infrastructure/machines/nixos/iso

ISO Installation

Once the iso is booted, there are several steps to take:

Partition the disk

Mount the partions

mount $rootDevice /mnt
mkdir /mnt/boot
mount $bootDevice /mnt/boot

swapon $swapDevice

nixos-generate-config --root /mnt

Setup the base configuration

export NIX="/mnt/etc/nixos/"

mv $NIX/configuration.nix $NIX/base-configuration.nix

Edit a new file configuration.nix with the following contents:

{ pkgs, ... }:

{
  imports = [ ./base-configuration.nix ];

  boot = {
    tmp.cleanOnBoot = true;
  };

  console.keyMap = "fr";

  time.timeZone = "Europe/Paris";

  environment.systemPackages = with pkgs; [
    neovim
    wget
    kitty.terminfo
  ];

  # Activate SSH and set the keys
  services.openssh = {
    enable = true;

    settings.PasswordAuthentication = false;
  };

  users.users.root.openssh.authorizedKeys.keyFiles = [ ./rootKeys ];
}

ZFS setup

If ZFS is to be installed (e.g. for large servers), add to the configuration:

  boot = {
    supportedFilesystems = [ "zfs" ];
    zfs.forceImportRoot = false;
    zfs.extraPools = [
      ...
    ];
  };

  networking.hostId = ...;

Where the list of pools to include is obtained with:

zpool list -Ho name | sed 's/^/"/;s/$/"/'

and the host id with:

head -c4 /dev/urandom | od -A none -t x4 | sed 's/ //'

Setup the network configuration

Add the network configuration:

  networking = {
    hostName = "${name}";
    domain = "${site}.infra.dgnum.eu";

    useNetworkd = true;
  };

  systemd.network.networks = {
    "10-${interface}" = {
      name = ${interface};
      address = [ "${address}/${prefix}" ];
      routes = [ { Gateway = "..." ; GatewayOnLink = true; } ];
      dns = [ ... ];
    };
  };

If the default DNS are accessible, set them to:

[
  "1.1.1.1#cloudflare-dns.com"
  "8.8.8.8#dns.google"
  "1.0.0.1#cloudflare-dns.com"
  "8.8.4.4#dns.google"
]

Otherwise (in Jourdan especially), set them to the local DNS.

Copy the ssh keys

cp /etc/ssh/authorized_keys.d/root $NIX/rootKeys

Perform the installation

nixos-install