nixos/profiles/hardware/cubieboard2.nix

   1 { pkgs, lib, config, host, modulesPath, ... }:
   2 {
   3 imports = [
   4   "${modulesPath}/installer/sd-card/sd-image.nix"
   5 ];
   6
   7 # Too CPU hungry for this hardware, for too little Mio saved
   8 nix.autoOptimiseStore = false;
   9
  10 powerManagement.cpuFreqGovernor = lib.mkDefault "ondemand";
  11
  12 boot.supportedFilesystems = [
  13   #"btrfs"
  14   #"reiserfs"
  15   "vfat"
  16   #"f2fs"
  17   #"xfs"
  18   #"zfs" # ZFS tools coredump with SIGSEGV
  19   #"ntfs"
  20   #"cifs"
  21 ];
  22
  23 # The serial ports listed here are:
  24 # - ttyS0: for Tegra (Jetson TK1)
  25 # - ttymxc0: for i.MX6 (Wandboard)
  26 # - ttyAMA0: for Allwinner (pcDuino3 Nano) and QEMU's -machine virt
  27 # - ttyO0: for OMAP (BeagleBone Black)
  28 # - ttySAC2: for Exynos (ODROID-XU3)
  29 boot.consoleLogLevel = lib.mkDefault 7;
  30 boot.kernelParams = [
  31   "console=ttyS0,115200n8"
  32   "console=ttymxc0,115200n8"
  33   "console=ttyAMA0,115200n8"
  34   "console=ttyO0,115200n8"
  35   "console=ttySAC2,115200n8"
  36   "console=tty0"
  37 ];
  38 boot.kernelPatches = [
  39   {
  40     name = "0001-core_pattern-fix-too-small-CORENAME_MAX_SIZE";
  41     patch = ../../../nixpkgs/patches/linux/0001-core_pattern-fix-too-small-CORENAME_MAX_SIZE.patch;
  42     extraConfig = ''
  43     '';
  44   }
  45 ];
  46
  47 #nixpkgs.config.allowUnfree = true;
  48 nixpkgs.crossSystem = lib.systems.examples.armv7l-hf-multiplatform;
  49 nixpkgs.overlays = [
  50   (final: super: {
  51     # https://linux-sunxi.org/Mali_Open_Source_Driver#Configuration_and_Build
  52     mesa = super.mesa.override {
  53       driDrivers = [];
  54       eglPlatforms = ["x11"];
  55       enableGalliumNine = false;
  56       galliumDrivers = ["lima" "panfrost" "kmsro" "swrast"];
  57       vulkanDrivers = [];
  58     };
  59   })
  60   (final: super: {
  61     linuxPackages_latest_Cubieboard2 = super.linuxPackages_latest.extend (kfinal: ksuper: {
  62       kernel = ksuper.kernel.override {
  63         defconfig = "sunxi_defconfig";
  64         structuredExtraConfig = with lib.kernel; {
  65           # Workaround https://github.com/NixOS/nixpkgs/pull/141942#issuecomment-954301443
  66           DEBUG_INFO = lib.mkForce no;
  67           DEBUG_INFO_BTF = lib.mkForce no;
  68           SUSPEND = no;
  69           PM = no;
  70           PM_SLEEP = no;
  71           NVME_CORE = no;
  72           TORTURE_TEST = no; # TODO: check if it's possible
  73           USB_SERIAL_CH341 = module;
  74           USB_SERIAL_PL2303 = module;
  75           REGULATOR = lib.mkForce no;
  76           MFD_CORE = no;
  77
  78           #
  79           # File systems
  80           #
  81           EXT4_FS = yes;
  82           EXT4_USE_FOR_EXT2 = yes;
  83           FUSE_FS = module;
  84           PSTORE = yes;
  85           CONFIGFS_FS = module;
  86           VFAT_FS = yes;
  87           ZSWAP = yes;
  88
  89           # misc
  90           DAX = module;
  91           DRM_DISPLAY_CONNECTOR = module;
  92           FB_SIMPLE = lib.mkForce module;
  93           NET_SCH_CODEL = module;
  94           NET_SCH_FQ_CODEL = module;
  95           UIO = module;
  96
  97           # WiFi
  98           # Not built in the Cubieboard2, require an USB dongle
  99           WIRELESS = yes;
 100           CFG80211 = module;
 101           LIB80211 = module;
 102           LIB80211_CRYPT_CCMP = module;
 103           MAC80211 = module;
 104           MAC80211_HWSIM = module;
 105
 106           # Sound options
 107           SND_SOC_ADI = no;
 108           SND_SOC_ADI_AXI_I2S = no;
 109           SND_SOC_ADI_AXI_SPDIF = no;
 110           SND_SOC_AMD_ACP = no;
 111           SND_SOC_AMD_CZ_RT5645_MACH = no;
 112           SND_ATMEL_SOC = no;
 113           SND_SOC_MIKROE_PROTO = no;
 114           SND_BCM63XX_I2S_WHISTLER = no;
