nixos/profiles/hardware/cubieboard2.nix

   1 { pkgs, lib, config, host, modulesPath, ... }:
   2 {
   3 imports = [
   4   "${modulesPath}/installer/sd-card/sd-image.nix"
   5 ];
   6
   7 _module.args.CPUs = 2;
   8
   9 # Too CPU hungry for this hardware, for too little Mio saved
  10 nix.settings.auto-optimise-store = false;
  11
  12 powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
  13
  14 boot.supportedFilesystems = [
  15   #"btrfs"
  16   #"reiserfs"
  17   "vfat"
  18   #"f2fs"
  19   #"xfs"
  20   #"zfs" # ZFS tools coredump with SIGSEGV
  21   #"ntfs"
  22   #"cifs"
  23 ];
  24
  25 # The serial ports listed here are:
  26 # - ttyS0: for Tegra (Jetson TK1)
  27 # - ttymxc0: for i.MX6 (Wandboard)
  28 # - ttyAMA0: for Allwinner (pcDuino3 Nano) and QEMU's -machine virt
  29 # - ttyO0: for OMAP (BeagleBone Black)
  30 # - ttySAC2: for Exynos (ODROID-XU3)
  31 boot.consoleLogLevel = lib.mkDefault 7;
  32 boot.kernelParams = [
  33   "console=ttyS0,115200n8"
  34   "console=ttymxc0,115200n8"
  35   "console=ttyAMA0,115200n8"
  36   "console=ttyO0,115200n8"
  37   "console=ttySAC2,115200n8"
  38   "console=tty0"
  39 ];
  40 boot.kernelPatches = [
  41   {
  42     name = "0001-core_pattern-fix-too-small-CORENAME_MAX_SIZE";
  43     patch = ../../../nixpkgs/patches/linux/0001-core_pattern-fix-too-small-CORENAME_MAX_SIZE.patch;
  44     extraConfig = ''
  45     '';
  46   }
  47 ];
  48
  49 #nixpkgs.config.allowUnfree = true;
  50 nixpkgs.crossSystem = lib.systems.examples.armv7l-hf-multiplatform;
  51 nixpkgs.overlays = [
  52   (final: super: {
  53     # https://linux-sunxi.org/Mali_Open_Source_Driver#Configuration_and_Build
  54     mesa = super.mesa.override {
  55       driDrivers = [];
  56       eglPlatforms = ["x11"];
  57       enableGalliumNine = false;
  58       galliumDrivers = ["lima" "panfrost" "kmsro" "swrast"];
  59       vulkanDrivers = [];
  60     };
  61   })
  62   (final: super: {
  63     linuxPackages_latest_Cubieboard2 = super.linuxPackages_latest.extend (kfinal: ksuper: {
  64       kernel = ksuper.kernel.override {
  65         defconfig = "sunxi_defconfig";
  66         structuredExtraConfig = with lib.kernel; {
  67           # Workaround https://github.com/NixOS/nixpkgs/pull/141942#issuecomment-954301443
  68           DEBUG_INFO = lib.mkForce no;
  69           DEBUG_INFO_BTF = lib.mkForce no;
  70           SUSPEND = no;
  71           PM = no;
  72           PM_SLEEP = no;
  73           NVME_CORE = no;
  74           TORTURE_TEST = no; # TODO: check if it's possible
  75           USB_SERIAL_CH341 = module;
  76           USB_SERIAL_PL2303 = module;
  77           REGULATOR = lib.mkForce no;
  78           MFD_CORE = no;
  79           PCI = yes;
  80
  81           #
  82           # File systems
  83           #
  84           EXT4_FS = yes;
  85           EXT4_USE_FOR_EXT2 = yes;
  86           FUSE_FS = module;
  87           PSTORE = yes;
  88           CONFIGFS_FS = module;
  89           VFAT_FS = yes;
  90           ZSWAP = yes;
  91
  92           # misc
  93           DAX = module;
  94           DRM_DISPLAY_CONNECTOR = module;
  95           FB_SIMPLE = lib.mkForce module;
  96           NET_SCH_CODEL = module;
  97           NET_SCH_FQ_CODEL = module;
  98           UIO = module;
  99
 100           # WiFi
 101           # Not built in the Cubieboard2, require an USB dongle
 102           WIRELESS = yes;
 103           CFG80211 = module;
 104           LIB80211 = module;
 105           LIB80211_CRYPT_CCMP = module;
 106           MAC80211 = module;
 107           MAC80211_HWSIM = module;
 108           NETDEVICES = yes;
 109           WLAN = yes;
 110           WLAN_VENDOR_REALTEK = yes;
 111           NET_VENDOR_REALTEK = yes;
 112           REALTEK_PHY = yes;
 113           RTL_CARDS = module;
 114           RTL8188EE = module; # For 7392:7811 Edimax Technology Co., Ltd EW-7811Un 802.11n Wireless Adapter [Realtek RTL8188CUS]
