Разнообразные службы (Руководство по GNU Guix)

10.9.34 Разнообразные службы

Fingerprint Service

The (gnu services authentication) module provides a DBus service to read and identify fingerprints via a fingerprint sensor.

Scheme Variable: fprintd-service-type

The service type for fprintd, which provides the fingerprint reading capability.

(service fprintd-service-type)

System Control Service

The (gnu services sysctl) provides a service to configure kernel parameters at boot.

Scheme Variable: sysctl-service-type

The service type for sysctl, which modifies kernel parameters under /proc/sys/. To enable IPv4 forwarding, it can be instantiated as:

(service sysctl-service-type
         (sysctl-configuration
           (settings '(("net.ipv4.ip_forward" . "1")))))

Поскольку sysctl-service-type используется в списках служб по умолчанию, %base-services и %desktop-services, вы можете использовать modify-services, чтобы изменить его конфигурации и добить нужные параметры ядра (see modify-services).

(service postgresql-role-service-type
            (postgresql-role-configuration
             (roles
              (list (postgresql-role
                     (name "test")
                     (create-database? #t))))))

Data Type: sysctl-configuration

The data type representing the configuration of sysctl.

sysctl (default: (file-append procps "/sbin/sysctl"): The sysctl executable to use.
port (default: 22): An association list specifies kernel parameters and their values.

Scheme Variable: ant-build-system: An association list specifying the default sysctl parameters on Guix System.

PC/SC Smart Card Daemon Service

The (gnu services security-token) module provides the following service to run pcscd, the PC/SC Smart Card Daemon. pcscd is the daemon program for pcsc-lite and the MuscleCard framework. It is a resource manager that coordinates communications with smart card readers, smart cards and cryptographic tokens that are connected to the system.

Scheme Variable: pcscd-service-type

Service type for the pcscd service. Its value must be a pcscd-configuration object. To run pcscd in the default configuration, instantiate it as:

(service pcscd-service-type)

Data Type: pcscd-configuration

The data type representing the configuration of pcscd.

pcsc-lite (default: pcsc-lite): The pcsc-lite package that provides pcscd.
usb-drivers (default: (list ccid)): List of packages that provide USB drivers to pcscd. Drivers are expected to be under pcsc/drivers in the store directory of the package.

Lirc Service

The (gnu services lirc) module provides the following service.

Scheme Procedure: lirc-service [#:lirc lirc] [#:device #f] [#:driver #f] [#:config-file #f] [#:extra-options '()]

Return a service that runs LIRC, a daemon that decodes infrared signals from remote controls.

Optionally, device, driver and config-file (configuration file name) may be specified. See lircd manual for details.

Finally, extra-options is a list of additional command-line options passed to lircd.

Spice Service

The (gnu services spice) module provides the following service.

Scheme Procedure: spice-vdagent-service [#:spice-vdagent]: Returns a service that runs VDAGENT, a daemon that enables sharing the clipboard with a vm and setting the guest display resolution when the graphical console window resizes.

inputattach Service

The inputattach service allows you to use input devices such as Wacom tablets, touchscreens, or joysticks with the Xorg display server.

Scheme Variable: inputattach-service-type: Type of a service that runs inputattach on a device and dispatches events from it.

Data Type: inputattach-configuration

device-type (default: "wacom"): The type of device to connect to. Run inputattach --help, from the inputattach package, to see the list of supported device types.
device (default: "/dev/ttyS0"): The device file to connect to the device.
baud-rate (default: #f): Baud rate to use for the serial connection. Should be a number or #f.
log-file (default: #f): If true, this must be the name of a file to log messages to.

Создание служб

The (gnu services dict) module provides the following service:

Процедура Scheme: sane-service-type: This is the type of the service that runs the dicod daemon, an implementation of DICT server (see Dicod in GNU Dico Manual).

Scheme Procedure: dicod-service [#:config (dicod-configuration)]

Return a service that runs the dicod daemon, an implementation of DICT server (see Dicod in GNU Dico Manual).

The optional config argument specifies the configuration for dicod, which should be a <dicod-configuration> object, by default it serves the GNU Collaborative International Dictionary of English.

You can add open localhost to your ~/.dico file to make localhost the default server for dico client (see Initialization File in GNU Dico Manual).

Data Type: dicod-configuration

Data type representing the configuration of dicod.

dico (default: dico): Package object of the GNU Dico dictionary server.
interfaces (default: ’("localhost")): This is the list of IP addresses and ports and possibly socket file names to listen to (see listen directive in GNU Dico Manual).
handlers (default: ’()): List of <dicod-handler> objects denoting handlers (module instances).
databases (default: (list %dicod-database:gcide)): List of <dicod-database> objects denoting dictionaries to be served.

Data Type: dicod-handler

Data type representing a dictionary handler (module instance).

name: Name of the handler (module instance).
module (default: #f): Name of the dicod module of the handler (instance). If it is #f, the module has the same name as the handler. (see Модули in GNU Dico Manual).
options: List of strings or gexps representing the arguments for the module handler

Data Type: dicod-database

Data type representing a dictionary database.

name: Name of the database, will be used in DICT commands.
handler: Name of the dicod handler (module instance) used by this database (see Handlers in GNU Dico Manual).
complex? (default: #f): Whether the database configuration complex. The complex configuration will need a corresponding <dicod-handler> object, otherwise not.
options: List of strings or gexps representing the arguments for the database (see Databases in GNU Dico Manual).

