Re: Is anyone using `guix system container` in production?

2020-08-02 Thread Efraim Flashner
I found the systemd approach actually worked fairly well. The downsides were that the containers needed to be run as root and then have their permissions dropped which wasn't always easy for me. I also didn't really like using root systemd units to start user-specific services. We tried to give eac

Re: Yubikey setup for GPG

2020-08-02 Thread LaFreniere, Joseph
Jesse Gibbons writes: I had a similar problem with my Librem key. I fixed it by including (service pcscd-service-type) in my system configuration, reconfiguring my guix system, and making sure I have one of the pinentry packages installed and configured. See https://guix.gnu.org/manual/en/

Re: Is anyone using `guix system container` in production?

2020-08-02 Thread conjaroy
Hi Efraim, thanks for sharing your experience. Was your change in order to adopt more Guix-centric tools, or to address specific bugs/limitations of systemd in the initial approach? Jason On Sun, Aug 2, 2020 at 4:35 AM Efraim Flashner wrote: > We've switched from using systemd to manage guix c

Re: Is anyone using `guix system container` in production?

2020-08-02 Thread Efraim Flashner
We've switched from using systemd to manage guix containers and services to using systemd user services to launch an instance of shepherd which manages guix containers and services, with some custom sudo rules. As far as using systemd and guix containers, here's one config that I still have around¹