infra/localhost
1
0
Fork 0
Code Releases Activity
Reproducible localhost based on NixOS
103 Commits 1 Branch 0 Tags 1.2 MiB
Nix 72.3%
Emacs Lisp 18.5%
Haskell 9.2%
f93159db0f
Go to file
Mikhail Klementev f93159db0f
Check reverse path
2019-09-06 15:29:07 +00:00
etc Fix GNU Emacs exec-path 2019-08-31 16:48:13 +00:00
.gitignore Initial 2019-05-31 00:08:17 +00:00
configuration.nix Preload kernel module for docker interfaces 2019-09-05 16:03:08 +00:00
desktop.nix Remove uMatrix 2019-08-22 22:14:55 +00:00
docker.nix Use clang 10 2019-09-05 16:03:25 +00:00
hacks.nix Implements docker-based fhs env wrapper 2019-07-05 19:49:51 +00:00
home-manager.nix gpg-agent is already defined globally 2019-08-15 09:52:48 +00:00
LICENSE Initial 2019-05-31 00:08:17 +00:00
networking.nix Check reverse path 2019-09-06 15:29:07 +00:00
packages.nix Run out-of-tree from special user 2019-09-05 16:03:51 +00:00
README.md Update README.md 2019-07-21 20:30:34 +00:00
secrets.nix.example Add secrets example 2019-06-21 19:14:17 +00:00
security.nix Run out-of-tree from special user 2019-09-05 16:03:51 +00:00
suspend.nix Initial 2019-05-31 00:08:17 +00:00
thinkpad.nix CPU Throttling Fix 2019-08-22 22:11:33 +00:00
wireless-networks.nix.example Add wireless networks sample 2019-06-21 19:16:58 +00:00

README.md

Fully reproducible localhost

Download NixOS installation ISO

Notes:

  1. I assume that latest stable (e.g. 19.03) ISO will be used for installation.
  2. Check services.xserver.videoDrivers in desktop.nix. If you not sure it's better to remove the line completely.
  3. Default network configuration is VPN-only, so if you don't have plans to use it you need to change iptables rules (remove iptables -P OUTPUT DROP from networking.nix) and remove services.openvpn.servers.vpn from networking.nix.
  4. GUI settings is optimized for 3840x2160 on 15".

Installation

parted /dev/vda mklabel gpt
parted /dev/vda mkpart EFI fat32 0% 512M
parted /dev/vda set 1 esp on
parted /dev/vda mkpart NIX ext4 512M 100%

cryptsetup luksFormat /dev/vda2
cryptsetup open /dev/vda2 nix

mkfs.vfat -F32 /dev/vda1
mkfs.ext4 /dev/mapper/nix

mount /dev/mapper/nix /mnt/
mkdir /mnt/boot
mount /dev/vda1 /mnt/boot

nix-env -iA nixos.gitMinimal
git clone https://code.dumpstack.io/infra/localhost.git /mnt/etc/nixos/

cd /mnt/etc/nixos

cp wireless-networks.nix.example wireless-networks.nix
nano wireless-networks.nix

cp secrets.nix.example secrets.nix
nano secrets.nix

nix-channel --add https://nixos.org/channels/nixos-unstable unstable
nix-channel --update

nixos-generate-config --root /mnt

nixos-install
reboot

After install

Initial user password for is user.

sudo nix-channel --add https://nixos.org/channels/nixos-unstable unstable