 115           SND_DESIGNWARE_I2S = no;
 116           SND_SOC_FSL_ASRC = no;
 117           SND_SOC_FSL_SAI = no;
 118           SND_SOC_FSL_MQS = no;
 119           SND_SOC_FSL_AUDMIX = no;
 120           SND_SOC_FSL_SSI = no;
 121           SND_SOC_FSL_SPDIF = no;
 122           SND_SOC_FSL_ESAI = no;
 123           SND_SOC_FSL_MICFIL = no;
 124           SND_SOC_FSL_EASRC = no;
 125           SND_SOC_FSL_XCVR = no;
 126           SND_SOC_FSL_RPMSG = no;
 127           SND_SOC_IMX_AUDMUX = no;
 128           SND_I2S_HI6210_I2S = no;
 129           SND_SOC_MTK_BTCVSD = no;
 130           SND_SOC_XILINX_I2S = no;
 131           SND_SOC_XILINX_AUDIO_FORMATTER = no;
 132           SND_SOC_XILINX_SPDIF = no;
 133           SND_SOC_XTFPGA_I2S = no;
 134           SND_SOC_AC97_CODEC = no;
 135           SND_SOC_ADAU_UTILS = no;
 136           SND_SOC_ADAU1372 = no;
 137           SND_SOC_ADAU1372_I2C = no;
 138           SND_SOC_ADAU1372_SPI = no;
 139           SND_SOC_ADAU1701 = no;
 140           SND_SOC_ADAU17X1 = no;
 141           SND_SOC_ADAU1761 = no;
 142           SND_SOC_ADAU1761_I2C = no;
 143           SND_SOC_ADAU1761_SPI = no;
 144           SND_SOC_ADAU7002 = no;
 145           SND_SOC_ADAU7118 = no;
 146           SND_SOC_ADAU7118_HW = no;
 147           SND_SOC_ADAU7118_I2C = no;
 148           SND_SOC_AK4104 = no;
 149           SND_SOC_AK4118 = no;
 150           SND_SOC_AK4458 = no;
 151           SND_SOC_AK4554 = no;
 152           SND_SOC_AK4613 = no;
 153           SND_SOC_AK4642 = no;
 154           SND_SOC_AK5386 = no;
 155           SND_SOC_AK5558 = no;
 156           SND_SOC_ALC5623 = no;
 157           SND_SOC_BD28623 = no;
 158           SND_SOC_BT_SCO = no;
 159           SND_SOC_CPCAP = no;
 160           SND_SOC_CS35L32 = no;
 161           SND_SOC_CS35L33 = no;
 162           SND_SOC_CS35L34 = no;
 163           SND_SOC_CS35L35 = no;
 164           SND_SOC_CS35L36 = no;
 165           SND_SOC_CS42L42 = no;
 166           SND_SOC_CS42L51 = no;
 167           SND_SOC_CS42L51_I2C = no;
 168           SND_SOC_CS42L52 = no;
 169           SND_SOC_CS42L56 = no;
 170           SND_SOC_CS42L73 = no;
 171           SND_SOC_CS4234 = no;
 172           SND_SOC_CS4265 = no;
 173           SND_SOC_CS4270 = no;
 174           SND_SOC_CS4271 = no;
 175           SND_SOC_CS4271_I2C = no;
 176           SND_SOC_CS4271_SPI = no;
 177           SND_SOC_CS42XX8 = no;
 178           SND_SOC_CS42XX8_I2C = no;
 179           SND_SOC_CS43130 = no;
 180           SND_SOC_CS4341 = no;
 181           SND_SOC_CS4349 = no;
 182           SND_SOC_CS53L30 = no;
 183           SND_SOC_CX2072X = no;
 184           SND_SOC_DA7213 = no;
 185           SND_SOC_DMIC = no;
 186           SND_SOC_HDMI_CODEC = no;
 187           SND_SOC_ES7134 = no;
 188           SND_SOC_ES7241 = no;
 189           SND_SOC_ES8316 = no;
 190           SND_SOC_ES8328 = no;
 191           SND_SOC_ES8328_I2C = no;
 192           SND_SOC_ES8328_SPI = no;
 193           SND_SOC_GTM601 = no;
 194           SND_SOC_INNO_RK3036 = no;
 195           SND_SOC_MAX98088 = no;
 196           SND_SOC_MAX98357A = no;
 197           SND_SOC_MAX98504 = no;
 198           SND_SOC_MAX9867 = no;
 199           SND_SOC_MAX98927 = no;
 200           SND_SOC_MAX98373 = no;
 201           SND_SOC_MAX98373_I2C = no;
 202           SND_SOC_MAX98373_SDW = no;
 203           SND_SOC_MAX98390 = no;
 204           SND_SOC_MAX9860 = no;
 205           SND_SOC_MSM8916_WCD_ANALOG = no;
 206           SND_SOC_MSM8916_WCD_DIGITAL = no;
 207           SND_SOC_PCM1681 = no;
 208           SND_SOC_PCM1789 = no;
 209           SND_SOC_PCM1789_I2C = no;
 210           SND_SOC_PCM179X = no;
 211           SND_SOC_PCM179X_I2C = no;
 212           SND_SOC_PCM179X_SPI = no;
 213           SND_SOC_PCM186X = no;
 214           SND_SOC_PCM186X_I2C = no;
 215           SND_SOC_PCM186X_SPI = no;
