WIP : rpi deployment

Author: Tchekda

.gitignore

@@ -2,4 +2,5 @@ home-manager/hspecter/*-vpn
 home-manager/hspecter/result
 hspecter/wg*
 hspecter/smb-secrets
-result
+result
+llitt/peers

home-manager/desktop-packages.nix

@@ -1,6 +1,9 @@
 { pkgs, unstable, ... }:
+let
+  unstable = import ../unstable.nix { config.allowUnfree = true; };
+in
 {
-  packages = with pkgs; [
+  home.packages = with pkgs; [
     # Dependencies
     feh
     unstable.flameshot

home-manager/home.nix

@@ -36,6 +36,8 @@ in
       maxCacheTtl = 7200;
     };
 
+
+
   };
 
 

home-manager/hspecter/default.nix

@@ -10,15 +10,10 @@ in
   imports = [
     ../home.nix
     ../battery.nix
+    ./packages.nix
+    ../desktop-packages.nix
   ];
 
-  home = {
-    packages = lib.mkMerge [ (import ../desktop-packages.nix { inherit pkgs unstable; }).packages (import ./packages.nix { inherit pkgs unstable; }).packages ];
-
-    # sessionVariables = {
-    #   LD_LIBRARY_PATH = "${pkgs.stdenv.cc.cc.lib}/lib:\${LD_LIBRARY_PATH}";
-    # };
-  };
 
 
   xsession.windowManager.i3 = import ../i3.nix { inherit pkgs lib; };
@@ -40,14 +35,14 @@ in
 
 
     fish = {
-      shellAbbrs = lib.mkMerge [
+      shellAbbrs =
         {
           deletec = "sudo openfortivpn -c /home/tchekda/nixos-configuration/home-manager/hspecter/deletec-vpn";
           ambition = "sudo openfortivpn -c /home/tchekda/nixos-configuration/home-manager/hspecter/ambition-vpn";
           nrs = "sudo nixos-rebuild -I \"nixos-config=/home/tchekda/nixos-configuration/hspecter/configuration.nix\" switch";
-          hms = "home-manager -f /home/tchekda/nixos-configuration/home-manager/home.nix switch";
-        }
-      ];
+          hms = "home-manager -f /home/tchekda/nixos-configuration/home-manager/hspecter/default.nix switch";
+        };
+
     };
 
 

home-manager/hspecter/packages.nix

@@ -1,4 +1,4 @@
-{ pkgs, unstable, ... }:
+{ pkgs, unstable, config, ... }:
 let
   curstomPHP8 = pkgs.php80.buildEnv {
     extraConfig =
@@ -7,10 +7,11 @@ let
     extensions = { enabled, all }: enabled ++ [ all.xdebug ];
   };
   m68k = pkgs.qt5.callPackage ./m68k.nix { };
+  unstable = import ../../unstable.nix { config.allowUnfree = true; };
 
 in
 {
-  packages = with pkgs; [
+  home.packages = with pkgs; [
     # Dev
     openfortivpn
     python39Packages.autopep8
@@ -39,7 +40,7 @@ in
     zoom-us
     evince
     filezilla
-    nixops
+    nixopsUnstable
 
     # Virtualisation
     virt-manager

home-manager/llitt/default.nix

@@ -0,0 +1,6 @@
+{ ... }:
+
+{
+  imports = [ ../home.nix ];
+
+}

hspecter/configuration.nix

@@ -45,6 +45,8 @@ in
       kernelModules = [ "amdgpu" ];
       availableKernelModules = [ "thinkpad_acpi" ];
     };
+
+    binfmt.emulatedSystems = [ "aarch64-linux" ];
   };
 
   fileSystems."/mnt/fbx" = {
@@ -226,13 +228,14 @@ in
           }
         ];
         levels = [
-          [ 0 0 55 ]
-          [ 1 50 60 ]
-          [ 2 55 65 ]
-          [ 3 60 70 ]
-          [ 6 65 75 ]
-          [ 7 70 80 ]
-          [ "level full-speed" 75 32767 ]
+          [ "level auto" 0 32767 ]
+          # [ 0 0 55 ]
+          # [ 1 50 60 ]
+          # [ 2 55 65 ]
+          # [ 3 60 70 ]
+          # [ 6 65 75 ]
+          # [ 7 70 80 ]
+          # [ "level full-speed" 75 32767 ]
         ];
       };
 

iso.nix

@@ -0,0 +1,38 @@
+# nix-build '<nixpkgs/nixos>' -A config.system.build.isoImage -I nixos-config=iso.nix
+
+{ config, pkgs, ... }:
+{
+  imports = [
+    <nixpkgs/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix>
+
+    # Provide an initial copy of the NixOS channel so that the user
+    # doesn't need to run "nix-channel --update" first.
+    <nixpkgs/nixos/modules/installer/cd-dvd/channel.nix>
+    ./tchekda_user.nix
+  ];
+
+  boot.kernelPackages = pkgs.linuxPackages_latest;
+
+  time.timeZone = "Europe/Paris";
+
+  networking = {
+    hostName = "iso";
+
+    dhcpcd.enable = true;
+
+    firewall.enable = false;
+  };
+
+  environment.systemPackages = with pkgs; [
+    wget
+    nano
+    git
+    htop
+    lnav
+  ];
+
+  systemd.services.sshd.wantedBy = pkgs.lib.mkForce [ "multi-user.target" ];
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDAavYBAIwKDDixRTBJbSHMpkCeN6OMfAMoypSVdYAgpY3OILAUj/HoIJp1uIiKlxJ+v4gLDPjaPWmPPiOW2O4EEiCTEV22DlhcFQZs7DY1Pf7WQnUW1g4PI35LUEWlBOghnB+D11ltU5odTBPVgu1HxNX6pbE1r2MLvox8xt+PHkqXvaPDX7QGPBuAAusK8trEUROObc6+umHPH1VeTK7H810kSGDy1JVPQgK28byh/yJcoHL53XGZ+nCYiuZVFfPmLofPP+LGzulGT2TwNcUiAA8Wv7skSNUdjzXJ4KRZlqIsYiey1vx0hq3+whfC3vLwMBvz90v0HTW+xtEnX4vqR4SeFfRaLpUXpY8rceICgo3XnBQyn/2NNpmbRIJWowK0ENA58psbxo4Z+2qa0is3XLvVc2yqcdd2dLRr+gk3qwEIRcY1m+oGw2u4kv4RkTvboVPTdQozUcTB5EfLKRPB3DnVwULIYbt3QJ5CnW+v+PqinHc2vmAeUaKOEwfufdE= tchekda@hspecter"
+  ];
+}