GNU Guix System

System services are a core feature in Guix System that enable the user to declaratively compose the configuration of daemons and background services and easily specify the relevant configurations.

This enables the user to within a single configuration file declare the whole OS (e.g., to have a tor proxy, an sshd server, and a webserver serving guix-web via nginx on a specific port at bootup).

System services can:[17]

• generate files in the filesystem (needed by some applications e.g. files in /etc)
• run any code for setting up daemons
• create specific user and group accounts (e.g. a database user for postgresql)

Ricardo Wurmus, one of the maintainers, explains the extendability like this:[17]

Services can extend one another, which allows us to define ways to set up complex applications, for example, that require a web server, user accounts, application-specific daemons, a database, udev rules, etc — all with just one service type.

All the services are defined using Guile Scheme.[18] The list of services continue to grow and as of 1.0.0 the list of services includes the following:[19]

• Base Services: Essential system services.
• Scheduled Job Execution: The mcron service.
• Log Rotation: The rottlog service.
• Networking Services: Network setup, SSH daemon, etc.
• X Window: Graphical display.
• Printing Services: Local and remote printer support.
• Desktop Services: D-Bus and desktop services.
• Sound Services: ALSA and Pulseaudio services.
• Database Services: SQL databases, key-value stores, etc.
• Mail Services: IMAP, POP3, SMTP, and all that.
• Messaging Services: Messaging services.
• Telephony Services: Telephony services.
• Monitoring Services: Monitoring services.
• Kerberos Services: Kerberos services.
• LDAP Services: LDAP services.
• Web Services: Web servers.
• Certificate Services: TLS certificates via Let's Encrypt.
• DNS Services: DNS daemons.
• VPN Services: VPN daemons.
• Network File System: NFS related services.
• Continuous Integration: The Cuirass service.
• Power Management Services: Extending battery life.
• Audio Services: The MPD.
• Virtualization Services: Virtualization services.
• Version Control Services: Providing remote access to Git repositories.
• Game Services: Game servers.
• Miscellaneous Services: Other services.

Guix System uses the GNU Daemon Shepherd as its init system, which is developed in tandem with Guix and is written in Guile as well. It was previously known as "dmd", which stood for "Daemon managing Daemons" or "Daemons-managing Daemon", but changed names to avoid collision with the Digital Mars D compiler.[20]

Shepherd supplies user-space functionality asynchronously as services, which under Shepherd are generic functions and object data types that are exported for use by the Shepherd to extend the base operating system in some defined way. In contrast to systemd, a userspace shepherd process runs as that user. Core to the Shepherd model of user space initialisation is the concept of the extension, a form of composability where services are designed to be layered onto other services, augmenting them with more elaborate or specialised behaviours as desired.[21] This expresses the instantiation-based dependency relationships found in many modern init systems,[22] making the system modular, but also allows services to interact variadically with other services in arbitrary ways.

Shepherd also provides so-called virtual services which allow dynamic dispatch over a class of related service objects, such as all those which instantiate a mail transfer agent (MTA) for the system.[23] A system governed via the Shepherd daemon can represent its user space as a directed acyclic graph, with the "system-service" − responsible for early phases of boot and init − as its root, and all subsequently initialised services as extensions to system-service's functionality, either directly or transitively over other services.[21][24]

Being both written and configured in Guile Scheme, GNU Shepherd is intended to be highly programmable by the system administrator, but it can also be used to manage per-user profiles of unprivileged daemons and services.[25] Its services and configuration are stored uniformly as object-oriented Scheme code, and while a core set of services are provided with the basic Guix System,[26] arbitrary new services can be flexibly declared, and through Guile's object system, GOOPS, existing services can be redefined at the user's discretion by asking the Shepherd to dynamically rewrite services in specified ways on instantiation.[27][28]

GNU Shepherd was originally designed to work with GNU Hurd, and was later adopted by Guix System.[29]

Packages in Guix are generally very up-to-date thanks to the lack of a package maintainer bottleneck: anyone can contribute an update subject to community approval and the process is assisted by tools such as guix refresh.[32]

Changes to the git repository are peer-reviewed by community members and committed by one of the 45 people with commit access.[33] In practice sometimes these builds cause system breakages for users because of a typo or similar error, but these are often solved within minutes. The way Guix pull operates means users retain a working system in the meantime.

If a system update should leave users with a broken system, users can easily roll back individual packages as well as the whole system state.[34] This means that a stable channel which is very common in other Linux distributions is no longer needed for users who are willing to report a bug and wait a few minutes, when trying to update via guix pull.