 216           SND_SOC_PCM3060 = no;
 217           SND_SOC_PCM3060_I2C = no;
 218           SND_SOC_PCM3060_SPI = no;
 219           SND_SOC_PCM3168A = no;
 220           SND_SOC_PCM3168A_I2C = no;
 221           SND_SOC_PCM3168A_SPI = no;
 222           SND_SOC_PCM5102A = no;
 223           SND_SOC_PCM512x = no;
 224           SND_SOC_PCM512x_I2C = no;
 225           SND_SOC_PCM512x_SPI = no;
 226           SND_SOC_RK3328 = no;
 227           SND_SOC_RK817 = no;
 228           SND_SOC_RL6231 = no;
 229           SND_SOC_RT1308_SDW = no;
 230           SND_SOC_RT1316_SDW = no;
 231           SND_SOC_RT5616 = no;
 232           SND_SOC_RT5631 = no;
 233           SND_SOC_RT5640 = no;
 234           SND_SOC_RT5645 = no;
 235           SND_SOC_RT5659 = no;
 236           SND_SOC_RT5682 = no;
 237           SND_SOC_RT5682_SDW = no;
 238           SND_SOC_RT700 = no;
 239           SND_SOC_RT700_SDW = no;
 240           SND_SOC_RT711 = no;
 241           SND_SOC_RT711_SDW = no;
 242           SND_SOC_RT711_SDCA_SDW = no;
 243           SND_SOC_RT715 = no;
 244           SND_SOC_RT715_SDW = no;
 245           SND_SOC_RT715_SDCA_SDW = no;
 246           SND_SOC_SGTL5000 = no;
 247           SND_SOC_SIGMADSP = no;
 248           SND_SOC_SIGMADSP_I2C = no;
 249           SND_SOC_SIGMADSP_REGMAP = no;
 250           SND_SOC_SIMPLE_AMPLIFIER = no;
 251           SND_SOC_SIMPLE_MUX = no;
 252           SND_SOC_SPDIF = no;
 253           SND_SOC_SSM2305 = no;
 254           SND_SOC_SSM2518 = no;
 255           SND_SOC_SSM2602 = no;
 256           SND_SOC_SSM2602_SPI = no;
 257           SND_SOC_SSM2602_I2C = no;
 258           SND_SOC_SSM4567 = no;
 259           SND_SOC_STA32X = no;
 260           SND_SOC_STA350 = no;
 261           SND_SOC_STI_SAS = no;
 262           SND_SOC_TAS2552 = no;
 263           SND_SOC_TAS2562 = no;
 264           SND_SOC_TAS2764 = no;
 265           SND_SOC_TAS2770 = no;
 266           SND_SOC_TAS5086 = no;
 267           SND_SOC_TAS571X = no;
 268           SND_SOC_TAS5720 = no;
 269           SND_SOC_TAS6424 = no;
 270           SND_SOC_TDA7419 = no;
 271           SND_SOC_TFA9879 = no;
 272           SND_SOC_TFA989X = no;
 273           SND_SOC_TLV320AIC23 = no;
 274           SND_SOC_TLV320AIC23_I2C = no;
 275           SND_SOC_TLV320AIC23_SPI = no;
 276           SND_SOC_TLV320AIC31XX = no;
 277           SND_SOC_TLV320AIC32X4 = no;
 278           SND_SOC_TLV320AIC32X4_I2C = no;
 279           SND_SOC_TLV320AIC32X4_SPI = no;
 280           SND_SOC_TLV320AIC3X = no;
 281           SND_SOC_TLV320AIC3X_I2C = no;
 282           SND_SOC_TLV320AIC3X_SPI = no;
 283           SND_SOC_TLV320ADCX140 = no;
 284           SND_SOC_TS3A227E = no;
 285           SND_SOC_TSCS42XX = no;
 286           SND_SOC_TSCS454 = no;
 287           SND_SOC_UDA1334 = no;
 288           SND_SOC_WCD9335 = no;
 289           SND_SOC_WCD_MBHC = no;
 290           SND_SOC_WCD934X = no;
 291           SND_SOC_WCD938X = no;
 292           SND_SOC_WCD938X_SDW = no;
 293           SND_SOC_WM8510 = no;
 294           SND_SOC_WM8523 = no;
 295           SND_SOC_WM8524 = no;
 296           SND_SOC_WM8580 = no;
 297           SND_SOC_WM8711 = no;
 298           SND_SOC_WM8728 = no;
 299           SND_SOC_WM8731 = no;
 300           SND_SOC_WM8737 = no;
 301           SND_SOC_WM8741 = no;
 302           SND_SOC_WM8750 = no;
 303           SND_SOC_WM8753 = no;
 304           SND_SOC_WM8770 = no;
 305           SND_SOC_WM8776 = no;
 306           SND_SOC_WM8782 = no;
 307           SND_SOC_WM8804 = no;
 308           SND_SOC_WM8804_I2C = no;
 309           SND_SOC_WM8804_SPI = no;
 310           SND_SOC_WM8903 = no;
 311           SND_SOC_WM8904 = no;
 312           SND_SOC_WM8960 = no;
 313           SND_SOC_WM8962 = no;
 314           SND_SOC_WM8974 = no;
 315           SND_SOC_WM8978 = no;
 316           SND_SOC_WM8985 = no;
