summary refs log tree commit diff
path: root/nixos/modules/services/wayland/cage.nix
diff options
context:
space:
mode:
Diffstat (limited to 'nixos/modules/services/wayland/cage.nix')
-rw-r--r--nixos/modules/services/wayland/cage.nix102
1 files changed, 0 insertions, 102 deletions
diff --git a/nixos/modules/services/wayland/cage.nix b/nixos/modules/services/wayland/cage.nix
deleted file mode 100644
index 03a893ba076..00000000000
--- a/nixos/modules/services/wayland/cage.nix
+++ /dev/null
@@ -1,102 +0,0 @@
-{ config, pkgs, lib, ... }:
-
-with lib;
-
-let
-  cfg = config.services.cage;
-in {
-  options.services.cage.enable = mkEnableOption "cage kiosk service";
-
-  options.services.cage.user = mkOption {
-    type = types.str;
-    default = "demo";
-    description = ''
-      User to log-in as.
-    '';
-  };
-
-  options.services.cage.extraArguments = mkOption {
-    type = types.listOf types.str;
-    default = [];
-    defaultText = literalExpression "[]";
-    description = "Additional command line arguments to pass to Cage.";
-    example = ["-d"];
-  };
-
-  options.services.cage.program = mkOption {
-    type = types.str;
-    default = "${pkgs.xterm}/bin/xterm";
-    defaultText = literalExpression ''"''${pkgs.xterm}/bin/xterm"'';
-    description = ''
-      Program to run in cage.
-    '';
-  };
-
-  config = mkIf cfg.enable {
-
-    # The service is partially based off of the one provided in the
-    # cage wiki at
-    # https://github.com/Hjdskes/cage/wiki/Starting-Cage-on-boot-with-systemd.
-    systemd.services."cage-tty1" = {
-      enable = true;
-      after = [
-        "systemd-user-sessions.service"
-        "plymouth-start.service"
-        "plymouth-quit.service"
-        "systemd-logind.service"
-        "getty@tty1.service"
-      ];
-      before = [ "graphical.target" ];
-      wants = [ "dbus.socket" "systemd-logind.service" "plymouth-quit.service"];
-      wantedBy = [ "graphical.target" ];
-      conflicts = [ "getty@tty1.service" ];
-      environment = { "LIBSEAT_BACKEND" = "logind"; };
-
-      restartIfChanged = false;
-      unitConfig.ConditionPathExists = "/dev/tty1";
-      serviceConfig = {
-        ExecStart = ''
-          ${pkgs.cage}/bin/cage \
-            ${escapeShellArgs cfg.extraArguments} \
-            -- ${cfg.program}
-        '';
-        User = cfg.user;
-
-        IgnoreSIGPIPE = "no";
-
-        # Log this user with utmp, letting it show up with commands 'w' and
-        # 'who'. This is needed since we replace (a)getty.
-        UtmpIdentifier = "%n";
-        UtmpMode = "user";
-        # A virtual terminal is needed.
-        TTYPath = "/dev/tty1";
-        TTYReset = "yes";
-        TTYVHangup = "yes";
-        TTYVTDisallocate = "yes";
-        # Fail to start if not controlling the virtual terminal.
-        StandardInput = "tty-fail";
-        StandardOutput = "journal";
-        StandardError = "journal";
-        # Set up a full (custom) user session for the user, required by Cage.
-        PAMName = "cage";
-      };
-    };
-
-    security.pam.services.cage.text = ''
-      auth    required pam_unix.so nullok
-      account required pam_unix.so
-      session required pam_unix.so
-      session required pam_env.so conffile=/etc/pam/environment readenv=0
-      session required ${pkgs.systemd}/lib/security/pam_systemd.so
-    '';
-
-    hardware.opengl.enable = mkDefault true;
-
-    systemd.targets.graphical.wants = [ "cage-tty1.service" ];
-
-    systemd.defaultUnit = "graphical.target";
-  };
-
-  meta.maintainers = with lib.maintainers; [ matthewbauer ];
-
-}