forked from mitchellh/nixos-config
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Makefile
101 lines (88 loc) · 3.38 KB
/
Makefile
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
# Connectivity info for Linux VM
NIXADDR ?= unset
NIXPORT ?= 22
NIXUSER ?= mitchellh
# Settings
NIXBLOCKDEVICE ?= sda
# Get the path to this Makefile and directory
MAKEFILE_DIR := $(patsubst %/,%,$(dir $(abspath $(lastword $(MAKEFILE_LIST)))))
# The name of the nixosConfiguration in the flake
NIXNAME ?= vm-intel
# SSH options that are used. These aren't meant to be overridden but are
# reused a lot so we just store them up here.
SSH_OPTIONS=-o PubkeyAuthentication=no -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no
switch:
sudo NIXPKGS_ALLOW_UNSUPPORTED_SYSTEM=1 nixos-rebuild switch --flake ".#${NIXNAME}"
test:
sudo NIXPKGS_ALLOW_UNSUPPORTED_SYSTEM=1 nixos-rebuild test --flake ".#$(NIXNAME)"
# bootstrap a brand new VM. The VM should have NixOS ISO on the CD drive
# and just set the password of the root user to "root". This will install
# NixOS. After installing NixOS, you must reboot and set the root password
# for the next step.
#
# NOTE(mitchellh): I'm sure there is a way to do this and bootstrap all
# in one step but when I tried to merge them I got errors. One day.
vm/bootstrap0:
ssh $(SSH_OPTIONS) -p$(NIXPORT) root@$(NIXADDR) " \
parted /dev/$(NIXBLOCKDEVICE) -- mklabel gpt; \
parted /dev/$(NIXBLOCKDEVICE) -- mkpart primary 512MiB -8GiB; \
parted /dev/$(NIXBLOCKDEVICE) -- mkpart primary linux-swap -8GiB 100\%; \
parted /dev/$(NIXBLOCKDEVICE) -- mkpart ESP fat32 1MiB 512MiB; \
parted /dev/$(NIXBLOCKDEVICE) -- set 3 esp on; \
mkfs.ext4 -L nixos /dev/$(NIXBLOCKDEVICE)1; \
mkswap -L swap /dev/$(NIXBLOCKDEVICE)2; \
mkfs.fat -F 32 -n boot /dev/$(NIXBLOCKDEVICE)3; \
mount /dev/disk/by-label/nixos /mnt; \
mkdir -p /mnt/boot; \
mount /dev/disk/by-label/boot /mnt/boot; \
nixos-generate-config --root /mnt; \
sed --in-place '/system\.stateVersion = .*/a \
nix.package = pkgs.nixUnstable;\n \
nix.extraOptions = \"experimental-features = nix-command flakes\";\n \
services.openssh.enable = true;\n \
services.openssh.passwordAuthentication = true;\n \
services.openssh.permitRootLogin = \"yes\";\n \
users.users.root.initialPassword = \"root\";\n \
' /mnt/etc/nixos/configuration.nix; \
nixos-install --no-root-passwd; \
reboot; \
"
# after bootstrap0, run this to finalize. After this, do everything else
# in the VM unless secrets change.
vm/bootstrap:
NIXUSER=root $(MAKE) vm/copy
NIXUSER=root $(MAKE) vm/switch
$(MAKE) vm/secrets
ssh $(SSH_OPTIONS) -p$(NIXPORT) $(NIXUSER)@$(NIXADDR) " \
sudo reboot; \
"
# copy our secrets into the VM
vm/secrets:
# GPG keyring
rsync -av -e 'ssh $(SSH_OPTIONS)' \
--exclude='.#*' \
--exclude='S.*' \
--exclude='*.conf' \
$(HOME)/.gnupg/ $(NIXUSER)@$(NIXADDR):~/.gnupg
# SSH keys
rsync -av -e 'ssh $(SSH_OPTIONS)' \
--exclude='environment' \
$(HOME)/.ssh/ $(NIXUSER)@$(NIXADDR):~/.ssh
# copy the Nix configurations into the VM.
vm/copy:
rsync -av -e 'ssh $(SSH_OPTIONS) -p$(NIXPORT)' \
--exclude='vendor/' \
--exclude='.git/' \
--exclude='.git-crypt/' \
--exclude='iso/' \
--rsync-path="sudo rsync" \
$(MAKEFILE_DIR)/ $(NIXUSER)@$(NIXADDR):/nix-config
# run the nixos-rebuild switch command. This does NOT copy files so you
# have to run vm/copy before.
vm/switch:
ssh $(SSH_OPTIONS) -p$(NIXPORT) $(NIXUSER)@$(NIXADDR) " \
sudo NIXPKGS_ALLOW_UNSUPPORTED_SYSTEM=1 nixos-rebuild switch --flake \"/nix-config#${NIXNAME}\" \
"
# Build an ISO image
iso/nixos.iso:
cd iso; ./build.sh