mirror/github.com-tboerger-nixos-config
1
0
Fork 0
mirror of https://github.com/tboerger/nixos-config synced 2024-11-23 03:32:08 +01:00
Code Issues
100 Commits 1 Branch 0 Tags 8.5 MiB
Nix 98.5%
Shell 1.5%
b0390905c7
Go to file
Thomas Boerger b0390905c7
fix: do not fail on disk wipe
2022-10-31 11:35:39 +01:00
.github chore(deps): bump actions/checkout from 2.4.0 to 3 2022-03-07 14:26:19 +00:00
machines fix: more fixes for various filesystems 2022-10-30 17:59:33 +01:00
overlays feat: override citrix workspace download url 2022-09-29 14:52:30 +02:00
profiles chore: even more restructuring 2022-10-25 09:53:40 +02:00
scripts fix: do not fail on disk wipe 2022-10-31 11:35:39 +01:00
secrets fix: rekey secrets for utgard 2022-10-30 20:18:32 +01:00
.editorconfig chore: initial commit 2022-02-20 17:46:48 +01:00
.envrc chore: integrate deploy-rs and flake-utils 2022-09-28 22:28:36 +02:00
.gitignore chore: integrate deploy-rs and flake-utils 2022-09-28 22:28:36 +02:00
flake.lock chore: upgrade flake lockfile 2022-10-25 10:42:45 +02:00
flake.nix chore: no need for bootstrap targets 2022-10-26 20:40:58 +02:00
LICENSE chore: initial commit 2022-02-20 17:46:48 +01:00
Makefile chore: integrate deploy-rs and flake-utils 2022-09-28 22:28:36 +02:00
README.md docs: drop outdated bootstrap references 2022-10-30 20:30:54 +01:00
TODO.md fix: more fixes for various filesystems 2022-10-30 17:59:33 +01:00

README.md

nixos-config

Build

Provisioning for my NixOS systems based on Nix.

Chnum

Bootstrap

Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets and rekey the secrets via agenix. After pushing the rekeyed secrets execute these commands:

sudo loadkeys de
sudo nix-shell --packages nixUnstable

bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/chnum-partitions)"

mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#chnum-bootstrap

Updates

If the repository had been cloned you could just execute make switch, otherwise there is still this long option to update the deployment:

nixos-rebuild switch \
    --flake github:tboerger/nixos-config#chnum

Asgard

Bootstrap

Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets and rekey the secrets via agenix. After pushing the rekeyed secrets execute these commands:

sudo loadkeys de
sudo nix-shell --packages nixUnstable

bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/asgard-partitions)"

mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#asgard

Updates

If the repository had been cloned you could just execute make switch, otherwise there is still this long option to update the deployment:

nixos-rebuild switch \
    --flake github:tboerger/nixos-config#asgard

Utgard

Bootstrap

Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets and rekey the secrets via agenix. After pushing the rekeyed secrets execute these commands:

sudo loadkeys de
sudo nix-shell --packages nixUnstable

bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/utgard-partitions)"

mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#utgard

Updates

If the repository had been cloned you could just execute make switch, otherwise there is still this long option to update the deployment:

nixos-rebuild switch \
    --flake github:tboerger/nixos-config#utgard

Midgard

Bootstrap

Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets and rekey the secrets via agenix. After pushing the rekeyed secrets execute these commands:

sudo loadkeys de
sudo nix-shell --packages nixUnstable

mount /dev/disk/by-label/NIXOS_SD /mnt

mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#midgard

Updates

If the repository had been cloned you could just execute make switch, otherwise there is still this long option to update the deployment:

nixos-rebuild switch \
    --flake github:tboerger/nixos-config#midgard

Security

If you find a security issue please contact thomas@webhippie.de first.

Contributing

Fork -> Patch -> Push -> Pull Request

Authors

License

Apache-2.0

Copyright

Copyright (c) 2021 Thomas Boerger <thomas@webhippie.de>