2 commits

Author	SHA1	Message	Date
Ludovic Courtès	107eb8ee8f	etc: systemd services: Run ‘guix-daemon’ as an unprivileged user. ... * etc/guix-daemon.service.in (ExecStart): Remove ‘--build-users-group’. (Environment): Add ‘GUIX_STATE_DIRECTORY’. (Before, User, AmbientCapabilities, PrivateMounts, BindPaths): New fields. * etc/gnu-store.mount.in (Before): Remove. (WantedBy): Change to ‘multi-user.target’. Change-Id: Id826b8ab535844b6024d777f6bd15fd49db6d65e	2025-03-26 17:57:45 +01:00
Tobias Geerinckx-Rice	301572aa87	etc: Add a systemd unit to bind-mount @storedir@ read-only. ... * etc/gnu-store.mount.in: New file. * nix/local.mk (nodist_systemdservice_DATA): Add it. (etc/%.mount): New rule for it. * etc/guix-install.sh (sys_enable_guix_daemon): Install it. * doc/guix.texi (Binary Installation): Document it. * .gitignore: Ignore changes to it.	2020-05-17 15:16:52 +02:00