{ config, lib, pkgs, ... }: with lib; let text = import ../lib/write-text.nix { inherit lib; mkTextDerivation = name: text: pkgs.writeText "etc-${name}" text; }; hasDir = path: length (splitString "/" path) > 1; etc = filter (f: f.enable) (attrValues config.environment.etc); etcDirs = filter (attr: hasDir attr.target) (attrValues config.environment.etc); in { options = { environment.etc = mkOption { type = types.attrsOf (types.submodule text); default = {}; description = '' Set of files that have to be linked in /etc. ''; }; }; config = { system.build.etc = pkgs.runCommandNoCC "etc" { preferLocalBuild = true; } '' mkdir -p $out/etc cd $out/etc ${concatMapStringsSep "\n" (attr: "mkdir -p $(dirname '${attr.target}')") etc} ${concatMapStringsSep "\n" (attr: "ln -s '${attr.source}' '${attr.target}'") etc} ''; system.activationScripts.etc.text = '' # Set up the statically computed bits of /etc. echo "setting up /etc..." >&2 declare -A etcSha256Hashes ${concatMapStringsSep "\n" (attr: "etcSha256Hashes['/etc/${attr.target}']='${concatStringsSep " " attr.knownSha256Hashes}'") etc} ln -sfn "$(readlink -f $systemConfig/etc)" /etc/static for f in $(find /etc/static/* -type l); do l=/etc/''${f#/etc/static/} d=''${l%/*} if [ ! -e "$d" ]; then mkdir -p "$d" fi if [ -e "$l" ]; then if [ "$(readlink "$l")" != "$f" ]; then if ! grep -q /etc/static "$l"; then o=''$(shasum -a256 "$l") o=''${o%% *} for h in ''${etcSha256Hashes["$l"]}; do if [ "$o" = "$h" ]; then mv "$l" "$l.orig" ln -s "$f" "$l" break else h= fi done if [ -z "$h" ]; then echo "error: not linking environment.etc.\"''${l#/etc/}\" because $l already exists, skipping..." >&2 echo "existing file has unknown content $o, move and activate again to apply" >&2 fi fi fi else ln -s "$f" "$l" fi done for l in $(find /etc/* -type l 2> /dev/null); do f="$(echo $l | sed 's,/etc/,/etc/static/,')" f=/etc/static/''${l#/etc/} if [ "$(readlink "$l")" = "$f" -a ! -e "$(readlink -f "$l")" ]; then rm "$l" fi done ''; }; }