No description
Find a file
Jakob Lechner 9c14b1a151 flake.lock: Update
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/bafad29f89e83b2d861b493aa23034ea16595560?narHash=sha256-iv8xVtmLMNLWFcDM/HcAPLRGONyTRpzL9NS09RnryRM%3D' (2025-08-25)
  → 'github:nix-community/disko/a5c4f2ab72e3d1ab43e3e65aa421c6f2bd2e12a1?narHash=sha256-dwWGlDhcO5SMIvMSTB4mjQ5Pvo2vtxvpIknhVnSz2I8%3D' (2025-09-01)
• Updated input 'nix-pre-commit-hooks':
    'github:cachix/git-hooks.nix/e891a93b193fcaf2fc8012d890dc7f0befe86ec2?narHash=sha256-RF7j6C1TmSTK9tYWO6CdEMtg6XZaUKcvZwOCD2SICZs%3D' (2025-08-23)
  → 'github:cachix/git-hooks.nix/ab82ab08d6bf74085bd328de2a8722c12d97bd9d?narHash=sha256-E9spYi9lxm2f1zWQLQ7xQt8Xs2nWgr1T4QM7ZjLFphM%3D' (2025-09-07)
• Updated input 'nixos-hardware':
    'github:nixos/nixos-hardware/a65b650d6981e23edd1afa1f01eb942f19cdcbb7?narHash=sha256-9bHzrVbjAudbO8q4vYFBWlEkDam31fsz0J7GB8k4AsI%3D' (2025-08-26)
  → 'github:nixos/nixos-hardware/11b2a10c7be726321bb854403fdeec391e798bf0?narHash=sha256-PtT7ix43ss8PONJ1VJw3f6t2yAoGH%2Bq462Sn8lrmWmk%3D' (2025-09-05)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/b4c2c57c31e68544982226d07e4719a2d86302a8?narHash=sha256-aGnd4AHIYCWQKChAkHPpX%2BYYCt7pA6y2LFFA/s8q0wQ%3D' (2025-08-31)
  → 'github:nixos/nixpkgs/fe83bbdde2ccdc2cb9573aa846abe8363f79a97a?narHash=sha256-PLoSjHRa2bUbi1x9HoXgTx2AiuzNXs54c8omhadyvp0%3D' (2025-09-04)
• Updated input 'nixpkgsMaster':
    'github:NixOS/nixpkgs/2c774e13d1909ce5caaf837ac8ece10a604e54ae?narHash=sha256-%2BaQzkZ8a8xoHCK%2BBmMd8I2F4L6W1FFr8wswtc9O/N9A%3D' (2025-09-01)
  → 'github:NixOS/nixpkgs/790c37312111a3a809f2b97a8b527c8fcee2771a?narHash=sha256-hpUJdFtnHQoAEbOmrmlUkt0rGq4OmxU79EmjD%2BubWtE%3D' (2025-09-07)
• Updated input 'nur':
    'github:nix-community/NUR/effb8c7ab9fbfba86d31703a6101469489ab9df8?narHash=sha256-JsqhycxNEPDtfDtqGFSdslmbN7t9rClj/wxDWhrUAoM%3D' (2025-09-01)
  → 'github:nix-community/NUR/d244f159840581aa186a134a307e201c615591d2?narHash=sha256-tGGjRl5x6e0sYwVCCveWwLSH5b0ntaFDxjfSyrz4%2BEk%3D' (2025-09-07)
• Updated input 'nur/nixpkgs':
    'github:nixos/nixpkgs/d7600c775f877cd87b4f5a831c28aa94137377aa?narHash=sha256-tlOn88coG5fzdyqz6R93SQL5Gpq%2Bm/DsWpekNFhqPQk%3D' (2025-08-30)
  → 'github:nixos/nixpkgs/8eb28adfa3dc4de28e792e3bf49fcf9007ca8ac9?narHash=sha256-NOrUtIhTkIIumj1E/Rsv1J37Yi3xGStISEo8tZm3KW4%3D' (2025-09-05)
• Updated input 'vesc-tool':
    'github:vedderb/vesc_tool/3d3d6e23634033c04cbf3afedf8b324360ebc34d?narHash=sha256-EYUpnHxOfOZNvXEk/6vAI/EbvovfHtwwxJ2XJ%2BNPYVU%3D' (2025-08-31)
  → 'github:vedderb/vesc_tool/6b739f6de8c2b189359e92d53d638b8cbe6a31ee?narHash=sha256-EC7BTIW80OS6KonSpcldYJeF9xxlwt05nTQleLELaW4%3D' (2025-09-05)
2025-09-07 14:31:48 +02:00
.git-crypt Rotate git-crypt key 2024-01-31 01:39:35 +00:00
custom-utils Fix duplicate port check 2025-04-16 22:54:29 +02:00
hosts Rework sturzbach service 2025-09-02 00:31:38 +02:00
modules Rework sturzbach service 2025-09-02 00:31:38 +02:00
nix-cache Add nix-cache 2025-09-03 22:17:28 +02:00
pkgs Update dependencies 2025-07-14 11:40:57 +02:00
users Add ddev 2025-09-01 10:21:38 +02:00
.editorconfig Add config for .nix files 2022-04-27 11:02:38 +00:00
.envrc Use flakes 2021-11-17 09:33:48 +00:00
.gitattributes Add custom voicemail greeting 2023-11-22 14:55:29 +00:00
.gitignore Ignore qcow2 files (QEMU disk images) 2023-02-23 19:41:15 +00:00
.sops.yaml Reinstall magnesium 2025-04-09 10:27:38 +02:00
flake.lock flake.lock: Update 2025-09-07 14:31:48 +02:00
flake.nix Exclude .envrc from pre-commit checks 2025-09-03 21:37:31 +02:00
justfile Use file to unlock LUKS from usb media 2025-04-09 10:20:44 +02:00
README.md Add instructions how to build a system config 2025-01-11 19:24:15 +01:00

jalr's NixOS Configuration

Install a new host

This installs nixos on host somehost:

NixOS Anywhere

nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>

The traditional way

nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'

Build a configuration

nix build .#nixosConfigurations.iron.config.system.build.toplevel

setting up sops

Get the host key and convert it.

ssh-keyscan -t ed25519 $host | ssh-to-age

Then add the key to .sops.yaml

If the key changed, you might want to run

sops updatekeys hosts/$host/secrets.yaml

nix repl

start an interactive environment for evaluating Nix expressions

$ nix repl

nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl

nix-repl> :lf .#

Import GPG public key

gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5

Debugging boot issues

  1. Add rd.systemd.debug_shell kernel parameter
  2. Press CTRL+ALT+F9 to switch to root shell