Network Manager Service

Network Manager Service

[rennes]

Hello,

I tested the 'network-manager-service' service on GNOME, and generated 
VM's with 'system vm-image'; and the test seems correct and functional.

To replace 'wicd-service' with 'network-manager-service' I have seen the 
email:
https://lists.gnu.org/archive/html/guix-devel/2015-11/msg00717.html

My question is, how can I export the 'wicd-service-type' service? and 
should I add 'network-manager-service' to my config.scm file?

If you add only 'network-manager-service' Guix says: "guix system: 
error: service' networking 'provided more than once", I think because 
'wicd-service' is already defined.

Thanks and happy day.

Re: Network Manager Service

[Ludovic Courtès]

Hi!

rennes@openmailbox.org skribis:

> I tested the 'network-manager-service' service on GNOME, and generated
> VM's with 'system vm-image'; and the test seems correct and
> functional.
>
> To replace 'wicd-service' with 'network-manager-service' I have seen
> the email:
> https://lists.gnu.org/archive/html/guix-devel/2015-11/msg00717.html
>
> My question is, how can I export the 'wicd-service-type' service?

Turns out I inadvertently exported it in commit
ef63b00fa6365598e54b2fc8d2d70436a080aab9 yesterday.

> and
> should I add 'network-manager-service' to my config.scm file?

Yes: remove the Wicd service as shown in the message above, and add
‘network-manager-service’.

> If you add only 'network-manager-service' Guix says: "guix system:
> error: service' networking 'provided more than once", I think because
> 'wicd-service' is already defined.

Exactly.

ISTR NetworkManager didn’t quite work out of the box, so your feedback,
positive or negative, will be welcome!

Thanks,
Ludo’.

Re: Network Manager Service

[Chris Marusich]

[-- Attachment #1: Type: text/plain, Size: 4269 bytes --]

ludo@gnu.org (Ludovic Courtès) writes:

> ISTR NetworkManager didn’t quite work out of the box, so your feedback,
> positive or negative, will be welcome!

I just tried modifying my system's services as follows (basically), and
Network Manager didn't quite work for me (I did 'guix pull' first):

--8<---------------cut here---------------start------------->8---
(define %modified-desktop-services
  (cons (network-manager-service)
        (remove (lambda (service)
                  (eq? wicd-service-type (service-kind service)))
                %desktop-services)))
--8<---------------cut here---------------end--------------->8---

When I rebooted, I observed the following:

* In the GNOME Control Center, when I click on Network, I see
  information about Network Manager.  This is good.
  
* However, Network Manager did NOT display any wireless networks.  This
  is not what I expected; I expected it to find my wireless network.

I found NetworkManager errors like the following in /var/log/messages,
which seems suspicious:

--8<---------------cut here---------------start------------->8---
error poking ModemManager: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.ModemManager1 was not provided by any .service files
error requesting auth for org.freedesktop.NetworkManager.checkpoint-rollback: Authorization check failed: Action org.freedesktop.NetworkManager.checkpoint-rollback is not registered
error requesting auth for org.freedesktop.NetworkManager.enable-disable-network: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-network is not registered
error requesting auth for org.freedesktop.NetworkManager.enable-disable-statistics: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-statistics is not registered
error requesting auth for org.freedesktop.NetworkManager.enable-disable-wifi: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-wifi is not registered
error requesting auth for org.freedesktop.NetworkManager.enable-disable-wimax: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-wimax is not registered
error requesting auth for org.freedesktop.NetworkManager.enable-disable-wwan: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-wwan is not registered
error requesting auth for org.freedesktop.NetworkManager.network-control: Authorization check failed: Action org.freedesktop.NetworkManager.network-control is not registered
error requesting auth for org.freedesktop.NetworkManager.reload: Authorization check failed: Action org.freedesktop.NetworkManager.reload is not registered
error requesting auth for org.freedesktop.NetworkManager.settings.modify.global-dns: Authorization check failed: Action org.freedesktop.NetworkManager.settings.modify.global-dns is not registered
error requesting auth for org.freedesktop.NetworkManager.settings.modify.hostname: Authorization check failed: Action org.freedesktop.NetworkManager.settings.modify.hostname is not registered
error requesting auth for org.freedesktop.NetworkManager.settings.modify.own: Authorization check failed: Action org.freedesktop.NetworkManager.settings.modify.own is not registered
error requesting auth for org.freedesktop.NetworkManager.settings.modify.system: Authorization check failed: Action org.freedesktop.NetworkManager.settings.modify.system is not registered
error requesting auth for org.freedesktop.NetworkManager.sleep-wake: Authorization check failed: Action org.freedesktop.NetworkManager.sleep-wake is not registered
error requesting auth for org.freedesktop.NetworkManager.wifi.share.open: Authorization check failed: Action org.freedesktop.NetworkManager.wifi.share.open is not registered
error requesting auth for org.freedesktop.NetworkManager.wifi.share.protected: Authorization check failed: Action org.freedesktop.NetworkManager.wifi.share.protected is not registered
--8<---------------cut here---------------end--------------->8---

I wonder if someone else has seen this before?  I briefly searched the
guix-devel archives, and the debbugs reports, but didn't find anything
like this.

-- 
Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 818 bytes --]

Re: Network Manager Service

[ng0]

Chris Marusich <cmmarusich@gmail.com> writes:

> ludo@gnu.org (Ludovic Courtès) writes:
>
>> ISTR NetworkManager didn’t quite work out of the box, so your feedback,
>> positive or negative, will be welcome!
>
> I just tried modifying my system's services as follows (basically), and
> Network Manager didn't quite work for me (I did 'guix pull' first):
>
> (define %modified-desktop-services
>   (cons (network-manager-service)
>         (remove (lambda (service)
>                   (eq? wicd-service-type (service-kind service)))
>                 %desktop-services)))
>
>
> When I rebooted, I observed the following:
>
> * In the GNOME Control Center, when I click on Network, I see
>   information about Network Manager.  This is good.
>   
> * However, Network Manager did NOT display any wireless networks.  This
>   is not what I expected; I expected it to find my wireless network.
>
> I found NetworkManager errors like the following in /var/log/messages,
> which seems suspicious:
>
> error poking ModemManager: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.ModemManager1 was not provided by any .service files
> error requesting auth for
> org.freedesktop.NetworkManager.checkpoint-rollback:
> Authorization check failed: Action
> org.freedesktop.NetworkManager.checkpoint-rollback is not
> registered

Could be that we build NetworkManager without the ModemManager
component. This is harmless.