 115           RTLWIFI = module;
 116           RTLWIFI_PCI = module;
 117           RTLWIFI_DEBUG = yes;
 118
 119           # Sound options
 120           SND_SOC_ADI = no;
 121           SND_SOC_ADI_AXI_I2S = no;
 122           SND_SOC_ADI_AXI_SPDIF = no;
 123           SND_SOC_AMD_ACP = no;
 124           SND_SOC_AMD_CZ_RT5645_MACH = no;
 125           SND_ATMEL_SOC = no;
 126           SND_SOC_MIKROE_PROTO = no;
 127           SND_BCM63XX_I2S_WHISTLER = no;
 128           SND_DESIGNWARE_I2S = no;
 129           SND_SOC_FSL_ASRC = no;
 130           SND_SOC_FSL_SAI = no;
 131           SND_SOC_FSL_MQS = no;
 132           SND_SOC_FSL_AUDMIX = no;
 133           SND_SOC_FSL_SSI = no;
 134           SND_SOC_FSL_SPDIF = no;
 135           SND_SOC_FSL_ESAI = no;
 136           SND_SOC_FSL_MICFIL = no;
 137           SND_SOC_FSL_EASRC = no;
 138           SND_SOC_FSL_XCVR = no;
 139           SND_SOC_FSL_RPMSG = no;
 140           SND_SOC_IMX_AUDMUX = no;
 141           SND_I2S_HI6210_I2S = no;
 142           SND_SOC_MTK_BTCVSD = no;
 143           SND_SOC_XILINX_I2S = no;
 144           SND_SOC_XILINX_AUDIO_FORMATTER = no;
 145           SND_SOC_XILINX_SPDIF = no;
 146           SND_SOC_XTFPGA_I2S = no;
 147           SND_SOC_AC97_CODEC = no;
 148           SND_SOC_ADAU_UTILS = no;
 149           SND_SOC_ADAU1372 = no;
 150           SND_SOC_ADAU1372_I2C = no;
 151           SND_SOC_ADAU1372_SPI = no;
 152           SND_SOC_ADAU1701 = no;
 153           SND_SOC_ADAU17X1 = no;
 154           SND_SOC_ADAU1761 = no;
 155           SND_SOC_ADAU1761_I2C = no;
 156           SND_SOC_ADAU1761_SPI = no;
 157           SND_SOC_ADAU7002 = no;
 158           SND_SOC_ADAU7118 = no;
 159           SND_SOC_ADAU7118_HW = no;
 160           SND_SOC_ADAU7118_I2C = no;
 161           SND_SOC_AK4104 = no;
 162           SND_SOC_AK4118 = no;
 163           SND_SOC_AK4458 = no;
 164           SND_SOC_AK4554 = no;
 165           SND_SOC_AK4613 = no;
 166           SND_SOC_AK4642 = no;
 167           SND_SOC_AK5386 = no;
 168           SND_SOC_AK5558 = no;
 169           SND_SOC_ALC5623 = no;
 170           SND_SOC_BD28623 = no;
 171           SND_SOC_BT_SCO = no;
 172           SND_SOC_CPCAP = no;
 173           SND_SOC_CS35L32 = no;
 174           SND_SOC_CS35L33 = no;
 175           SND_SOC_CS35L34 = no;
 176           SND_SOC_CS35L35 = no;
 177           SND_SOC_CS35L36 = no;
 178           SND_SOC_CS42L42 = no;
 179           SND_SOC_CS42L51 = no;
 180           SND_SOC_CS42L51_I2C = no;
 181           SND_SOC_CS42L52 = no;
 182           SND_SOC_CS42L56 = no;
 183           SND_SOC_CS42L73 = no;
 184           SND_SOC_CS4234 = no;
 185           SND_SOC_CS4265 = no;
 186           SND_SOC_CS4270 = no;
 187           SND_SOC_CS4271 = no;
 188           SND_SOC_CS4271_I2C = no;
 189           SND_SOC_CS4271_SPI = no;
 190           SND_SOC_CS42XX8 = no;
 191           SND_SOC_CS42XX8_I2C = no;
 192           SND_SOC_CS43130 = no;
 193           SND_SOC_CS4341 = no;
 194           SND_SOC_CS4349 = no;
 195           SND_SOC_CS53L30 = no;
 196           SND_SOC_CX2072X = no;
 197           SND_SOC_DA7213 = no;
 198           SND_SOC_DMIC = no;
 199           SND_SOC_HDMI_CODEC = no;
 200           SND_SOC_ES7134 = no;
 201           SND_SOC_ES7241 = no;
 202           SND_SOC_ES8316 = no;
 203           SND_SOC_ES8328 = no;
 204           SND_SOC_ES8328_I2C = no;
 205           SND_SOC_ES8328_SPI = no;
 206           SND_SOC_GTM601 = no;
 207           SND_SOC_INNO_RK3036 = no;
 208           SND_SOC_MAX98088 = no;
 209           SND_SOC_MAX98357A = no;
 210           SND_SOC_MAX98504 = no;
 211           SND_SOC_MAX9867 = no;
 212           SND_SOC_MAX98927 = no;
 213           SND_SOC_MAX98373 = no;
 214           SND_SOC_MAX98373_I2C = no;
 215           SND_SOC_MAX98373_SDW = no;
 216           SND_SOC_MAX98390 = no;
 217           SND_SOC_MAX9860 = no;
 218           SND_SOC_MSM8916_WCD_ANALOG = no;
