lelgenio/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

i15: update config

Browse source
This commit is contained in:
Leonardo Eugênio 2022-12-20 00:47:24 -03:00
parent 5486bbd5de
commit ff97141e6f
2 changed files with 85 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
hosts/i15.nix
View file

@ -2,8 +2,9 @@
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
let
btrfs_options = [ "compress=zstd:3" "noatime" ];
in {
imports = [ (modulesPath + "/installer/scan/not-detected.nix") ];
boot.initrd.availableKernelModules =
@ -12,6 +13,13 @@
boot.kernelModules = [ "kvm-intel" ];
boot.extraModulePackages = [ ];
boot.initrd.luks.devices = {
"main" = {
bypassWorkqueues = true;
device = "/dev/disk/by-label/CRYPT_ROOT";
};
};
fileSystems."/boot/efi" = {
device = "/dev/disk/by-label/NIX_BOOT";
fsType = "vfat";
@ -20,13 +28,13 @@
fileSystems."/" = {
device = "/dev/disk/by-label/NIX_ROOT";
fsType = "btrfs";
options = [ "subvol=nixos" "compress=zstd" "noatime" ];
options = [ "subvol=nixos" ] ++ btrfs_options;
};
fileSystems."/home" = {
device = "/dev/disk/by-label/NIX_ROOT";
fsType = "btrfs";
options = [ "subvol=home" "compress=zstd" "noatime" ];
options = [ "subvol=home" ] ++ btrfs_options;
};
swapDevices = [{
@ -42,7 +50,7 @@
# networking.interfaces.enp2s0.useDHCP = lib.mkDefault true;
# networking.interfaces.wlp1s0.useDHCP = lib.mkDefault true;
powerManagement.cpuFreqGovernor = lib.mkDefault "powersave";
powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
hardware.cpu.intel.updateMicrocode =
lib.mkDefault config.hardware.enableRedistributableFirmware;
networking.hostName = "i15"; # Define your hostname.

72
install/i15.sh Normal file
View file

@ -0,0 +1,72 @@
#!/bin/sh
test -f ./flake.nix || {
echo 'This should be run from the root of the repository!'
exit 1
}
lsblk
echo 'Enter the name of the device to WIPE and install (something like "sda"):'
read DRIVE_ID
echo 'Enter a passphrase to encrypt the disk:'
read -s DRIVE_PASSPHRASE
echo "Creating partition table..."
parted -s "/dev/${DRIVE_ID}" -- mklabel gpt || exit 1
echo "Creating EFI system partition..."
parted -s "/dev/${DRIVE_ID}" -- mkpart ESP 1MiB 1GiB &&
parted -s "/dev/${DRIVE_ID}" -- set 1 boot on &&
mkfs.fat -F32 "/dev/${DRIVE_ID}1" -n NIX_BOOT || exit 1
echo "Creating encrypted root partition..."
parted -s "/dev/${DRIVE_ID}" -- mkpart luks 1GiB 100% &&
echo "$DRIVE_PASSPHRASE" | cryptsetup --batch-mode luksFormat --label CRYPT_ROOT "/dev/${DRIVE_ID}2" &&
echo "$DRIVE_PASSPHRASE" | cryptsetup luksOpen "/dev/${DRIVE_ID}2" "crypt_root" && {
echo "Creating btrfs partition..."
mkfs.btrfs --quiet --label NIX_ROOT /dev/mapper/"crypt_root" &&
MNTPOINT=$(mktemp -d) &&
mount /dev/mapper/"crypt_root" "$MNTPOINT" && {
echo "Creating subvolumes..."
btrfs subvolume create "$MNTPOINT"/main
btrfs subvolume create "$MNTPOINT"/home
btrfs subvolume create "$MNTPOINT"/swap
}
echo "Closing btrfs partition..."
umount -Rl "$MNTPOINT" &&
rm -rf "$MNTPOINT"
echo "Mounting root btrfs submodule..."
MNTPOINT=$(mktemp -d) &&
mount /dev/mapper/"crypt_root" "$MNTPOINT" -o subvol=main,noatime,compress=zstd && {
echo "Creating and mounting EFI system partition mountpoint..."
mkdir -p "$MNTPOINT/boot/efi" &&
mount "/dev/${DRIVE_ID}1" "$MNTPOINT/boot/efi" &&
echo "Creating home partition mountpoint..." &&
mkdir -p "$MNTPOINT/home" &&
mount /dev/mapper/"crypt_root" "$MNTPOINT/home" -o subvol=home,noatime,compress=zstd &&
echo "Swapfile" &&
mkdir -p "$MNTPOINT/swap" &&
mount /dev/mapper/"crypt_root" "$MNTPOINT/home" -o subvol=swap,noatime &&
echo "Installing system..." &&
nixos-install --flake .#i15 --root "$MNTPOINT"
}
echo "Closing root btrfs submodule..."
umount -Rl "$MNTPOINT" &&
rm -rf "$MNTPOINT"
}
echo "Closing encrypted root partition..."
cryptsetup close "crypt_root"