014fe1a3c3
systemd-tmpfiles-setup.service pulls in local-fs.target, which interferes with NixOps' send-keys feature (since sshd.service depends indirectly on sysinit.target). Since in NixOS we don't use systemd-tmpfiles for creating files (that's done by activation scripts and preStart scripts), it's not a problem to start it a bit later. Backport: 14.04
148 lines
5.6 KiB
Nix
148 lines
5.6 KiB
Nix
{ stdenv, fetchurl, pkgconfig, intltool, gperf, libcap, dbus, kmod
|
|
, xz, pam, acl, cryptsetup, libuuid, m4, utillinux
|
|
, glib, kbd, libxslt, coreutils, libgcrypt, sysvtools, docbook_xsl
|
|
, kexectools, libmicrohttpd, linuxHeaders
|
|
, python ? null, pythonSupport ? false
|
|
, autoreconfHook
|
|
}:
|
|
|
|
assert stdenv.isLinux;
|
|
|
|
assert pythonSupport -> python != null;
|
|
|
|
stdenv.mkDerivation rec {
|
|
version = "212";
|
|
name = "systemd-${version}";
|
|
|
|
src = fetchurl {
|
|
url = "http://www.freedesktop.org/software/systemd/${name}.tar.xz";
|
|
sha256 = "1hpjcc42svrs06q3isjm3m5aphgkpfdylmvpnif71zh46ys0cab5";
|
|
};
|
|
|
|
patches =
|
|
[ # These are all changes between upstream and
|
|
# https://github.com/edolstra/systemd/tree/nixos-v212.
|
|
./fixes.patch
|
|
];
|
|
|
|
buildInputs =
|
|
[ pkgconfig intltool gperf libcap kmod xz pam acl
|
|
/* cryptsetup */ libuuid m4 glib libxslt libgcrypt docbook_xsl
|
|
libmicrohttpd linuxHeaders
|
|
autoreconfHook
|
|
] ++ stdenv.lib.optional pythonSupport python;
|
|
|
|
configureFlags =
|
|
[ "--localstatedir=/var"
|
|
"--sysconfdir=/etc"
|
|
"--with-rootprefix=$(out)"
|
|
"--with-kbd-loadkeys=${kbd}/bin/loadkeys"
|
|
"--with-kbd-setfont=${kbd}/bin/setfont"
|
|
"--with-rootprefix=$(out)"
|
|
"--with-dbusinterfacedir=$(out)/share/dbus-1/interfaces"
|
|
"--with-dbuspolicydir=$(out)/etc/dbus-1/system.d"
|
|
"--with-dbussystemservicedir=$(out)/share/dbus-1/system-services"
|
|
"--with-dbussessionservicedir=$(out)/share/dbus-1/services"
|
|
"--with-firmware-path=/root/test-firmware:/run/current-system/firmware"
|
|
"--with-tty-gid=3" # tty in NixOS has gid 3
|
|
"--disable-networkd" # enable/use eventually
|
|
"--enable-compat-libs" # get rid of this eventually
|
|
"--disable-tests"
|
|
];
|
|
|
|
preConfigure =
|
|
''
|
|
# FIXME: patch this in systemd properly (and send upstream).
|
|
# FIXME: use sulogin from util-linux once updated.
|
|
for i in src/remount-fs/remount-fs.c src/core/mount.c src/core/swap.c src/fsck/fsck.c units/emergency.service.in units/rescue.service.m4.in src/journal/cat.c src/core/shutdown.c src/nspawn/nspawn.c; do
|
|
test -e $i
|
|
substituteInPlace $i \
|
|
--replace /usr/bin/getent ${stdenv.glibc}/bin/getent \
|
|
--replace /bin/mount ${utillinux}/bin/mount \
|
|
--replace /bin/umount ${utillinux}/bin/umount \
|
|
--replace /sbin/swapon ${utillinux}/sbin/swapon \
|
|
--replace /sbin/swapoff ${utillinux}/sbin/swapoff \
|
|
--replace /bin/echo ${coreutils}/bin/echo \
|
|
--replace /bin/cat ${coreutils}/bin/cat \
|
|
--replace /sbin/sulogin ${sysvtools}/sbin/sulogin \
|
|
--replace /sbin/kexec ${kexectools}/sbin/kexec
|
|
done
|
|
|
|
substituteInPlace src/journal/catalog.c \
|
|
--replace /usr/lib/systemd/catalog/ $out/lib/systemd/catalog/
|
|
'';
