guix/etc/gnu-store.mount.in

[Unit]
Description=Read-only @storedir@ for GNU Guix
DefaultDependencies=no
ConditionPathExists=@storedir@

[Install]
WantedBy=multi-user.target

[Mount]
What=@storedir@
Where=@storedir@
Type=none
Options=bind,ro
etc: Add a systemd unit to bind-mount @storedir@ read-only. * etc/gnu-store.mount.in: New file. * nix/local.mk (nodist_systemdservice_DATA): Add it. (etc/%.mount): New rule for it. * etc/guix-install.sh (sys_enable_guix_daemon): Install it. * doc/guix.texi (Binary Installation): Document it. * .gitignore: Ignore changes to it. 2020-05-14 15:13:12 +02:00			`[Unit]`
			`Description=Read-only @storedir@ for GNU Guix`
			`DefaultDependencies=no`
			`ConditionPathExists=@storedir@`

			`[Install]`
etc: systemd services: Run ‘guix-daemon’ as an unprivileged user. * etc/guix-daemon.service.in (ExecStart): Remove ‘--build-users-group’. (Environment): Add ‘GUIX_STATE_DIRECTORY’. (Before, User, AmbientCapabilities, PrivateMounts, BindPaths): New fields. * etc/gnu-store.mount.in (Before): Remove. (WantedBy): Change to ‘multi-user.target’. Change-Id: Id826b8ab535844b6024d777f6bd15fd49db6d65e 2025-01-23 09:47:22 +01:00			`WantedBy=multi-user.target`
etc: Add a systemd unit to bind-mount @storedir@ read-only. * etc/gnu-store.mount.in: New file. * nix/local.mk (nodist_systemdservice_DATA): Add it. (etc/%.mount): New rule for it. * etc/guix-install.sh (sys_enable_guix_daemon): Install it. * doc/guix.texi (Binary Installation): Document it. * .gitignore: Ignore changes to it. 2020-05-14 15:13:12 +02:00
			`[Mount]`
			`What=@storedir@`
			`Where=@storedir@`
			`Type=none`
			`Options=bind,ro`