guix-glicid/glicid/services/authentication.scm

64 lines
2.3 KiB
Scheme

(define-module (glicid services authentication)
#:use-module (gnu services)
#:use-module (gnu services shepherd)
#:use-module (guix)
#:use-module (guix records)
#:use-module (ice-9 match)
#:use-module (gnu packages sssd)
#:use-module (glicid system file-systems)
#:use-module (glicid utils)
#:export (
sssd-configuration
sssd-configuration?
sssd-service
sssd-service-type
))
(define-record-type*
<sssd-configuration>
sssd-configuration make-sssd-configuration
sssd-configuration?
(sssd-pkg sssd-pkg (default sssd))
(pid-file pid-file (default "/var/run/sssd.pid"))
(config-file config-file (default (file-append sssd "/etc/sssd/sssd.conf")))
(logger logger (default "stderr"))
(debug-level debug-level (default "3"))
(log-file log-file (default "/var/log/sssd.log")))
(define sssd-shepherd-service
(match-lambda
(($ <sssd-configuration> sssd-pkg pid-file config-file logger debug-level log-file)
(list
(shepherd-service
(provision '(sssd))
(documentation "Run sssd.")
(requirement '(user-processes))
(respawn? #t)
(start #~(make-forkexec-constructor
(list
#$(file-append sssd-pkg "/sbin/sssd")
"-i"
"-c" #$config-file
"--logger" #$logger
"-d" #$debug-level
)
#:pid-file #$pid-file
#:log-file #$log-file ))
(stop #~(make-kill-destructor)))))))
(define %sssd-activation
#~(begin
(mkdir-p "/etc/sssd/conf.d")
(mkdir-p "/var/log/sssd")
(mkdir-p "/var/lib/sss/db")
(mkdir-p "/var/lib/sss/mc")
(mkdir-p "/var/lib/sss/pipes/private")
#t ))
(define sssd-service-type
(service-type
(name 'sssd)
(extensions (list
(service-extension shepherd-root-service-type sssd-shepherd-service)
(service-extension activation-service-type (const %sssd-activation))))
(description "Run sssd")))