The errors below: When I used Gentoo, you had to add a rule for
that, which might or might not be what is needed here but I have
not tried this for GuixSD.
https://wiki.gentoo.org/wiki/NetworkManager

> error requesting auth for org.freedesktop.NetworkManager.enable-disable-network: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-network is not registered
> error requesting auth for org.freedesktop.NetworkManager.enable-disable-statistics: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-statistics is not registered
> error requesting auth for org.freedesktop.NetworkManager.enable-disable-wifi: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-wifi is not registered
> error requesting auth for org.freedesktop.NetworkManager.enable-disable-wimax: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-wimax is not registered
> error requesting auth for org.freedesktop.NetworkManager.enable-disable-wwan: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-wwan is not registered
> error requesting auth for org.freedesktop.NetworkManager.network-control: Authorization check failed: Action org.freedesktop.NetworkManager.network-control is not registered
> error requesting auth for org.freedesktop.NetworkManager.reload: Authorization check failed: Action org.freedesktop.NetworkManager.reload is not registered
> error requesting auth for org.freedesktop.NetworkManager.settings.modify.global-dns: Authorization check failed: Action org.freedesktop.NetworkManager.settings.modify.global-dns is not registered
> error requesting auth for org.freedesktop.NetworkManager.settings.modify.hostname: Authorization check failed: Action org.freedesktop.NetworkManager.settings.modify.hostname is not registered
> error requesting auth for org.freedesktop.NetworkManager.settings.modify.own: Authorization check failed: Action org.freedesktop.NetworkManager.settings.modify.own is not registered
> error requesting auth for org.freedesktop.NetworkManager.settings.modify.system: Authorization check failed: Action org.freedesktop.NetworkManager.settings.modify.system is not registered
> error requesting auth for org.freedesktop.NetworkManager.sleep-wake: Authorization check failed: Action org.freedesktop.NetworkManager.sleep-wake is not registered
> error requesting auth for org.freedesktop.NetworkManager.wifi.share.open: Authorization check failed: Action org.freedesktop.NetworkManager.wifi.share.open is not registered
> error requesting auth for org.freedesktop.NetworkManager.wifi.share.protected: Authorization check failed: Action org.freedesktop.NetworkManager.wifi.share.protected is not registered
>
> I wonder if someone else has seen this before?  I briefly searched the
> guix-devel archives, and the debbugs reports, but didn't find anything
> like this.

-- 
♥Ⓐ  ng0  | ng0.chaosnet.org

Re: Network Manager Service

[Ludovic Courtès]

[-- Attachment #1: Type: text/plain, Size: 784 bytes --]

Chris Marusich <cmmarusich@gmail.com> skribis:

> I found NetworkManager errors like the following in /var/log/messages,
> which seems suspicious:
>
> error poking ModemManager: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.ModemManager1 was not provided by any .service files
> error requesting auth for org.freedesktop.NetworkManager.checkpoint-rollback: Authorization check failed: Action org.freedesktop.NetworkManager.checkpoint-rollback is not registered
> error requesting auth for org.freedesktop.NetworkManager.enable-disable-network: Authorization check failed: Action org.freedesktop.NetworkManager.enable-disable-network is not registered

Looks like we’re missing polkit “actions”, which the attached patch may
solve:


[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: Type: text/x-patch, Size: 10334 bytes --]

diff --git a/gnu/services/dbus.scm b/gnu/services/dbus.scm
index 876f56d..26390a4 100644
--- a/gnu/services/dbus.scm
+++ b/gnu/services/dbus.scm
@@ -21,7 +21,9 @@
   #:use-module (gnu services)
   #:use-module (gnu services shepherd)
   #:use-module (gnu system shadow)
+  #:use-module (gnu system pam)
   #:use-module ((gnu packages glib) #:select (dbus))
+  #:use-module (gnu packages polkit)
   #:use-module (gnu packages admin)
   #:use-module (guix gexp)
   #:use-module (guix records)
@@ -30,7 +32,10 @@
   #:export (dbus-configuration
             dbus-configuration?
             dbus-root-service-type
-            dbus-service))
+            dbus-service
+
+            polkit-service-type
+            polkit-service))
 
 ;;;
 ;;; D-Bus.
@@ -218,4 +223,91 @@ and policy files.  For example, to allow avahi-daemon to use the system bus,
            (dbus-configuration (dbus dbus)
                                (services services))))
 
+\f
+;;;
+;;; Polkit privilege management service.
+;;;
+
+(define-record-type* <polkit-configuration>
+  polkit-configuration make-polkit-configuration
+  polkit-configuration?
+  (polkit   polkit-configuration-polkit           ;<package>
+            (default polkit))
+  (actions  polkit-configuration-actions          ;list of <package>
+            (default '())))
+
+(define %polkit-accounts
+  (list (user-group (name "polkitd") (system? #t))
+        (user-account
+         (name "polkitd")
+         (group "polkitd")
+         (system? #t)
+         (comment "Polkit daemon user")
+         (home-directory "/var/empty")
+         (shell "/run/current-system/profile/sbin/nologin"))))
+
+(define %polkit-pam-services
+  (list (unix-pam-service "polkit-1")))
+
+(define (polkit-directory packages)
+  "Return a directory containing an @file{actions} and possibly a
+@file{rules.d} sub-directory, for use as @file{/etc/polkit-1}."
+  (with-imported-modules '((guix build union))
+    (computed-file "etc-polkit-1"
+                   #~(begin
+                       (use-modules (guix build union) (srfi srfi-26))
+
+                       (union-build #$output
+                                    (map (cut string-append <>
+                                              "/share/polkit-1")
+                                         (list #$@packages)))))))
+
+(define polkit-etc-files
+  (match-lambda
+    (($ <polkit-configuration> polkit packages)
+     `(("polkit-1" ,(polkit-directory (cons polkit packages)))))))
+
+(define polkit-setuid-programs
+  (match-lambda
+    (($ <polkit-configuration> polkit)
+     (list (file-append polkit "/lib/polkit-1/polkit-agent-helper-1")
+           (file-append polkit "/bin/pkexec")))))
+
+(define polkit-service-type
+  (service-type (name 'polkit)
+                (extensions
+                 (list (service-extension account-service-type
+                                          (const %polkit-accounts))
+                       (service-extension pam-root-service-type
+                                          (const %polkit-pam-services))
+                       (service-extension dbus-root-service-type
+                                          (compose
+                                           list
+                                           polkit-configuration-polkit))
+                       (service-extension etc-service-type
+                                          polkit-etc-files)
+                       (service-extension setuid-program-service-type
+                                          polkit-setuid-programs)))
+
+                ;; Extensions are lists of packages that provide polkit rules
+                ;; or actions under share/polkit-1/{actions,rules.d}.
+                (compose concatenate)
+                (extend (lambda (config actions)
+                          (polkit-configuration
+                           (inherit config)
+                           (actions
+                            (append (polkit-configuration-actions config)
+                                    actions)))))))
+
+(define* (polkit-service #:key (polkit polkit))
+  "Return a service that runs the
+@uref{http://www.freedesktop.org/wiki/Software/polkit/, Polkit privilege
+management service}, which allows system administrators to grant access to
+privileged operations in a structured way.  By querying the Polkit service, a
+privileged system component can know when it should grant additional
+capabilities to ordinary users.  For example, an ordinary user can be granted
+the capability to suspend the system if the user is logged in locally."
+  (service polkit-service-type
+           (polkit-configuration (polkit polkit))))
+
 ;;; dbus.scm ends here
diff --git a/gnu/services/desktop.scm b/gnu/services/desktop.scm
index dfd1ea6..7555780 100644
--- a/gnu/services/desktop.scm
+++ b/gnu/services/desktop.scm
@@ -37,7 +37,6 @@
   #:use-module (gnu packages gnome)
   #:use-module (gnu packages xfce)
   #:use-module (gnu packages avahi)
-  #:use-module (gnu packages polkit)
   #:use-module (gnu packages xdisorg)
   #:use-module (gnu packages suckless)
   #:use-module (gnu packages linux)
@@ -68,11 +67,6 @@
 
             bluetooth-service
 
-            polkit-configuration
-            polkit-configuration?
-            polkit-service
-            polkit-service-type
-
             elogind-configuration
             elogind-configuration?
             elogind-service
@@ -415,93 +409,6 @@ Users need to be in the @code{lp} group to access the D-Bus service.
 
