2467b7d1fb
TLS errors may be confusing to some users. Two comments are added: one comment should help clarify the extra step required for root CA certificates to be installed, while the other will help users keep their clocks synchronized, another source of TLS errors due to clock drift. * gnu/system/examples/bare-bones.tmpl: Add nss-cert and NTP service comments. Signed-off-by: Nikolaos Chatzikonstantinou <nchatz314@gmail.com> Signed-off-by: Ludovic Courtès <ludo@gnu.org>
60 lines
2.4 KiB
Scheme
60 lines
2.4 KiB
Scheme
;; -*- mode: scheme; -*-
|
||
;; This is an operating system configuration template
|
||
;; for a "bare bones" setup, with no X11 display server.
|
||
|
||
(use-modules (gnu))
|
||
(use-service-modules networking ssh)
|
||
;; If you want to use HTTPS, you most likely want to include
|
||
;; "certs" in the line below. Also read the comment about
|
||
;; "nss-certs" later in this file.
|
||
(use-package-modules screen ssh)
|
||
|
||
(operating-system
|
||
(host-name "komputilo")
|
||
(timezone "Europe/Berlin")
|
||
(locale "en_US.utf8")
|
||
|
||
;; Boot in "legacy" BIOS mode, assuming /dev/sdX is the
|
||
;; target hard disk, and "my-root" is the label of the target
|
||
;; root file system.
|
||
(bootloader (bootloader-configuration
|
||
(bootloader grub-bootloader)
|
||
(targets '("/dev/sdX"))))
|
||
;; It's fitting to support the equally bare bones ‘-nographic’
|
||
;; QEMU option, which also nicely sidesteps forcing QWERTY.
|
||
(kernel-arguments (list "console=ttyS0,115200"))
|
||
(file-systems (cons (file-system
|
||
(device (file-system-label "my-root"))
|
||
(mount-point "/")
|
||
(type "ext4"))
|
||
%base-file-systems))
|
||
|
||
;; This is where user accounts are specified. The "root"
|
||
;; account is implicit, and is initially created with the
|
||
;; empty password.
|
||
(users (cons (user-account
|
||
(name "alice")
|
||
(comment "Bob's sister")
|
||
(group "users")
|
||
|
||
;; Adding the account to the "wheel" group
|
||
;; makes it a sudoer. Adding it to "audio"
|
||
;; and "video" allows the user to play sound
|
||
;; and access the webcam.
|
||
(supplementary-groups '("wheel"
|
||
"audio" "video")))
|
||
%base-user-accounts))
|
||
|
||
;; Globally-installed packages.
|
||
;; Add "nss-certs" for Mozilla's approved CA certs. You would
|
||
;; have to have included "certs" in use-package-modules above.
|
||
(packages (cons screen %base-packages))
|
||
|
||
;; Add services to the baseline: a DHCP client and an SSH
|
||
;; server. You may wish to add an NTP service here.
|
||
(services (append (list (service dhcp-client-service-type)
|
||
(service openssh-service-type
|
||
(openssh-configuration
|
||
(openssh openssh-sans-x)
|
||
(port-number 2222))))
|
||
%base-services)))
|