systemd/systemd-services: Add geoclue, gnome-clocks, iwd, mpris-proxy, mmsd (MR 5204)

[ci:skip-build] already built successfully in CI

extra-repos/systemd/systemd-services/APKBUILD

@@ -6,7 +6,7 @@
 # How to add a new service file (4 steps):
 pkgname=systemd-services
 # 1. bump pkgver
-pkgver=8
+pkgver=9
 pkgrel=0
 pkgdesc="Systemd service files"
 url="https://postmarketos.org"
@@ -25,8 +25,12 @@ subpackages="
 	bluez-service:_service
 	dconf-service:_service
 	flatpak-service:_service
+	geoclue-service:_service
+	gnome-clocks:_service
 	hexagonrpcd-service:_service
 	iio-sensor-proxy-service:_service
+	iwd-service:_service
+	mmsd-tng-service:_service
 	modemmanager-service:_service
 	nftables-service:_service
 	openssh-server-pam-service:_service
@@ -49,11 +53,15 @@ subpackages="
 #    to install for that package
 _apk_polkit_rs_sources="system/apk-polkit-server.service"
 _at_spi2_core_sources="user/at-spi-dbus-bus.service"
-_bluez_sources="system/bluetooth.service"
+_bluez_sources="system/bluetooth.service user/mpris-proxy.service"
 _dconf_sources="user/dconf.service"
 _flatpak_sources="system/flatpak-system-helper.service user/flatpak-session-helper.service user/flatpak-portal.service"
+_geoclue_sources="system/geoclue.service" # From https://gitlab.freedesktop.org/geoclue/geoclue/-/blob/master/data/geoclue.service.in
+_gnome_clocks_sources="user/gnome-clocks.service"
 _hexagonrpcd_sources="system/hexagonrpcd-sdsp.service system/iio-sensor-proxy.d/hexagonrpcd.conf"
 _iio_sensor_proxy_sources="system/iio-sensor-proxy.service"
+_iwd_sources="system/iwd.service" # From https://git.kernel.org/pub/scm/network/wireless/iwd.git/tree/src/iwd.service.in
+_mmsd_tng_sources="user/mmsd-tng.service"
 _modemmanager_sources="system/ModemManager.service"
 _nftables_sources="system/nftables.service"
 _openssh_server_pam_sources="system/sshd.service system/sshdgenkeys.service"
@@ -91,8 +99,12 @@ source="$(flatpath \
 	$_bluez_sources \
 	$_dconf_sources \
 	$_flatpak_sources \
+	$_geoclue_sources \
+	$_gnome_clocks_sources \
 	$_hexagonrpcd_sources \
 	$_iio_sensor_proxy_sources \
+	$_iwd_sources \
+	$_mmsd_tng_sources \
 	$_modemmanager_sources \
 	$_nftables_sources \
 	$_openssh_server_pam_sources \
@@ -130,13 +142,18 @@ sha512sums="
 269dfc4748a9f1c4f49be8bab399d7412b6ff3b6d6ed9b3f2e31074b791789fb39aad450b4d43d318e7a070d1118ba79f216782b064cd106feac3eb4a8ca5581  system-apk-polkit-server.service
 12f5e008b0a41b3426b29f33556689ef88ba7184293ddb78fdaaf05cc4d029fd0b4c8fbef668aefed103a9f48c525f04a8e4e60ddc6e4329698aaf761b8e8f81  user-at-spi-dbus-bus.service
 de133c35cf95d7c833368c9010264668e72657400ad4e5259ef046321c878507f36ef73fa7b4759f69c9d18cda8f8db8d7675d794d9a28f46480fb4d47ba9e0c  system-bluetooth.service
+00049b418fab6dec7d9931a87cc64d2062efa0f7128bec1a693bfdf112703e628a2f1c98d2d5bf71554e6e576882890cef7a02de283909b1dd2f4c5ec0f6393e  user-mpris-proxy.service
 e4de73d12abd046c8683e3be6e3aab40a5db3f5d6246cedbb3ff099bcc8037a167b23ac957d30f1118db571b69cb10c042272ac2b54dacf83fa6a3e9dad13a87  user-dconf.service
 0cfef56afeea103ca487b36f13665021bb349b8c890f023135a93c47d45cb58dd39ffe76212fb780546b1aaed8174e40345a961d7125f7d7ace5921e1dcc7ba9  system-flatpak-system-helper.service
 815a3072c211c85ff475ac7f2fb9c280b567b98777c0f7bf7fea4575b5eaa3b9a4003a08eb3b8cb5b2d7f9fb6525e04491e8d87013e2539ae3a574db647f97b1  user-flatpak-session-helper.service
 7a17986c0f0554f0b27a5933b3e04657323edb23047878616727863fdc748cb8d8fea978f43895341037e2d1512bbd492bdbc19c40419cd3e109345614645388  user-flatpak-portal.service
+f3463b85ac47055b400dfd2e24694c5e1dc6ab039efac0fe54496fc027c0732cda5e52a362a497b372dea671dc615154e8abfea866728d243cbbcd25e68a91aa  system-geoclue.service
+bc7987a001d2076788d904f1ea6d3e97a2ab905ee55302ffb90402133c2b9fb760d7ad94e06971d811b9d905048e164cb78355f8cd087219b5b8ff6dab2fbd9c  user-gnome-clocks.service
 b009a1494f84705dcbea664823e24fb18f326ca84017d9c470ef55c0225d519993aacacf76b24c895ee926dbc2b3269ebc6b2a353cda5ad1b732af5624941a6a  system-hexagonrpcd-sdsp.service
 af0e416f78ab317fe09813de58b446e5178457992ea4a2da2eb128811045201087d847e1b7ac0447a59c20129a736135e5d76b113262aa1f76b994e77b9c6b42  system-iio-sensor-proxy.d-hexagonrpcd.conf
 d12ebe6e7db2a8e34baab640dd4e2ea9cd01bc19054adf32d55528a6b27f71c2006ac2d65a58c98e21ed598e9cc66bfe79e197d20ed9d13f866a5a6cd3e247d5  system-iio-sensor-proxy.service
+df3388cb7b9d035e54b34d8f8a6594be89c3015f979fe3bdc199fb7db1ab0bef821d6b306eecdf978eb227454d5e50aab29ac02d9722b1b075ec0ce4705e3518  system-iwd.service
+873b53592786a978659bda8d32de5ed9a9f163ca298c4f4112f10bf635a8170c4060cc15b57ff72b3afd50075cd1c5dbc10030f00b166e2540397da9e1c5e46b  user-mmsd-tng.service
 5eab6a59c81232b188df45482e325b2d1cb9e038ca147a1b6983c1c095d8194fba804793c5e291b201a820976c8f506aadd2daf7c52fe573a3af708fc9984641  system-ModemManager.service
 d41d0aa1d4d577cd718185399c95055c0511d4aeb902c771ccec13655354aafc85c3f270431fd3debc7e05f0a8cbdb90f1969b673ae7e5310c1f46cb8120e3f2  system-nftables.service
 fa445c4a53214524baed4e9c52a5463592a074f88a5a286eacb60d0907c0545f725afde23abd68cf611067add80c2ccb289a381fc5ff6a5f654ea49c81f02fe8  system-sshd.service