 317           SND_SOC_WSA881X = no;
 318           SND_SOC_ZL38060 = no;
 319           SND_SOC_MAX9759 = no;
 320           SND_SOC_MT6351 = no;
 321           SND_SOC_MT6358 = no;
 322           SND_SOC_MT6660 = no;
 323           SND_SOC_NAU8315 = no;
 324           SND_SOC_NAU8540 = no;
 325           SND_SOC_NAU8810 = no;
 326           SND_SOC_NAU8822 = no;
 327           SND_SOC_NAU8824 = no;
 328           SND_SOC_TPA6130A2 = no;
 329           SND_SOC_LPASS_WSA_MACRO = no;
 330           SND_SOC_LPASS_VA_MACRO = no;
 331           SND_SOC_LPASS_RX_MACRO = no;
 332           SND_SOC_LPASS_TX_MACRO = no;
 333           SND_SIMPLE_CARD_UTILS = no;
 334           SND_SIMPLE_CARD = no;
 335           SND_AUDIO_GRAPH_CARD = no;
 336           SND_VIRTIO = no;
 337           MOST_SND = no;
 338
 339           #
 340           # Networking options
 341           #
 342           TCP_CONG_BBR = module;
 343           #PPP = no;
 344           #PPP_MULTILINK = lib.mkForce no;
 345           #PPP_FILTER = lib.mkForce no;
 346           #PPPOE = no;
 347           NET_DSA = no;
 348           L2TP = no;
 349           PARPORT = no;
 350           PARIDE = no;
 351           CDROM = no;
 352           GPIOLIB = no;
 353           NEW_LEDS = no;
 354           #LEDS_CLASS = no;
 355
 356           IPV6 = yes;
 357           IPV6_ROUTER_PREF = yes;
 358           IPV6_ROUTE_INFO = yes;
 359           IPV6_OPTIMISTIC_DAD = yes;
 360           INET6_AH = module;
 361           INET6_ESP = module;
 362           INET6_ESP_OFFLOAD = module;
 363           INET6_ESPINTCP = yes;
 364           INET6_IPCOMP = module;
 365           IPV6_MIP6 = module;
 366           IPV6_ILA = module;
 367           INET6_XFRM_TUNNEL = module;
 368           INET6_TUNNEL = module;
 369           IPV6_VTI = module;
 370           IPV6_SIT = module;
 371           IPV6_SIT_6RD = yes;
 372           IPV6_NDISC_NODETYPE = yes;
 373           IPV6_TUNNEL = module;
 374           IPV6_MULTIPLE_TABLES = yes;
 375           IPV6_SUBTREES = yes;
 376           IPV6_MROUTE = yes;
 377           IPV6_MROUTE_MULTIPLE_TABLES = yes;
 378           IPV6_PIMSM_V2 = yes;
 379           IPV6_SEG6_LWTUNNEL = yes;
 380           IPV6_SEG6_HMAC = yes;
 381           IPV6_RPL_LWTUNNEL = yes;
 382           # CONFIG_MPTCP is not set
 383           # CONFIG_NETWORK_SECMARK is not set
 384           NET_PTP_CLASSIFY = yes;
 385           # CONFIG_NETWORK_PHY_TIMESTAMPING is not set
 386           NETFILTER = yes;
 387           NETFILTER_ADVANCED = yes;
 388
 389           #
 390           # Core Netfilter Configuration
 391           #
 392           NETFILTER_INGRESS = yes;
 393           NETFILTER_NETLINK = module;
 394           NETFILTER_FAMILY_ARP = yes;
 395           NETFILTER_NETLINK_HOOK = module;
 396           NETFILTER_NETLINK_ACCT = module;
 397           NETFILTER_NETLINK_QUEUE = module;
 398           NETFILTER_NETLINK_LOG = module;
 399           NETFILTER_NETLINK_OSF = module;
 400           NF_CONNTRACK = module;
 401           NF_LOG_SYSLOG = module;
 402           NETFILTER_CONNCOUNT = module;
 403           NF_CONNTRACK_MARK = yes;
 404           NF_CONNTRACK_ZONES = yes;
 405           NF_CONNTRACK_PROCFS = yes;
 406           NF_CONNTRACK_EVENTS = yes;
 407           NF_CONNTRACK_TIMEOUT = yes;
 408           NF_CONNTRACK_TIMESTAMP = yes;
 409           NF_CONNTRACK_LABELS = yes;
 410           NF_CT_PROTO_DCCP = yes;
 411           NF_CT_PROTO_SCTP = yes;
 412           NF_CT_PROTO_UDPLITE = yes;
 413           # CONFIG_NF_CONNTRACK_AMANDA is not set
 414           # CONFIG_NF_CONNTRACK_FTP is not set
 415           # CONFIG_NF_CONNTRACK_H323 is not set
 416           # CONFIG_NF_CONNTRACK_IRC is not set
 417           # CONFIG_NF_CONNTRACK_NETBIOS_NS is not set
 418           # CONFIG_NF_CONNTRACK_SNMP is not set
 419           # CONFIG_NF_CONNTRACK_PPTP is not set
