top-level configurations for all my NixOS machines
Go to file
colin d80bd7d162 inline image building, and (for lappy) use a generic-extlinux-compatible bootloader
the generic bootloader will allow more code-sharing with rpi and
pinephone. desko should soon use the generic bootloader as well.

problems: lappy can't boot from USB stick. it makes it to the initrd,
but there's no dev nodes for the USB drive.
unsure if this is how it was before, too.
2022-06-23 00:24:39 -07:00
helpers port helpers/home-manager-gen-colin.nix to modules system 2022-06-09 14:50:24 -07:00
machines inline image building, and (for lappy) use a generic-extlinux-compatible bootloader 2022-06-23 00:24:39 -07:00
modules inline image building, and (for lappy) use a generic-extlinux-compatible bootloader 2022-06-23 00:24:39 -07:00
nixpatches replace whalebird patch with upstream patch 2022-06-19 16:15:07 -07:00
pkgs scripts for connecting/disconnecting to my VPN 2022-06-22 16:14:16 -07:00
secrets remove himalaya: we're using aerc now 2022-06-21 02:02:04 -07:00
.gitignore move secrets to a subdirectory, for improved overrides 2022-05-26 23:52:08 -07:00
.sops.yaml add aerc accounts.conf to secret store (and home-manager) 2022-06-20 23:55:43 -07:00
flake.lock update nixpkgs 2022-06-17 -> 2022-06-20 2022-06-22 17:09:52 -07:00
flake.nix inline image building, and (for lappy) use a generic-extlinux-compatible bootloader 2022-06-23 00:24:39 -07:00
image.nix inline image building, and (for lappy) use a generic-extlinux-compatible bootloader 2022-06-23 00:24:39 -07:00
readme.md rename 'uninsane' machine -> 'servo' 2022-06-12 15:11:41 -07:00
TODO.md done (a while ago): "port helpers/ to module system", so cross it off 2022-06-18 01:04:59 -07:00

to build:

nixos-rebuild --flake "/etc/nixos/#servo" {build,switch}

query with:

nix flake show

secrets

we use sops for secrets. see helpers/universal/secrets.nix for some tips.

building images

to build a distributable image (GPT-formatted image with rootfs and /boot partition):

nix build ./#imgs.lappy

this can then be dd'd onto a disk and directly booted from a EFI system. there's some post-processing to do before running a rebuild on the deployed system (e.g. change fstab UUIDs) refer to flake.nix for more details

admin tips

online: https://nixos.wiki/wiki/Cheatsheet

verify ALL nix store contents with:

sudo nix-store --verify --check-contents  # add the --repair flag to auto-repair as well

search for a package with:

nix search nixpkgs <query string>

find which package owns some file with:

nix-locate /bin/vim  # or any other package-relative path