Ludovic Courtès e863274e67 services: hurd-vm: Leave root password uninitialized when offloading. ...

Starting with 953c65ffdd, offloading to
the Hurd VM would be enabled by default.  However, ‘root’ had an empty
password so any user on the host could connect to the VM over VNC, log
in as root, and potentially populate the host’s store from there.  This
change fixes that.

* gnu/services/virtualization.scm (operating-system-with-locked-root-account):
New procedure.
(hurd-vm-disk-image)[transform]: Add
‘operating-system-with-locked-root-account’ when offloading.

2023-10-05 23:14:55 +02:00

..

admin.scm

services: file-database: Clarify 'excluded-directories' description.

2023-08-22 11:17:53 +02:00

audio.scm

Revert "services: mpd: Add an 'update' action to trigger a database update."

2023-07-26 12:04:37 -04:00

auditd.scm

services: Accept <inferior-package>s in lieu of <package>s.

2021-11-30 01:08:55 +01:00

authentication.scm

services: Use more 'file-append'.

2023-08-15 23:30:44 +02:00

avahi.scm

services: Add Shepherd 'configuration' action to various services.

2022-11-18 15:44:39 +01:00

base.scm

services: guix: Support declarative offloading setup.

2023-10-01 22:58:19 +02:00

certbot.scm

services: certbot: Fix nginx crash when certbot is used without domains.

2023-06-18 23:12:10 +02:00

cgit.scm

services: cgit: Allow file-like objects for ‘root-readme’.

2023-09-09 15:54:37 +02:00

ci.scm

services: laminar: Set LAMINAR_BIND_RPC environment variable.

2022-01-11 11:47:42 +05:30

configuration.scm

services: configuration: Add user-defined sanitizer support.

2023-04-02 12:31:51 +02:00

cuirass.scm

gnu: cuirass: Update to 797b26a.

2023-10-02 11:07:14 +02:00

cups.scm

services: cups: Add cups PAM service.

2023-05-23 20:26:19 -04:00

databases.scm

services: posgresql: Add option to specify UID/GID for postgres user.

2023-08-16 22:37:52 +02:00

dbus.scm

Merge remote-tracking branch 'origin/master' into core-updates

2023-03-20 18:49:06 +01:00

desktop.scm

Merge remote-tracking branch 'origin/master' into kde-updates

2023-08-17 18:38:23 +08:00

dict.scm

home: services: Add dicod.

2023-08-20 22:48:47 +02:00

dns.scm

Revert "services: Add ddclient service."

2023-08-16 23:13:55 +02:00

docker.scm

file-systems: Use cgroups v2.

2023-08-08 18:01:55 +02:00

file-sharing.scm

services: Use the new maybe/unset API.

2022-08-25 00:10:32 -04:00

games.scm

gnu: services: Add joycond-service.

2023-01-14 07:53:21 -05:00

ganeti.scm

services: ganeti: Label mcron jobs.

2022-12-25 14:15:59 +01:00

getmail.scm

records: 'match-record' checks fields at macro-expansion time.

2022-12-08 13:21:23 +01:00

guix.scm

services: bffe: Use guile from the package.

2023-09-15 11:10:43 +01:00

herd.scm

services: herd: Add a new 'current-service' procedure.

2023-07-21 11:58:44 -04:00

hurd.scm

services: Accept <inferior-package>s in lieu of <package>s.

2021-11-30 01:08:55 +01:00

kerberos.scm

services: Use more 'file-append'.

2023-08-15 23:30:44 +02:00

ldap.scm

gnu: slapd-configuration: Update default for run-dir.

2022-12-14 22:56:00 +01:00

lightdm.scm

system: pam: Let PAM extensions add shepherd requirements.

2023-05-11 13:21:45 +02:00

linux.scm

gnu: earlyoom: Improve description.

2023-08-21 17:29:51 +02:00

lirc.scm

services: lirc: Deprecate 'lirc-service' procedure.

2023-03-03 17:55:34 +01:00

mail.scm

system: pam: Let PAM extensions add shepherd requirements.

2023-05-11 13:21:45 +02:00

mcron.scm

services: mcron: Hide ‘mkdir-p’ from (shepherd support).

2023-10-05 23:14:55 +02:00

messaging.scm

services: Transient inetd services inherit requirements.

2023-05-21 01:04:39 +02:00

monitoring.scm

services: Add vnstat-service-type.

2023-05-11 16:38:29 +02:00

networking.scm

services: nftables: Add 'configuration' action.

2023-09-22 01:29:18 +08:00

nfs.scm

services: pipefs: Correctly handle lack of extensions.

2022-05-03 18:02:27 +02:00

nix.scm

services: nix: Fix nix-shepherd-service.

2022-12-15 10:13:24 +00:00

pam-mount.scm

services: Use more 'file-append'.

2023-08-15 23:30:44 +02:00

pm.scm

services: configuration: Use *unspecified* instead of 'disabled.

2022-06-15 00:25:21 +02:00

rsync.scm

services: rsync: Use least authority wrapper.

2023-05-18 23:11:19 -04:00

samba.scm

services: samba: Remove unused variables and modules.

2022-09-28 09:57:30 -04:00

science.scm

services: Accept <inferior-package>s in lieu of <package>s.

2021-11-30 01:08:55 +01:00

sddm.scm

services: sddm: Set some environment variables for the breeze theme.

2023-08-02 22:27:43 +08:00

security-token.scm

services: pcscd: Use switch-symlinks from (guix build utils).

2022-06-25 01:43:08 +05:30

security.scm

services: replace bare serializers with (serializer ...)

2023-04-02 12:35:30 +02:00

shepherd.scm

services: Validate 'provision' field of <shepherd-service>.

2023-06-25 23:46:03 +02:00

sound.scm

services: ladspa: Export accessors.

2023-03-07 11:39:50 +01:00

spice.scm

services: spice: Deprecate 'spice-vdagent-service' procedure.

2023-03-03 17:55:35 +01:00

ssh.scm

services: Transient inetd services inherit requirements.

2023-05-21 01:04:39 +02:00

syncthing.scm

services: syncthing: Ensure that service runs after mounting home directories.

2023-09-17 15:31:03 +02:00

sysctl.scm

services: Add missing 'description' fields.

2022-04-29 18:07:16 +02:00

telephony.scm

gnu: libjami: Move jamid daemon to a "bin" output.

2023-02-08 09:36:26 -05:00

version-control.scm

services: git-daemon: Deprecate 'git-daemon-service' procedure.

2023-01-10 11:49:13 +01:00

virtualization.scm

services: hurd-vm: Leave root password uninitialized when offloading.

2023-10-05 23:14:55 +02:00

vnc.scm

services: Transient inetd services inherit requirements.

2023-05-21 01:04:39 +02:00

vpn.scm

services: vpn: Fix broken format string for wireguard dns.

2023-09-09 12:24:12 +02:00

web.scm

services: nginx: Harden php-location settings.

2023-07-02 02:00:01 +02:00

xorg.scm

services: screen-locker-service-type: Configurable PAM and setuid.

2023-06-04 10:33:55 +02:00