 \f
 ;;;
-;;; Polkit privilege management service.
-;;;
-
-(define-record-type* <polkit-configuration>
-  polkit-configuration make-polkit-configuration
-  polkit-configuration?
-  (polkit   polkit-configuration-polkit           ;<package>
-            (default polkit))
-  (actions  polkit-configuration-actions          ;list of <package>
-            (default '())))
-
-(define %polkit-accounts
-  (list (user-group (name "polkitd") (system? #t))
-        (user-account
-         (name "polkitd")
-         (group "polkitd")
-         (system? #t)
-         (comment "Polkit daemon user")
-         (home-directory "/var/empty")
-         (shell "/run/current-system/profile/sbin/nologin"))))
-
-(define %polkit-pam-services
-  (list (unix-pam-service "polkit-1")))
-
-(define (polkit-directory packages)
-  "Return a directory containing an @file{actions} and possibly a
-@file{rules.d} sub-directory, for use as @file{/etc/polkit-1}."
-  (with-imported-modules '((guix build union))
-    (computed-file "etc-polkit-1"
-                   #~(begin
-                       (use-modules (guix build union) (srfi srfi-26))
-
-                       (union-build #$output
-                                    (map (cut string-append <>
-                                              "/share/polkit-1")
-                                         (list #$@packages)))))))
-
-(define polkit-etc-files
-  (match-lambda
-    (($ <polkit-configuration> polkit packages)
-     `(("polkit-1" ,(polkit-directory (cons polkit packages)))))))
-
-(define polkit-setuid-programs
-  (match-lambda
-    (($ <polkit-configuration> polkit)
-     (list (file-append polkit "/lib/polkit-1/polkit-agent-helper-1")
-           (file-append polkit "/bin/pkexec")))))
-
-(define polkit-service-type
-  (service-type (name 'polkit)
-                (extensions
-                 (list (service-extension account-service-type
-                                          (const %polkit-accounts))
-                       (service-extension pam-root-service-type
-                                          (const %polkit-pam-services))
-                       (service-extension dbus-root-service-type
-                                          (compose
-                                           list
-                                           polkit-configuration-polkit))
-                       (service-extension etc-service-type
-                                          polkit-etc-files)
-                       (service-extension setuid-program-service-type
-                                          polkit-setuid-programs)))
-
-                ;; Extensions are lists of packages that provide polkit rules
-                ;; or actions under share/polkit-1/{actions,rules.d}.
-                (compose concatenate)
-                (extend (lambda (config actions)
-                          (polkit-configuration
-                           (inherit config)
-                           (actions
-                            (append (polkit-configuration-actions config)
-                                    actions)))))))
-
-(define* (polkit-service #:key (polkit polkit))
-  "Return a service that runs the
-@uref{http://www.freedesktop.org/wiki/Software/polkit/, Polkit privilege
-management service}, which allows system administrators to grant access to
-privileged operations in a structured way.  By querying the Polkit service, a
-privileged system component can know when it should grant additional
-capabilities to ordinary users.  For example, an ordinary user can be granted
-the capability to suspend the system if the user is logged in locally."
-  (service polkit-service-type
-           (polkit-configuration (polkit polkit))))
-
-\f
-;;;
 ;;; Colord D-Bus service.
 ;;;
 
diff --git a/gnu/services/networking.scm b/gnu/services/networking.scm
index 5a83240..9454d0b 100644
--- a/gnu/services/networking.scm
+++ b/gnu/services/networking.scm
@@ -23,6 +23,7 @@
   #:use-module (gnu services)
   #:use-module (gnu services shepherd)
   #:use-module (gnu services dbus)
+  #:use-module (gnu services desktop)             ;polkit-service-type
   #:use-module (gnu system shadow)
   #:use-module (gnu system pam)
   #:use-module (gnu packages admin)
@@ -695,6 +696,7 @@ and @command{wicd-curses} user interfaces."
                  (list (service-extension shepherd-root-service-type
                                           network-manager-shepherd-service)
                        (service-extension dbus-root-service-type list)
+                       (service-extension polkit-service-type list)
                        (service-extension activation-service-type
                                           (const %network-manager-activation))
                        ;; Add network-manager to the system profile.

[-- Attachment #3: Type: text/plain, Size: 203 bytes --]


Could you try and report back?

(The patch is a one-liner but it moves polkit to dbus.scm to avoid a
circular dependency between networking.scm and desktop.scm.)

Thanks for testing!

Ludo’.

Re: Network Manager Service

[rennes]

Hello,
There are my observations,

  * In the root profile, the error mentioned by Chris is not displayed in 
/var/log/messages.
  * In both users (root and my myuser) the disable network function does 
not work.
  * Related to the patch provided (by Ludovic), I applied it and it 
displays the following error:

/***************************************/
Backtrace:
In unknown file:
    ?: 19 [primitive-load-path "gnu/services/desktop" ...]
In ice-9/eval.scm:
  505: 18 [#<procedure 1bb8560 at ice-9/eval.scm:499:4 (exp)> 
(define-module # # ...)]
In ice-9/psyntax.scm:
1106: 17 [expand-top-sequence ((define-module # # # ...)) () ((top)) 
...]
  989: 16 [scan ((define-module (gnu services desktop) #:use-module ...)) 
() ...]
  279: 15 [scan ((#(syntax-object let # ...) (#) (# #) ...)) () ...]
In ice-9/eval.scm:
  411: 14 [eval # ()]
In ice-9/boot-9.scm:
2954: 13 [define-module* (gnu services desktop) #:filename ...]
2929: 12 [resolve-imports ((#) (#) (#) (#) ...)]
2867: 11 [resolve-interface (gnu services avahi) #:select ...]
2792: 10 [#<procedure 1c6d1a0 at ice-9/boot-9.scm:2780:4 (name 
#:optional autoload version #:key ensure)> # ...]
3068: 9 [try-module-autoload (gnu services avahi) #f]
2404: 8 [save-module-excursion #<procedure 46a65a0 at 
ice-9/boot-9.scm:3069:17 ()>]
3088: 7 [#<procedure 46a65a0 at ice-9/boot-9.scm:3069:17 ()>]
In unknown file:
    ?: 6 [primitive-load-path "gnu/services/avahi" ...]
In ice-9/eval.scm:
  453: 5 [eval # ()]
  411: 4 [eval # #]
  387: 3 [eval # #]
  387: 2 [eval # #]
  393: 1 [eval # #]
In unknown file:
    ?: 0 [memoize-variable-access! # #]

ERROR: In procedure memoize-variable-access!:
ERROR: Unbound variable: nscd-service-type
/***************************************/

Thanks

Re: Network Manager Service

[Ludovic Courtès]

[-- Attachment #1: Type: text/plain, Size: 256 bytes --]

Hi,

rennes@openmailbox.org skribis:

>  * Related to the patch provided (by Ludovic), I applied it and it
> displays the following error:

Oops, I had left an extra #:use-module line in there, sorry!

Could you try this one?

TIA,
Ludo’.


