summaryrefslogtreecommitdiffstats
path: root/makefu/2configs/fs/sda-crypto-root-home.nix
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2019-05-15 16:10:14 +0200
committertv <tv@krebsco.de>2019-05-15 16:10:14 +0200
commit1ceae8b0e3f37b5d3a4b8ef52621f2959abaab8e (patch)
tree67d182fa8e62f01ed346714c615a64577fae1b66 /makefu/2configs/fs/sda-crypto-root-home.nix
parentdf6007c2eb3c6fab9106c3fc591fded7221b1708 (diff)
parentf541eae020a229b99afe531139be246f8aecb695 (diff)
Merge remote-tracking branch 'gum/master'
Diffstat (limited to 'makefu/2configs/fs/sda-crypto-root-home.nix')
-rw-r--r--makefu/2configs/fs/sda-crypto-root-home.nix26
1 files changed, 25 insertions, 1 deletions
diff --git a/makefu/2configs/fs/sda-crypto-root-home.nix b/makefu/2configs/fs/sda-crypto-root-home.nix
index e790ed6a8..4f0cf8c6b 100644
--- a/makefu/2configs/fs/sda-crypto-root-home.nix
+++ b/makefu/2configs/fs/sda-crypto-root-home.nix
@@ -8,7 +8,31 @@
# / (main-root)
# /home (main-home)
-with import <stockholm/lib>;
+# clean the boot sector:
+# dd if=/dev/zero of=/dev/sda count=2048
+# Installation Instruction on ISO:
+# fdisk /dev/sda
+ # boot 500M
+ # rest rest
+# cryptsetup luksFormat /dev/sda2
+# mkfs.ext4 -L nixboot /dev/sda1
+# cryptsetup luksOpen /dev/sda2 cryptoluks
+# pvcreate /dev/mapper/cryptoluks
+# vgcreate main /dev/mapper/cryptoluks
+# lvcreate -L 200Gib main -n root
+# lvcreate -L 800Gib main -n home
+# mkfs.ext4 /dev/main/root
+# mkfs.ext4 /dev/main/home
+# mount /dev/mapper/main-root /mnt
+# mkdir -p /mnt/{boot,home,var/src} /var/src
+# mount /dev/sda1 /mnt/boot
+# mount /dev/mapper/main-home /mnt/home
+# touch /mnt/var/src/.populate
+# mount -o bind /mnt/var/src /var/src
+# nix-channel --add https://nixos.org/channels/nixos-19.03 nixpkgs && # nix-channel --update
+# nix-env -iA nixpkgs.gitMinimal
+# (on deploy-host) $(nix-build ~/stockholm/makefu/krops.nix --no-out-link --argstr name x --argstr target 10.42.22.91 -A deploy --show-trace)
+# NIXOS_CONFIG=/var/src/nixos-config nixos-install -I /var/src --no-root-passwd --no-channel-copy
{
imports = [