76 lines
2.8 KiB
Cheetah
76 lines
2.8 KiB
Cheetah
;; This is an operating system configuration template
|
|
;; for a "desktop" setup with GNOME and Xfce where the
|
|
;; root partition is encrypted with LUKS.
|
|
|
|
(use-modules (gnu) (gnu system nss))
|
|
(use-service-modules desktop xorg)
|
|
(use-package-modules certs gnome)
|
|
|
|
(operating-system
|
|
(host-name "antelope")
|
|
(timezone "Europe/Paris")
|
|
(locale "en_US.utf8")
|
|
|
|
;; Choose US English keyboard layout. The "altgr-intl"
|
|
;; variant provides dead keys for accented characters.
|
|
(keyboard-layout (keyboard-layout "us" "altgr-intl"))
|
|
|
|
;; Use the UEFI variant of GRUB with the EFI System
|
|
;; Partition mounted on /boot/efi.
|
|
(bootloader (bootloader-configuration
|
|
(bootloader grub-efi-bootloader)
|
|
(targets '("/boot/efi"))
|
|
(keyboard-layout keyboard-layout)))
|
|
|
|
;; Specify a mapped device for the encrypted root partition.
|
|
;; The UUID is that returned by 'cryptsetup luksUUID'.
|
|
(mapped-devices
|
|
(list (mapped-device
|
|
(source (uuid "12345678-1234-1234-1234-123456789abc"))
|
|
(target "my-root")
|
|
(type luks-device-mapping))))
|
|
|
|
(file-systems (append
|
|
(list (file-system
|
|
(device (file-system-label "my-root"))
|
|
(mount-point "/")
|
|
(type "ext4")
|
|
(dependencies mapped-devices))
|
|
(file-system
|
|
(device (uuid "1234-ABCD" 'fat))
|
|
(mount-point "/boot/efi")
|
|
(type "vfat")))
|
|
%base-file-systems))
|
|
|
|
;; Create user `bob' with `alice' as its initial password.
|
|
(users (cons (user-account
|
|
(name "bob")
|
|
(comment "Alice's brother")
|
|
(password (crypt "alice" "$6$abc"))
|
|
(group "users")
|
|
(supplementary-groups '("wheel" "netdev"
|
|
"audio" "video")))
|
|
%base-user-accounts))
|
|
|
|
;; This is where we specify system-wide packages.
|
|
(packages (append (list
|
|
;; for HTTPS access
|
|
nss-certs
|
|
;; for user mounts
|
|
gvfs)
|
|
%base-packages))
|
|
|
|
;; Add GNOME and Xfce---we can choose at the log-in screen
|
|
;; by clicking the gear. Use the "desktop" services, which
|
|
;; include the X11 log-in service, networking with
|
|
;; NetworkManager, and more.
|
|
(services (append (list (service gnome-desktop-service-type)
|
|
(service xfce-desktop-service-type)
|
|
(set-xorg-configuration
|
|
(xorg-configuration
|
|
(keyboard-layout keyboard-layout))))
|
|
%desktop-services))
|
|
|
|
;; Allow resolution of '.local' host names with mDNS.
|
|
(name-service-switch %mdns-host-lookup-nss))
|