wangliu-iscas/guix-mirror
1
0
Fork 0
mirror of https://codeberg.org/guix/guix.git synced 2026-05-13 15:03:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

guix-install.sh: Add the “kvm” GID to /etc/subgid.

Browse Source 
* etc/guix-install.sh (SYSTEMD_REQUIRE): New variable.
(sys_create_build_user): Populate /etc/subgid.

Change-Id: I989c3ff682453d8d65e313c89fb751a20aa48bb8
This commit is contained in:
Ludovic Courtès
2025-06-06 11:30:27 +02:00
parent a92d98a7fa
commit aa12beb750
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
etc/guix-install.sh
View File

@@ -91,6 +91,11 @@ SYSV_INIT_REQUIRE=(
"daemonize"
)
# Unprivileged guix-daemon requires 'newgidmap'.
SYSTEMD_REQUIRE=(
"newgidmap"
)
PAS=$'[ \033[32;1mPASS\033[0m ] '
ERR=$'[ \033[31;1mFAIL\033[0m ] '
WAR=$'[ \033[33;1mWARN\033[0m ] '
@@ -516,6 +521,13 @@ sys_create_build_user()
guix-daemon"$KVMGROUP" \
"Unprivileged Guix Daemon User"
if getent group kvm > /dev/null; then
# Allow 'newgidmap' to map the "kvm" group.
local kvmgid="$(getent group kvm | cut -f3 -d:)"
_msg_info "allowing kvm mapping (GID $kvmgid) for unprivileged guix-daemon"
echo "guix-daemon:$kvmgid:1" >> /etc/subgid
fi
# ‘tar xf’ creates root:root files. Change that.
chown -R guix-daemon:guix-daemon /gnu /var/guix
chown -R root:root /var/guix/profiles/per-user/root