Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/lorenzleutgeb/nur
https://github.com/lorenzleutgeb/nur
Last synced: 26 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/lorenzleutgeb/nur
- Owner: lorenzleutgeb
- Created: 2014-07-25T23:48:07.000Z (over 10 years ago)
- Default Branch: main
- Last Pushed: 2024-09-12T17:39:14.000Z (about 2 months ago)
- Last Synced: 2024-09-13T06:53:51.251Z (about 2 months ago)
- Language: Nix
- Homepage:
- Size: 903 KB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Nix User Repository of Lorenz Leutgeb
This repo contains `*.nix` files for configuring machines and
user homes, as well as some custom packages and overlays.
## `os/host`
The naming scheme of files in `os/host` is based on
the contents of [`/etc/machine-id`][man-machine-id].
The following script illustrates the idea:
```sh
# This (re-)generates /etc/machine-id
systemd-machine-id-setup
# This function hashes /etc/machine-id, since it should be
# treated as a secret (according to the manpage).
function machine-hash {
nix-hash --type sha256 --base32 --flat /etc/machine-id
}
# Rebuild for current machine
nixos-rebuild switch --flake .#$(machine-hash)
```
## Setup Notes
### WSL
Use `wsl --import` to create the distro, then start it with `wsl --distribution`.
Copy `wsl.conf` from this repo to [`/etc/wsl.conf`](https://docs.microsoft.com/en-us/windows/wsl/wsl-config#configuration-settings-for-wslconf).
Configure Nix via `~/.config/nix/nix.conf`:
```
sandbox = false
use-sqlite-wal = false
filter-syscalls = false
experimental-features = nix-command flakes
```
Install Nix in single-user mode:
```
$ sh <(curl -L https://nixos.org/nix/install) --no-daemon
```
Allow unfree packages in `~/.config/nixpkgs/config.nix`:
```nix
{ allowUnfree = true; }
```
Install Home Manager, then switch:
```
$ home-manager -v switch --show-trace --impure --flake .#wsl
```
Create `/run/user/$UID`:
```
sudo mkdir /run/user/$UID
sudo chown $UID:$GID /run/user/$UID
sudo mount -t tmpfs -o size=4G,uid=$UID,gid=$GID /run/user/$UID
```
### Bluetooth
See [NixOS Wiki][wiki-bt]. Gist is:
```
$ bluetoothctl
power on
agent on
default-agent
scan on
pair $ADDR
connect $ADDR
```
#### Known Devices
| Address | Description |
|---------------------|-------------|
| `78:2B:64:CC:E4:40` | Headset |
| `CE:B5:52:D6:EA:8C` | Trackball |
### SSD Partitioning
`fdisk -c -u /dev/x`
https://www.thomas-krenn.com/de/wiki/Partition_Alignment
[man-machine-id]: https://man7.org/linux/man-pages/man5/machine-id.5.html
[wiki-bt]: https://nixos.wiki/wiki/Bluetooth
## Edge Router
### Tailscale
## FDE
```
# For secure boot:
sudo systemd-cryptenroll /dev/$DISK --tpm2-device=auto --tpm2-pcrs=0+2+7
# Without secure boot:
sudo systemd-cryptenroll /dev/$DISK --tpm2-device=auto --tpm2-pcrs=0
# Removing key:
systemd-cryptenroll /dev/... --wipe-slot=tpm2
# Info
sudo cryptsetup luksDump /dev/...
# Check TPM
tpm2_getcap -l
```