[bug#77001,8/8] services: krb5-service-type: Support launching KDC daemon.
Commit Message
* gnu/services/kerberos.scm (krb5-configuration): Add krb5,
kdc-shepherd-service? fields.
(krb5-activation, krb5-shepherd-services): New procedures.
(krb5-service-type): Use them.
Change-Id: I091ae2a6ef25f5ce95123c29588749483954c2ac
---
doc/guix.texi | 12 ++++++-----
gnu/services/kerberos.scm | 43 ++++++++++++++++++++++++++++++++++++---
2 files changed, 47 insertions(+), 8 deletions(-)
@@ -32125,11 +32125,13 @@ Kerberos Services
@subsubheading Krb5 Service
-Programs using a Kerberos client library normally
-expect a configuration file in @file{/etc/krb5.conf}.
-This service generates such a file from a definition provided in the
-operating system declaration.
-It does not cause any daemon to be started.
+Programs using a Kerberos client library normally expect a configuration
+file in @file{/etc/krb5.conf}. This service generates such a file from
+a definition provided in the operating system declaration.
+
+When @code{kdc-shepherd-service?} is set to @code{#t}, a shepherd
+service for @acronym{KDC, Key Distribution Center} is created.
+Otherwise no daemons are started.
No ``keytab'' files are provided by this service---you must explicitly create them.
This service is known to work with the MIT client library, @code{mit-krb5}.
@@ -17,10 +17,13 @@
;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
(define-module (gnu services kerberos)
+ #:use-module (gnu packages kerberos)
#:use-module (gnu services)
#:use-module (gnu services configuration)
+ #:use-module (gnu services shepherd)
#:use-module (gnu system pam)
#:use-module (guix gexp)
+ #:use-module (guix packages)
#:use-module (guix records)
#:use-module (srfi srfi-1)
#:use-module (srfi srfi-34)
@@ -416,7 +419,16 @@ (define-configuration krb5-configuration
(realms
(realm-list '())
- "The list of realms which clients may access."))
+ "The list of realms which clients may access.")
+
+ (krb5
+ (package mit-krb5)
+ "The package to use for @command{krb5kdc}.")
+
+ (kdc-shepherd-service?
+ (boolean #f)
+ "Whether to generate a shepherd service for the @acronym{KDC, Key
+Distribution Center} daemon." empty-serializer))
(define (krb5-configuration-file config)
@@ -431,15 +443,40 @@ (define (krb5-configuration-file config)
(define (krb5-etc-service config)
(list `("krb5.conf" ,(krb5-configuration-file config))))
+(define (krb5-activation config)
+ (if (krb5-configuration-kdc-shepherd-service? config)
+ #~(begin
+ (use-modules (guix build utils))
+ (mkdir-p "/var/krb5kdc"))
+ #~#t))
+
+(define (krb5-shepherd-services config)
+ (match-record config <krb5-configuration>
+ (krb5 kdc-shepherd-service?)
+ (if kdc-shepherd-service?
+ (list
+ (shepherd-service
+ (documentation "Run a krb5kdc daemon.")
+ (provision '(krb5kdc))
+ (requirement '(user-processes))
+ (start #~(make-forkexec-constructor
+ '(#$(file-append krb5 "/sbin/krb5kdc") "-n")))
+ (stop #~(make-kill-destructor))))
+ '())))
+
(define krb5-service-type
(service-type (name 'krb5)
(extensions
(list (service-extension etc-service-type
- krb5-etc-service)))
+ krb5-etc-service)
+ (service-extension activation-service-type
+ krb5-activation)
+ (service-extension shepherd-root-service-type
+ krb5-shepherd-services)))
(description "Programs using a Kerberos client library
normally expect a configuration file in @file{/etc/krb5.conf}. This service
-generates such a file. It does not cause any daemon to be started.")))
+generates such a file and (optionally) a shepherd service to run a daemon.")))