Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/LEXUGE/nixos
A fully automated replicable nixos configuration set
https://github.com/LEXUGE/nixos
livecd nix-flake nixos-configuration
Last synced: about 2 months ago
JSON representation
A fully automated replicable nixos configuration set
- Host: GitHub
- URL: https://github.com/LEXUGE/nixos
- Owner: LEXUGE
- License: gpl-3.0
- Archived: true
- Created: 2020-02-19T08:57:54.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2022-11-05T16:53:52.000Z (almost 2 years ago)
- Last Synced: 2024-05-31T08:35:41.799Z (4 months ago)
- Topics: livecd, nix-flake, nixos-configuration
- Language: Nix
- Homepage:
- Size: 1.3 MB
- Stars: 112
- Watchers: 6
- Forks: 5
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# NixOS
  
**This repo is deprecated. See my new config at [flake](https://github.com/LEXUGE/flake/)**
A fully automated replicable nixos configuration flake that provides re-usable modules, and pre-configured system configuration.
[CI Channel](https://t.me/harry_nixosci_channel)
# Features
- A customized LiveCD ISO that you can try environment out and speed up your installation!
- Full-disk encryption including `/boot`. Support hibernate.
- An almost automated one-liner installation script.
- Transparent proxy and de-polluted DNS server using Clash and [netkit.nix flake](https://github.com/icebox-nix/netkit.nix) (support shadowsocks, Vmess, trojan). rules are written in order to maximize the performance.
- CapsLock as Ctrl! No emacs pinky anymore! (Surely I am
an emacs user).
- zsh with oh-my-zsh builtin, in addition to a git plugin which makes your life
easier.
- GTK with builtin dark variant.
# How do I install pre-configured system configuration?
[Download](https://github.com/LEXUGE/nixos/releases) and boot in *customized* LiveCD, and then:
``
sudo install-script
``
Follow the instructions and there you go. Above installation script will automatically install ThinkPad X1 Carbon 7th Gen specified configuration, but it should be fine for modern laptops.
## Notes
If you are on a NVMe SSD, use `sudo install-script -n` instead.
If you are **outside** of Mainland China, please edit the `configuration.nix` to use official binary cache only instead of TUNA's. You may also need to adapt the `binaryCaches` setting in `system/options.nix` to your own network.
See [wiki page](https://github.com/LEXUGE/nixos/wiki) for details.
# Security details
As for me, I am on my best to ensure that the system is convenient to use and secure. But here are some concerns:
- `services.fstrim.enable` is set to `true` which means that attacker may be able to perceive the data usage of the fully encrypted disk.
- There is a keyfile added to `/` partition encryption in order to eliminate the twice keying in of the LUKS passphrase.
# How do I re-use parts of it?
I have kept "stealing" in mind while I am writing the whole configuration. Use `nix flake show 'github:LEXUGE/nixos'` to see what are available. For example,
```
github:LEXUGE/nixos/dd59c772a9bd0503da3c775427bbfed64d6dfc61
│ ├───ash-profile: NixOS module
│ └───x-os: NixOS module
```
- `ash-profile` is my user space configuration (stuff like zsh, git, emacs config, etc).
- `x-os` my universal core system config.
Also, you can check out related flake repos ([netkit.nix](https://github.com/icebox-nix/netkit.nix), [std](https://github.com/icebox-nix/std)) which I use a lot here as well.
# CI
I use GitHub Actions here to build LiveCD actions third times a week (with all flake inputs up-to-date). This means by using the latest ISO image, you are likely to copy a trunk of stuff directly from CD (which is good because you don't need to download them!). After every successful build, my telegram bot would post newly-built release to the [CI telegram channel](https://t.me/harry_nixosci_channel). To save storage that others could otherwise use, only last three images are kept.
# See also
- [netkit.nix flake](https://github.com/icebox-nix/netkit.nix): Verstile tools for advanced networking scenarios in NixOS, including Clash, wifi-to-wifi hotspot, on demand minecraft server, frpc modules.
- [std](https://github.com/icebox-nix/std): Standard library used by my flakes.
- [iceberg](https://github.com/icebox-nix/iceberg): My personal package collection. Currently, it includes Wolfram Engine package and modules.
# Acknowledgments
Thanks to following repositories:
- [Jollheef - localhost](https://github.com/jollheef/localhost). It inspired me
the general structure of the config and how to use home-manager.
- [Ninlives - nixos-config](https://github.com/Ninlives/nixos-config). It
inspired me to implement the transparent proxy functionality.
- [nrdxp - nixflk](https://github.com/nrdxp/nixflk/). It helps me to implement the customized ISO building.
- [abcdw - rde](https://github.com/abcdw/rde/). Installation techniques.