et comment le configurer
@ -201,6 +180,7 @@ KERNEL==\"sd?1\", ATTRS{idVendor}==\"20a0\", ATTRS{idProduct}==\"4109\", SYMLINK
(file-system (file-system
(mount-point "/wiab") (mount-point "/wiab")
(device (uuid "2a13cf03-fc71-44ac-8e1a-d6744201336f" 'ext4)) (device (uuid "2a13cf03-fc71-44ac-8e1a-d6744201336f" 'ext4))
(create-mount-point? #t)
(type "ext4")) (type "ext4"))
(file-system (file-system
(mount-point "/") (mount-point "/")