apps = forAllSystems ({ pkgs, system, ... }:
with builtins;
mapAttrs
- (hostName: { config, ... }:
+ (hostName: { config, pkgs, ... }:
let
inherit (config.system) build;
target = "\"\${TARGET:-root@${config.networking.hostName}.wg}\"";
'');
# Example: nix run .#carotte.install-sd
# DELETEME: quite useless, better to use nixos-install
- "install-sd" = scriptApp "install-sd" [ zstd ] ''
+ "install-sd" = scriptApp "install-sd" [ pkgs.zstd ] ''
set -o pipefail
nix-store --add-root hosts/${hostName}.root --indirect --realise ${build.sdImage}
unzstd --stdout ${build.sdImage}/sd-image/*.img.zst |
{
install.substituteOnDestination = false;
}
- ../nixos/defaults.nix
+ (inputs.julm-nix + "/nixos/profiles/builder.nix")
+ (inputs.julm-nix + "/nixos/profiles/lang-fr.nix")
+ (inputs.julm-nix + "/nixos/profiles/networking/remote.nix")
../nixos/profiles/systems/debug.nix
#carotte/fileSystems.nix
carotte/hardware.nix
- carotte/hostapd.nix
+ #carotte/hostapd.nix
carotte/networking.nix
carotte/security.nix
carotte/system.nix
carotte/users.nix
- (inputs.secrets + "/hosts/${hostName}/users.nix")
+ #(inputs.secrets + "/hosts/${hostName}/users.nix")
#carotte/xserver.nix
];
}
{ hostName, ... }:
{
imports = [
- networking/wireguard/intranet.nix
+ #networking/wireguard/intranet.nix
];
networking = {
hostName = hostName;
{
security.lockKernelModules = false;
security.virtualisation.flushL1DataCache = lib.mkForce null;
+ /*
security.gnupg.agent = {
keyring."C7BCEA3D090956E7D51E94ADFF53191D9FA89552" = {
passwordGpg = "gnupg/root.gpg";
# This is for removing remote gpg-agent's socket
StreamLocalBindUnlink yes
'';
+ */
}
"console=tty0"
];
boot.kernelPatches = [
+ /*
{
name = "0001-core_pattern-fix-too-small-CORENAME_MAX_SIZE";
patch = ../../../nixpkgs/patches/linux/0001-core_pattern-fix-too-small-CORENAME_MAX_SIZE.patch;
extraConfig = ''
'';
}
+ */
];
#nixpkgs.config.allowUnfree = true;
- nixpkgs.crossSystem = lib.systems.examples.armv7l-hf-multiplatform;
+ #nixpkgs.crossSystem = lib.systems.examples.armv7l-hf-multiplatform;
nixpkgs.overlays = [
(_final: super: {
# https://linux-sunxi.org/Mali_Open_Source_Driver#Configuration_and_Build
mesa = super.mesa.override {
- driDrivers = [ ];
+ #driDrivers = [ ];
eglPlatforms = [ "x11" ];
enableGalliumNine = false;
galliumDrivers = [ "lima" "panfrost" "kmsro" "swrast" ];
DRM_PANEL_ORIENTATION_QUIRKS = no;
DRM_LIB_RANDOM = no;
- INFINIBAND = no;
+ INFINIBAND = lib.mkForce no;
INPUT_TOUCHSCREEN = no;
MEDIA_ANALOG_TV_SUPPORT = lib.mkForce no;
MEDIA_DIGITAL_TV_SUPPORT = lib.mkForce no;
});
})
];
- boot.cleanTmpDir = true;
- boot.tmpOnTmpfs = lib.mkForce false;
+ boot.tmp.cleanOnBoot = true;
+ boot.tmp.useTmpfs = lib.mkForce false;
# TODO: is that needed?
hardware.enableRedistributableFirmware = true;
sdImage = {
(final: super: {
gnupg = super.gnupg.override {
# Wants polkit which wants spidermonkey (slow to compile)
- pcsclite = null;
+ pcsclite = final.hello;
};
systemd = super.systemd.override {
# Wants tpm2-tss which does not cross-compile
withEfi = false;
};
# https://logs.nix.samueldr.com/nixos/2019-07-23#2416964;
- xorg = super.xorg.overrideScope' (_ofinal: _osuper: {
+ xorg = super.xorg.overrideScope (_ofinal: _osuper: {
fontadobe100dpi = final.hello;
fontadobe75dpi = final.hello;
fontcursormisc = final.hello;