No description
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/07fc025fe10487dd80f2ec694f1cd790e752d0e8?narHash=sha256-Xd1vOeY9ccDf5VtVK12yM0FS6qqvfUop8UQlxEB%2BgTQ%3D' (2025-08-31)
→ 'github:nix-community/home-manager/f21d9167782c086a33ad53e2311854a8f13c281e?narHash=sha256-K6PEI5PYY94TVMH0mX3MbZNYFme7oNRKml/85BpRRAo%3D' (2025-09-14)
• Updated input 'nix-filter':
'github:numtide/nix-filter/f7653272fd234696ae94229839a99b73c9ab7de0?narHash=sha256-oRam5PS1vcrr5UPgALW0eo1m/5/pls27Z/pabHNy2Ms%3D' (2024-11-13)
→ 'github:numtide/nix-filter/59c44d1909c72441144b93cf0f054be7fe764de5?narHash=sha256-%2BcCxYIh2UNalTz364p%2BQYmWHs0P%2B6wDhiWR4jDIKQIU%3D' (2025-09-14)
• Updated input 'nix-pre-commit-hooks':
'github:cachix/git-hooks.nix/ab82ab08d6bf74085bd328de2a8722c12d97bd9d?narHash=sha256-E9spYi9lxm2f1zWQLQ7xQt8Xs2nWgr1T4QM7ZjLFphM%3D' (2025-09-07)
→ 'github:cachix/git-hooks.nix/b084b2c2b6bc23e83bbfe583b03664eb0b18c411?narHash=sha256-tJ7A8mID3ct69n9WCvZ3PzIIl3rXTdptn/lZmqSS95U%3D' (2025-09-11)
• Updated input 'nixos-hardware':
'github:nixos/nixos-hardware/11b2a10c7be726321bb854403fdeec391e798bf0?narHash=sha256-PtT7ix43ss8PONJ1VJw3f6t2yAoGH%2Bq462Sn8lrmWmk%3D' (2025-09-05)
→ 'github:nixos/nixos-hardware/4c38a024fa32e61db2be8573e5282b15d9733a79?narHash=sha256-NfiTk59huy/YK9H4W4wVwRYyiP2u86QqROM5KK4f5F4%3D' (2025-09-14)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/d179d77c139e0a3f5c416477f7747e9d6b7ec315?narHash=sha256-aSgK4BLNFFGvDTNKPeB28lVXYqVn8RdyXDNAvgGq%2Bk0%3D' (2025-09-09)
→ 'github:nixos/nixpkgs/9a094440e02a699be5c57453a092a8baf569bdad?narHash=sha256-Vp9K5ol6h0J90jG7Rm4RWZsCB3x7v5VPx588TQ1dkfs%3D' (2025-09-14)
• Updated input 'nixpkgsMaster':
'github:NixOS/nixpkgs/9f0eb3375efd8b1db6e65ff599efbe679e16fe6f?narHash=sha256-tYTEkKUuGV3yiCvYReq/jehSodJH02FG7m06I9LESrI%3D' (2025-09-10)
→ 'github:NixOS/nixpkgs/434ed09bd161bb1058612038479dc34863c3f106?narHash=sha256-D44RIPMw71krFXsk9af22YbwBhHpLWCDbncFokHWs5c%3D' (2025-09-15)
• Updated input 'nur':
'github:nix-community/NUR/8c3d56d5eb01a6c8f79baeec9d91f1f5159836ec?narHash=sha256-5HaMkE%2B5un3cEGC%2B%2BHxYK%2BI3kbCd3i58KQTJfLTyqns%3D' (2025-09-10)
→ 'github:nix-community/NUR/0f5e4ecbdfd50a2deb75f344a03e5cfa22b97bcb?narHash=sha256-hYGtHXTQ6eQPZWXKGxZWNrraP0j2p69B9EFIKNRC65E%3D' (2025-09-15)
• Updated input 'nur/nixpkgs':
'github:nixos/nixpkgs/b599843bad24621dcaa5ab60dac98f9b0eb1cabe?narHash=sha256-tLdkkC6XnsY9EOZW9TlpesTclELy8W7lL2ClL%2Bnma8o%3D' (2025-09-08)
→ 'github:nixos/nixpkgs/c23193b943c6c689d70ee98ce3128239ed9e32d1?narHash=sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820%3D' (2025-09-13)
• Updated input 'sops-nix':
'github:Mic92/sops-nix/0bf793823386187dff101ee2a9d4ed26de8bbf8c?narHash=sha256-S9F6bHUBh%2BCFEUalv/qxNImRapCxvSnOzWBUZgK1zDU%3D' (2025-09-10)
→ 'github:Mic92/sops-nix/ee6f91c1c11acf7957d94a130de77561ec24b8ab?narHash=sha256-TumOaykhZO8SOs/faz6GQhqkOcFLoQvESLSF1cJ4mZc%3D' (2025-09-14)
• Updated input 'vesc-tool':
'github:vedderb/vesc_tool/b822025bd2da9aeb834b10c5934f90843389765a?narHash=sha256-TxDUlvxEPZgZIepyiAffgLbrPmkv2Bz%2BQzxO8%2BrTViQ%3D' (2025-09-08)
→ 'github:vedderb/vesc_tool/467e44ede9bd89fd87a075b00156455eba96fb19?narHash=sha256-xXBzVuKmkre9bHB/0f3c9ZvX41P1qWqap0Q%2BWHh1cqQ%3D' (2025-09-14)
|
||
|---|---|---|
| .git-crypt | ||
| custom-utils | ||
| hosts | ||
| modules | ||
| nix-cache | ||
| pkgs | ||
| users | ||
| .editorconfig | ||
| .envrc | ||
| .gitattributes | ||
| .gitignore | ||
| .sops.yaml | ||
| flake.lock | ||
| flake.nix | ||
| justfile | ||
| README.md | ||
jalr's NixOS Configuration
Install a new host
This installs nixos on host somehost:
NixOS Anywhere
nix run github:nix-community/nixos-anywhere -- --flake .#<somehost> root@<somehost>
The traditional way
nix-shell -p nixUnstable --run 'nixos-install --flake https://gitlab.jalr.de/jalr/nixos-configuration#somehost --no-channel-copy'
Build a configuration
nix build .#nixosConfigurations.iron.config.system.build.toplevel
setting up sops
Get the host key and convert it.
ssh-keyscan -t ed25519 $host | ssh-to-age
Then add the key to .sops.yaml
If the key changed, you might want to run
sops updatekeys hosts/$host/secrets.yaml
nix repl
start an interactive environment for evaluating Nix expressions
$ nix repl
nix-repl> a=builtins.getFlake (toString ./.)
$ nix repl
nix-repl> :lf .#
Import GPG public key
gpg --card-edit
gpg/card> fetch
gpg --edit-key $key
gpg> trust
Your decision? 5
Debugging boot issues
- Add
rd.systemd.debug_shellkernel parameter - Press CTRL+ALT+F9 to switch to root shell