harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
my nix configs
103 commits 2 branches 0 tags 9.7 MiB
Nix 95.6%
Shell 4.4%
Find a file
Harald Hoyer d5f688f7e9 feat: Add 'wheel' to default user extraGroups 
The user's extraGroups in the NixOS module now contains 'wheel' by default. This change provides the user with more privileges. Consequently, 'wheel' has been removed from the SGX-Attic's 'user.extraGroups' as it became redundant.
2024-07-05 16:13:48 +02:00
.secrets feat: Update hetzner runner token and modify its timestamp 2024-06-27 13:07:18 +02:00
homes chore: remove nixsgx.cachix.org 2024-07-05 16:09:37 +02:00
lib A new start 2024-03-21 15:00:36 +01:00
modules feat: Add 'wheel' to default user extraGroups 2024-07-05 16:13:48 +02:00
overlays A new start 2024-03-21 15:00:36 +01:00
packages A new start 2024-03-21 15:00:36 +01:00
systems feat: Add 'wheel' to default user extraGroups 2024-07-05 16:13:48 +02:00
.gitattributes A new start 2024-03-21 15:00:36 +01:00
.gitignore gitignore result 2024-03-21 15:24:51 +01:00
.sops.yaml A new start 2024-03-21 15:00:36 +01:00
flake.lock feat: Update dependencies in flake.lock 2024-06-28 11:04:07 +02:00
flake.nix feat: Add atticd service to sgx-nixos system 2024-06-28 11:01:44 +02:00
README.md docs: Update README install instructions 2024-06-27 16:30:54 +02:00

README.md

Install a system via nixos-anywhere

❯ nix run github:numtide/nixos-anywhere -- \
  --flake 'git+https://git.hoyer.xyz/harald/nixcfg'.#hostname \
  root@hostname --no-reboot --tty -i $HOME/.ssh/id_ed25519
... enter disk password
❯ ssh -t root@hostname systemd-cryptenroll /dev/luksdev --wipe-slot=tpm2 --tpm2-device=auto --tpm2-pcrs=1,15

nixos-rebuild remote git flake

❯ sudo nixos-rebuild boot --refresh --flake git+https://git.hoyer.xyz/harald/nixcfg

home-manager remote git flake

❯ nix --refresh run 'git+https://git.hoyer.xyz/harald/nixcfg' -- \
  switch -b backup --flake 'git+https://git.hoyer.xyz/harald/nixcfg'

command-not-found unable to open database

❯ sudo nix-channel --update