Zen

Source string Source string

289/10000 · 289

The string is read only.

English Actions
You should have a Guix system up and running on Kimsufi; congratulations!
To bind mount a file system, one must first set up some definitions before the @code{operating-system} section of the system definition. In this example we will bind mount a folder from a spinning disk drive to @file{/tmp}, to save wear and tear on the primary SSD, without dedicating an entire partition to be mounted as @file{/tmp}.
First, the source drive that hosts the folder we wish to bind mount should be defined, so that the bind mount can depend on it.
(define source-drive ;; "source-drive" can be named anything you want.
(file-system
(device (uuid "UUID goes here"))
(mount-point "/path-to-spinning-disk-goes-here")
(type "ext4"))) ;Make sure to set this to the appropriate type for your drive.
The source folder must also be defined, so that guix will know it's not a regular block device, but a folder.
;; "source-directory" can be named any valid variable name.
(define (%source-directory) "/path-to-spinning-disk-goes-here/tmp")
Finally, inside the @code{file-systems} definition, we must add the mount itself.
(file-systems (cons*
...<other drives omitted for clarity>...
;; Must match the name you gave the source drive in the earlier definition.
source-drive
(file-system
;; Make sure "source-directory" matches your earlier definition.
(device (%source-directory))
(mount-point "/tmp")
;; We are mounting a folder, not a partition, so this type needs to be "none"
(type "none")
(flags '(bind-mount))
;; Ensure "source-drive" matches what you've named the variable for the drive.
(dependencies (list source-drive))
)
...<other drives omitted for clarity>...
))
Guix daemon can use a HTTP proxy to get substitutes, here we are configuring it to get them via Tor.
Warning
@emph{Not all} Guix daemon's traffic will go through Tor! Only HTTP/HTTPS will get proxied; FTP, Git protocol, SSH, etc connections will still go through the clearnet. Again, this configuration isn't foolproof some of your traffic won't get routed by Tor at all. Use it at your own risk.
Also note that the procedure described here applies only to package substitution. When you update your guix distribution with @command{guix pull}, you still need to use @command{torsocks} if you want to route the connection to guix's git repository servers through Tor.
Guix's substitute server is available as a Onion service, if you want to use it to get your substitutes through Tor configure your system as follow:
(use-modules (gnu))
(use-service-module base networking)
(operating-system
…
(services
(cons
(service tor-service-type
(tor-configuration
(config-file (plain-file "tor-config"
"HTTPTunnelPort 127.0.0.1:9250"))))
(modify-services %base-services
(guix-service-type
config => (guix-configuration
(inherit config)
;; ci.guix.gnu.org's Onion service
(substitute-urls "\
@value{SUBSTITUTE-TOR-URL}")
(http-proxy "http://localhost:9250")))))))
This will keep a tor process running that provides a HTTP CONNECT tunnel which will be used by @command{guix-daemon}. The daemon can use other protocols than HTTP(S) to get remote resources, request using those protocols won't go through Tor since we are only setting a HTTP tunnel here. Note that @code{substitutes-urls} is using HTTPS and not HTTP or it won't work, that's a limitation of Tor's tunnel; you may want to use @command{privoxy} instead to avoid such limitations.
If you don't want to always get substitutes through Tor but using it just some of the times, then skip the @code{guix-configuration}. When you want to get a substitute from the Tor tunnel run:
sudo herd set-http-proxy guix-daemon http://localhost:9250
guix build \
--substitute-urls=@value{SUBSTITUTE-TOR-URL} @dots{}
nginx, lua, openresty, resty
NGINX could be extended with Lua scripts.
Guix provides NGINX service with ability to load Lua module and specific Lua packages, and reply to requests by evaluating Lua scripts.
The following example demonstrates system definition with configuration to evaluate @file{index.lua} Lua script on HTTP request to @uref{http://localhost/hello} endpoint:
local shell = require "resty.shell"
local stdin = ""
local timeout = 1000 -- ms
local max_size = 4096 -- byte
local ok, stdout, stderr, reason, status =
shell.run([[/run/current-system/profile/bin/ls /tmp]], stdin, timeout, max_size)
ngx.say(stdout)

Loading…

User avatar roptat

Comment added

  1. guix
  2. documentation-cookbook
  3. English

"isn't foolproof some of your traffic" -> missing a word or comma maybe

3 years ago
Browse all string changes
User avatar roptat

Source string comment

"isn't foolproof some of your traffic" -> missing a word or comma maybe

3 years ago

Things to check

Multiple failing checks

Following checks are failing:
Mismatched exclamation mark: German, German

Reset

Comments

There is 1 unresolved comment for this string.

View

Glossary

English English
No related strings found in the glossary.

String information

Source string description
type: quotation
Flags
read-only
Source string location
guix-git/doc/guix-cookbook.texi:3020
String age
3 years ago
Last updated
yesterday
Source string age
3 years ago
Translation file
po/doc/guix-cookbook.pot, string 692