extra-repos/systemd/systemd-services/system-geoclue.service

+[Unit]
+Description=Location Lookup Service
+
+[Service]
+Type=dbus
+BusName=org.freedesktop.GeoClue2
+User=geoclue
+Environment="GSETTINGS_BACKEND=memory"
+ExecStart=/usr/libexec/geoclue
+
+# Filesystem lockdown
+ProtectSystem=strict
+ProtectKernelTunables=true
+ProtectControlGroups=true
+ProtectHome=true
+PrivateTmp=true
+
+# Network
+PrivateNetwork=false
+
+# Execute Mappings
+MemoryDenyWriteExecute=true
+
+# Modules
+ProtectKernelModules=true
+
+# Real-time
+RestrictRealtime=true
+
+# Privilege escalation
+NoNewPrivileges=true

extra-repos/systemd/systemd-services/system-iwd.service

+[Unit]
+Description=Wireless service
+Documentation=man:iwd(8) man:iwd.config(5) man:iwd.network(5) man:iwd.ap(5)
+After=network-pre.target
+Before=network.target
+Wants=network.target
+
+[Service]
+Type=dbus
+BusName=net.connman.iwd
+ExecStart=/usr/libexec/iwd
+NotifyAccess=main
+LimitNPROC=1
+Restart=on-failure
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE
+PrivateTmp=true
+NoNewPrivileges=true
+DevicePolicy=closed
+DeviceAllow=/dev/rfkill rw
+ProtectHome=yes
+ProtectSystem=strict
+ProtectControlGroups=yes
+ProtectKernelModules=yes
+ConfigurationDirectory=iwd
+StateDirectory=iwd
+StateDirectoryMode=0700
+
+[Install]
+WantedBy=multi-user.target

extra-repos/systemd/systemd-services/user-gnome-clocks.service

+[Unit]
+Description=GNOME clocks
+
+[Service]
+Type=dbus
+BusName=org.gnome.clocks
+ExecStart=/usr/bin/gnome-clocks -b
+Restart=on-failure
+
+[Install]
+WantedBy=graphical-session.target

extra-repos/systemd/systemd-services/user-mmsd-tng.service

+[Unit]
+Description=Multimedia Messaging Service Daemon
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/mmsdtng
+Restart=on-failure
+
+[Install]
+WantedBy=default.target

extra-repos/systemd/systemd-services/user-mpris-proxy.service

+[Unit]
+Description=Forward bluetooth midi controls via mpris2 so they are picked up by supporting media players
+Requires=dbus.service bluetooth.target
+After=dbus.service bluetooth.target
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/mpris-proxy
+
+[Install]
+WantedBy=default.target