guix/gnu/services
Ludovic Courtès e863274e67
services: hurd-vm: Leave root password uninitialized when offloading.
Starting with 953c65ffdd, offloading to
the Hurd VM would be enabled by default.  However, ‘root’ had an empty
password so any user on the host could connect to the VM over VNC, log
in as root, and potentially populate the host’s store from there.  This
change fixes that.

* gnu/services/virtualization.scm (operating-system-with-locked-root-account):
New procedure.
(hurd-vm-disk-image)[transform]: Add
‘operating-system-with-locked-root-account’ when offloading.
2023-10-05 23:14:55 +02:00
..
admin.scm
audio.scm
auditd.scm
authentication.scm
avahi.scm
base.scm services: guix: Support declarative offloading setup. 2023-10-01 22:58:19 +02:00
certbot.scm
cgit.scm services: cgit: Allow file-like objects for ‘root-readme’. 2023-09-09 15:54:37 +02:00
ci.scm
configuration.scm
cuirass.scm gnu: cuirass: Update to 797b26a. 2023-10-02 11:07:14 +02:00
cups.scm
databases.scm
dbus.scm
desktop.scm
dict.scm
dns.scm
docker.scm
file-sharing.scm
games.scm
ganeti.scm
getmail.scm
guix.scm services: bffe: Use guile from the package. 2023-09-15 11:10:43 +01:00
herd.scm
hurd.scm
kerberos.scm
ldap.scm
lightdm.scm
linux.scm
lirc.scm
mail.scm
mcron.scm services: mcron: Hide ‘mkdir-p’ from (shepherd support). 2023-10-05 23:14:55 +02:00
messaging.scm
monitoring.scm
networking.scm services: nftables: Add 'configuration' action. 2023-09-22 01:29:18 +08:00
nfs.scm
nix.scm
pam-mount.scm
pm.scm
rsync.scm
samba.scm
science.scm
sddm.scm
security-token.scm
security.scm
shepherd.scm
sound.scm
spice.scm
ssh.scm
syncthing.scm services: syncthing: Ensure that service runs after mounting home directories. 2023-09-17 15:31:03 +02:00
sysctl.scm
telephony.scm
version-control.scm
virtualization.scm services: hurd-vm: Leave root password uninitialized when offloading. 2023-10-05 23:14:55 +02:00
vnc.scm
vpn.scm
web.scm
xorg.scm