system: bare-bones: Add comments about nss-cert and NTP service.

TLS errors may be confusing to some users.  Two comments are added: one
comment should help clarify the extra step required for root CA certificates
to be installed, while the other will help users keep their clocks
synchronized, another source of TLS errors due to clock drift.

* gnu/system/examples/bare-bones.tmpl: Add nss-cert and NTP service comments.

Signed-off-by: Nikolaos Chatzikonstantinou <nchatz314@gmail.com>
Signed-off-by: Ludovic Courtès <ludo@gnu.org>
This commit is contained in:
Nikolaos Chatzikonstantinou 2023-09-20 17:13:11 +03:00 committed by Ludovic Courtès
parent 7b710836a1
commit 2467b7d1fb
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5

View file

@ -4,6 +4,9 @@
(use-modules (gnu)) (use-modules (gnu))
(use-service-modules networking ssh) (use-service-modules networking ssh)
;; If you want to use HTTPS, you most likely want to include
;; "certs" in the line below. Also read the comment about
;; "nss-certs" later in this file.
(use-package-modules screen ssh) (use-package-modules screen ssh)
(operating-system (operating-system
@ -43,10 +46,12 @@
%base-user-accounts)) %base-user-accounts))
;; Globally-installed packages. ;; Globally-installed packages.
;; Add "nss-certs" for Mozilla's approved CA certs. You would
;; have to have included "certs" in use-package-modules above.
(packages (cons screen %base-packages)) (packages (cons screen %base-packages))
;; Add services to the baseline: a DHCP client and ;; Add services to the baseline: a DHCP client and an SSH
;; an SSH server. ;; server. You may wish to add an NTP service here.
(services (append (list (service dhcp-client-service-type) (services (append (list (service dhcp-client-service-type)
(service openssh-service-type (service openssh-service-type
(openssh-configuration (openssh-configuration