[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Running IceCat in a container
From: |
Ludovic Courtès |
Subject: |
Re: Running IceCat in a container |
Date: |
Mon, 29 Jan 2018 17:48:31 +0100 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux) |
And the attachment…
Ludo’.
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2018 Ludovic Courtès <address@hidden>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
(define-module (guix scripts run)
#:use-module (guix ui)
#:use-module (guix utils)
#:use-module (guix scripts)
#:use-module (guix store)
#:use-module (guix packages)
#:use-module (guix derivations)
#:use-module ((guix build utils) #:select (which mkdir-p))
#:use-module (gnu build linux-container)
#:use-module (gnu system file-systems)
#:use-module (gnu packages)
#:use-module (srfi srfi-1)
#:use-module (srfi srfi-11)
#:use-module (srfi srfi-26)
#:use-module (srfi srfi-37)
#:use-module (ice-9 match)
#:export (guix-run))
(define %options
(list (option '(#\h "help") #f #f
(lambda args
(show-help)
(exit 0)))
(option '(#\V "version") #f #f
(lambda args
(show-version-and-exit "guix run")))))
(define (show-help)
(display (G_ "Usage: guix run PACKAGE COMMAND...
Run COMMAND from PACKAGE in a container.\n"))
(newline)
(display (G_ "
-h, --help display this help and exit"))
(display (G_ "
-V, --version display version information and exit"))
(newline)
(show-bug-report-information))
(define (bind-mount-spec/ro item)
(and (file-exists? item)
(file-system
(device item)
(mount-point item)
(title 'device)
(type "none")
(flags '(bind-mount read-only))
(check? #f))))
(define (bind-mount-spec/rw item)
(and (file-exists? item)
(file-system
(inherit (bind-mount-spec/ro item))
(flags '(bind-mount)))))
(define (application-file-system-mappings items)
"Return the list of <file-system> objects corresponding to bind mounts
required by the applications whose dependencies are listed in ITEMS."
(define packages
(map (compose (cut package-name->name+version <> #\-)
store-path-package-name)
items))
(define x11? (member "libx11" packages))
(define dbus? (member "dbus" packages))
(define alsa? (member "alsa-lib" packages))
(define pulseaudio? (member "pulseaudio" packages))
(let-syntax ((if (syntax-rules ()
((_ condition body)
(if condition (list body) '()))))
(ro (identifier-syntax bind-mount-spec/ro))
(rw (identifier-syntax bind-mount-spec/rw)))
`(,(rw "/var/run/nscd/socket")
,@(if x11? (rw (string-append (getenv "HOME") "/.Xauthority")))
,@(if x11? (rw "/tmp/.X11-unix"))
,@(if dbus? (ro "/etc/machine-id"))
,@(if alsa? (rw "/dev/snd"))
,@(if pulseaudio? (rw (string-append (getenv "HOME") "/.pulse"))))))
(define %not-colon
(char-set-complement (char-set #\:)))
(define (guix-run . args)
(define (parse-options)
;; Return the alist of option values. With this hack, the first
;; non-option argument is considered to be the beginning of the command.
(let-values (((args command) (span (cut string-prefix? "-" <>) args)))
(args-fold* args %options
(lambda (opt name arg result)
(leave (G_ "~A: unrecognized option~%") name))
(lambda (arg result)
(pk 'arg arg)
(alist-cons 'argument arg result))
'())
command))
(with-error-handling
(match (parse-options)
((command args ...)
(with-store store
(let* ((full (search-path (string-tokenize (getenv "PATH")
%not-colon)
command))
(resolved (and=> full readlink*))
(prefix (and=> resolved (lambda (file)
(and (store-path? file)
(direct-store-path file))))))
(unless full
(leave (G_ "command '~a' not found~%") command))
(unless prefix
(leave (G_ "command '~a' is not in '~a'~%")
command (%store-prefix)))
(let ((items (requisites store (list prefix)))
(env (environ)))
(call-with-container
(append (map bind-mount-spec/ro items)
(application-file-system-mappings items))
(lambda ()
(environ env) ;TODO: filter ENV
(mkdir-p (getenv "HOME"))
(chdir (getenv "HOME"))
(newline)
(catch #t
(lambda ()
(apply execl resolved command args))
(lambda (key . args)
(print-exception (current-error-port) #f key args)
(exit 1))))
#:namespaces (delq 'net %namespaces)))))))))
- Re: Running IceCat in a container, (continued)
- Re: Running IceCat in a container, Ludovic Courtès, 2018/01/25
- Re: Running IceCat in a container, Ludovic Courtès, 2018/01/25
- Re: Running IceCat in a container, Mike Gerwitz, 2018/01/26
- Re: Running IceCat in a container, Ludovic Courtès, 2018/01/29
- Re: Running IceCat in a container, Ricardo Wurmus, 2018/01/29
- Running code from packs in containers, Ludovic Courtès, 2018/01/30
- Re: Running IceCat in a container,
Ludovic Courtès <=