[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: Type: text/x-patch, Size: 10031 bytes --]

diff --git a/gnu/services/dbus.scm b/gnu/services/dbus.scm
index 876f56d..26390a4 100644
--- a/gnu/services/dbus.scm
+++ b/gnu/services/dbus.scm
@@ -21,7 +21,9 @@
   #:use-module (gnu services)
   #:use-module (gnu services shepherd)
   #:use-module (gnu system shadow)
+  #:use-module (gnu system pam)
   #:use-module ((gnu packages glib) #:select (dbus))
+  #:use-module (gnu packages polkit)
   #:use-module (gnu packages admin)
   #:use-module (guix gexp)
   #:use-module (guix records)
@@ -30,7 +32,10 @@
   #:export (dbus-configuration
             dbus-configuration?
             dbus-root-service-type
-            dbus-service))
+            dbus-service
+
+            polkit-service-type
+            polkit-service))
 
 ;;;
 ;;; D-Bus.
@@ -218,4 +223,91 @@ and policy files.  For example, to allow avahi-daemon to use the system bus,
            (dbus-configuration (dbus dbus)
                                (services services))))
 
+\f
+;;;
+;;; Polkit privilege management service.
+;;;
+
+(define-record-type* <polkit-configuration>
+  polkit-configuration make-polkit-configuration
+  polkit-configuration?
+  (polkit   polkit-configuration-polkit           ;<package>
+            (default polkit))
+  (actions  polkit-configuration-actions          ;list of <package>
+            (default '())))
+
+(define %polkit-accounts
+  (list (user-group (name "polkitd") (system? #t))
+        (user-account
+         (name "polkitd")
+         (group "polkitd")
+         (system? #t)
+         (comment "Polkit daemon user")
+         (home-directory "/var/empty")
+         (shell "/run/current-system/profile/sbin/nologin"))))
+
+(define %polkit-pam-services
+  (list (unix-pam-service "polkit-1")))
+
+(define (polkit-directory packages)
+  "Return a directory containing an @file{actions} and possibly a
+@file{rules.d} sub-directory, for use as @file{/etc/polkit-1}."
+  (with-imported-modules '((guix build union))
+    (computed-file "etc-polkit-1"
+                   #~(begin
+                       (use-modules (guix build union) (srfi srfi-26))
+
+                       (union-build #$output
+                                    (map (cut string-append <>
+                                              "/share/polkit-1")
+                                         (list #$@packages)))))))
+
+(define polkit-etc-files
+  (match-lambda
+    (($ <polkit-configuration> polkit packages)
+     `(("polkit-1" ,(polkit-directory (cons polkit packages)))))))
+
+(define polkit-setuid-programs
+  (match-lambda
+    (($ <polkit-configuration> polkit)
+     (list (file-append polkit "/lib/polkit-1/polkit-agent-helper-1")
+           (file-append polkit "/bin/pkexec")))))
+
+(define polkit-service-type
+  (service-type (name 'polkit)
+                (extensions
+                 (list (service-extension account-service-type
+                                          (const %polkit-accounts))
+                       (service-extension pam-root-service-type
+                                          (const %polkit-pam-services))
+                       (service-extension dbus-root-service-type
+                                          (compose
+                                           list
+                                           polkit-configuration-polkit))
+                       (service-extension etc-service-type
+                                          polkit-etc-files)
+                       (service-extension setuid-program-service-type
+                                          polkit-setuid-programs)))
+
+                ;; Extensions are lists of packages that provide polkit rules
+                ;; or actions under share/polkit-1/{actions,rules.d}.
+                (compose concatenate)
+                (extend (lambda (config actions)
+                          (polkit-configuration
+                           (inherit config)
+                           (actions
+                            (append (polkit-configuration-actions config)
+                                    actions)))))))
+
+(define* (polkit-service #:key (polkit polkit))
+  "Return a service that runs the
+@uref{http://www.freedesktop.org/wiki/Software/polkit/, Polkit privilege
+management service}, which allows system administrators to grant access to
+privileged operations in a structured way.  By querying the Polkit service, a
+privileged system component can know when it should grant additional
+capabilities to ordinary users.  For example, an ordinary user can be granted
+the capability to suspend the system if the user is logged in locally."
+  (service polkit-service-type
+           (polkit-configuration (polkit polkit))))
+
 ;;; dbus.scm ends here
diff --git a/gnu/services/desktop.scm b/gnu/services/desktop.scm
index dfd1ea6..7555780 100644
--- a/gnu/services/desktop.scm
+++ b/gnu/services/desktop.scm
@@ -37,7 +37,6 @@
   #:use-module (gnu packages gnome)
   #:use-module (gnu packages xfce)
   #:use-module (gnu packages avahi)
-  #:use-module (gnu packages polkit)
   #:use-module (gnu packages xdisorg)
   #:use-module (gnu packages suckless)
   #:use-module (gnu packages linux)
@@ -68,11 +67,6 @@
 
             bluetooth-service
 
-            polkit-configuration
-            polkit-configuration?
-            polkit-service
-            polkit-service-type
-
             elogind-configuration
             elogind-configuration?
             elogind-service
@@ -415,93 +409,6 @@ Users need to be in the @code{lp} group to access the D-Bus service.
 
 \f
 ;;;
-;;; Polkit privilege management service.
-;;;
-
-(define-record-type* <polkit-configuration>
-  polkit-configuration make-polkit-configuration
-  polkit-configuration?
-  (polkit   polkit-configuration-polkit           ;<package>
-            (default polkit))
-  (actions  polkit-configuration-actions          ;list of <package>
-            (default '())))
-
-(define %polkit-accounts
-  (list (user-group (name "polkitd") (system? #t))
-        (user-account
-         (name "polkitd")
-         (group "polkitd")
-         (system? #t)
-         (comment "Polkit daemon user")
-         (home-directory "/var/empty")
-         (shell "/run/current-system/profile/sbin/nologin"))))
-
-(define %polkit-pam-services
-  (list (unix-pam-service "polkit-1")))
-
-(define (polkit-directory packages)
-  "Return a directory containing an @file{actions} and possibly a
-@file{rules.d} sub-directory, for use as @file{/etc/polkit-1}."
-  (with-imported-modules '((guix build union))
-    (computed-file "etc-polkit-1"
-                   #~(begin
-                       (use-modules (guix build union) (srfi srfi-26))
-
-                       (union-build #$output
-                                    (map (cut string-append <>
-                                              "/share/polkit-1")
-                                         (list #$@packages)))))))
-
-(define polkit-etc-files
-  (match-lambda
-    (($ <polkit-configuration> polkit packages)
-     `(("polkit-1" ,(polkit-directory (cons polkit packages)))))))
-
-(define polkit-setuid-programs
-  (match-lambda
-    (($ <polkit-configuration> polkit)
-     (list (file-append polkit "/lib/polkit-1/polkit-agent-helper-1")
-           (file-append polkit "/bin/pkexec")))))
-
-(define polkit-service-type
-  (service-type (name 'polkit)
-                (extensions
-                 (list (service-extension account-service-type
-                                          (const %polkit-accounts))
-                       (service-extension pam-root-service-type
-                                          (const %polkit-pam-services))
-                       (service-extension dbus-root-service-type
-                                          (compose
-                                           list
-                                           polkit-configuration-polkit))
-                       (service-extension etc-service-type
-                                          polkit-etc-files)
-                       (service-extension setuid-program-service-type
-                                          polkit-setuid-programs)))
-
-                ;; Extensions are lists of packages that provide polkit rules
-                ;; or actions under share/polkit-1/{actions,rules.d}.
-                (compose concatenate)
-                (extend (lambda (config actions)
-                          (polkit-configuration
-                           (inherit config)
-                           (actions
-                            (append (polkit-configuration-actions config)
-                                    actions)))))))
-
-(define* (polkit-service #:key (polkit polkit))
-  "Return a service that runs the
-@uref{http://www.freedesktop.org/wiki/Software/polkit/, Polkit privilege
-management service}, which allows system administrators to grant access to
-privileged operations in a structured way.  By querying the Polkit service, a
-privileged system component can know when it should grant additional
-capabilities to ordinary users.  For example, an ordinary user can be granted
-the capability to suspend the system if the user is logged in locally."
-  (service polkit-service-type
-           (polkit-configuration (polkit polkit))))
-
-\f
-;;;
 ;;; Colord D-Bus service.
 ;;;
 
diff --git a/gnu/services/networking.scm b/gnu/services/networking.scm
index 5a83240..7d3626b 100644
--- a/gnu/services/networking.scm
+++ b/gnu/services/networking.scm
@@ -695,6 +695,7 @@ and @command{wicd-curses} user interfaces."
                  (list (service-extension shepherd-root-service-type
                                           network-manager-shepherd-service)
                        (service-extension dbus-root-service-type list)
+                       (service-extension polkit-service-type list)
                        (service-extension activation-service-type
                                           (const %network-manager-activation))
                        ;; Add network-manager to the system profile.