 219           SND_SOC_MSM8916_WCD_DIGITAL = no;
 220           SND_SOC_PCM1681 = no;
 221           SND_SOC_PCM1789 = no;
 222           SND_SOC_PCM1789_I2C = no;
 223           SND_SOC_PCM179X = no;
 224           SND_SOC_PCM179X_I2C = no;
 225           SND_SOC_PCM179X_SPI = no;
 226           SND_SOC_PCM186X = no;
 227           SND_SOC_PCM186X_I2C = no;
 228           SND_SOC_PCM186X_SPI = no;
 229           SND_SOC_PCM3060 = no;
 230           SND_SOC_PCM3060_I2C = no;
 231           SND_SOC_PCM3060_SPI = no;
 232           SND_SOC_PCM3168A = no;
 233           SND_SOC_PCM3168A_I2C = no;
 234           SND_SOC_PCM3168A_SPI = no;
 235           SND_SOC_PCM5102A = no;
 236           SND_SOC_PCM512x = no;
 237           SND_SOC_PCM512x_I2C = no;
 238           SND_SOC_PCM512x_SPI = no;
 239           SND_SOC_RK3328 = no;
 240           SND_SOC_RK817 = no;
 241           SND_SOC_RL6231 = no;
 242           SND_SOC_RT1308_SDW = no;
 243           SND_SOC_RT1316_SDW = no;
 244           SND_SOC_RT5616 = no;
 245           SND_SOC_RT5631 = no;
 246           SND_SOC_RT5640 = no;
 247           SND_SOC_RT5645 = no;
 248           SND_SOC_RT5659 = no;
 249           SND_SOC_RT5682 = no;
 250           SND_SOC_RT5682_SDW = no;
 251           SND_SOC_RT700 = no;
 252           SND_SOC_RT700_SDW = no;
 253           SND_SOC_RT711 = no;
 254           SND_SOC_RT711_SDW = no;
 255           SND_SOC_RT711_SDCA_SDW = no;
 256           SND_SOC_RT715 = no;
 257           SND_SOC_RT715_SDW = no;
 258           SND_SOC_RT715_SDCA_SDW = no;
 259           SND_SOC_SGTL5000 = no;
 260           SND_SOC_SIGMADSP = no;
 261           SND_SOC_SIGMADSP_I2C = no;
 262           SND_SOC_SIGMADSP_REGMAP = no;
 263           SND_SOC_SIMPLE_AMPLIFIER = no;
 264           SND_SOC_SIMPLE_MUX = no;
 265           SND_SOC_SPDIF = no;
 266           SND_SOC_SSM2305 = no;
 267           SND_SOC_SSM2518 = no;
 268           SND_SOC_SSM2602 = no;
 269           SND_SOC_SSM2602_SPI = no;
 270           SND_SOC_SSM2602_I2C = no;
 271           SND_SOC_SSM4567 = no;
 272           SND_SOC_STA32X = no;
 273           SND_SOC_STA350 = no;
 274           SND_SOC_STI_SAS = no;
 275           SND_SOC_TAS2552 = no;
 276           SND_SOC_TAS2562 = no;
 277           SND_SOC_TAS2764 = no;
 278           SND_SOC_TAS2770 = no;
 279           SND_SOC_TAS5086 = no;
 280           SND_SOC_TAS571X = no;
 281           SND_SOC_TAS5720 = no;
 282           SND_SOC_TAS6424 = no;
 283           SND_SOC_TDA7419 = no;
 284           SND_SOC_TFA9879 = no;
 285           SND_SOC_TFA989X = no;
 286           SND_SOC_TLV320AIC23 = no;
 287           SND_SOC_TLV320AIC23_I2C = no;
 288           SND_SOC_TLV320AIC23_SPI = no;
 289           SND_SOC_TLV320AIC31XX = no;
 290           SND_SOC_TLV320AIC32X4 = no;
 291           SND_SOC_TLV320AIC32X4_I2C = no;
 292           SND_SOC_TLV320AIC32X4_SPI = no;
 293           SND_SOC_TLV320AIC3X = no;
 294           SND_SOC_TLV320AIC3X_I2C = no;
 295           SND_SOC_TLV320AIC3X_SPI = no;
 296           SND_SOC_TLV320ADCX140 = no;
 297           SND_SOC_TS3A227E = no;
 298           SND_SOC_TSCS42XX = no;
 299           SND_SOC_TSCS454 = no;
 300           SND_SOC_UDA1334 = no;
 301           SND_SOC_WCD9335 = no;
 302           SND_SOC_WCD_MBHC = no;
 303           SND_SOC_WCD934X = no;
 304           SND_SOC_WCD938X = no;
 305           SND_SOC_WCD938X_SDW = no;
 306           SND_SOC_WM8510 = no;
 307           SND_SOC_WM8523 = no;
 308           SND_SOC_WM8524 = no;
 309           SND_SOC_WM8580 = no;
 310           SND_SOC_WM8711 = no;
 311           SND_SOC_WM8728 = no;
 312           SND_SOC_WM8731 = no;
 313           SND_SOC_WM8737 = no;
 314           SND_SOC_WM8741 = no;
 315           SND_SOC_WM8750 = no;
 316           SND_SOC_WM8753 = no;
 317           SND_SOC_WM8770 = no;
 318           SND_SOC_WM8776 = no;
 319           SND_SOC_WM8782 = no;
 320           SND_SOC_WM8804 = no;
 321           SND_SOC_WM8804_I2C = no;
