Re: Guix home, guix system, channels, some noob questions

[Efraim Flashner <efraim@flashner.co.il>]

[-- Attachment #1: Type: text/plain, Size: 2898 bytes --]

On Wed, May 25, 2022 at 03:34:58PM +0200, Daniel Meißner wrote:
> Hi Sébastien,
> 
> Sébastien Rey-Coyrehourcq writes:
> 
> > Thanks,  in fact when i see *guix home* that was my first intention
> > (like home-manager in nix).
> >
> > The only things holding me back at the moment is two things :
> >
> > a) doom emacs flavour, how to manage the fact that doom use straigt.el
> > to maintain packages
> 
> I am sorry, I am not using Doom Emacs, so I cannot be of any help in
> this regard.  I manage my (relatively few) Emacs packages with Guix
> directly.
> 
> > b) "password / secrets" management ?
> >
> > There are two things, file to directly encrypt (like ssh key) and
> > password to hide into configuration file (templating)
> >
> > b.1) So, that need to encrypt/decrypt more or less "on-the-fly" the
> > files using gpg/yubikey or age like yadm (
> > https://yadm.io/docs/encryption ) or chezmoi
> > (https://www.chezmoi.io/user-guide/encryption/gpg/) do ?
> >
> > b.2) And for templating, like replacing ${mypassword} into some
> > configuration file by getting info stored into password manager like
> > "pass", i also don't know how to do that.
> >
> > Actually I have no idea how to do that with guile / guix home for b.1
> > / b.2
> 
> Yes, that's indeed a problem and I haven't come up with a solution.  I
> simply copy the respective files from machine to machine.  Maybe someone
> else on this list has a better idea...
> 
> > c) synchronization of my .dotfiles between two different OS/System :
> > Ubuntu (home) / Guix (work & home)
> >
> > Lot of people use Ubuntu in my work environment, so i need to maintain
> > some sort of compatibility between both systems for my dotfile (before
> > everyone use guix in 2030 ? :D).
> >
> > I suppose guix home work well with guix on top of ubuntu ?
> 
> Yes, I think so, I haven't tested it though.  You can, in principle,
> adapt the generated dotfiles to the machines you're deploying them to.
> You could, for example, use the hostname to distinguish them (untested):
> 
> --8<---------------cut here---------------start------------->8---
> (mixed-text-file
>  "test.txt"
>  "setting = "
>  #~(case (gethostname)
>      (("hosta") => "foo")
>      (("hostb") => "bar")
>      (else => "foobar")))
> --8<---------------cut here---------------end--------------->8---
> 

I check for /run/current-system/provenance¹ and based on that I make
some changes to what gets placed in my dot-files.

¹ https://git.sr.ht/~efraim/guix-config/tree/master/item/efraim-home.scm#L31
² https://git.sr.ht/~efraim/guix-config/tree/master/item/efraim-home.scm#L342-346

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]