Guix

Jan 1, 0001

Definition

Guix is a functional package management tool and an advanced distribution of the GNU operating system. It is designed to provide a reproducible, declarative, and user-controlled software environment. Guix emphasizes security and freedom, allowing users to install, upgrade, and manage software packages without compromising system integrity or user privacy.

Secure Settings Example

;; Define a secure Guix system configuration
(use-modules (gnu))
(use-service-modules desktop networking ssh)
(use-package-modules certs)

(operating-system
  (host-name "secure-system")
  (timezone "UTC")
  (locale "en_US.utf8")

  ;; Enable OpenSSH with secure settings
  (services (cons* (service openssh-service-type
                            (openssh-configuration
                             (permit-root-login #f)
                             (password-authentication? #f)
                             (allow-empty-passwords? #f)))
                   %desktop-services))

  ;; Use the latest CA certificates
  (packages (cons* nss-certs %base-packages)))

Insecure Settings Example

;; Insecure Guix system configuration
(use-modules (gnu))
(use-service-modules ssh)

(operating-system
  (host-name "insecure-system")
  (timezone "UTC")
  (locale "en_US.utf8")

  ;; OpenSSH with insecure settings
  (services (cons (service openssh-service-type
                           (openssh-configuration
                            (permit-root-login #t)
                            (password-authentication? #t)
                            (allow-empty-passwords? #t)))
                  %base-services)))