Return the Linux kernel command line as a list of strings.

Make essential device nodes under ROOT/dev.

Create static device nodes required by the given Linux release. This is required in order to solve a chicken-or-egg problem: The Linux kernel has a feature to autoload modules when a device is first accessed. And udev has a feature to set the permissions of static nodes correctly when it is starting up and also to automatically create nodes when hardware is hotplugged. That leaves universal device files which are not linked to one specific hardware device. These we have to create.

This procedure is meant to be called from an initrd. Boot a system by first loading LINUX-MODULES (a list of module names) from LINUX-MODULE-DIRECTORY, then installing KEYMAP-FILE with 'loadkeys' (if KEYMAP-FILE is true), then setting up QEMU guest networking if QEMU-GUEST-NETWORKING? is true, calling PRE-MOUNT, mounting the file systems specified in MOUNTS, and finally booting into the new root if any. The initrd supports the kernel command-line options 'gnu.load' and 'gnu.repl'. It also honors a subset of the Linux kernel command-line parameters such as 'fsck.mode', 'resume', 'rootdelay', rootflags and rootfstype.

Mount the root file system, specified by the 'root' command-line argument, if any.

MOUNTS must be a list of <file-system> objects.

When VOLATILE-ROOT? is true, the root file system is writable but any changes to it are lost.

ON-ERROR is passed to 'call-with-error-handling'; it determines what happens upon error.

Run THUNK as a child process within the namespaces of process PID and return the exit status, an integer as returned by 'waitpid'.

Like 'container-excursion', but return the return value of THUNK.

Run THUNK in a new container process and return its exit status; call PROCESS-SPAWNED-HOOK with the PID of the new process that has been spawned. MOUNTS is a list of <file-system> objects that specify file systems to mount inside the container. NAMESPACES is a list of symbols corresponding to the identifiers for Linux namespaces: mnt, ipc, uts, pid, user, and net. By default, all namespaces are used.

HOST-UIDS is the number of host user identifiers to map into the container's user namespace, if there is one. By default, only a single uid/gid, that of the current user, is mapped into the container. The host user that creates the container is the root user (uid/gid 0) within the container. Only root can map more than a single uid/gid.

GUEST-UID and GUEST-GID specify the first UID (respectively GID) that host UIDs (respectively GIDs) map to in the namespace.

RELAYED-SIGNALS is the list of signals that are "relayed" to the container process when caught by its parent.

When LOOPBACK-NETWORK? is true and 'net is amount NAMESPACES, set up the loopback device ("lo") and a minimal /etc/hosts.

When WRITABLE-ROOT? is false, remount the container's root as read-only before calling THUNK. Call POPULATE-FILE-SYSTEM before the root is (potentially) made read-only.

When CHILD-IS-PID1? is true, and if NAMESPACES contains 'pid', then the child process runs directly as PID 1. As such, it is responsible for (1) installing signal handlers and (2) reaping terminated processes by calling 'waitpid'. When CHILD-IS-PID1? is false, a new intermediate process is created instead that takes this responsibility.

Note that if THUNK needs to load any additional Guile modules, the relevant module files must be present in one of the mappings in MOUNTS and the Guile load path must be adjusted as needed.

Return #t if user namespaces can be created by unprivileged users.

Return #t if user namespaces are supported on this system.

Return #t if the setgroups proc file, introduced in Linux-libre 3.19, exists.

Run THUNK in a new container process and return its PID. ROOT specifies the root directory for the container. MOUNTS is a list of <file-system> objects that specify file systems to mount inside the container. NAMESPACES is a list of symbols that correspond to the possible Linux namespaces: mnt, ipc, uts, user, and net. When LOCK-MOUNTS? is true, arrange so that none of MOUNTS can be unmounted or remounted individually from within THUNK.

When LOOPBACK-NETWORK? is true and 'net is amount NAMESPACES, set up the loopback device ("lo") and a minimal /etc/hosts.

When WRITABLE-ROOT? is false, remount the container's root as read-only before calling THUNK. Call POPULATE-FILE-SYSTEM before the root is (potentially) made read-only.

HOST-UIDS specifies the number of host user identifiers to map into the user namespace. GUEST-UID and GUEST-GID specify the first UID (respectively GID) that host UIDs (respectively GIDs) map to in the namespace.

Write a cpio archive containing DIRECTORY to file OUTPUT, with reset timestamps in the archive. When COMPRESS? is true, compress it using GZIP. On success, return OUTPUT.

Write an initial RAM disk (initrd) to OUTPUT. The initrd starts the script at INIT, running GUILE. It contains all the items referred to by REFERENCES-GRAPHS.

Return the "canonical" name for MODULE, replacing hyphens with underscores.

Return NAME with a '.ko[.gz|.xz|.zst]' suffix appended, unless it already has it.

Return true if DEVICE has the chosen class.

Return the module name of FILE as it appears in its info section. Usually the module name is the same as the base name of FILE, modulo hyphens and minus the ".ko[.gz|.xz]" extension.