Usage

Local darwin config

Install nix with the DeterminateSystems nix-installer

curl -sL -o nix-installer https://install.determinate.systems/nix/nix-installer-aarch64-darwin
chmod +x nix-installer
./nix-installer plan macos --case-sensitive --extra-conf "use-case-hack = false" --encrypt true > plan.json
./nix-installer install plan.json

For macos defaults to work, you need to grant full disk access to the terminal.

sudo nix run nix-darwin -- switch --flake .
nix run home-manager -- switch --flake .

Raspberry Pi bootstrap

Generate SD card image

task nixos:sd host=adama

1. Flash SD card or USB stick with sd.img
2. Put SD card in RPi
3. Start RPi attached to network

Grab new ssh host key.

ssh-keyscan 192.168.1.195

Update host key in secrets/secrets.nix and rekey secrets.

cd secrets
agenix --rekey

Copy user secret decryption key to home dir.

scp ~/.ssh/id_ed25519 adama:.ssh/

Deploy refreshed secrets.

nixos-rebuild switch --flake . --target-host 192.168.1.195 --fast --use-remote-sudo

VM install

parted /dev/sda -- mklabel gpt
parted /dev/sda -- mkpart root ext4 512MB -8GB
parted /dev/sda -- mkpart swap linux-swap -8GB 100%
parted /dev/sda -- mkpart ESP fat32 1MB 512MB
parted /dev/sda -- set 3 esp on

mkfs.ext4 -L nixos /dev/sda1
mkswap -L swap /dev/sda2
mkfs.fat -F 32 -n boot /dev/sda3

mount /dev/disk/by-label/nixos /mnt
mkdir -p /mnt/boot
mount -o umask=077 /dev/disk/by-label/boot /mnt/boot
swapon /dev/sda2

nixos-install --flake github:esselius/cfg#vm