blob: 4b34882ac0a60c654f421c9feebecd520d53fe07 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
(define-module (gn services science)
#:export (munge-configuration
munge-configuration?
munge-service-type))
(use-modules (gnu)
(guix records)
(ice-9 match))
(use-service-modules shepherd)
(use-package-modules admin parallel)
(define %munge-accounts
(list (user-group
(name "munge")
(id 900)
(system? #t))
(user-account
(name "munge")
(group "munge")
(uid 900)
(system? #t)
(comment "Munge User")
(home-directory "/var/lib/munge")
(shell (file-append shadow "/sbin/nologin")))))
(define %slurm-accounts
(list (user-group
(name "slurm")
(id 901)
(system? #t))
(user-account
(name "slurm")
(group "slurm")
(uid 901)
(system? #t)
(comment "Slurm User")
(home-directory "/var/lib/slurm"))))
(define-record-type* <munge-configuration>
munge-configuration
make-munge-configuration
munge-configuration?
(package munge-configuration-package
(default munge))
(socket munge-configuration-socket
(default "/var/run/munge/munge.socket.2"))
(pid-file munge-configuration-pid-file
(default "/var/run/munge/munged.pid"))
(log-file munge-configuration-log-file
(default "/var/log/munge/munged.log"))
(key munge-configuration-key
(default "/etc/munge/munge.key")))
(define-record-type* <slurm-configuration>
slurm-configuration
make-slurm-configuration
slurm-configuration?
(package slurm-configuration-package
(default slurm)))
(define (munge-activation config)
"Return the activation GEXP for CONFIG for the munge service."
(with-imported-modules '((guix build utils))
#~(begin
(use-modules (guix build utils)
(rnrs bytevectors)
(rnrs io ports))
(define %user (getpw "munge"))
(let* ((homedir (passwd:dir %user))
(key #$(munge-configuration-key config))
(etc-dir (dirname key))
(run-dir (dirname #$(munge-configuration-pid-file config)))
(log-dir (dirname #$(munge-configuration-log-file config))))
(for-each (lambda (dir)
(unless (file-exists? dir)
(mkdir-p dir))
(chown dir (passwd:uid %user) (passwd:gid %user))
(chmod dir #o700))
(list homedir etc-dir log-dir))
(unless (file-exists? key)
;; Borrowed from /dev/urandom in (gnu services base)
(call-with-input-file "/dev/urandom"
(lambda (urandom)
(let ((buf (make-bytevector 1024)))
(get-bytevector-n! urandom buf 0 1024)
(call-with-output-file key
(lambda (seed)
(put-bytevector seed buf)))))))
(chown key (passwd:uid %user) (passwd:gid %user))
(chmod key #o400)
(unless (file-exists? run-dir)
(mkdir-p run-dir))
(chown run-dir (passwd:uid %user) (passwd:gid %user))))))
(define (slurm-activation config)
"Return the activation GEXP for CONFIG for the slurm service."
(with-imported-modules '((guix build utils))
#~(begin
(use-modules (guix build utils))
(unless (file-exists? "/var/lib/slurm")
(mkdir-p "/var/lib/slurm"))
(chown "/var/lib/slurm" (passwd:uid "slurm") (passwd:gid "slurm")))))
(define munge-shepherd-service
(match-lambda
(($ <munge-configuration> package socket pid-file log-file key)
(list
(shepherd-service
(documentation "Munge server")
(provision '(munge))
(requirement '(loopback user-processes file-systems))
(start #~(make-forkexec-constructor
(list #$(file-append package "/sbin/munged")
"--foreground" ; "--force"
(string-append "--socket=" #$socket)
(string-append "--key-file=" #$key)
(string-append "--pid-file=" #$pid-file)
(string-append "--log-file=" #$log-file))
#:user "munge"
#:group "munge"
#:pid-file #$pid-file
#:log-file #$log-file))
(stop #~(lambda _
(not (and
(list #$(file-append package "/sbin/munged")
(string-append "--socket=" #$socket)
"--stop")
;; This seems to not be removed by default.
(delete-file (string-append #$socket ".lock"))))))
(auto-start? #t))))))
(define munge-service-type
(service-type
(name 'munge)
(extensions
(list
(service-extension shepherd-root-service-type
munge-shepherd-service)
(service-extension activation-service-type
munge-activation)
(service-extension account-service-type
(const %munge-accounts))
(service-extension profile-service-type
(compose list munge-configuration-package))))
(default-value (munge-configuration))
(description
"Run a munge service.")))
|
