Skip to content

Latest commit

 

History

History
127 lines (99 loc) · 3.57 KB

README.md

File metadata and controls

127 lines (99 loc) · 3.57 KB
Raw

Bootstrapping NixOS on 'home' VM

'home' is a qemu VM with the following configuration:

  • CPU:
    • 1 CPU
    • 2 Cores
  • Memory:
    • 4GB
  • Disk:
    • 100GB
    • VirtIO
  • NIC:
    • VirtIO

Proxmox VM config

agent: 1
bios: ovmf
boot: order=scsi0;ide2;net0
cores: 4
cpu: host
efidisk0: ssdtank-proxmox:vm-200-disk-0,efitype=4m,size=1M
ide2: tank-proxmox:iso/latest-nixos-minimal-x86_64-linux.iso,media=cdrom,size=1094512K
machine: q35
memory: 8192
meta: creation-qemu=8.1.5,ctime=1730119622
name: home
net0: virtio=52:54:00:b5:87:3a,bridge=br0,firewall=1
numa: 0
onboot: 1
ostype: l26
scsi0: ssdtank-proxmox:vm-200-disk-1,discard=on,iothread=1,size=100G,ssd=1
scsihw: virtio-scsi-single
sockets: 1

It is installed with the NixOS iso installation media. These are the steps initially taken to install NixOS, though once the config is setup it can just be re-used for future re-installs if needed. This assumes you have booted into a NixOS install image from a USB stick and that we will be using systemd-boot. Following the manual installation steps:

sudo -i

Disk Setup

Creates 3 partitions on the virtual drive, one for EFI Boot, one for swap, and one for the primary partition.

parted /dev/sda -- mklabel gpt
parted /dev/sda -- mkpart ESP fat32 1MB 512MB
parted /dev/sda -- mkpart primary linux-swap -8GB 100%
parted /dev/sda -- mkpart primary 512MB -8GB
parted /dev/sda -- set 1 esp on
mkfs.ext4 -L nixos /dev/sda3
mkswap -L swap /dev/sda2
mkfs.fat -F 32 -n boot /dev/sda1
mount /dev/disk/by-label/nixos /mnt
mkdir -p /mnt/boot
mount /dev/disk/by-label/boot /mnt/boot
swapon /dev/sda2

NixOS Install

Generate a config based on the currently detected hardware and disks.

nixos-generate-config --root /mnt

Next open the hardware and configuration nix files (/mnt/etc/nixos/configuration.nix & /mnt/etc/nixos/hardware-configuration.nix) to clean out comments and set basic information like hostname. Most of the other items are set by this configuration.

Now, lets install:

cd /mnt
sudo nixos-install
> <root password when prompted>
sudo reboot

First Run

Here is where I will normally try and setup all the hardware and import the profiles/modules I want from this repo. Since I use the minimal install, I will kick things off like so:

nix-shell -p git vim
cd /etc/nixos
# these should no longer be needed if we already have the proper configurations already defined in the repo
mv configuration.nix hardware-configuration.nix /tmp/
git clone https://github.com/billimek/dotfiles.git .
nixos-rebuild switch
chown -R jeff:users .
reboot

Now it should be possible to login as the defined non-root user (i.e. jeff). Be mindful that there is no password set for this user and only ssh-style key logins work. May want to revisit this decision for situations where an ssh key is not available.

I will then be able to update the nixos-configuration repo in github and just pull/rebuild as needed on the machine.

sudo sh -c "cd /etc/nixos && git pull && nixos-rebuild switch"

Things that need secrets

1Password bootstrapping auth

eval $(op signin --account <redacted>.1password.com)

atuin login

atuin login --username $(op item get "atuin" --fields label=username) --password $(op item get "atuin" --fields label=password) --key "$(op item get "atuin" --fields label=key)"
atuin import auto
atuin sync -f

kubeconfig

mkdir -p ~/.kube
op document get --vault kubernetes 'k3s.yaml' --out-file ~/.kube/config