Name:           guix-binary
Version:        1.5.0
Release:        1%{?dist}
Summary:        Guix binary

License:        GPL-2.0
URL:            https://guix.gnu.org
Source0:        https://ftp.gnu.org/gnu/guix/%{name}-%{version}.x86_64-linux.tar.xz
Source1:        https://substitutes.nonguix.org/signing-key.pub
Source2:        channels.scm

%description
The Guix binary.


%install
mkdir -p %{?buildroot}%{_datadir}/%{name}
cp %SOURCE0 %{?buildroot}%{_datadir}/%{name}
cp %SOURCE1 %{?buildroot}%{_datadir}/%{name}/nonguix.pub
cp %SOURCE2 %{?buildroot}%{_datadir}/%{name}

%posttrans
tar --extract --strip-components=1 --file %{_datadir}/%{name}/%{name}-%{version}.x86_64-linux.tar.xz -C /
groupadd --system guix-daemon
useradd -g "guix-daemon" -G "guix-daemon"	\
	-d /var/empty -s "$(command -v nologin)"	\
	-c "Unprivileged Guix Daemon User" --system "guix-daemon"
mkdir -p ~root/.config/guix
ln -sf /var/guix/profiles/per-user/root/current-guix \
   ~root/.config/guix/current
GUIX_PROFILE=~root/.config/guix/current
source "${GUIX_PROFILE}/etc/profile"
chown -R guix-daemon:guix-daemon /gnu /var/guix
chown -R root:root /var/guix/profiles/per-user/root
mkdir -p /var/log/guix
chown guix-daemon:guix-daemon /var/log/guix
chmod 755 /var/log/guix
groupadd --system guixbuild
for i in $(seq -w 1 10); do
	useradd -g "guixbuild" -G guixbuild	\
		-d /var/empty -s "$(command -v nologin)"	\
		-c "Guix build user $i" --system "guixbuilder${i}"
done
for host in bordeaux.guix.gnu.org ci.guix.gnu.org; do
	key=~root/.config/guix/current/share/guix/$host.pub
	[ -f "$key" ] \
	&& guix archive --authorize < "$key"
done
guix archive --authorize < %{_datadir}/%{name}/nonguix.pub
guix-daemon --build-users-group=guixbuild --disable-chroot \
			--substitute-urls='https://bordeaux.guix.gnu.org https://ci.guix.gnu.org https://substitutes.nonguix.org' &
cp -f %{_datadir}/%{name}/channels.scm ~root/.config/guix
guix pull
guix archive --generate-key # generates /etc/guix/signing-key.pub
guix archive --export -r $(realpath ~root/.guix-profile) linux@7.2 >%{_datadir}/%{name}/result.nar


%files
%dir %{_datadir}/%{name}
%{_datadir}/%{name}/%{name}-%{version}.x86_64-linux.tar.xz
%{_datadir}/%{name}/nonguix.pub
%{_datadir}/%{name}/channels.scm


%changelog
* Sat Sep 05 2026 Azure Zanculmarktum <zanculmarktum@gmail.com>
- initial version