 420           # CONFIG_NF_CONNTRACK_SANE is not set
 421           # CONFIG_NF_CONNTRACK_SIP is not set
 422           # CONFIG_NF_CONNTRACK_TFTP is not set
 423           NF_CT_NETLINK = module;
 424           NF_CT_NETLINK_TIMEOUT = module;
 425           NF_CT_NETLINK_HELPER = module;
 426           NETFILTER_NETLINK_GLUE_CT = yes;
 427           NF_NAT = module;
 428           NF_NAT_REDIRECT = yes;
 429           NF_NAT_MASQUERADE = yes;
 430           NETFILTER_SYNPROXY = module;
 431           NF_TABLES = module;
 432           NF_TABLES_INET = yes;
 433           NF_TABLES_NETDEV = yes;
 434           NFT_NUMGEN = module;
 435           NFT_CT = module;
 436           NFT_COUNTER = module;
 437           NFT_CONNLIMIT = module;
 438           NFT_LOG = module;
 439           NFT_LIMIT = module;
 440           NFT_MASQ = module;
 441           NFT_REDIR = module;
 442           NFT_NAT = module;
 443           NFT_TUNNEL = module;
 444           NFT_OBJREF = module;
 445           NFT_QUEUE = module;
 446           NFT_QUOTA = module;
 447           NFT_REJECT = module;
 448           NFT_REJECT_INET = module;
 449           NFT_COMPAT = module;
 450           NFT_HASH = module;
 451           NFT_FIB = module;
 452           NFT_FIB_INET = module;
 453           NFT_XFRM = module;
 454           NFT_SOCKET = module;
 455           NFT_OSF = module;
 456           NFT_TPROXY = module;
 457           NFT_SYNPROXY = module;
 458           NF_DUP_NETDEV = module;
 459           NFT_DUP_NETDEV = module;
 460           NFT_FWD_NETDEV = module;
 461           NFT_FIB_NETDEV = module;
 462           NFT_REJECT_NETDEV = module;
 463           # CONFIG_NF_FLOW_TABLE is not set
 464           NETFILTER_XTABLES = module;
 465
 466           #
 467           # Xtables combined modules
 468           #
 469           NETFILTER_XT_MARK = module;
 470           NETFILTER_XT_CONNMARK = module;
 471           NETFILTER_XT_SET = module;
 472
 473           #
 474           # Xtables targets
 475           #
 476           NETFILTER_XT_TARGET_CHECKSUM = module;
 477           NETFILTER_XT_TARGET_CLASSIFY = module;
 478           NETFILTER_XT_TARGET_CONNMARK = module;
 479           NETFILTER_XT_TARGET_CT = module;
 480           NETFILTER_XT_TARGET_DSCP = module;
 481           NETFILTER_XT_TARGET_HL = module;
 482           NETFILTER_XT_TARGET_HMARK = module;
 483           NETFILTER_XT_TARGET_IDLETIMER = module;
 484           NETFILTER_XT_TARGET_LED = module;
 485           NETFILTER_XT_TARGET_LOG = module;
 486           NETFILTER_XT_TARGET_MARK = module;
 487           NETFILTER_XT_NAT = module;
 488           NETFILTER_XT_TARGET_NETMAP = module;
 489           NETFILTER_XT_TARGET_NFLOG = module;
 490           NETFILTER_XT_TARGET_NFQUEUE = module;
 491           NETFILTER_XT_TARGET_NOTRACK = module;
 492           NETFILTER_XT_TARGET_RATEEST = module;
 493           NETFILTER_XT_TARGET_REDIRECT = module;
 494           NETFILTER_XT_TARGET_MASQUERADE = module;
 495           NETFILTER_XT_TARGET_TEE = module;
 496           NETFILTER_XT_TARGET_TPROXY = module;
 497           NETFILTER_XT_TARGET_TRACE = module;
 498           NETFILTER_XT_TARGET_TCPMSS = module;
 499           NETFILTER_XT_TARGET_TCPOPTSTRIP = module;
 500
 501           #
 502           # Xtables matches
 503           #
 504           NETFILTER_XT_MATCH_ADDRTYPE = module;
 505           NETFILTER_XT_MATCH_BPF = module;
 506           NETFILTER_XT_MATCH_CGROUP = module;
 507           NETFILTER_XT_MATCH_CLUSTER = module;
 508           NETFILTER_XT_MATCH_COMMENT = module;
 509           NETFILTER_XT_MATCH_CONNBYTES = module;
 510           NETFILTER_XT_MATCH_CONNLABEL = module;
 511           NETFILTER_XT_MATCH_CONNLIMIT = module;
 512           NETFILTER_XT_MATCH_CONNMARK = module;
 513           NETFILTER_XT_MATCH_CONNTRACK = module;
 514           NETFILTER_XT_MATCH_CPU = module;
