Julien Malka
d05fcb7e2c
Some checks failed
Check meta / check_dns (push) Failing after 19s
Check meta / check_meta (push) Successful in 20s
build configuration / build_and_cache_storage01 (push) Failing after 35s
build configuration / build_and_cache_compute01 (push) Failing after 36s
build configuration / build_and_cache_rescue01 (push) Failing after 33s
build configuration / build_and_cache_geo01 (push) Failing after 32s
build configuration / build_and_cache_geo02 (push) Failing after 31s
build configuration / build_and_cache_vault01 (push) Failing after 33s
build configuration / build_and_cache_web01 (push) Failing after 32s
build configuration / build_and_cache_web02 (push) Failing after 33s
lint / check (push) Failing after 28s
build configuration / build_and_cache_krz01 (push) Failing after 1m55s
build configuration / build_and_cache_bridge01 (push) Failing after 33s
149 lines
2.7 KiB
Bash
149 lines
2.7 KiB
Bash
bootDevice=
|
|
rootDevice=
|
|
|
|
domain="par01.infra.dgnum.eu"
|
|
hostname="dgn0x"
|
|
|
|
hasZFS=
|
|
|
|
while [ "$#" -gt 0 ]; do
|
|
i="$1"
|
|
shift 1
|
|
case "$i" in
|
|
--root)
|
|
rootDevice="$1"
|
|
shift 1
|
|
;;
|
|
--boot)
|
|
bootDevice="$1"
|
|
shift 1
|
|
;;
|
|
--swap)
|
|
swapDevice="$1"
|
|
shift 1
|
|
;;
|
|
--domain)
|
|
domain="$1"
|
|
shift 1
|
|
;;
|
|
--hostname)
|
|
hostname="$1"
|
|
shift 1
|
|
;;
|
|
--with-zfs)
|
|
hasZFS="1"
|
|
;;
|
|
*)
|
|
echo "$0: unknown option \`$i'"
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
if [ -z "$bootDevice" ]; then
|
|
echo "Missing boot partition"
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$rootDevice" ]; then
|
|
echo "Missing root partition"
|
|
exit 1
|
|
fi
|
|
|
|
# Mount the partitions to where they should be
|
|
mount "$rootDevice" /mnt
|
|
mkdir /mnt/boot
|
|
|
|
mount "$bootDevice" /mnt/boot
|
|
|
|
if [ -n "$swapDevice" ]; then
|
|
swapon "$swapDevice"
|
|
fi
|
|
|
|
# Generate configration
|
|
nixos-generate-config --root /mnt
|
|
|
|
NIX="/mnt/etc/nixos/"
|
|
|
|
# Setup our own files
|
|
mv $NIX/configuration.nix $NIX/base-configuration.nix
|
|
|
|
cat <<EOF > $NIX/dgnum-server.nix
|
|
{ ... }: {
|
|
services.nscd.enableNsncd = false;
|
|
programs.bash.promptInit = ''
|
|
# Provide a nice prompt if the terminal supports it.
|
|
if [ "\$TERM" != "dumb" ] || [ -n "\$INSIDE_EMACS" ]; then
|
|
PROMPT_COLOR="1;31m"
|
|
((UID)) && PROMPT_COLOR="1;32m"
|
|
if [ -n "\$INSIDE_EMACS" ] || [ "\$TERM" = "eterm" ] || [ "\$TERM" = "eterm-color" ]; then
|
|
# Emacs term mode doesn't support xterm title escape sequence (\e]0;)
|
|
PS1="\n\[\033[\$PROMPT_COLOR\][\u@\$(hostname -f):\w]\\\$\[\033[0m\] "
|
|
else
|
|
PS1="\n\[\033[\$PROMPT_COLOR\][\[\e]0;\u@\H: \w\a\]\u@\$(hostname -f):\w]\\\$\[\033[0m\] "
|
|
fi
|
|
if test "\$TERM" = "xterm"; then
|
|
PS1="\[\033]2;\$(hostname -f):\u:\w\007\]\$PS1"
|
|
fi
|
|
fi
|
|
'';
|
|
}
|
|
EOF
|
|
|
|
cat <<EOF > $NIX/configuration.nix
|
|
{ pkgs, ... }: {
|
|
imports = [
|
|
./base-configuration.nix
|
|
./dgnum-server.nix
|
|
$(if [ -n "$hasZFS" ]; then echo './zfs.nix'; fi)
|
|
];
|
|
|
|
boot.tmp.cleanOnBoot = true;
|
|
|
|
console.keyMap = "fr";
|
|
|
|
time.timeZone = "Europe/Paris";
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
vim
|
|
wget
|
|
kitty.terminfo
|
|
];
|
|
|
|
networking = {
|
|
hostName = "$hostname";
|
|
domain = "$domain";
|
|
};
|
|
|
|
# Activate SSH and set the keys
|
|
services.openssh = {
|
|
enable = true;
|
|
|
|
settings.PasswordAuthentication = false;
|
|
};
|
|
|
|
users.users.root.openssh.authorizedKeys.keyFiles = [ ./rootKeys ];
|
|
}
|
|
EOF
|
|
|
|
if [ -n "$hasZFS" ]; then
|
|
cat <<EOF > $NIX/zfs.nix
|
|
{ ... }: {
|
|
boot = {
|
|
supportedFilesystems = [ "zfs" ];
|
|
zfs.forceImportRoot = false;
|
|
zfs.extraPools = [
|
|
$(zpool list -Ho name | sed 's/^/"/;s/$/"/')
|
|
];
|
|
};
|
|
|
|
networking.hostId = "$(head -c4 /dev/urandom | od -A none -t x4 | sed 's/ //')";
|
|
}
|
|
EOF
|
|
fi
|
|
|
|
# Copy the keys
|
|
cp /etc/ssh/authorized_keys.d/root $NIX/rootKeys
|
|
|
|
# Perform the installation
|
|
nixos-install
|