Re: Network Manager Service

[rennes]

Hello,

These are the results of my tests using 'guix system vm-image ..':

  * The test was performed with 'wired connection', the enable/disable 
network function works; Now go down/up the interface.
  * The mentioned errors are no longer displayed.
  * Is it possible to import the patch to test it on a real machine?

Thanks

Re: Network Manager Service

[Chris Marusich]

[-- Attachment #1.1: Type: text/plain, Size: 481 bytes --]

ludo@gnu.org (Ludovic Courtès) writes:

> Oops, I had left an extra #:use-module line in there, sorry!
>
> Could you try this one?

On my GuixSD system, The new patch works with one problem: Network
Manager still does not show any wireless networks.  I solved this by
adding wpa-supplicant-service (this service was mentioned in the manual,
but it was actually missing from code!) and making
'network-manager-shepherd-service' require it.  Here's the updated
patch:


[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1.2: patch --]
[-- Type: text/x-patch, Size: 11639 bytes --]

diff --git a/gnu/services/dbus.scm b/gnu/services/dbus.scm
index 876f56d..26390a4 100644
--- a/gnu/services/dbus.scm
+++ b/gnu/services/dbus.scm
@@ -21,7 +21,9 @@
   #:use-module (gnu services)
   #:use-module (gnu services shepherd)
   #:use-module (gnu system shadow)
+  #:use-module (gnu system pam)
   #:use-module ((gnu packages glib) #:select (dbus))
+  #:use-module (gnu packages polkit)
   #:use-module (gnu packages admin)
   #:use-module (guix gexp)
   #:use-module (guix records)
@@ -30,7 +32,10 @@
   #:export (dbus-configuration
             dbus-configuration?
             dbus-root-service-type
-            dbus-service))
+            dbus-service
+
+            polkit-service-type
+            polkit-service))
 
 ;;;
 ;;; D-Bus.
@@ -218,4 +223,91 @@ and policy files.  For example, to allow avahi-daemon to use the system bus,
            (dbus-configuration (dbus dbus)
                                (services services))))
 
+\f
+;;;
+;;; Polkit privilege management service.
+;;;
+
+(define-record-type* <polkit-configuration>
+  polkit-configuration make-polkit-configuration
+  polkit-configuration?
+  (polkit   polkit-configuration-polkit           ;<package>
+            (default polkit))
+  (actions  polkit-configuration-actions          ;list of <package>
+            (default '())))
+
+(define %polkit-accounts
+  (list (user-group (name "polkitd") (system? #t))
+        (user-account
+         (name "polkitd")
+         (group "polkitd")
+         (system? #t)
+         (comment "Polkit daemon user")
+         (home-directory "/var/empty")
+         (shell "/run/current-system/profile/sbin/nologin"))))
+
+(define %polkit-pam-services
+  (list (unix-pam-service "polkit-1")))
+
+(define (polkit-directory packages)
+  "Return a directory containing an @file{actions} and possibly a
+@file{rules.d} sub-directory, for use as @file{/etc/polkit-1}."
+  (with-imported-modules '((guix build union))
+    (computed-file "etc-polkit-1"
+                   #~(begin
+                       (use-modules (guix build union) (srfi srfi-26))
+
+                       (union-build #$output
+                                    (map (cut string-append <>
+                                              "/share/polkit-1")
+                                         (list #$@packages)))))))
+
+(define polkit-etc-files
+  (match-lambda
+    (($ <polkit-configuration> polkit packages)
+     `(("polkit-1" ,(polkit-directory (cons polkit packages)))))))
+
+(define polkit-setuid-programs
+  (match-lambda
+    (($ <polkit-configuration> polkit)
+     (list (file-append polkit "/lib/polkit-1/polkit-agent-helper-1")
+           (file-append polkit "/bin/pkexec")))))
+
+(define polkit-service-type
+  (service-type (name 'polkit)
+                (extensions
+                 (list (service-extension account-service-type
+                                          (const %polkit-accounts))
+                       (service-extension pam-root-service-type
+                                          (const %polkit-pam-services))
+                       (service-extension dbus-root-service-type
+                                          (compose
+                                           list
+                                           polkit-configuration-polkit))
+                       (service-extension etc-service-type
+                                          polkit-etc-files)
+                       (service-extension setuid-program-service-type
+                                          polkit-setuid-programs)))
+
+                ;; Extensions are lists of packages that provide polkit rules
+                ;; or actions under share/polkit-1/{actions,rules.d}.
+                (compose concatenate)
+                (extend (lambda (config actions)
+                          (polkit-configuration
+                           (inherit config)
+                           (actions
+                            (append (polkit-configuration-actions config)
+                                    actions)))))))
+
+(define* (polkit-service #:key (polkit polkit))
+  "Return a service that runs the
+@uref{http://www.freedesktop.org/wiki/Software/polkit/, Polkit privilege
+management service}, which allows system administrators to grant access to
+privileged operations in a structured way.  By querying the Polkit service, a
+privileged system component can know when it should grant additional
+capabilities to ordinary users.  For example, an ordinary user can be granted
+the capability to suspend the system if the user is logged in locally."
+  (service polkit-service-type
+           (polkit-configuration (polkit polkit))))
+
 ;;; dbus.scm ends here
diff --git a/gnu/services/desktop.scm b/gnu/services/desktop.scm
index dfd1ea6..7555780 100644
--- a/gnu/services/desktop.scm
+++ b/gnu/services/desktop.scm
@@ -37,7 +37,6 @@
   #:use-module (gnu packages gnome)
   #:use-module (gnu packages xfce)
   #:use-module (gnu packages avahi)
-  #:use-module (gnu packages polkit)
   #:use-module (gnu packages xdisorg)
   #:use-module (gnu packages suckless)
   #:use-module (gnu packages linux)
@@ -68,11 +67,6 @@
 
             bluetooth-service
 
-            polkit-configuration
-            polkit-configuration?
-            polkit-service
-            polkit-service-type
-
             elogind-configuration
             elogind-configuration?
             elogind-service
@@ -415,93 +409,6 @@ Users need to be in the @code{lp} group to access the D-Bus service.
 
