guix/etc/guix-gc.service.in

# This is a "service unit file" for the systemd init system to perform a
# one-shot 'guix gc' operation.  It is meant to be triggered by a timer.
# Drop it in /etc/systemd/system or similar together with 'guix-gc.timer'
# to set it up.

[Unit]
Description=Discard unused Guix store items

[Service]
Type=oneshot
# Customize the 'guix gc' arguments to fit your needs.
ExecStart=@localstatedir@/guix/profiles/per-user/root/current-guix/bin/guix gc -d 1m -F 10G
PrivateDevices=yes
PrivateNetwork=yes
PrivateUsers=no
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectControlGroups=yes
MemoryDenyWriteExecute=yes
SystemCallFilter=@default @file-system @basic-io @system-service
etc: Add systemd files for running ‘guix gc’ periodically * etc/guix-gc.service.in: New file. * etc/guix-gc.timer: Likewise. * .gitignore: Ignore generated ‘guix-gc.service’. * nix/local.mk (nodist_systemdservice_DATA): Add ‘guix-gc.service’ and ‘guix-gc.timer’. (EXTRA_DIST): Add ‘guix-gc.service.in’ and ‘guix-gc.timer’. * doc/guix.texi (Binary Installation): Mention the new systemd files. Signed-off-by: Mathieu Othacehe <othacehe@gnu.org> 2021-09-15 19:36:38 -04:00			`# This is a "service unit file" for the systemd init system to perform a`
			`# one-shot 'guix gc' operation. It is meant to be triggered by a timer.`
			`# Drop it in /etc/systemd/system or similar together with 'guix-gc.timer'`
			`# to set it up.`

			`[Unit]`
			`Description=Discard unused Guix store items`

			`[Service]`
			`Type=oneshot`
			`# Customize the 'guix gc' arguments to fit your needs.`
			`ExecStart=@localstatedir@/guix/profiles/per-user/root/current-guix/bin/guix gc -d 1m -F 10G`
			`PrivateDevices=yes`
			`PrivateNetwork=yes`
			`PrivateUsers=no`
			`ProtectKernelTunables=yes`
			`ProtectKernelModules=yes`
			`ProtectControlGroups=yes`
			`MemoryDenyWriteExecute=yes`
			`SystemCallFilter=@default @file-system @basic-io @system-service`