 322           SND_SOC_WM8804_SPI = no;
 323           SND_SOC_WM8903 = no;
 324           SND_SOC_WM8904 = no;
 325           SND_SOC_WM8960 = no;
 326           SND_SOC_WM8962 = no;
 327           SND_SOC_WM8974 = no;
 328           SND_SOC_WM8978 = no;
 329           SND_SOC_WM8985 = no;
 330           SND_SOC_WSA881X = no;
 331           SND_SOC_ZL38060 = no;
 332           SND_SOC_MAX9759 = no;
 333           SND_SOC_MT6351 = no;
 334           SND_SOC_MT6358 = no;
 335           SND_SOC_MT6660 = no;
 336           SND_SOC_NAU8315 = no;
 337           SND_SOC_NAU8540 = no;
 338           SND_SOC_NAU8810 = no;
 339           SND_SOC_NAU8822 = no;
 340           SND_SOC_NAU8824 = no;
 341           SND_SOC_TPA6130A2 = no;
 342           SND_SOC_LPASS_WSA_MACRO = no;
 343           SND_SOC_LPASS_VA_MACRO = no;
 344           SND_SOC_LPASS_RX_MACRO = no;
 345           SND_SOC_LPASS_TX_MACRO = no;
 346           SND_SIMPLE_CARD_UTILS = no;
 347           SND_SIMPLE_CARD = no;
 348           SND_AUDIO_GRAPH_CARD = no;
 349           SND_VIRTIO = no;
 350           MOST_SND = no;
 351
 352           #
 353           # Networking options
 354           #
 355           TCP_CONG_BBR = module;
 356           #PPP = no;
 357           #PPP_MULTILINK = lib.mkForce no;
 358           #PPP_FILTER = lib.mkForce no;
 359           #PPPOE = no;
 360           NET_DSA = no;
 361           L2TP = no;
 362           PARPORT = no;
 363           PARIDE = no;
 364           CDROM = no;
 365           GPIOLIB = no;
 366           NEW_LEDS = no;
 367           #LEDS_CLASS = no;
 368
 369           IPV6 = yes;
 370           IPV6_ROUTER_PREF = yes;
 371           IPV6_ROUTE_INFO = yes;
 372           IPV6_OPTIMISTIC_DAD = yes;
 373           INET6_AH = module;
 374           INET6_ESP = module;
 375           INET6_ESP_OFFLOAD = module;
 376           INET6_ESPINTCP = yes;
 377           INET6_IPCOMP = module;
 378           IPV6_MIP6 = module;
 379           IPV6_ILA = module;
 380           INET6_XFRM_TUNNEL = module;
 381           INET6_TUNNEL = module;
 382           IPV6_VTI = module;
 383           IPV6_SIT = module;
 384           IPV6_SIT_6RD = yes;
 385           IPV6_NDISC_NODETYPE = yes;
 386           IPV6_TUNNEL = module;
 387           IPV6_MULTIPLE_TABLES = yes;
 388           IPV6_SUBTREES = yes;
 389           IPV6_MROUTE = yes;
 390           IPV6_MROUTE_MULTIPLE_TABLES = yes;
 391           IPV6_PIMSM_V2 = yes;
 392           IPV6_SEG6_LWTUNNEL = yes;
 393           IPV6_SEG6_HMAC = yes;
 394           IPV6_RPL_LWTUNNEL = yes;
 395           # CONFIG_MPTCP is not set
 396           # CONFIG_NETWORK_SECMARK is not set
 397           NET_PTP_CLASSIFY = yes;
 398           # CONFIG_NETWORK_PHY_TIMESTAMPING is not set
 399           NETFILTER = yes;
 400           NETFILTER_ADVANCED = yes;
 401
 402           #
 403           # Core Netfilter Configuration
 404           #
 405           NETFILTER_INGRESS = yes;
 406           NETFILTER_NETLINK = module;
 407           NETFILTER_FAMILY_ARP = yes;
 408           NETFILTER_NETLINK_HOOK = module;
 409           NETFILTER_NETLINK_ACCT = module;
 410           NETFILTER_NETLINK_QUEUE = module;
 411           NETFILTER_NETLINK_LOG = module;
 412           NETFILTER_NETLINK_OSF = module;
 413           NF_CONNTRACK = module;
 414           NF_LOG_SYSLOG = module;
 415           NETFILTER_CONNCOUNT = module;
 416           NF_CONNTRACK_MARK = yes;
 417           NF_CONNTRACK_ZONES = yes;
 418           NF_CONNTRACK_PROCFS = yes;
 419           NF_CONNTRACK_EVENTS = yes;
 420           NF_CONNTRACK_TIMEOUT = yes;
 421           NF_CONNTRACK_TIMESTAMP = yes;
 422           NF_CONNTRACK_LABELS = yes;
 423           NF_CT_PROTO_DCCP = yes;
 424           NF_CT_PROTO_SCTP = yes;
 425           NF_CT_PROTO_UDPLITE = yes;
 426           # CONFIG_NF_CONNTRACK_AMANDA is not set
 427           # CONFIG_NF_CONNTRACK_FTP is not set
 428           # CONFIG_NF_CONNTRACK_H323 is not set