 \f
 ;;;
-;;; Polkit privilege management service.
-;;;
-
-(define-record-type* <polkit-configuration>
-  polkit-configuration make-polkit-configuration
-  polkit-configuration?
-  (polkit   polkit-configuration-polkit           ;<package>
-            (default polkit))
-  (actions  polkit-configuration-actions          ;list of <package>
-            (default '())))
-
-(define %polkit-accounts
-  (list (user-group (name "polkitd") (system? #t))
-        (user-account
-         (name "polkitd")
-         (group "polkitd")
-         (system? #t)
-         (comment "Polkit daemon user")
-         (home-directory "/var/empty")
-         (shell "/run/current-system/profile/sbin/nologin"))))
-
-(define %polkit-pam-services
-  (list (unix-pam-service "polkit-1")))
-
-(define (polkit-directory packages)
-  "Return a directory containing an @file{actions} and possibly a
-@file{rules.d} sub-directory, for use as @file{/etc/polkit-1}."
-  (with-imported-modules '((guix build union))
-    (computed-file "etc-polkit-1"
-                   #~(begin
-                       (use-modules (guix build union) (srfi srfi-26))
-
-                       (union-build #$output
-                                    (map (cut string-append <>
-                                              "/share/polkit-1")
-                                         (list #$@packages)))))))
-
-(define polkit-etc-files
-  (match-lambda
-    (($ <polkit-configuration> polkit packages)
-     `(("polkit-1" ,(polkit-directory (cons polkit packages)))))))
-
-(define polkit-setuid-programs
-  (match-lambda
-    (($ <polkit-configuration> polkit)
-     (list (file-append polkit "/lib/polkit-1/polkit-agent-helper-1")
-           (file-append polkit "/bin/pkexec")))))
-
-(define polkit-service-type
-  (service-type (name 'polkit)
-                (extensions
-                 (list (service-extension account-service-type
-                                          (const %polkit-accounts))
-                       (service-extension pam-root-service-type
-                                          (const %polkit-pam-services))
-                       (service-extension dbus-root-service-type
-                                          (compose
-                                           list
-                                           polkit-configuration-polkit))
-                       (service-extension etc-service-type
-                                          polkit-etc-files)
-                       (service-extension setuid-program-service-type
-                                          polkit-setuid-programs)))
-
-                ;; Extensions are lists of packages that provide polkit rules
-                ;; or actions under share/polkit-1/{actions,rules.d}.
-                (compose concatenate)
-                (extend (lambda (config actions)
-                          (polkit-configuration
-                           (inherit config)
-                           (actions
-                            (append (polkit-configuration-actions config)
-                                    actions)))))))
-
-(define* (polkit-service #:key (polkit polkit))
-  "Return a service that runs the
-@uref{http://www.freedesktop.org/wiki/Software/polkit/, Polkit privilege
-management service}, which allows system administrators to grant access to
-privileged operations in a structured way.  By querying the Polkit service, a
-privileged system component can know when it should grant additional
-capabilities to ordinary users.  For example, an ordinary user can be granted
-the capability to suspend the system if the user is logged in locally."
-  (service polkit-service-type
-           (polkit-configuration (polkit polkit))))
-
-\f
-;;;
 ;;; Colord D-Bus service.
 ;;;
 
diff --git a/gnu/services/networking.scm b/gnu/services/networking.scm
index 5a83240..1b4ad56 100644
--- a/gnu/services/networking.scm
+++ b/gnu/services/networking.scm
@@ -66,7 +66,8 @@
             wicd-service
             network-manager-service
             connman-service
-            wpa-supplicant-service-type))
+            wpa-supplicant-service-type
+            wpa-supplicant-service))
 
 ;;; Commentary:
 ;;;
@@ -682,7 +683,7 @@ and @command{wicd-curses} user interfaces."
   (list (shepherd-service
          (documentation "Run the NetworkManager.")
          (provision '(networking))
-         (requirement '(user-processes dbus-system loopback))
+         (requirement '(user-processes dbus-system loopback wpa-supplicant))
          (start #~(make-forkexec-constructor
                    (list (string-append #$network-manager
                                         "/sbin/NetworkManager")
@@ -695,6 +696,7 @@ and @command{wicd-curses} user interfaces."
                  (list (service-extension shepherd-root-service-type
                                           network-manager-shepherd-service)
                        (service-extension dbus-root-service-type list)
+                       (service-extension polkit-service-type list)
                        (service-extension activation-service-type
                                           (const %network-manager-activation))
                        ;; Add network-manager to the system profile.
@@ -777,4 +779,10 @@ configure networking."
                        (service-extension dbus-root-service-type list)
                        (service-extension profile-service-type list)))))
 
+(define* (wpa-supplicant-service #:key (wpa-supplicant wpa-supplicant))
+  "Return a service that runs WPA supplicant (https://w1.fi/wpa_supplicant/),
+an authentication daemon required to authenticate against encrypted WiFi or
+ethernet networks.  Service is started to listen for requests on D-Bus."
+  (service wpa-supplicant-service-type wpa-supplicant))
+
 ;;; networking.scm ends here

[-- Attachment #1.3: Type: text/plain, Size: 68 bytes --]


I then updated my operating system configuration file as follows:


[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1.4: config-patch --]
[-- Type: text/x-patch, Size: 1264 bytes --]

--- /home/marusich/config.scm	2016-11-23 19:01:54.635709804 -0800
+++ /home/marusich/config-with-network-manager.scm	2016-11-23 21:13:33.351383372 -0800
@@ -9,14 +9,20 @@
 (use-package-modules certs cryptsetup xdisorg admin gnome)
 
 (define %modified-desktop-services
-  (modify-services %desktop-services
-    (guix-service-type config =>
-                       (guix-configuration
-                        (inherit config)
-                        (substitute-urls
-                         '("https://hydra-mirror.marusich.info"
-                           "https://mirror.hydra.gnu.org"
-                           "https://hydra.gnu.org"))))))
+  (cons*
+   (network-manager-service)
+   (wpa-supplicant-service)
+   (remove
+    (lambda (service)
+      (eq? wicd-service-type (service-kind service)))
+    (modify-services %desktop-services
+      (guix-service-type config =>
+                         (guix-configuration
+                          (inherit config)
+                          (substitute-urls
+                           '("https://hydra-mirror.marusich.info"
+                             "https://mirror.hydra.gnu.org"
+                             "https://hydra.gnu.org"))))))))
 
 (operating-system
 

[-- Attachment #1.5: Type: text/plain, Size: 1744 bytes --]


After I ran 'guix system configuration', Network Manager pretty much
just works.  Specifically:

* Network Manager starts automatically on boot.

* Network Manager detects wireless networks.

* I can connect manually to wireless networks using Network Manager.

However, there is one problem: Even if I select "Connect automatically"
(in the "Identity" section of the settings page within Network Manager
for my wireless network), Network Manager does not automatically connect
to the network.  I'm not sure why.

I would love to see this patch go into master, but I have a few
concerns (which are probably non-blocking):

* It looks like it's possible to have an "incomplete deployment" of
  services in GuixSD.  For example, if you add (e.g.,
  network-manager-service) without also adding wpa-supplicant-service,
  the 'reconfigure' will succeed, but the wireless aspects of Network
  Manager will not work.  This seems undesirable.  In the same way that
  Guix/Nix ensures "complete deployment" of components in the store, is
  there a way we can ensure complete deployment of services in GuixSD?

* Should we update the desktop templates in
  gnu/system/examples/desktop.tmpl?  It looks like it's impossible to
  add both wicd-service and network-manager-service to the same config
  file.  Therefore, perhaps we should supply a "gnome-desktop.tmpl"
  example for those who want the GNOME desktop specifically?  The
  changes necessary to get Network Manager working with the
  "desktop.tmpl" might not be easy for someone who is new to Guile.

* I'm not sure (yet) how to investigate why Network Manager is failing
  to automatically connect.  If you have any ideas, please let me know.

-- 
Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 818 bytes --]

Re: Network Manager Service

[Ludovic Courtès]

Chris Marusich <cmmarusich@gmail.com> skribis:

> ludo@gnu.org (Ludovic Courtès) writes:
>
>> Oops, I had left an extra #:use-module line in there, sorry!
>>
>> Could you try this one?
>
> On my GuixSD system, The new patch works with one problem: Network
> Manager still does not show any wireless networks.  I solved this by
> adding wpa-supplicant-service (this service was mentioned in the manual,
> but it was actually missing from code!) and making
> 'network-manager-shepherd-service' require it.  Here's the updated
> patch:

Good catch!  I pushed these changes like this:

cbf1024 * doc: Document 'wpa-supplicant-service-type'.
030f59f * services: network-manager: Depend on 'wpa-supplicant'.
89007a0 * services: network-manager: Install polkit actions.
2e32869 * services: Move polkit to (gnu services dbus).