 515           NETFILTER_XT_MATCH_DCCP = module;
 516           NETFILTER_XT_MATCH_DEVGROUP = module;
 517           NETFILTER_XT_MATCH_DSCP = module;
 518           NETFILTER_XT_MATCH_ECN = module;
 519           NETFILTER_XT_MATCH_ESP = module;
 520           NETFILTER_XT_MATCH_HASHLIMIT = module;
 521           NETFILTER_XT_MATCH_HELPER = module;
 522           NETFILTER_XT_MATCH_HL = module;
 523           NETFILTER_XT_MATCH_IPCOMP = module;
 524           NETFILTER_XT_MATCH_IPRANGE = module;
 525           NETFILTER_XT_MATCH_L2TP = module;
 526           NETFILTER_XT_MATCH_LENGTH = module;
 527           NETFILTER_XT_MATCH_LIMIT = module;
 528           NETFILTER_XT_MATCH_MAC = module;
 529           NETFILTER_XT_MATCH_MARK = module;
 530           NETFILTER_XT_MATCH_MULTIPORT = module;
 531           NETFILTER_XT_MATCH_NFACCT = module;
 532           NETFILTER_XT_MATCH_OSF = module;
 533           NETFILTER_XT_MATCH_OWNER = module;
 534           # CONFIG_NETFILTER_XT_MATCH_POLICY is not set
 535           NETFILTER_XT_MATCH_PKTTYPE = module;
 536           NETFILTER_XT_MATCH_QUOTA = module;
 537           NETFILTER_XT_MATCH_RATEEST = module;
 538           NETFILTER_XT_MATCH_REALM = module;
 539           NETFILTER_XT_MATCH_RECENT = module;
 540           NETFILTER_XT_MATCH_SCTP = module;
 541           NETFILTER_XT_MATCH_SOCKET = module;
 542           NETFILTER_XT_MATCH_STATE = module;
 543           NETFILTER_XT_MATCH_STATISTIC = module;
 544           NETFILTER_XT_MATCH_STRING = module;
 545           NETFILTER_XT_MATCH_TCPMSS = module;
 546           NETFILTER_XT_MATCH_TIME = module;
 547           NETFILTER_XT_MATCH_U32 = module;
 548           # end of Core Netfilter Configuration
 549
 550           IP_SET = module;
 551           IP_SET_MAX.freeform = "256";
 552           IP_SET_BITMAP_IP = module;
 553           IP_SET_BITMAP_IPMAC = module;
 554           IP_SET_BITMAP_PORT = module;
 555           IP_SET_HASH_IP = module;
 556           IP_SET_HASH_IPMARK = module;
 557           IP_SET_HASH_IPPORT = module;
 558           IP_SET_HASH_IPPORTIP = module;
 559           IP_SET_HASH_IPPORTNET = module;
 560           IP_SET_HASH_IPMAC = module;
 561           IP_SET_HASH_MAC = module;
 562           IP_SET_HASH_NETPORTNET = module;
 563           IP_SET_HASH_NET = module;
 564           IP_SET_HASH_NETNET = module;
 565           IP_SET_HASH_NETPORT = module;
 566           IP_SET_HASH_NETIFACE = module;
 567           IP_SET_LIST_SET = module;
 568           # CONFIG_IP_VS is not set
 569
 570           #
 571           # IP: Netfilter Configuration
 572           #
 573           NF_DEFRAG_IPV4 = module;
 574           NF_SOCKET_IPV4 = module;
 575           NF_TPROXY_IPV4 = module;
 576           NF_TABLES_IPV4 = yes;
 577           NFT_REJECT_IPV4 = module;
 578           NFT_DUP_IPV4 = module;
 579           NFT_FIB_IPV4 = module;
 580           # CONFIG_NF_TABLES_ARP is not set
 581           NF_DUP_IPV4 = module;
 582           # CONFIG_NF_LOG_ARP is not set
 583           # CONFIG_NF_LOG_IPV4 is not set
 584           NF_REJECT_IPV4 = module;
 585           IP_NF_IPTABLES = module;
 586           IP_NF_MATCH_AH = module;
 587           IP_NF_MATCH_ECN = module;
 588           IP_NF_MATCH_RPFILTER = module;
 589           IP_NF_MATCH_TTL = module;
 590           IP_NF_FILTER = module;
 591           IP_NF_TARGET_REJECT = module;
 592           IP_NF_TARGET_SYNPROXY = module;
 593           IP_NF_NAT = module;
 594           IP_NF_TARGET_MASQUERADE = module;
 595           IP_NF_TARGET_NETMAP = module;
 596           IP_NF_TARGET_REDIRECT = module;
 597           IP_NF_MANGLE = module;
 598           IP_NF_TARGET_CLUSTERIP = module;
 599           IP_NF_TARGET_ECN = module;
 600           IP_NF_TARGET_TTL = module;
 601           # CONFIG_IP_NF_RAW is not set
 602           # CONFIG_IP_NF_ARPTABLES is not set
