feat(iso): Add README
All checks were successful
Check meta / check_meta (pull_request) Successful in 21s
Check meta / check_dns (pull_request) Successful in 21s
Check workflows / check_workflows (push) Successful in 22s
Check workflows / check_workflows (pull_request) Successful in 28s
Build all the nodes / netaccess01 (pull_request) Successful in 31s
Build all the nodes / netcore01 (pull_request) Successful in 32s
Build the shell / build-shell (pull_request) Successful in 31s
Build all the nodes / netcore02 (pull_request) Successful in 35s
Build all the nodes / netcore00 (pull_request) Successful in 35s
Run pre-commit on all files / pre-commit (pull_request) Successful in 36s
Build all the nodes / ap01 (pull_request) Successful in 47s
Build all the nodes / bridge01 (pull_request) Successful in 1m5s
Build all the nodes / hypervisor02 (pull_request) Successful in 1m10s
Build all the nodes / build01 (pull_request) Successful in 1m13s
Build all the nodes / geo01 (pull_request) Successful in 1m19s
Build all the nodes / hypervisor01 (pull_request) Successful in 1m23s
Build all the nodes / tower01 (pull_request) Successful in 1m29s
Build all the nodes / storage01 (pull_request) Successful in 1m34s
Build all the nodes / geo02 (pull_request) Successful in 1m39s
Build all the nodes / hypervisor03 (pull_request) Successful in 1m39s
Build all the nodes / cof02 (pull_request) Successful in 1m41s
Build all the nodes / web02 (pull_request) Successful in 1m44s
Build all the nodes / vault01 (pull_request) Successful in 1m48s
Build all the nodes / rescue01 (pull_request) Successful in 1m50s
Build all the nodes / web03 (pull_request) Successful in 1m50s
Build all the nodes / compute01 (pull_request) Successful in 2m2s
Build all the nodes / iso (pull_request) Successful in 2m3s
Build all the nodes / web01 (pull_request) Successful in 2m4s
Check meta / check_meta (push) Successful in 18s
Check meta / check_dns (push) Successful in 23s
Build the shell / build-shell (push) Successful in 32s
Build all the nodes / netcore02 (push) Successful in 33s
Run pre-commit on all files / pre-commit (push) Successful in 32s
Build all the nodes / netaccess01 (push) Successful in 33s
Build all the nodes / netcore00 (push) Successful in 33s
Build all the nodes / netcore01 (push) Successful in 33s
Build all the nodes / ap01 (push) Successful in 47s
Build all the nodes / build01 (push) Successful in 1m3s
Build all the nodes / geo01 (push) Successful in 1m10s
Build all the nodes / bridge01 (push) Successful in 1m11s
Build all the nodes / hypervisor02 (push) Successful in 1m11s
Build all the nodes / geo02 (push) Successful in 1m26s
Build all the nodes / web02 (push) Successful in 1m30s
Build all the nodes / storage01 (push) Successful in 1m32s
Build all the nodes / hypervisor01 (push) Successful in 1m36s
Build all the nodes / hypervisor03 (push) Successful in 1m40s
Build all the nodes / web03 (push) Successful in 1m44s
Build all the nodes / iso (push) Successful in 1m49s
Build all the nodes / compute01 (push) Successful in 1m49s
Build all the nodes / rescue01 (push) Successful in 1m49s
Build all the nodes / tower01 (push) Successful in 1m54s
Build all the nodes / cof02 (push) Successful in 2m2s
Build all the nodes / vault01 (push) Successful in 2m8s
Build all the nodes / web01 (push) Successful in 2m43s

This commit is contained in:
Tom Hubrecht 2025-04-25 14:40:06 +02:00
parent 189b1357dd
commit ea27842782
Signed by: thubrecht
SSH key fingerprint: SHA256:r+nK/SIcWlJ0zFZJGHtlAoRwq1Rm+WcKAm5ADYMoQPc

View file

@ -0,0 +1,139 @@
<!--
SPDX-FileCopyrightText: 2025 Tom Hubrecht <tom.hubrecht@dgnum.eu>
SPDX-License-Identifier: EUPL-1.2
-->
# ISO Installation
Once the iso is booted, there are several steps to take:
## Partition the disk
## Mount the partions
```bash
mount $rootDevice /mnt
mkdir /mnt/boot
mount $bootDevice /mnt/boot
swapon $swapDevice
nixos-generate-config --root /mnt
```
## Setup the base configuration
```bash
export NIX="/mnt/etc/nixos/"
mv $NIX/configuration.nix $NIX/base-configuration.nix
```
Edit a new file `configuration.nix` with the following contents:
```nix
{ pkgs, ... }:
{
imports = [ ./base-configuration.nix ];
boot = {
tmp.cleanOnBoot = true;
};
console.keyMap = "fr";
time.timeZone = "Europe/Paris";
environment.systemPackages = with pkgs; [
neovim
wget
kitty.terminfo
];
# Activate SSH and set the keys
services.openssh = {
enable = true;
settings.PasswordAuthentication = false;
};
users.users.root.openssh.authorizedKeys.keyFiles = [ ./rootKeys ];
}
```
### ZFS setup
If ZFS is to be installed (e.g. for large servers), add to the configuration:
```nix
boot = {
supportedFilesystems = [ "zfs" ];
zfs.forceImportRoot = false;
zfs.extraPools = [
...
];
};
networking.hostId = ...;
```
Where the list of pools to include is obtained with:
```bash
zpool list -Ho name | sed 's/^/"/;s/$/"/'
```
and the host id with:
```bash
head -c4 /dev/urandom | od -A none -t x4 | sed 's/ //'
```
## Setup the network configuration
Add the network configuration:
```nix
networking = {
hostName = "${name}";
domain = "${site}.infra.dgnum.eu";
useNetworkd = true;
};
systemd.network.networks = {
"10-${interface}" = {
name = ${interface};
address = [ "${address}/${prefix}" ];
routes = [ { Gateway = "..." ; GatewayOnLink = true; } ];
dns = [ ... ];
};
};
```
If the default DNS are accessible, set them to:
```nix
[
"1.1.1.1#cloudflare-dns.com"
"8.8.8.8#dns.google"
"1.0.0.1#cloudflare-dns.com"
"8.8.4.4#dns.google"
]
```
Otherwise (in Jourdan especially), set them to the local DNS.
## Copy the ssh keys
```bash
cp /etc/ssh/authorized_keys.d/root $NIX/rootKeys
```
## Perform the installation
```bash
nixos-install
```