> However, there is one problem: Even if I select "Connect automatically"
> (in the "Identity" section of the settings page within Network Manager
> for my wireless network), Network Manager does not automatically connect
> to the network.  I'm not sure why.

No messages?  Could it be that it fails to record settings?

> I would love to see this patch go into master, but I have a few
> concerns (which are probably non-blocking):
>
> * It looks like it's possible to have an "incomplete deployment" of
>   services in GuixSD.  For example, if you add (e.g.,
>   network-manager-service) without also adding wpa-supplicant-service,
>   the 'reconfigure' will succeed, but the wireless aspects of Network
>   Manager will not work.  This seems undesirable.  In the same way that
>   Guix/Nix ensures "complete deployment" of components in the store, is
>   there a way we can ensure complete deployment of services in GuixSD?

Attempts to define a Shepherd service that depends on a undefined
service leads to an error.

So for example, if you have a ‘network-manager-service-type’ instead but
there is nothing defining a ‘wpa-supplicant’ Shepherd service, you get
an error when running ‘guix system’.

> * Should we update the desktop templates in
>   gnu/system/examples/desktop.tmpl?  It looks like it's impossible to
>   add both wicd-service and network-manager-service to the same config
>   file.  Therefore, perhaps we should supply a "gnome-desktop.tmpl"
>   example for those who want the GNOME desktop specifically?  The
>   changes necessary to get Network Manager working with the
>   "desktop.tmpl" might not be easy for someone who is new to Guile.

Once you have reported total success with Network Manager :-), we can
certainly remove Wicd from ‘%desktop-services’ and add it instead!

> * I'm not sure (yet) how to investigate why Network Manager is failing
>   to automatically connect.  If you have any ideas, please let me know.

Most GNOME programs use GSettings to save their settings, and that has a
tendency to not work if the schemas aren’t well aligned with the stars.

So I would suggest running the NM application/applet from a terminal so
you can see any warnings it spits out (or maybe they go to
~/.xsession-errors otherwise?), and see if that might be a problem.

Perhaps the schema hypothesis doesn’t hold because
network-manager-applet is already built with
‘glib-or-gtk-build-system’.  Dunno.

Thanks,
Ludo’.

Re: Network Manager Service

[rennes]

[-- Attachment #1: Type: text/plain, Size: 744 bytes --]

Hello,

On 2016-11-24 15:02, ludo@gnu.org wrote:
> 
> Good catch!  I pushed these changes like this:
> 
> cbf1024 * doc: Document 'wpa-supplicant-service-type'.
> 030f59f * services: network-manager: Depend on 'wpa-supplicant'.
> 89007a0 * services: network-manager: Install polkit actions.
> 2e32869 * services: Move polkit to (gnu services dbus).
> 

I'm reconfiguring my GuixSD to test the new commits, but i have the 
following error:

/home/jin/txt/os-config-bare-bones-1.scm:12:3: In procedure #<procedure 
3ad66e0 ()>:
/home/jin/txt/os-config-bare-bones-1.scm:12:3: In procedure 
module-lookup: Unbound variable: wpa-supplicant-service

I added 'networking' to my config file but it does not seem to work.
Attachment config file.

Thanks

[-- Attachment #2: os-config-bare-bones-1.scm --]
[-- Type: text/plain, Size: 2224 bytes --]

;; This is an operating system configuration template
;; for a "bare bones" setup, with no X11 display server.

(use-modules (gnu)
	     (srfi srfi-1))
(use-service-modules desktop networking)
(use-package-modules gnome)

(define %desktop-services-sans-wicd
  (cons*
   (network-manager-service)
   (wpa-supplicant-service)
   (remove
    (lambda (service)
      (eq? wicd-service-type (service-kind service)))
    (modify-services %desktop-services
      (guix-service-type config =>
                         (guix-configuration
                          (inherit config)
                          (substitute-urls
                           '("https://hydra-mirror.marusich.info"
                             "https://mirror.hydra.gnu.org"
			     "https://hydra.gnu.org"))))))))

(operating-system
  (host-name "Evolution")
  (timezone "Europe/Berlin")
  (locale "en_US.UTF-8")

  ;; Assuming /dev/sdX is the target hard disk, and "my-root" is
  ;; the label of the target root file system.
  (bootloader (grub-configuration (device "/dev/sdX")))
  (file-systems (cons (file-system
                        (device "my-root")
                        (title 'label)
                        (mount-point "/")
                        (type "ext4"))
                      %base-file-systems))

  ;; This is where user accounts are specified.  The "root"
  ;; account is implicit, and is initially created with the
  ;; empty password.
  (users (cons (user-account
                (name "jin")
                (comment "ho")
                (group "users")

                ;; Adding the account to the "wheel" group
                ;; makes it a sudoer.  Adding it to "audio"
                ;; and "video" allows the user to play sound
                ;; and access the webcam.
                (supplementary-groups '("wheel"
                                        "audio" "video"))
                (home-directory "/home/jin"))
               %base-user-accounts))

  ;; Globally-installed packages.
  (packages (cons*
	     gnome
	     %base-packages))


  ;; Add services to the baseline: a DHCP client and
  ;; an SSH server.
  (services (cons*
             (gnome-desktop-service)
	     %desktop-services-sans-wicd)))

Re: Network Manager Service

[Ludovic Courtès]

Hi,

rennes@openmailbox.org skribis:

> I'm reconfiguring my GuixSD to test the new commits, but i have the
> following error:
>
> /home/jin/txt/os-config-bare-bones-1.scm:12:3: In procedure
> #<procedure 3ad66e0 ()>:
> /home/jin/txt/os-config-bare-bones-1.scm:12:3: In procedure
> module-lookup: Unbound variable: wpa-supplicant-service

[...]

> (define %desktop-services-sans-wicd
>   (cons*
>    (network-manager-service)
>    (wpa-supplicant-service)

You need to replace this last line with:

  (service wpa-supplicant-type wpa-supplicant)

and, thus, you need to have:

  (use-modules (gnu packages admin))

or similar so that the ‘wpa-supplicant’ variable is visible.

HTH!

Ludo’.

Re: Network Manager Service

[rennes]

Hello,

On 2016-11-23 23:52, Chris Marusich wrote:

> However, there is one problem: Even if I select "Connect automatically"
> (in the "Identity" section of the settings page within Network Manager
> for my wireless network), Network Manager does not automatically 
> connect
> to the network.  I'm not sure why.
> 

Reading a little about 'Network Manager', it is required to select the 
'Connect automatically' and 'Make available to other users' options. In 
my case it works!, can someone do tests?

Thanks

Re: Network Manager Service

[Chris Marusich]

[-- Attachment #1: Type: text/plain, Size: 973 bytes --]

rennes@openmailbox.org writes:

> Hello,
>
> On 2016-11-23 23:52, Chris Marusich wrote:
>
>> However, there is one problem: Even if I select "Connect automatically"
>> (in the "Identity" section of the settings page within Network Manager
>> for my wireless network), Network Manager does not automatically
>> connect
>> to the network.  I'm not sure why.
>>
>
> Reading a little about 'Network Manager', it is required to select the
> 'Connect automatically' and 'Make available to other users'
> options. In my case it works!, can someone do tests?

I tried this unsuccessfully.  When I check the box ('Make available to
other users') and then hit the "Apply" button, a window pops up asking
me to enter the password for the "Administrator".  My account has sudo
permission, so I tried typing in the password I use when I run sudo.
However, that didn't work (the authentication apparently failed), so I
wasn't able to set the option.

