4.4 KiB
nixos-config
Provisioning for my NixOS systems based on Nix.
Chnum
Bootstrap
Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets
and rekey the secrets via agenix. After pushing the rekeyed secrets
execute these commands:
sudo loadkeys de
sudo nix-shell --packages nixUnstable
bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/chnum-partitions)"
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#chnum
Updates
If the repository had been cloned you could just execute make switch,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#chnum
Niflheim
Bootstrap
Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets
and rekey the secrets via agenix. After pushing the rekeyed secrets
execute these commands:
sudo loadkeys de
sudo nix-shell --packages nixUnstable
bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/niflheim-partitions)"
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#niflheim
Updates
If the repository had been cloned you could just execute make switch,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#niflheim
Asgard
Bootstrap
Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets
and rekey the secrets via agenix. After pushing the rekeyed secrets
execute these commands:
sudo loadkeys de
sudo nix-shell --packages nixUnstable
bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/asgard-partitions)"
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#asgard
Updates
If the repository had been cloned you could just execute make switch,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#asgard
Utgard
Bootstrap
Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets
and rekey the secrets via agenix. After pushing the rekeyed secrets
execute these commands:
sudo loadkeys de
sudo nix-shell --packages nixUnstable
bash -c "$(curl -fsSL https://raw.githubusercontent.com/tboerger/nixos-config/master/scripts/utgard-partitions)"
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#utgard
Updates
If the repository had been cloned you could just execute make switch,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#utgard
Midgard
Bootstrap
Copy /etc/ssh/ssh_host_ed25519_key.pub into secrets
and rekey the secrets via agenix. After pushing the rekeyed secrets
execute these commands:
sudo loadkeys de
sudo nix-shell --packages nixUnstable
mount /dev/disk/by-label/NIXOS_SD /mnt
mkdir -p /mnt/etc/ssh
cp /etc/ssh/ssh_host_* /mnt/etc/ssh/
nixos-install --no-root-password --root /mnt --flake github:tboerger/nixos-config#midgard
Updates
If the repository had been cloned you could just execute make switch,
otherwise there is still this long option to update the deployment:
nixos-rebuild switch \
--flake github:tboerger/nixos-config#midgard
Security
If you find a security issue please contact thomas@webhippie.de first.
Contributing
Fork -> Patch -> Push -> Pull Request
Authors
License
Apache-2.0
Copyright
Copyright (c) 2021 Thomas Boerger <thomas@webhippie.de>