 429           # CONFIG_NF_CONNTRACK_IRC is not set
 430           # CONFIG_NF_CONNTRACK_NETBIOS_NS is not set
 431           # CONFIG_NF_CONNTRACK_SNMP is not set
 432           # CONFIG_NF_CONNTRACK_PPTP is not set
 433           # CONFIG_NF_CONNTRACK_SANE is not set
 434           # CONFIG_NF_CONNTRACK_SIP is not set
 435           # CONFIG_NF_CONNTRACK_TFTP is not set
 436           NF_CT_NETLINK = module;
 437           NF_CT_NETLINK_TIMEOUT = module;
 438           NF_CT_NETLINK_HELPER = module;
 439           NETFILTER_NETLINK_GLUE_CT = yes;
 440           NF_NAT = module;
 441           NF_NAT_REDIRECT = yes;
 442           NF_NAT_MASQUERADE = yes;
 443           NETFILTER_SYNPROXY = module;
 444           NF_TABLES = module;
 445           NF_TABLES_INET = yes;
 446           NF_TABLES_NETDEV = yes;
 447           NFT_NUMGEN = module;
 448           NFT_CT = module;
 449           NFT_COUNTER = module;
 450           NFT_CONNLIMIT = module;
 451           NFT_LOG = module;
 452           NFT_LIMIT = module;
 453           NFT_MASQ = module;
 454           NFT_REDIR = module;
 455           NFT_NAT = module;
 456           NFT_TUNNEL = module;
 457           NFT_OBJREF = module;
 458           NFT_QUEUE = module;
 459           NFT_QUOTA = module;
 460           NFT_REJECT = module;
 461           NFT_REJECT_INET = module;
 462           NFT_COMPAT = module;
 463           NFT_HASH = module;
 464           NFT_FIB = module;
 465           NFT_FIB_INET = module;
 466           NFT_XFRM = module;
 467           NFT_SOCKET = module;
 468           NFT_OSF = module;
 469           NFT_TPROXY = module;
 470           NFT_SYNPROXY = module;
 471           NF_DUP_NETDEV = module;
 472           NFT_DUP_NETDEV = module;
 473           NFT_FWD_NETDEV = module;
 474           NFT_FIB_NETDEV = module;
 475           NFT_REJECT_NETDEV = module;
 476           # CONFIG_NF_FLOW_TABLE is not set
 477           NETFILTER_XTABLES = module;
 478
 479           #
 480           # Xtables combined modules
 481           #
 482           NETFILTER_XT_MARK = module;
 483           NETFILTER_XT_CONNMARK = module;
 484           NETFILTER_XT_SET = module;
 485
 486           #
 487           # Xtables targets
 488           #
 489           NETFILTER_XT_TARGET_CHECKSUM = module;
 490           NETFILTER_XT_TARGET_CLASSIFY = module;
 491           NETFILTER_XT_TARGET_CONNMARK = module;
 492           NETFILTER_XT_TARGET_CT = module;
 493           NETFILTER_XT_TARGET_DSCP = module;
 494           NETFILTER_XT_TARGET_HL = module;
 495           NETFILTER_XT_TARGET_HMARK = module;
 496           NETFILTER_XT_TARGET_IDLETIMER = module;
 497           NETFILTER_XT_TARGET_LED = module;
 498           NETFILTER_XT_TARGET_LOG = module;
 499           NETFILTER_XT_TARGET_MARK = module;
 500           NETFILTER_XT_NAT = module;
 501           NETFILTER_XT_TARGET_NETMAP = module;
 502           NETFILTER_XT_TARGET_NFLOG = module;
 503           NETFILTER_XT_TARGET_NFQUEUE = module;
 504           NETFILTER_XT_TARGET_NOTRACK = module;
 505           NETFILTER_XT_TARGET_RATEEST = module;
 506           NETFILTER_XT_TARGET_REDIRECT = module;
 507           NETFILTER_XT_TARGET_MASQUERADE = module;
 508           NETFILTER_XT_TARGET_TEE = module;
 509           NETFILTER_XT_TARGET_TPROXY = module;
 510           NETFILTER_XT_TARGET_TRACE = module;
 511           NETFILTER_XT_TARGET_TCPMSS = module;
 512           NETFILTER_XT_TARGET_TCPOPTSTRIP = module;
 513
 514           #
 515           # Xtables matches
 516           #
 517           NETFILTER_XT_MATCH_ADDRTYPE = module;
 518           NETFILTER_XT_MATCH_BPF = module;
 519           NETFILTER_XT_MATCH_CGROUP = module;
 520           NETFILTER_XT_MATCH_CLUSTER = module;
 521           NETFILTER_XT_MATCH_COMMENT = module;
 522           NETFILTER_XT_MATCH_CONNBYTES = module;
 523           NETFILTER_XT_MATCH_CONNLABEL = module;