-- 
Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 818 bytes --]

Re: Network Manager Service

[rennes]

On 2016-12-01 06:06, Chris Marusich wrote:

> I tried this unsuccessfully.  When I check the box ('Make available to
> other users') and then hit the "Apply" button, a window pops up asking
> me to enter the password for the "Administrator".  My account has sudo
> permission, so I tried typing in the password I use when I run sudo.
> However, that didn't work (the authentication apparently failed), so I
> wasn't able to set the option.

Chris, try typing the root password.

Re: Network Manager Service

[Ludovic Courtès]

Hello!

rennes@openmailbox.org skribis:

> On 2016-12-01 06:06, Chris Marusich wrote:
>
>> I tried this unsuccessfully.  When I check the box ('Make available to
>> other users') and then hit the "Apply" button, a window pops up asking
>> me to enter the password for the "Administrator".  My account has sudo
>> permission, so I tried typing in the password I use when I run sudo.
>> However, that didn't work (the authentication apparently failed), so I
>> wasn't able to set the option.
>
> Chris, try typing the root password.

So what’s the conclusion here?

If Network Manager works as expected, we should consider adding it to
‘%desktop-services’.

Thanks,
Ludo’.

Re: Network Manager Service

[rennes]

Hi,
On 2016-12-08 08:41, ludo@gnu.org wrote:
> 
> So what’s the conclusion here?
> 
> If Network Manager works as expected, we should consider adding it to
> ‘%desktop-services’.

In my tests has worked the automatic WIFI connection in GNOME, I would 
like to do tests in XFCE.

On the other hand I have noticed the following:
  * In the case of the wired connection, appears connected but does not 
give the internet, it is necessary to turn the button on and off(May be 
required dhcp service?).
  * The connection speed is slower, I have not yet reviewed this; And I'm 
not sure if it's just on my machine.

As soon as I can do the tests and will comment the results.

Thanks

Re: Network Manager Service

[Marius Bakke]

[-- Attachment #1: Type: text/plain, Size: 191 bytes --]

Ludovic Courtès <ludo@gnu.org> writes:

> If Network Manager works as expected, we should consider adding it to
> ‘%desktop-services’.

Wouldn't this conflict with 'wicd-service'?

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

Re: Network Manager Service

[Ludovic Courtès]

Marius Bakke <mbakke@fastmail.com> skribis:

> Ludovic Courtès <ludo@gnu.org> writes:
>
>> If Network Manager works as expected, we should consider adding it to
>> ‘%desktop-services’.
>
> Wouldn't this conflict with 'wicd-service'?

I meant as a replacement to Wicd.

Ludo’.

Re: Network Manager Service

[Chris Marusich]

[-- Attachment #1: Type: text/plain, Size: 1443 bytes --]

ludo@gnu.org (Ludovic Courtès) writes:

> Hello!
>
> rennes@openmailbox.org skribis:
>
>> On 2016-12-01 06:06, Chris Marusich wrote:
>>
>>> I tried this unsuccessfully.  When I check the box ('Make available to
>>> other users') and then hit the "Apply" button, a window pops up asking
>>> me to enter the password for the "Administrator".  My account has sudo
>>> permission, so I tried typing in the password I use when I run sudo.
>>> However, that didn't work (the authentication apparently failed), so I
>>> wasn't able to set the option.
>>
>> Chris, try typing the root password.
>
> So what’s the conclusion here?
>
> If Network Manager works as expected, we should consider adding it to
> ‘%desktop-services’.
>
> Thanks,
> Ludo’.

I would like to test this more, but my system is busy running "guix
system reconfigure", and it doesn't look like it'll finish any time
soon.  Shame on me for running "guix pull" first!  Heh.

Anyway, I will test this and get back to you before the end of the
weekend.  I don't think "type the root password" is a great work-around,
since on my machines, I prefer not to give root a password, and rely on
sudo instead.  Network Manager ought to be able to automatically connect
to a wireless network; there must be a reason why the authentication
(for checking the "automatically connect" box) is not working, but I
don't know what it is yet.

-- 
Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: Network Manager Service

[Chris Marusich]

[-- Attachment #1: Type: text/plain, Size: 2170 bytes --]

Chris Marusich <cmmarusich@gmail.com> writes:

> ludo@gnu.org (Ludovic Courtès) writes:
>
>> Hello!
>>
>> rennes@openmailbox.org skribis:
>>
>>> On 2016-12-01 06:06, Chris Marusich wrote:
>>>
>>>> I tried this unsuccessfully.  When I check the box ('Make available to
>>>> other users') and then hit the "Apply" button, a window pops up asking
>>>> me to enter the password for the "Administrator".  My account has sudo
>>>> permission, so I tried typing in the password I use when I run sudo.
>>>> However, that didn't work (the authentication apparently failed), so I
>>>> wasn't able to set the option.
>>>
>>> Chris, try typing the root password.
>>
>> So what’s the conclusion here?
>>
>> If Network Manager works as expected, we should consider adding it to
>> ‘%desktop-services’.
>>
>> Thanks,
>> Ludo’.

OK, so Network Manager can be used, but I wouldn't say it's flawless.  I
still prefer wicd, so I don't think we should replace wicd with Network
Manager just yet.  Specifically, I expect that it will automatically
connect to my wireless network when I've checked the "Connect
automatically" box and left the "Make available to other users" box
unchecked.  However, Network Manager fails to auto-connect in that case.
This issue is present in other distros [1], but supposedly auto-connect
works as expected on Debian [2].  I haven't tried it on Debian, so I
can't confirm yet.

Yes, it's true that on GuixSD, if you check the "Make available to other
users" box, auto-connect works.  However, this workaround requires root
to have a password [3], and it's just that: a workaround.

[1]
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1354924

[2] https://bugs.kde.org/show_bug.cgi?id=340568

[3] The reason it requires the root password is apparently because of
our PolKit rules.  We should probably adjust the PolKit rules for this
action so that the "wheel" group members can do it, not just the root
user.  That way, I could authenticate using my own password (since I am
in the "wheel" group for sudo access already), and I wouldn't have to
give root a password.

-- 
Chris

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]

Re: Network Manager Service

[Ludovic Courtès]

Hi Chris!

Chris Marusich <cmmarusich@gmail.com> skribis:

> OK, so Network Manager can be used, but I wouldn't say it's flawless.  I
> still prefer wicd, so I don't think we should replace wicd with Network
> Manager just yet.

OK.  :-)

> Specifically, I expect that it will automatically connect to my
> wireless network when I've checked the "Connect automatically" box and
> left the "Make available to other users" box unchecked.  However,
> Network Manager fails to auto-connect in that case.  This issue is
> present in other distros [1], but supposedly auto-connect works as
> expected on Debian [2].  I haven't tried it on Debian, so I can't
> confirm yet.

The Ubuntu bug report is quite old though, and since “everybody uses
NM”, I’d be surprised if such a basic feature was broken.

Do we get any useful messages from NM that would provide hints?

> Yes, it's true that on GuixSD, if you check the "Make available to other
> users" box, auto-connect works.  However, this workaround requires root
> to have a password [3], and it's just that: a workaround.

Indeed!

> [3] The reason it requires the root password is apparently because of
> our PolKit rules.  We should probably adjust the PolKit rules for this
> action so that the "wheel" group members can do it, not just the root
> user.  That way, I could authenticate using my own password (since I am
> in the "wheel" group for sudo access already), and I wouldn't have to
> give root a password.

I’m not sure what it takes to do that but it makes sense!

For wicd, wicd clients only work if the user is in group ‘netdev’.  We
could add that one too.

Thank you!

Ludo’.