blob: c248fcf8db96b04df4434b2546d4b8e8873d7479 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
{ config, lib, pkgs, modulesPath, ... }:
{
boot = {
loader.grub = {
enable = true;
zfsSupport = true;
efiSupport = true;
efiInstallAsRemovable = true;
mirroredBoots = [
{ devices = [ "nodev" ]; path = "/boot"; }
];
};
initrd = {
availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ];
kernelModules = [ ];
#TODO: re-enable impermanence
# postDeviceCommands = lib.mkAfter ''
# zfs rollback -r zpool/root@blank && zfs rollback -r zpool/home@blank
# '';
postMountCommands = lib.mkAfter ''
chmod u=rw,g=,o= /secrets
'';
};
kernelModules = [ "kvm-intel" ];
extraModulePackages = [ ];
supportedFilesystems = [ "ntfs" ];
};
fileSystems = {
"/" = { fsType = "zfs"; neededForBoot = true; device = "zpool/root"; };
"/nix" = { fsType = "zfs"; neededForBoot = true; device = "zpool/nix"; };
"/home" = { fsType = "zfs"; neededForBoot = true; device = "zpool/home"; };
"/persist" = { fsType = "zfs"; neededForBoot = true; device = "zpool/persist"; };
"/secrets" = { fsType = "zfs"; neededForBoot = true; device = "zpool/secrets"; };
"/boot" = { fsType = "vfat"; device = "/dev/disk/by-uuid/DF61-E3BD"; };
"/mnt/old" = { fsType = "ext4"; device = "/dev/disk/by-label/box"; };
};
swapDevices = [ ];
hardware.enableRedistributableFirmware = true;
hardware.cpu.intel.updateMicrocode = true;
nixpkgs.hostPlatform = "x86_64-linux";
}
|