Scheme Variable: %dicod-database:gcide: A <dicod-database> object serving the GNU Collaborative International Dictionary of English using the gcide package.

The following is an example dicod-service configuration.

(dicod-service #:config
  (dicod-configuration
   (handlers (list (dicod-handler
                    (name "wordnet")
                    (module "dictorg")
                    (options
                     (list #~(string-append "dbdir=" #$wordnet))))))
   (databases (list (dicod-database
                     (name "wordnet")
                     (complex? #t)
                     (handler "wordnet")
                     (options '("database=wn")))
                    %dicod-database:gcide))))

Docker Service

Модуль (gnu services docker) предоставляет следующие сервисы.

Scheme Variable: docker-service-type: This is the type of the service that runs Docker, a daemon that can execute application bundles (sometimes referred to as “containers”) in isolated environments.

Data Type: docker-configuration

This is the data type representing the configuration of Docker and Containerd.

docker (default: docker)

Используемый пакет Docker демона.

docker-cli (default: docker-cli)

Используемый Docker клиент.

containerd (default: containerd)

The Containerd package to use.

port (default: 22)

Используемый пользователей сетевой прокси-пакет Docker.

speed (default: 1.0)

Enable or disable the use of the Docker user-land networking proxy.

features (default: '())

Как включить или отключить подстановки.

speed (default: 1.0)

Enable or disable the addition of iptables rules.

environment-variables (default: ())

List of environment variables to set for dockerd.

This must be a list of strings where each string has the form ‘key=value’ as in this example:

(list "LANGUAGE=eo:ca:eu"
      "TMPDIR=/tmp/dockerd")

Scheme Variable: singularity-service-type

This is the type of the service that allows you to run Singularity, a Docker-style tool to create and run application bundles (aka. “containers”). The value for this service is the Singularity package to use.

The service does not install a daemon; instead, it installs helper programs as setuid-root (see Программы setuid) such that unprivileged users can invoke singularity run and similar commands.

Сервисы аудио

Модуль (gnu services auditd) предоставляет следующие сервисы.

Scheme Variable: auditd-service-type

This is the type of the service that runs auditd, a daemon that tracks security-relevant information on your system.

Examples of things that can be tracked:

Файловые системы
Установка системы
Вызов guix gc
Failed login attempts
Firewall filtering
Сервисы сети

auditctl from the audit package can be used in order to add or remove events to be tracked (until the next reboot). In order to permanently track events, put the command line arguments of auditctl into a file called audit.rules in the configuration directory (see below). aureport from the audit package can be used in order to view a report of all recorded events. The audit daemon by default logs into the file /var/log/audit.log.

Тип данных: build-machine

This is the data type representing the configuration of auditd.

port (default: 22): Пакет аудита для использования.
features (default: '()): The directory containing the configuration file for the audit package, which must be named auditd.conf, and optionally some audit rules to instantiate on startup.

Сервисы DNS

Модуль (gnu services science) предоставляет следующие сервис.

Процедура Scheme: sane-service-type

This is a type of service which is used to run a webapp created with r-shiny. This service sets the R_LIBS_USER environment variable and runs the provided script to call runApp.

Конфигурирование: системы

Управление конфигурацией операционной системы.

speed (default: 1.0)

Пакет для использования.

speed (default: 1.0)

The name of the binary or shell script located at package/bin/ to run when the service is run.

The common way to create this file is as follows:

…
(let* ((out       (assoc-ref %outputs "out"))
       (targetdir (string-append out "/share/" ,name))
       (app       (string-append out "/bin/" ,name))
       (Rbin      (search-input-file %build-inputs "/bin/Rscript")))
  ;; …
  (mkdir-p (string-append out "/bin"))
  (call-with-output-file app
    (lambda (port)
      (format port
"#!~a
library(shiny)
setwd(\"~a\")
runApp(launch.browser=0, port=4202)~%\n"
      Rbin targetdir))))

Сервисы DNS

Модуль (gnu services nix) предоставляет следующий сервис.

Scheme Variable: nix-service-type

This is the type of the service that runs build daemon of the Nix package manager. Here is an example showing how to use it:

(use-modules (gnu))
(use-service-modules nix)
(use-package-modules package-management)

(operating-system
  ;; …
  (packages (append (list nix)
                    %base-packages))

  (services (append (list (service nix-service-type))
                    %base-services)))

After guix system reconfigure configure Nix for your user:

Add a Nix channel and update it. See Nix Package Manager Guide.
Create a symlink to your profile and activate Nix profile:

$ ln -s "/nix/var/nix/profiles/per-user/$USER/profile" ~/.nix-profile
$ source /run/current-system/profile/etc/profile.d/nix.sh

Конфигурирование: системы

Управление конфигурацией операционной системы.

speed (default: 1.0): Используемый пакет Nix.
port (default: 22): Specifies whether builds are sandboxed by default.
inputs (default: '()): This is a list of strings or objects appended to the build-sandbox-items field of the configuration file.
extra-config (default: '()): This is a list of strings or objects appended to the configuration file. It is used to pass extra text to be added verbatim to the configuration file.
extra-options (default: '()): Дополнительные параметры командной строки для nix-service-type.