 603           # end of IP: Netfilter Configuration
 604
 605           #
 606           # IPv6: Netfilter Configuration
 607           #
 608           NF_SOCKET_IPV6 = module;
 609           NF_TPROXY_IPV6 = module;
 610           NF_TABLES_IPV6 = yes;
 611           NFT_REJECT_IPV6 = module;
 612           NFT_DUP_IPV6 = module;
 613           NFT_FIB_IPV6 = module;
 614           NF_DUP_IPV6 = module;
 615           NF_REJECT_IPV6 = module;
 616           NF_LOG_IPV6 = module;
 617           IP6_NF_IPTABLES = module;
 618           IP6_NF_MATCH_AH = module;
 619           IP6_NF_MATCH_EUI64 = module;
 620           IP6_NF_MATCH_FRAG = module;
 621           IP6_NF_MATCH_OPTS = module;
 622           IP6_NF_MATCH_HL = module;
 623           IP6_NF_MATCH_IPV6HEADER = module;
 624           IP6_NF_MATCH_MH = module;
 625           IP6_NF_MATCH_RPFILTER = module;
 626           IP6_NF_MATCH_RT = module;
 627           IP6_NF_MATCH_SRH = module;
 628           IP6_NF_TARGET_HL = module;
 629           IP6_NF_FILTER = module;
 630           IP6_NF_TARGET_REJECT = module;
 631           IP6_NF_TARGET_SYNPROXY = module;
 632           IP6_NF_MANGLE = module;
 633           IP6_NF_RAW = module;
 634           IP6_NF_NAT = module;
 635           IP6_NF_TARGET_MASQUERADE = module;
 636           IP6_NF_TARGET_NPT = module;
 637           # end of IPv6: Netfilter Configuration
 638
 639           NF_DEFRAG_IPV6 = module;
 640
 641           #
 642           # Disabling
 643           #
 644           ADFS_FS = no;
 645           AFFS_FS = no;
 646           BEFS_FS = no;
 647           BFS_FS = no;
 648           BTRFS = no;
 649           BTRFS_FS = no;
 650           CEPH_FS = no;
 651           CIFS = no;
 652           CRAMFS = no;
 653           ECRYPT_FS = no;
 654           EFS_FS = no;
 655           EROFS_FS = no;
 656           EXT2_FS = no;
 657           EXT3_FS = no;
 658           F2FS_FS = lib.mkForce no;
 659           GFS2_FS = no;
 660           HFSPLUS_FS = no;
 661           HFS_FS = no;
 662           HPFS_FS = no;
 663           JFS_FS = no;
 664           MINIX_FS = no;
 665           NET_9P = no;
 666           NFSD = no;
 667           NFS_FS = no;
 668           NILFS2_FS = no;
 669           OMFS_FS = no;
 670           ORANGEFS_FS = no;
 671           QNX4FS_FS = no;
 672           QNX6FS_FS = no;
 673           REISERFS_FS = no;
 674           ROMFS_FS = no;
 675           SQUASHFS = no;
 676           SYSV_FS = no;
 677           UFS_FS = no;
 678           VXFS_FS = no;
 679           XFS_FS = no;
 680
 681           MISC_FILESYSTEMS = no;
 682
 683           DECNET = no;
 684           SCTP = no;
 685           RDS = no;
 686           DCCP = no;
 687           TIPC = no;
 688           CAIF = no;
 689           CEPH = no;
 690           VMW_SOCK = no;
 691           HSR = no;
 692           QRTR = no;
 693           MPI = no;
 694           RAID6 = no;
 695           STAGING = lib.mkForce no;
 696
 697           "6LOWPAN" = no;
 698           ARCNET = no;
 699           B53 = no;
 700           BATMAN_ADV = no;
 701           BT = no;
 702           CAN = no;
 703           COMEDI = no;
 704           DRM_STM = lib.mkForce no;
 705           DRM_PANEL = lib.mkForce no;
 706
 707           DRM_BRIDGE = no;
 708           DRM_PANEL_BRIDGE = no;
 709           DRM_CDNS_DSI = no;
 710           DRM_CHIPONE_ICN6211 = no;
 711           DRM_CHRONTEL_CH7033 = no;
 712           #DRM_DISPLAY_CONNECTOR = no;
 713           DRM_LONTIUM_LT8912B = no;
 714           DRM_LONTIUM_LT9611 = no;
 715           DRM_LONTIUM_LT9611UXC = no;
 716           DRM_ITE_IT66121 = no;
 717           DRM_LVDS_CODEC = no;
 718           DRM_MEGACHIPS_STDPXXXX_GE_B850V3_FW = no;
 719           DRM_NWL_MIPI_DSI = no;
 720           DRM_NXP_PTN3460 = no;
 721           DRM_PARADE_PS8622 = no;
 722           DRM_PARADE_PS8640 = no;
