spacepaste

  1.  
  2. ;; This is an operating system configuration template
  3. ;; for a "desktop" setup with GNOME and Xfce where the
  4. ;; root partition is encrypted with LUKS.
  5. (use-modules (gnu) (gnu system nss))
  6. (use-service-modules desktop ssh networking)
  7. (use-package-modules certs wm)
  8. (operating-system
  9. (host-name "antilope")
  10. (timezone "America/La_Paz")
  11. (locale "en_US.utf8")
  12. ;; Use the UEFI variant of GRUB with the EFI System
  13. ;; Partition mounted on /boot/efi.
  14. (bootloader (bootloader-configuration
  15. (bootloader grub-bootloader)
  16. (target "/dev/sda")))
  17. ;; Specify a mapped device for the encrypted root partition.
  18. ;; The UUID is that returned by 'cryptsetup luksUUID'.
  19. ;(mapped-devices
  20. ; (list (mapped-device
  21. ; (source (uuid "12345678-1234-1234-1234-123456789abc"))
  22. ; (target "my-root")
  23. ; (type luks-device-mapping))))
  24. (file-systems (cons* (file-system
  25. (device "/dev/sda1")
  26. (mount-point "/boot")
  27. (type "ext2")
  28. )
  29. (file-system
  30. (device "/dev/sda2")
  31. (mount-point "/")
  32. (type "ext4")
  33. )
  34. (file-system
  35. (device "/dev/sda4")
  36. (mount-point "/home")
  37. (type "ext4")
  38. )
  39. %base-file-systems))
  40. (users (cons (user-account
  41. (name "antilope")
  42. (comment "gnuser's brother")
  43. (group "users")
  44. (supplementary-groups '("wheel" "netdev"
  45. "audio" "video" "cdrom"))
  46. (home-directory "/home/antilope"))
  47. %base-user-accounts))
  48. ;; This is where we specify system-wide packages.
  49. (packages (cons* nss-certs ;for HTTPS access
  50. i3-wm i3status ;for user mounts
  51. %base-packages))
  52. ;; Add GNOME and/or Xfce---we can choose at the log-in
  53. ;; screen with F1. Use the "desktop" services, which
  54. ;; include the X11 log-in service, networking with
  55. ;; NetworkManager, and more.
  56. (services (cons* (service openssh-service-type
  57. (openssh-configuration
  58. (port-number 2222)
  59. (allow-empty-passwords? #f)
  60. (password-authentication? #t)
  61. (x11-forwarding? #t)))
  62. (tor-service)
  63. (tor-hidden-service "http"
  64. '((2222 "127.0.0.1:2222")))
  65. %desktop-services))
  66. ;; Allow resolution of '.local' host names with mDNS.
  67. (name-service-switch %mdns-host-lookup-nss))
  68.