160 lines
6.0 KiB
Scheme
160 lines
6.0 KiB
Scheme
;; Ceci est une configuration de système d'exploitation générée par
|
|
;; l'installateur graphique.
|
|
;;
|
|
;; Une fois l'installation terminée, vous pouvez apprendre à modifier
|
|
;; ce fichier pour ajuster la configuration du système et le passer à
|
|
;; la commande « guix system reconfigure » pour rendre vos changements
|
|
;; effectifs.
|
|
|
|
|
|
;; Indique quels modules importer pour accéder aux variables
|
|
;; utilisées dans cette configuration.
|
|
(use-modules (gnu))
|
|
(use-modules (gnu system setuid))
|
|
(use-modules (nongnu packages linux) (nongnu system linux-initrd))
|
|
(use-service-modules cups desktop networking ssh xorg virtualization vpn)
|
|
|
|
;; Définitions
|
|
|
|
(define %sudoers-specification
|
|
(plain-file "sudoers" "\
|
|
root ALL=(ALL) ALL
|
|
%wheel ALL=(ALL) NOPASSWD: ALL
|
|
"))
|
|
|
|
(define %spice-rules
|
|
(udev-rule
|
|
"50-spice.rules"
|
|
(string-append "\
|
|
SUBSYSTEM==\"usb\", GROUP=\"spice\", MODE=\"0660\"
|
|
SUBSYSTEM==\"usb_device\", GROUP=\"spice\", MODE=\"0660\"
|
|
")))
|
|
|
|
;; Début de la configuration
|
|
(operating-system
|
|
(locale "fr_FR.utf8")
|
|
(timezone "Europe/Paris")
|
|
(keyboard-layout (keyboard-layout "fr" "oss"))
|
|
(host-name "n-guix-fix")
|
|
|
|
(kernel linux)
|
|
|
|
(initrd microcode-initrd)
|
|
(firmware (list linux-firmware))
|
|
|
|
(kernel-arguments
|
|
(append
|
|
(list "modprobe.blacklist=nouveau,pcspkr" "amd_iommu=on" "iommu=pt")
|
|
%default-kernel-arguments))
|
|
|
|
(initrd-modules (append (list "vfio-pci" "vfio_iommu_type1" "dm-raid" "dm-cache" "dm-crypt" "radeon") %base-initrd-modules))
|
|
|
|
(sudoers-file %sudoers-specification)
|
|
|
|
;; La liste des comptes utilisateurs (« root » est implicite).
|
|
(users (cons* (user-account
|
|
(name "neox")
|
|
(comment "neox")
|
|
(group "users")
|
|
(home-directory "/home/neox")
|
|
(supplementary-groups '("users" "wheel" "netdev" "audio" "video" "libvirt" "kvm" "scanner" "spice" "cdrom" "lpadmin")))
|
|
%base-user-accounts))
|
|
|
|
(setuid-programs
|
|
(append (list
|
|
(setuid-program
|
|
(program (file-append (specification->package "cdrtools") "/bin/cdrecord")))
|
|
(setuid-program
|
|
(program (file-append (specification->package "cdrtools") "/bin/readcd")))
|
|
(setuid-program
|
|
(program (file-append (specification->package "cdrtools") "/bin/mkisofs")))
|
|
(setuid-program
|
|
(program (file-append (specification->package "cdrdao") "/bin/cdrdao"))))
|
|
%setuid-programs))
|
|
|
|
;; Packages installed system-wide. Users can also install packages
|
|
;; under their own account: use 'guix search KEYWORD' to search
|
|
;; for packages and 'guix install PACKAGE' to install a package.
|
|
(packages (append (list (specification->package "nss-certs")
|
|
(specification->package "qemu")
|
|
(specification->package "virt-manager")
|
|
(specification->package "libvirt")
|
|
(specification->package "lvm2")
|
|
(specification->package "mdadm")
|
|
(specification->package "network-manager")
|
|
(specification->package "network-manager-openvpn")
|
|
(specification->package "xf86-video-ati")
|
|
(specification->package "thin-provisioning-tools"))
|
|
%base-packages))
|
|
|
|
;; Voici la liste des services du système. Pour trouver les services disponibles,
|
|
;; lancez « guix system search MOT-CLÉ » dans un terminal.
|
|
(services
|
|
(modify-services (append
|
|
(list
|
|
(service gnome-desktop-service-type)
|
|
(service cups-service-type)
|
|
(service libvirt-service-type
|
|
(libvirt-configuration
|
|
(unix-sock-group "libvirt")))
|
|
(udev-rules-service 'spice %spice-rules #:groups '("spice"))
|
|
(service virtlog-service-type)
|
|
(pam-limits-service
|
|
(list
|
|
(pam-limits-entry "@audio" 'both 'rtprio 99)
|
|
(pam-limits-entry "@audio" 'both 'memlock 'unlimited)))
|
|
|
|
(set-xorg-configuration
|
|
(xorg-configuration (keyboard-layout keyboard-layout))))
|
|
%desktop-services)
|
|
|
|
(network-manager-service-type config => (network-manager-configuration
|
|
(inherit config)
|
|
(vpn-plugins
|
|
(list (specification->package "network-manager-openvpn")))))
|
|
|
|
(guix-service-type config => (guix-configuration
|
|
(inherit config)
|
|
(extra-options '("--cores=5"))))))
|
|
|
|
(bootloader (bootloader-configuration
|
|
(bootloader grub-efi-bootloader)
|
|
(targets (list "/boot/efi"))
|
|
(keyboard-layout keyboard-layout)))
|
|
|
|
;; La liste des systèmes de fichiers qui seront « montés ». Les identifiants
|
|
;; de systèmes de fichiers uniques (« UUIDs ») qui se trouvent ici s'obtiennent
|
|
;; en exécutant « blkid » dans un terminal.
|
|
|
|
(mapped-devices
|
|
(list
|
|
(mapped-device
|
|
(source "HOMERAID")
|
|
(target "HOMERAID-HOMERAID_data")
|
|
(type lvm-device-mapping))
|
|
(mapped-device
|
|
(source "/dev/mapper/HOMERAID-HOMERAID_data")
|
|
(target "luks-f0a72a6c-499b-4445-8d13-21dc99337752")
|
|
(type luks-device-mapping))))
|
|
|
|
(file-systems
|
|
(cons*
|
|
(file-system
|
|
(mount-point "/wiab")
|
|
(device (uuid "2a13cf03-fc71-44ac-8e1a-d6744201336f" 'ext4))
|
|
(type "ext4"))
|
|
(file-system
|
|
(mount-point "/")
|
|
(device (uuid "2e44f3f7-bb6b-43ac-933a-e8992bf10d29" 'ext4))
|
|
(type "ext4"))
|
|
(file-system
|
|
(mount-point "/home")
|
|
(device "/dev/mapper/luks-f0a72a6c-499b-4445-8d13-21dc99337752")
|
|
(type "ext4")
|
|
(dependencies mapped-devices))
|
|
(file-system
|
|
(mount-point "/boot/efi")
|
|
(device (uuid "DC58-946E" 'fat32))
|
|
(type "vfat"))
|
|
%base-file-systems)))
|