From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pjotr Prins Subject: Re: System configuration on non-GuixSD systems (Debian) Date: Fri, 25 Aug 2017 15:46:15 +0200 Message-ID: <20170825134615.GA17316@thebird.nl> References: <20170822092325.GB26942@thebird.nl> <20170822104723.75630581@cbaines.net> <87efs0w059.fsf@elephly.net> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:46841) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dlEx6-0006YA-3s for guix-devel@gnu.org; Fri, 25 Aug 2017 09:47:13 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dlEx1-00053c-8t for guix-devel@gnu.org; Fri, 25 Aug 2017 09:47:12 -0400 Received: from mail.thebird.nl ([95.154.246.10]:33775) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1dlEx1-000532-1w for guix-devel@gnu.org; Fri, 25 Aug 2017 09:47:07 -0400 Content-Disposition: inline In-Reply-To: <87efs0w059.fsf@elephly.net> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Ricardo Wurmus Cc: guix-devel On Fri, Aug 25, 2017 at 09:56:50AM +0200, Ricardo Wurmus wrote: > > One maybe bizare suggestion that comes to mind is to use a container > > created through the `guix system container` command. > > > > This would allow you to create a set of processes, that you could giv= e > > access to specific parts of the host filesystem (using the --share an= d > > --expose options), and expose the host network to if you want to > > use services which access the network (only with this patch [1]). >=20 > This is an interesting idea. We can already run some services in > containers, so maybe we can extend this some more and =E2=80=9Cbuild=E2= =80=9D the > closure of a service and then spin it up with a non-PID-1 instance of > shepherd. Yes. Not for sshd, but for many other things yes :) > I think it would be very useful to have self-contained service blobs > that are backed by a shared store. I am planning to host a number of services on Pi3, including mail and http(s). It looks like we are pretty close to achieving this with containers. Do containers actually run on Arm? Docker has it http://blog.hypriot.com/getting-started-with-docker-on-your-arm-device/ so it should be possible. Pj.