{"id":13837923,"url":"https://github.com/LEXUGE/nixos","last_synced_at":"2025-07-10T19:31:16.272Z","repository":{"id":43760070,"uuid":"241575560","full_name":"LEXUGE/nixos","owner":"LEXUGE","description":"A fully automated replicable nixos configuration set","archived":true,"fork":false,"pushed_at":"2022-11-05T16:53:52.000Z","size":1364,"stargazers_count":111,"open_issues_count":1,"forks_count":5,"subscribers_count":6,"default_branch":"master","last_synced_at":"2024-08-05T15:06:36.266Z","etag":null,"topics":["livecd","nix-flake","nixos-configuration"],"latest_commit_sha":null,"homepage":"","language":"Nix","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/LEXUGE.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-02-19T08:57:54.000Z","updated_at":"2024-06-15T17:48:29.000Z","dependencies_parsed_at":"2022-09-13T00:34:17.260Z","dependency_job_id":null,"html_url":"https://github.com/LEXUGE/nixos","commit_stats":null,"previous_names":[],"tags_count":67,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LEXUGE%2Fnixos","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LEXUGE%2Fnixos/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LEXUGE%2Fnixos/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LEXUGE%2Fnixos/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/LEXUGE","download_url":"https://codeload.github.com/LEXUGE/nixos/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225653891,"owners_count":17502939,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["livecd","nix-flake","nixos-configuration"],"created_at":"2024-08-04T15:01:30.717Z","updated_at":"2024-11-21T00:31:26.803Z","avatar_url":"https://github.com/LEXUGE.png","language":"Nix","funding_links":[],"categories":["Nix"],"sub_categories":[],"readme":"# NixOS\n![Build customized NixOS LiveCD ISO](https://github.com/LEXUGE/nixos/workflows/Build%20customized%20NixOS%20LiveCD%20ISO/badge.svg) ![Nix Flake Check](https://github.com/LEXUGE/nixos/workflows/Nix%20Flake%20Check/badge.svg) ![Release status](https://img.shields.io/github/v/release/LEXUGE/nixos.svg)\n\n**This repo is deprecated. See my new config at [flake](https://github.com/LEXUGE/flake/)**\n\nA fully automated replicable nixos configuration flake that provides re-usable modules, and pre-configured system configuration.\n\n[CI Channel](https://t.me/harry_nixosci_channel)\n\n# Features\n- A customized LiveCD ISO that you can try environment out and speed up your installation!\n- Full-disk encryption including `/boot`. Support hibernate.\n- An almost automated one-liner installation script.\n- Transparent proxy and de-polluted DNS server using Clash and [netkit.nix flake](https://github.com/icebox-nix/netkit.nix) (support shadowsocks, Vmess, trojan). rules are written in order to maximize the performance.\n- \u003ckbd\u003eCapsLock\u003c/kbd\u003e as \u003ckbd\u003eCtrl\u003c/kbd\u003e! No emacs pinky anymore! (Surely I am\n  an emacs user).\n- zsh with oh-my-zsh builtin, in addition to a git plugin which makes your life\n  easier.\n- GTK with builtin dark variant.\n\n# How do I install pre-configured system configuration?\n[Download](https://github.com/LEXUGE/nixos/releases) and boot in *customized* LiveCD, and then:\n\n``\nsudo install-script\n``\n\nFollow the instructions and there you go. Above installation script will automatically install ThinkPad X1 Carbon 7th Gen specified configuration, but it should be fine for modern laptops.\n\n## Notes\nIf you are on a NVMe SSD, use `sudo install-script -n` instead.\n\nIf you are **outside** of Mainland China, please edit the `configuration.nix` to use official binary cache only instead of TUNA's. You may also need to adapt the `binaryCaches` setting in `system/options.nix` to your own network.\n\nSee [wiki page](https://github.com/LEXUGE/nixos/wiki) for details.\n\n# Security details\nAs for me, I am on my best to ensure that the system is convenient to use and secure. But here are some concerns:\n- `services.fstrim.enable` is set to `true` which means that attacker may be able to perceive the data usage of the fully encrypted disk.\n- There is a keyfile added to `/` partition encryption in order to eliminate the twice keying in of the LUKS passphrase.\n\n# How do I re-use parts of it?\nI have kept \"stealing\" in mind while I am writing the whole configuration. Use `nix flake show 'github:LEXUGE/nixos'` to see what are available. For example,\n```\ngithub:LEXUGE/nixos/dd59c772a9bd0503da3c775427bbfed64d6dfc61\n│   ├───ash-profile: NixOS module\n│   └───x-os: NixOS module\n```\n- `ash-profile` is my user space configuration (stuff like zsh, git, emacs config, etc).\n- `x-os` my universal core system config.\nAlso, you can check out related flake repos ([netkit.nix](https://github.com/icebox-nix/netkit.nix), [std](https://github.com/icebox-nix/std)) which I use a lot here as well.\n\n# CI\nI use GitHub Actions here to build LiveCD actions third times a week (with all flake inputs up-to-date). This means by using the latest ISO image, you are likely to copy a trunk of stuff directly from CD (which is good because you don't need to download them!). After every successful build, my telegram bot would post newly-built release to the [CI telegram channel](https://t.me/harry_nixosci_channel). To save storage that others could otherwise use, only last three images are kept.\n\n# See also\n- [netkit.nix flake](https://github.com/icebox-nix/netkit.nix): Verstile tools for advanced networking scenarios in NixOS, including Clash, wifi-to-wifi hotspot, on demand minecraft server, frpc modules.\n- [std](https://github.com/icebox-nix/std): Standard library used by my flakes.\n- [iceberg](https://github.com/icebox-nix/iceberg): My personal package collection. Currently, it includes Wolfram Engine package and modules.\n\n# Acknowledgments\nThanks to following repositories:\n- [Jollheef - localhost](https://github.com/jollheef/localhost). It inspired me\nthe general structure of the config and how to use home-manager.\n- [Ninlives - nixos-config](https://github.com/Ninlives/nixos-config). It\n  inspired me to implement the transparent proxy functionality.\n- [nrdxp - nixflk](https://github.com/nrdxp/nixflk/). It helps me to implement the customized ISO building.\n- [abcdw - rde](https://github.com/abcdw/rde/). Installation techniques.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FLEXUGE%2Fnixos","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FLEXUGE%2Fnixos","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FLEXUGE%2Fnixos/lists"}