No description
Find a file
Jakob Lechner 3789ace3e7 flake.lock: Update
Flake lock file updates:

• Updated input 'nixos-hardware':
    'github:nixos/nixos-hardware/db030f62a449568345372bd62ed8c5be4824fa49?narHash=sha256-lfxhuxAaHlYFGr8yOrAXZqdMt8PrFLzjVqH9v3lQaoY%3D' (2025-06-13)
  → 'github:nixos/nixos-hardware/61837d2a33ccc1582c5fabb7bf9130d39fee59ad?narHash=sha256-ynqbgIYrg7P1fAKYqe8I/PMiLABBcNDYG9YaAP/d/C4%3D' (2025-06-16)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/5f4f306bea96741f1588ea4f450b2a2e29f42b98?narHash=sha256-tG5xUn3hFaPpAHYIvr2F88b%2BovcIO5k1HqajFy7ZFPM%3D' (2025-06-13)
  → 'github:nixos/nixpkgs/36ab78dab7da2e4e27911007033713bab534187b?narHash=sha256-urV51uWH7fVnhIvsZIELIYalMYsyr2FCalvlRTzqWRw%3D' (2025-06-17)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/3cbfdb57d81514cc480ab8ba193826156acdea16?narHash=sha256-aA8zF3Tuwgb4sY90fL/P5ko8LwEqY8zXQCvN/EmUoj0%3D' (2025-06-16)
  → 'github:NixOS/nixpkgs/b95bc4d285032de7842cc8396e55fb21f70f3bce?narHash=sha256-66zezez0HO30aYAyA63%2BHLCA%2BarVAIwFohEeE4nNl9I%3D' (2025-06-18)
• Updated input 'nur':
    'github:nix-community/NUR/e09c24b8347839f2ca0a9fc713c5f4641f50c287?narHash=sha256-IllO59EZ/uROQ8%2BDHm786L0XbZAXPyzQ66fOks7dAOk%3D' (2025-06-16)
  → 'github:nix-community/NUR/8d9894966f0c06b8e36f1ed1268ca3f080094302?narHash=sha256-N%2B716O0Wgrs3px24zm8Kvh2W8j6HEdfxw1jHBpSnQvU%3D' (2025-06-18)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/ee930f9755f58096ac6e8ca94a1887e0534e2d81?narHash=sha256-Kh9K4taXbVuaLC0IL%2B9HcfvxsSUx8dPB5s5weJcc9pc%3D' (2025-06-13)
  → 'github:nixos/nixpkgs/9e83b64f727c88a7711a2c463a7b16eedb69a84c?narHash=sha256-v263g4GbxXv87hMXMCpjkIxd/viIF7p3JpJrwgKdNiI%3D' (2025-06-17)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/50754dfaa0e24e313c626900d44ef431f3210138?narHash=sha256-VunQzfZFA%2BY6x3wYi2UE4DEQ8qKoAZZCnZPUlSoqC%2BA%3D' (2025-06-10)
  → 'github:Mic92/sops-nix/77c423a03b9b2b79709ea2cb63336312e78b72e2?narHash=sha256-Rr7Pooz9zQbhdVxux16h7URa6mA80Pb/G07T4lHvh0M%3D' (2025-06-17)
• Updated input 'vesc-tool':
    'github:vedderb/vesc_tool/5ff884fe978f61986e01c1e02bb5b4f793435ed9?narHash=sha256-04bH1SC8YzoKGMGmjOv1xkUCTrMAy2UVn%2BfKa4LWLdc%3D' (2025-06-13)
  → 'github:vedderb/vesc_tool/6b979dc7285d6b54850840c4c4d24a06a032b9cb?narHash=sha256-YD%2BSt6iUa6R5Mi6TFRhvsRKGTrp/dBps74/7hlPXjoc%3D' (2025-06-17)
2025-07-14 11:40:56 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Fix duplicate port check 2025-04-16 22:54:29 +02:00
hosts Rename kitchen ceiling light 2025-06-12 00:21:25 +02:00
modules Replace alacritty with wezterm 2025-07-14 11:40:56 +02:00
pkgs Use official nix flake for vesc-tool 2025-06-04 21:20:53 +02:00
users Implement php debugging 2025-07-14 11:40:56 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add custom voicemail greeting 2023-11-22 14:55:29 +00:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Reinstall magnesium 2025-04-09 10:27:38 +02:00
flake.lock flake.lock: Update 2025-07-14 11:40:56 +02:00
flake.nix Use official nix flake for vesc-tool 2025-06-04 21:20:53 +02:00
justfile Use file to unlock LUKS from usb media 2025-04-09 10:20:44 +02:00
README.md Add instructions how to build a system config 2025-01-11 19:24:15 +01:00

jalr's NixOS Configuration

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

Build a configuration

nix build .#nixosConfigurations.iron.config.system.build.toplevel

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5

Debugging boot issues

  1. Add rd.systemd.debug_shell kernel parameter
  2. Press CTRL+ALT+F9 to switch to root shell