about summary refs log tree commit diff
path: root/gn/services/pluto.scm
diff options
context:
space:
mode:
Diffstat (limited to 'gn/services/pluto.scm')
-rw-r--r--gn/services/pluto.scm14
1 files changed, 11 insertions, 3 deletions
diff --git a/gn/services/pluto.scm b/gn/services/pluto.scm
index d137314..720b769 100644
--- a/gn/services/pluto.scm
+++ b/gn/services/pluto.scm
@@ -44,16 +44,20 @@
                (modules '((gnu build shepherd)
                           (gnu system file-systems)))
                (start #~(make-forkexec-constructor/container
-                          (list #$(file-append package "/runpluto.sh") #$port)
+                          ;(list #$(file-append package "/runpluto.sh") #$port)
+                          (list #$(file-append package "/runpluto"))
                           #:log-file "/var/log/pluto.log"
                           #:user "julia"
                           #:group "julia"
-                          ;; This needs to exist. Unclear why.
+                          ;; This prevents the service from using /root as $HOME.
                           #:environment-variables '()
                           #:mappings (list (file-system-mapping
                                              (source "/home/jovyan")
                                              (target source)
-                                             (writable? #t)))))
+                                             (writable? #t))
+                                           (file-system-mapping
+                                             (source "/etc/ssl")
+                                             (target source)))))
                (stop  #~(make-kill-destructor))))))))
 
 (define pluto-service-type
@@ -86,6 +90,10 @@
   ;; No firmware for VMs.
   (firmware '())
   (packages (list nss-certs))
+  ;; For testing
+  ;(packages (cons* nss-certs %base-packages))
+
+  (setuid-programs '())
 
   (services (list (service pluto-service-type
                            (pluto-configuration