|
|
|
|
# This is needed because systemd uses the gold linker, which doesn't
|
|
# yet have the wrapper script to add rpath flags automatically.
|
|
NIX_LDFLAGS = "-rpath ${pam}/lib -rpath ${libcap}/lib -rpath ${acl}/lib -rpath ${stdenv.gcc.gcc}/lib";
|
|
|
|
PYTHON_BINARY = "${coreutils}/bin/env python"; # don't want a build time dependency on Python
|
|
|
|
NIX_CFLAGS_COMPILE =
|
|
[ # Can't say ${polkit}/bin/pkttyagent here because that would
|
|
# lead to a cyclic dependency.
|
|
"-UPOLKIT_AGENT_BINARY_PATH" "-DPOLKIT_AGENT_BINARY_PATH=\"/run/current-system/sw/bin/pkttyagent\""
|
|
"-fno-stack-protector"
|
|
|
|
# Set the release_agent on /sys/fs/cgroup/systemd to the
|
|
# currently running systemd (/run/current-system/systemd) so
|
|
# that we don't use an obsolete/garbage-collected release agent.
|
|
"-USYSTEMD_CGROUP_AGENT_PATH" "-DSYSTEMD_CGROUP_AGENT_PATH=\"/run/current-system/systemd/lib/systemd/systemd-cgroups-agent\""
|
|
];
|
|
|
|
# Use /var/lib/udev rather than /etc/udev for the generated hardware
|
|
# database. Upstream doesn't want this (see commit
|
|
# 1e1954f53386cb773e2a152748dd31c4d36aa2d8) because using /var is
|
|
# forbidden in early boot, but in NixOS the initrd guarantees that
|
|
# /var is mounted.
|
|
makeFlags = "hwdb_bin=/var/lib/udev/hwdb.bin";
|
|
|
|
installFlags =
|
|
[ "localstatedir=$(TMPDIR)/var"
|
|
"sysconfdir=$(out)/etc"
|
|
"sysvinitdir=$(TMPDIR)/etc/init.d"
|
|
"pamconfdir=$(out)/etc/pam.d"
|
|
];
|
|
|
|
# Get rid of configuration-specific data.
|
|
postInstall =
|
|
''
|
|
mkdir -p $out/example/systemd
|
|
mv $out/lib/{modules-load.d,binfmt.d,sysctl.d,tmpfiles.d} $out/example
|
|
mv $out/lib/systemd/{system,user} $out/example/systemd
|
|
|
|
rm -rf $out/etc/systemd/system
|
|
|
|
# Install SysV compatibility commands.
|
|
mkdir -p $out/sbin
|
|
ln -s $out/lib/systemd/systemd $out/sbin/telinit
|
|
for i in init halt poweroff runlevel reboot shutdown; do
|
|
ln -s $out/bin/systemctl $out/sbin/$i
|
|
done
|
|
|
|
# Fix reference to /bin/false in the D-Bus services.
|
|
for i in $out/share/dbus-1/system-services/*.service; do
|
|
substituteInPlace $i --replace /bin/false ${coreutils}/bin/false
|
|
done
|
|
|
|
rm -rf $out/etc/rpm
|
|
''; # */
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
# The interface version prevents NixOS from switching to an
|
|
# incompatible systemd at runtime. (Switching across reboots is
|
|
# fine, of course.) It should be increased whenever systemd changes
|
|
# in a backwards-incompatible way. If the interface version of two
|
|
# systemd builds is the same, then we can switch between them at
|
|
# runtime; otherwise we can't and we need to reboot.
|
|
passthru.interfaceVersion = 2;
|
|
|
|
meta = {
|
|
homepage = "http://www.freedesktop.org/wiki/Software/systemd";
|
|
description = "A system and service manager for Linux";
|
|
platforms = stdenv.lib.platforms.linux;
|
|
maintainers = [ stdenv.lib.maintainers.eelco stdenv.lib.maintainers.simons ];
|
|
};
|
|
}
|