 723           DRM_SIL_SII8620 = no;
 724           DRM_SII902X = no;
 725           DRM_SII9234 = no;
 726           DRM_SIMPLE_BRIDGE = no;
 727           DRM_THINE_THC63LVD1024 = no;
 728           DRM_TOSHIBA_TC358762 = no;
 729           DRM_TOSHIBA_TC358764 = no;
 730           DRM_TOSHIBA_TC358767 = no;
 731           DRM_TOSHIBA_TC358768 = no;
 732           DRM_TOSHIBA_TC358775 = no;
 733           DRM_TI_TFP410 = no;
 734           DRM_TI_SN65DSI83 = no;
 735           DRM_TI_SN65DSI86 = no;
 736           DRM_TI_TPD12S015 = no;
 737           DRM_ANALOGIX_ANX6345 = no;
 738           DRM_ANALOGIX_ANX78XX = no;
 739           DRM_ANALOGIX_DP = no;
 740           DRM_ANALOGIX_ANX7625 = no;
 741           DRM_I2C_ADV7511 = no;
 742           DRM_I2C_ADV7511_CEC = no;
 743           DRM_CDNS_MHDP8546 = no;
 744           DRM_DW_HDMI = no;
 745           DRM_DW_HDMI_AHB_AUDIO = no;
 746           DRM_DW_HDMI_I2S_AUDIO = no;
 747           DRM_DW_HDMI_CEC = no;
 748           DRM_STI = no;
 749           DRM_IMX = no;
 750           DRM_IMX_PARALLEL_DISPLAY = no;
 751           DRM_IMX_TVE = no;
 752           DRM_IMX_LDB = no;
 753           DRM_IMX_HDMI = no;
 754           DRM_ETNAVIV = no;
 755           DRM_ETNAVIV_THERMAL = no;
 756           DRM_MXS = no;
 757           DRM_MXSFB = no;
 758           DRM_ARCPGU = no;
 759           DRM_GM12U320 = no;
 760           TINYDRM_HX8357D = no;
 761           TINYDRM_ILI9225 = no;
 762           TINYDRM_ILI9341 = no;
 763           TINYDRM_ILI9486 = no;
 764           TINYDRM_MI0283QT = no;
 765           TINYDRM_REPAPER = no;
 766           TINYDRM_ST7586 = no;
 767           TINYDRM_ST7735R = no;
 768           DRM_PL111 = no;
 769           DRM_TVE200 = no;
 770           DRM_LIMA = no;
 771           DRM_PANFROST = no;
 772           DRM_MCDE = no;
 773           DRM_TIDSS = no;
 774           DRM_GUD = no;
 775           DRM_EXPORT_FOR_TESTS = no;
 776           DRM_PANEL_ORIENTATION_QUIRKS = no;
 777           DRM_LIB_RANDOM = no;
 778
 779           INFINIBAND = no;
 780           INPUT_TOUCHSCREEN = no;
 781           MEDIA_ANALOG_TV_SUPPORT = lib.mkForce no;
 782           MEDIA_DIGITAL_TV_SUPPORT = lib.mkForce no;
 783           MEDIA_TUNER = no;
 784           MPLS = no;
 785           MPTCP = lib.mkForce no;
 786           NFC = no;
 787           NF_TABLES_BRIDGE = lib.mkForce no;
 788           NVME = no;
 789           OPENVSWITCH = no;
 790           PARAVIRT = lib.mkForce no;
 791           POWER_SUPPLY = no;
 792           USB_GSPCA = lib.mkForce no;
 793           VIDEO_STK1160_COMMON = lib.mkForce no;
 794           XEN = lib.mkForce no;
 795           #NVME_CORE = no;
 796         };
 797         features.debug = false;
 798         #ignoreConfigErrors = true;
 799       };
 800     });
 801   })
 802 ];
 803 boot.cleanTmpDir = true;
 804 boot.tmpOnTmpfs = lib.mkForce false;
 805 # TODO: is that needed?
 806 hardware.enableRedistributableFirmware = true;
 807 sdImage = {
 808   postBuildCommands = ''
 809     dd if=${pkgs.ubootCubieboard2}/u-boot-sunxi-with-spl.bin of=$img bs=1024 seek=8 conv=notrunc
 810   '';
 811   compressImage = true;
 812   expandOnBoot = true;
 813   firmwareSize = 1;
 814   populateFirmwareCommands = "";
 815   populateRootCommands = ''
 816     mkdir -p ./files/boot
 817     ${config.boot.loader.generic-extlinux-compatible.populateCmd} -c ${config.system.build.toplevel} -d ./files/boot
 818   '';
 819 };
 820 boot.loader.grub.enable = false;
 821 boot.loader.generic-extlinux-compatible.enable = true;
 822 # nix -L build .#nixosConfigurations.${hostName}.config.boot.kernelPackages.kernel.configfile
 823 boot.kernelPackages = lib.mkForce pkgs.linuxPackages_latest_Cubieboard2;
 824 boot.initrd.availableKernelModules = lib.mkForce [
 825   "mmc_block"
 826   "usbhid"
 827   "hid_generic"
 828   "hid_microsoft"
 829 ];
 830 }