2011-07-25 00:45:52 +00:00
|
|
|
# Upower daemon.
|
|
|
|
|
2014-04-14 14:26:48 +00:00
|
|
|
{ config, lib, pkgs, ... }:
|
2011-07-25 00:45:52 +00:00
|
|
|
|
2014-04-14 14:26:48 +00:00
|
|
|
with lib;
|
2011-07-25 00:45:52 +00:00
|
|
|
|
2014-05-19 11:13:32 +00:00
|
|
|
let
|
|
|
|
cfg = config.services.upower;
|
|
|
|
in
|
2011-07-25 00:45:52 +00:00
|
|
|
{
|
|
|
|
|
|
|
|
###### interface
|
2011-09-14 18:20:50 +00:00
|
|
|
|
2011-07-25 00:45:52 +00:00
|
|
|
options = {
|
2011-09-14 18:20:50 +00:00
|
|
|
|
2011-07-25 00:45:52 +00:00
|
|
|
services.upower = {
|
2011-09-14 18:20:50 +00:00
|
|
|
|
2011-07-25 00:45:52 +00:00
|
|
|
enable = mkOption {
|
2013-10-30 16:37:45 +00:00
|
|
|
type = types.bool;
|
2011-07-25 00:45:52 +00:00
|
|
|
default = false;
|
|
|
|
description = ''
|
|
|
|
Whether to enable Upower, a DBus service that provides power
|
|
|
|
management support to applications.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2014-05-19 11:13:32 +00:00
|
|
|
package = mkOption {
|
|
|
|
type = types.package;
|
|
|
|
default = pkgs.upower;
|
2016-01-17 18:34:55 +00:00
|
|
|
defaultText = "pkgs.upower";
|
2014-05-19 11:13:32 +00:00
|
|
|
example = lib.literalExample "pkgs.upower";
|
|
|
|
description = ''
|
|
|
|
Which upower package to use.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2011-07-25 00:45:52 +00:00
|
|
|
};
|
2011-09-14 18:20:50 +00:00
|
|
|
|
2011-07-25 00:45:52 +00:00
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
###### implementation
|
2011-09-14 18:20:50 +00:00
|
|
|
|
2014-05-19 11:13:32 +00:00
|
|
|
config = mkIf cfg.enable {
|
2011-07-25 00:45:52 +00:00
|
|
|
|
2014-05-19 11:13:32 +00:00
|
|
|
environment.systemPackages = [ cfg.package ];
|
2011-07-25 00:45:52 +00:00
|
|
|
|
2014-05-19 11:13:32 +00:00
|
|
|
services.dbus.packages = [ cfg.package ];
|
2011-07-25 00:45:52 +00:00
|
|
|
|
2014-05-19 11:13:32 +00:00
|
|
|
services.udev.packages = [ cfg.package ];
|
2011-08-24 21:24:39 +00:00
|
|
|
|
2013-01-16 11:33:18 +00:00
|
|
|
systemd.services.upower =
|
2012-10-04 20:38:31 +00:00
|
|
|
{ description = "Power Management Daemon";
|
2015-10-11 10:34:28 +00:00
|
|
|
path = [ pkgs.glib.out ]; # needed for gdbus
|
2012-10-04 20:38:31 +00:00
|
|
|
serviceConfig =
|
|
|
|
{ Type = "dbus";
|
|
|
|
BusName = "org.freedesktop.UPower";
|
2014-05-19 11:13:32 +00:00
|
|
|
ExecStart = "@${cfg.package}/libexec/upowerd upowerd";
|
2018-10-12 21:41:53 +00:00
|
|
|
Restart = "on-failure";
|
|
|
|
# Upstream lockdown:
|
|
|
|
# Filesystem lockdown
|
|
|
|
ProtectSystem = "strict";
|
|
|
|
# Needed by keyboard backlight support
|
|
|
|
ProtectKernelTunables = false;
|
|
|
|
ProtectControlGroups = true;
|
|
|
|
ReadWritePaths = "/var/lib/upower";
|
|
|
|
ProtectHome = true;
|
|
|
|
PrivateTmp = true;
|
|
|
|
|
|
|
|
# Network
|
|
|
|
# PrivateNetwork=true would block udev's netlink socket
|
|
|
|
RestrictAddressFamilies = "AF_UNIX AF_NETLINK";
|
|
|
|
|
|
|
|
# Execute Mappings
|
|
|
|
MemoryDenyWriteExecute = true;
|
|
|
|
|
|
|
|
# Modules
|
|
|
|
ProtectKernelModules = true;
|
|
|
|
|
|
|
|
# Real-time
|
|
|
|
RestrictRealtime = true;
|
|
|
|
|
|
|
|
# Privilege escalation
|
|
|
|
NoNewPrivileges = true;
|
2012-10-04 20:38:31 +00:00
|
|
|
};
|
|
|
|
};
|
2012-08-21 15:29:59 +00:00
|
|
|
|
2011-09-06 11:18:36 +00:00
|
|
|
system.activationScripts.upower =
|
|
|
|
''
|
|
|
|
mkdir -m 0755 -p /var/lib/upower
|
|
|
|
'';
|
|
|
|
|
2012-10-05 01:58:40 +00:00
|
|
|
# The upower daemon seems to get stuck after doing a suspend
|
|
|
|
# (i.e. subsequent suspend requests will say "Sleep has already
|
|
|
|
# been requested and is pending"). So as a workaround, restart
|
|
|
|
# the daemon.
|
|
|
|
powerManagement.resumeCommands =
|
|
|
|
''
|
2013-01-16 12:17:57 +00:00
|
|
|
${config.systemd.package}/bin/systemctl try-restart upower
|
2012-10-05 01:58:40 +00:00
|
|
|
'';
|
|
|
|
|
2011-07-25 00:45:52 +00:00
|
|
|
};
|
|
|
|
|
|
|
|
}
|