 524           NETFILTER_XT_MATCH_CONNLIMIT = module;
 525           NETFILTER_XT_MATCH_CONNMARK = module;
 526           NETFILTER_XT_MATCH_CONNTRACK = module;
 527           NETFILTER_XT_MATCH_CPU = module;
 528           NETFILTER_XT_MATCH_DCCP = module;
 529           NETFILTER_XT_MATCH_DEVGROUP = module;
 530           NETFILTER_XT_MATCH_DSCP = module;
 531           NETFILTER_XT_MATCH_ECN = module;
 532           NETFILTER_XT_MATCH_ESP = module;
 533           NETFILTER_XT_MATCH_HASHLIMIT = module;
 534           NETFILTER_XT_MATCH_HELPER = module;
 535           NETFILTER_XT_MATCH_HL = module;
 536           NETFILTER_XT_MATCH_IPCOMP = module;
 537           NETFILTER_XT_MATCH_IPRANGE = module;
 538           NETFILTER_XT_MATCH_L2TP = module;
 539           NETFILTER_XT_MATCH_LENGTH = module;
 540           NETFILTER_XT_MATCH_LIMIT = module;
 541           NETFILTER_XT_MATCH_MAC = module;
 542           NETFILTER_XT_MATCH_MARK = module;
 543           NETFILTER_XT_MATCH_MULTIPORT = module;
 544           NETFILTER_XT_MATCH_NFACCT = module;
 545           NETFILTER_XT_MATCH_OSF = module;
 546           NETFILTER_XT_MATCH_OWNER = module;
 547           # CONFIG_NETFILTER_XT_MATCH_POLICY is not set
 548           NETFILTER_XT_MATCH_PKTTYPE = module;
 549           NETFILTER_XT_MATCH_QUOTA = module;
 550           NETFILTER_XT_MATCH_RATEEST = module;
 551           NETFILTER_XT_MATCH_REALM = module;
 552           NETFILTER_XT_MATCH_RECENT = module;
 553           NETFILTER_XT_MATCH_SCTP = module;
 554           NETFILTER_XT_MATCH_SOCKET = module;
 555           NETFILTER_XT_MATCH_STATE = module;
 556           NETFILTER_XT_MATCH_STATISTIC = module;
 557           NETFILTER_XT_MATCH_STRING = module;
 558           NETFILTER_XT_MATCH_TCPMSS = module;
 559           NETFILTER_XT_MATCH_TIME = module;
 560           NETFILTER_XT_MATCH_U32 = module;
 561           # end of Core Netfilter Configuration
 562
 563           IP_SET = module;
 564           IP_SET_MAX.freeform = "256";
 565           IP_SET_BITMAP_IP = module;
 566           IP_SET_BITMAP_IPMAC = module;
 567           IP_SET_BITMAP_PORT = module;
 568           IP_SET_HASH_IP = module;
 569           IP_SET_HASH_IPMARK = module;
 570           IP_SET_HASH_IPPORT = module;
 571           IP_SET_HASH_IPPORTIP = module;
 572           IP_SET_HASH_IPPORTNET = module;
 573           IP_SET_HASH_IPMAC = module;
 574           IP_SET_HASH_MAC = module;
 575           IP_SET_HASH_NETPORTNET = module;
 576           IP_SET_HASH_NET = module;
 577           IP_SET_HASH_NETNET = module;
 578           IP_SET_HASH_NETPORT = module;
 579           IP_SET_HASH_NETIFACE = module;
 580           IP_SET_LIST_SET = module;
 581           # CONFIG_IP_VS is not set
 582
 583           #
 584           # IP: Netfilter Configuration
 585           #
 586           NF_DEFRAG_IPV4 = module;
 587           NF_SOCKET_IPV4 = module;
 588           NF_TPROXY_IPV4 = module;
 589           NF_TABLES_IPV4 = yes;
 590           NFT_REJECT_IPV4 = module;
 591           NFT_DUP_IPV4 = module;
 592           NFT_FIB_IPV4 = module;
 593           # CONFIG_NF_TABLES_ARP is not set
 594           NF_DUP_IPV4 = module;
 595           # CONFIG_NF_LOG_ARP is not set
 596           # CONFIG_NF_LOG_IPV4 is not set
 597           NF_REJECT_IPV4 = module;
 598           IP_NF_IPTABLES = module;
 599           IP_NF_MATCH_AH = module;
 600           IP_NF_MATCH_ECN = module;
 601           IP_NF_MATCH_RPFILTER = module;
 602           IP_NF_MATCH_TTL = module;
 603           IP_NF_FILTER = module;
 604           IP_NF_TARGET_REJECT = module;
 605           IP_NF_TARGET_SYNPROXY = module;
 606           IP_NF_NAT = module;
 607           IP_NF_TARGET_MASQUERADE = module;
 608           IP_NF_TARGET_NETMAP = module;
 609           IP_NF_TARGET_REDIRECT = module;
 610           IP_NF_MANGLE = module;
 611           IP_NF_TARGET_CLUSTERIP = module;
 612           IP_NF_TARGET_ECN = module;
