No description
Flake lock file updates:
• Updated input 'disko':
'github:nix-community/disko/83c4da299c1d7d300f8c6fd3a72ac46cb0d59aae?narHash=sha256-Ng9%2Bf0H5/dW%2Bmq/XOKvB9uwvGbsuiiO6HrPdAcVglCs%3D' (2025-06-26)
→ 'github:nix-community/disko/16b74a1e304197248a1bc663280f2548dbfcae3c?narHash=sha256-U/OQFplExOR1jazZY4KkaQkJqOl59xlh21HP9mI79Vc%3D' (2025-07-07)
• Updated input 'gomod2nix':
'github:nix-community/gomod2nix/a5f75f563748599d448a4a076816041d7b0fc07e?narHash=sha256-SjpXWEeB%2BUIMzuCAF94PuyAXpJdnBLF45JvI6o4wKIU%3D' (2025-06-19)
→ 'github:nix-community/gomod2nix/664ad7a2df4623037e315e4094346bff5c44e9ee?narHash=sha256-/GTdqFzFw/Y9DSNAfzvzyCMlKjUyRKMPO%2BapIuaTU4A%3D' (2025-07-05)
• Updated input 'home-manager':
'github:nix-community/home-manager/366f00797b1efb70f2882d3da485e3c10fd3d557?narHash=sha256-Lh3dopA8DdY%2BZoaAJPrtkZOZaFEJGSYjOdAYYgOPgE4%3D' (2025-06-24)
→ 'github:nix-community/home-manager/9b0873b46c9f9e4b7aa01eb634952c206af53068?narHash=sha256-kllkNbIqQi3VplgTMeGzuh1t8Gk8TauvkTRt93Km%2BtQ%3D' (2025-07-06)
• Updated input 'nixos-hardware':
'github:nixos/nixos-hardware/98236410ea0fe204d0447149537a924fb71a6d4f?narHash=sha256-2m1ceZjbmgrJCZ2PuQZaK4in3gcg3o6rZ7WK6dr5vAA%3D' (2025-06-25)
→ 'github:nixos/nixos-hardware/7ced9122cff2163c6a0212b8d1ec8c33a1660806?narHash=sha256-gATnkOe37eeVwKKYCsL%2BOnS2gU4MmLuZFzzWCtaKLI8%3D' (2025-07-09)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/b43c397f6c213918d6cfe6e3550abfe79b5d1c51?narHash=sha256-1Cu92i1KSPbhPCKxoiVG5qnoRiKTgR5CcGSRyLpOd7Y%3D' (2025-06-29)
→ 'github:nixos/nixpkgs/88983d4b665fb491861005137ce2b11a9f89f203?narHash=sha256-7orTnNqkGGru8Je6Un6mq1T8YVVU/O5kyW4%2Bf9C1mZQ%3D' (2025-07-08)
• Updated input 'nixpkgsMaster':
'github:NixOS/nixpkgs/61ac9bb9fdbeaf8e4ac827ef99a9fc06173c697c?narHash=sha256-HzVao4JEHB/DKTFyQGVWfdE3kJGElBs96dtEa%2BLO73o%3D' (2025-07-01)
→ 'github:NixOS/nixpkgs/9c399d69b9ab8224d270a6f30c76e54780151c8d?narHash=sha256-21rMyl%2B7RDkn1qAx6B3xc0dsFOGGVxcWnvhdPpg8IHs%3D' (2025-07-09)
• Updated input 'nur':
'github:nix-community/NUR/93d91108dd5ca22a3d470b376c7b5c44e1d6d2bb?narHash=sha256-w0dc97DRw%2BdJ1EKnFBZrvsipQq7BGH7iW6MqiSA2Hmc%3D' (2025-07-01)
→ 'github:nix-community/NUR/64185b1642f23c6340e3ebd52eabccfadfb78cfb?narHash=sha256-cquBxPthNijnDaoX6Pj5V0jQ5BhoqJOJ/DdGzeJ0xyg%3D' (2025-07-09)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/3016b4b15d13f3089db8a41ef937b13a9e33a8df?narHash=sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU%2Btt4YY%3D' (2025-06-30)
→ 'github:nixos/nixpkgs/1fd8bada0b6117e6c7eb54aad5813023eed37ccb?narHash=sha256-J1kI6oAj25IG4EdVlg2hQz8NZTBNYvIS0l4wpr9KcUo%3D' (2025-07-06)
• Removed input 'nur/treefmt-nix'
• Removed input 'nur/treefmt-nix/nixpkgs'
• Updated input 'sops-nix':
'github:Mic92/sops-nix/77c423a03b9b2b79709ea2cb63336312e78b72e2?narHash=sha256-Rr7Pooz9zQbhdVxux16h7URa6mA80Pb/G07T4lHvh0M%3D' (2025-06-17)
→ 'github:Mic92/sops-nix/3633fc4acf03f43b260244d94c71e9e14a2f6e0d?narHash=sha256-KrDPXobG7DFKTOteqdSVeL1bMVitDcy7otpVZWDE6MA%3D' (2025-07-04)
• Updated input 'vesc-tool':
'github:vedderb/vesc_tool/f11ea3ed5ee76b25814ececb29d4f445adbd3b62?narHash=sha256-Scxy0YafhihzLA6EZu13tzmAKWQqzvB0q1bc6ey5oEA%3D' (2025-06-30)
→ 'github:vedderb/vesc_tool/588d2fe1c7bd2d0fdff25bff5a606ec7c71f6d60?narHash=sha256-PPgnbZexrN4TTowoDN03pPwDsEKsKG/EG5RGpuTQixY%3D' (2025-07-06)
|
||
|---|---|---|
| .git-crypt | ||
| custom-utils | ||
| hosts | ||
| modules | ||
| pkgs | ||
| users | ||
| .editorconfig | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
jalr's NixOS Configuration
Install a new host
This installs nixos on host somehost:
NixOS Anywhere
nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>
The traditional way
nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'
Build a configuration
nix build .#nixosConfigurations.iron.config.system.build.toplevel
setting up sops
Get the host key and convert it.
ssh-keyscan -t ed25519 $host | ssh-to-age
Then add the key to .sops.yaml
If the key changed, you might want to run
sops updatekeys hosts/$host/secrets.yaml
nix repl
start an interactive environment for evaluating Nix expressions
$ nix repl
nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl
nix-repl> :lf .#
Import GPG public key
gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5
Debugging boot issues
- Add
rd.systemd.debug_shellkernel parameter - Press CTRL+ALT+F9 to switch to root shell