Valentin Brandl
cbd18c3d68
Flake lock file updates:
• Updated input 'home-manager':
'github:nix-community/home-manager/f8831cc700030e11fc91da9ef6270593e6440edc?narHash=sha256-wpmPl6FkAF9Jj5C/rzANgpUjfzQrUYOn267LnzKU2uI%3D' (2024-11-22)
→ 'github:nix-community/home-manager/f3111f62a23451114433888902a55cf0692b408d?narHash=sha256-T1e5oceypZu3Q8vzICjv1X/sGs9XfJRMW5OuXHgpB3c%3D' (2024-11-24)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/057f63b6dc1a2c67301286152eb5af20747a9cb4?narHash=sha256-v5P3dk5JdiT%2B4x69ZaB18B8%2BRcu3TIOrcdG4uEX7WZ8%3D' (2024-11-16)
→ 'github:nixos/nixpkgs/0c582677378f2d9ffcb01490af2f2c678dcb29d3?narHash=sha256-GcOQbOgmwlsRhpLGSwZJwLbo3pu9ochMETuRSS1xpz4%3D' (2024-11-23)
• Updated input 'nixpkgs-unstable':
'github:nixos/nixpkgs/23e89b7da85c3640bbc2173fe04f4bd114342367?narHash=sha256-y/MEyuJ5oBWrWAic/14LaIr/u5E0wRVzyYsouYY3W6w%3D' (2024-11-19)
→ 'github:nixos/nixpkgs/4633a7c72337ea8fd23a4f2ba3972865e3ec685d?narHash=sha256-2ThgXBUXAE1oFsVATK1ZX9IjPcS4nKFOAjhPNKuiMn0%3D' (2024-11-25)
NixOS Configuration
Now using Flakes \o/
Updating Channels/the Lockfile
nix flake lock
nix flake update
Installing/Updating the System
sudo nixos-rebuild switch --flake <path-to-repo>#<hostname>
sudo nixos-rebuild switch --flake .#w1n5t0n
Mail Setup
secret-tool store --label 'foo@example.com' email 'foo@example.com'
Encrypted Btrfs Setup
- cryptsetup luksFormat --format=luks1 /...
- cryptsetup luksOpen /... system
- mkfs.btrfs /dev/mapper/system
- mount /dev/mapper/system /mnt
- btrfs subvolume create /mnt/root
- btrfs subvolume create /mnt/home
- btrfs subvolume create /mnt/nix
- btrfs subvolume create /mnt/swap
| subvolume | mount options |
|---|---|
home |
compress=zstd |
swap |
compress=zstd,noatime |
root |
compress=zstd |
nix |
compress=zstd,noatime |
/boot/efias vfat TODO: partitioning command- TODO: create swap
- mount subvolumes
- `nixos-generate-config --root /mnt
- add mount options in
hardware-configuration.nix/ create matching configuration in./machines - TODO: config for luks, bootloader, ...
- For
snapper: create.snapshotssubvolume in each subvolume to be backed up