 613           IP_NF_TARGET_TTL = module;
 614           # CONFIG_IP_NF_RAW is not set
 615           # CONFIG_IP_NF_ARPTABLES is not set
 616           # end of IP: Netfilter Configuration
 617
 618           #
 619           # IPv6: Netfilter Configuration
 620           #
 621           NF_SOCKET_IPV6 = module;
 622           NF_TPROXY_IPV6 = module;
 623           NF_TABLES_IPV6 = yes;
 624           NFT_REJECT_IPV6 = module;
 625           NFT_DUP_IPV6 = module;
 626           NFT_FIB_IPV6 = module;
 627           NF_DUP_IPV6 = module;
 628           NF_REJECT_IPV6 = module;
 629           NF_LOG_IPV6 = module;
 630           IP6_NF_IPTABLES = module;
 631           IP6_NF_MATCH_AH = module;
 632           IP6_NF_MATCH_EUI64 = module;
 633           IP6_NF_MATCH_FRAG = module;
 634           IP6_NF_MATCH_OPTS = module;
 635           IP6_NF_MATCH_HL = module;
 636           IP6_NF_MATCH_IPV6HEADER = module;
 637           IP6_NF_MATCH_MH = module;
 638           IP6_NF_MATCH_RPFILTER = module;
 639           IP6_NF_MATCH_RT = module;
 640           IP6_NF_MATCH_SRH = module;
 641           IP6_NF_TARGET_HL = module;
 642           IP6_NF_FILTER = module;
 643           IP6_NF_TARGET_REJECT = module;
 644           IP6_NF_TARGET_SYNPROXY = module;
 645           IP6_NF_MANGLE = module;
 646           IP6_NF_RAW = module;
 647           IP6_NF_NAT = module;
 648           IP6_NF_TARGET_MASQUERADE = module;
 649           IP6_NF_TARGET_NPT = module;
 650           # end of IPv6: Netfilter Configuration
 651
 652           NF_DEFRAG_IPV6 = module;
 653
 654           #
 655           # Disabling
 656           #
 657           ADFS_FS = no;
 658           AFFS_FS = no;
 659           BEFS_FS = no;
 660           BFS_FS = no;
 661           BTRFS = no;
 662           BTRFS_FS = no;
 663           CEPH_FS = no;
 664           CIFS = no;
 665           CRAMFS = no;
 666           ECRYPT_FS = no;
 667           EFS_FS = no;
 668           EROFS_FS = no;
 669           EXT2_FS = no;
 670           EXT3_FS = no;
 671           F2FS_FS = lib.mkForce no;
 672           GFS2_FS = no;
 673           HFSPLUS_FS = no;
 674           HFS_FS = no;
 675           HPFS_FS = no;
 676           JFS_FS = no;
 677           MINIX_FS = no;
 678           NET_9P = no;
 679           NFSD = no;
 680           NFS_FS = no;
 681           NILFS2_FS = no;
 682           OMFS_FS = no;
 683           ORANGEFS_FS = no;
 684           QNX4FS_FS = no;
 685           QNX6FS_FS = no;
 686           REISERFS_FS = no;
 687           ROMFS_FS = no;
 688           SQUASHFS = no;
 689           SYSV_FS = no;
 690           UFS_FS = no;
 691           VXFS_FS = no;
 692           XFS_FS = no;
 693
 694           MISC_FILESYSTEMS = no;
 695
 696           DECNET = no;
 697           SCTP = no;
 698           RDS = no;
 699           DCCP = no;
 700           TIPC = no;
 701           CAIF = no;
 702           CEPH = no;
 703           VMW_SOCK = no;
 704           HSR = no;
 705           QRTR = no;
 706           MPI = no;
 707           RAID6 = no;
 708           STAGING = lib.mkForce no;
 709           ATH11K_PCI = no;
 710
 711           "6LOWPAN" = no;
 712           ARCNET = no;
 713           B53 = no;
 714           BATMAN_ADV = no;
 715           BT = no;
 716           CAN = no;
 717           COMEDI = no;
 718           DRM_STM = lib.mkForce no;
 719           DRM_PANEL = lib.mkForce no;
 720
 721           DRM_BRIDGE = no;
 722           DRM_PANEL_BRIDGE = no;
 723           DRM_CDNS_DSI = no;
 724           DRM_CHIPONE_ICN6211 = no;
 725           DRM_CHRONTEL_CH7033 = no;
 726           #DRM_DISPLAY_CONNECTOR = no;
 727           DRM_LONTIUM_LT8912B = no;
 728           DRM_LONTIUM_LT9611 = no;
 729           DRM_LONTIUM_LT9611UXC = no;
 730           DRM_ITE_IT66121 = no;
 731           DRM_LVDS_CODEC = no;
 732           DRM_MEGACHIPS_STDPXXXX_GE_B850V3_FW = no;
 733           DRM_NWL_MIPI_DSI = no;
 734           DRM_NXP_PTN3460 = no;
 735           DRM_PARADE_PS8622 = no;
 736           DRM_PARADE_PS8640 = no;
 737           DRM_SIL_SII8620 = no;
 738           DRM_SII902X = no;
 739           DRM_SII9234 = no;
 740           DRM_SIMPLE_BRIDGE = no;
 741           DRM_THINE_THC63LVD1024 = no;
 742           DRM_TOSHIBA_TC358762 = no;
 743           DRM_TOSHIBA_TC358764 = no;
 744           DRM_TOSHIBA_TC358767 = no;
 745           DRM_TOSHIBA_TC358768 = no;
 746           DRM_TOSHIBA_TC358775 = no;
 747           DRM_TI_TFP410 = no;
 748           DRM_TI_SN65DSI83 = no;
 749           DRM_TI_SN65DSI86 = no;
 750           DRM_TI_TPD12S015 = no;
 751           DRM_ANALOGIX_ANX6345 = no;
 752           DRM_ANALOGIX_ANX78XX = no;
 753           DRM_ANALOGIX_DP = no;
 754           DRM_ANALOGIX_ANX7625 = no;
 755           DRM_I2C_ADV7511 = no;
 756           DRM_I2C_ADV7511_CEC = no;
 757           DRM_CDNS_MHDP8546 = no;
 758           DRM_DW_HDMI = no;
 759           DRM_DW_HDMI_AHB_AUDIO = no;
 760           DRM_DW_HDMI_I2S_AUDIO = no;
 761           DRM_DW_HDMI_CEC = no;
 762           DRM_STI = no;
 763           DRM_IMX = no;
 764           DRM_IMX_PARALLEL_DISPLAY = no;
 765           DRM_IMX_TVE = no;
 766           DRM_IMX_LDB = no;
 767           DRM_IMX_HDMI = no;
 768           DRM_ETNAVIV = no;
 769           DRM_ETNAVIV_THERMAL = no;
 770           DRM_MXS = no;
 771           DRM_MXSFB = no;
 772           DRM_ARCPGU = no;
 773           DRM_GM12U320 = no;
 774           TINYDRM_HX8357D = no;
 775           TINYDRM_ILI9225 = no;
 776           TINYDRM_ILI9341 = no;
 777           TINYDRM_ILI9486 = no;
 778           TINYDRM_MI0283QT = no;
 779           TINYDRM_REPAPER = no;
 780           TINYDRM_ST7586 = no;
 781           TINYDRM_ST7735R = no;
 782           DRM_PL111 = no;
 783           DRM_TVE200 = no;
 784           DRM_LIMA = no;
 785           DRM_PANFROST = no;
 786           DRM_MCDE = no;
 787           DRM_TIDSS = no;
 788           DRM_GUD = no;
 789           DRM_EXPORT_FOR_TESTS = no;
 790           DRM_PANEL_ORIENTATION_QUIRKS = no;
 791           DRM_LIB_RANDOM = no;
 792
 793           INFINIBAND = no;
 794           INPUT_TOUCHSCREEN = no;
 795           MEDIA_ANALOG_TV_SUPPORT = lib.mkForce no;
 796           MEDIA_DIGITAL_TV_SUPPORT = lib.mkForce no;
 797           MEDIA_TUNER = no;
 798           MPLS = no;
 799           MPTCP = lib.mkForce no;
 800           NFC = no;
 801           NF_TABLES_BRIDGE = lib.mkForce no;
 802           NVME = no;
 803           OPENVSWITCH = no;
 804           PARAVIRT = lib.mkForce no;
 805           POWER_SUPPLY = no;
 806           USB_GSPCA = lib.mkForce no;
 807           VIDEO_STK1160_COMMON = lib.mkForce no;
 808           XEN = lib.mkForce no;
 809           #NVME_CORE = no;
 810         };
 811         features.debug = false;
 812         #ignoreConfigErrors = true;
 813       };
 814     });
 815   })
 816 ];
 817 boot.cleanTmpDir = true;
 818 boot.tmpOnTmpfs = lib.mkForce false;
 819 # TODO: is that needed?
 820 hardware.enableRedistributableFirmware = true;
 821 sdImage = {
 822   postBuildCommands = ''
 823     dd if=${pkgs.ubootCubieboard2}/u-boot-sunxi-with-spl.bin of=$img bs=1024 seek=8 conv=notrunc
 824   '';
 825   compressImage = true;
 826   expandOnBoot = true;
 827   firmwareSize = 1;
 828   populateFirmwareCommands = "";
 829   populateRootCommands = ''
 830     mkdir -p ./files/boot
 831     ${config.boot.loader.generic-extlinux-compatible.populateCmd} -c ${config.system.build.toplevel} -d ./files/boot
 832   '';
 833 };
 834 boot.loader.grub.enable = false;
 835 boot.loader.generic-extlinux-compatible.enable = true;
 836 # nix -L build .#nixosConfigurations.${hostName}.config.boot.kernelPackages.kernel.configfile
 837 boot.kernelPackages = lib.mkForce pkgs.linuxPackages_latest_Cubieboard2;
 838 boot.initrd.availableKernelModules = lib.mkForce [
 839   "mmc_block"
 840   "usbhid"
 841   "hid_generic"
 842   "hid_microsoft"
 843 ];
 844 }