move beta away from drama fs, too
This commit is contained in:
parent
e31663dea0
commit
4e64e676d9
2 changed files with 52 additions and 14 deletions
|
@ -13,7 +13,6 @@
|
||||||
# our hostname
|
# our hostname
|
||||||
networking.hostName = "beta";
|
networking.hostName = "beta";
|
||||||
networking.hostId = "c07bab49";
|
networking.hostId = "c07bab49";
|
||||||
broken
|
|
||||||
|
|
||||||
# german laptop keyboard
|
# german laptop keyboard
|
||||||
services.xserver.xkb.layout = "de";
|
services.xserver.xkb.layout = "de";
|
||||||
|
|
|
@ -62,14 +62,55 @@ done
|
||||||
# take a look at the partitions
|
# take a look at the partitions
|
||||||
lsblk
|
lsblk
|
||||||
|
|
||||||
# create encrypted bcachefs
|
# ZFS zpool creation with compression and encryption
|
||||||
bcachefs format --encrypt -f $RAID
|
zpool create \
|
||||||
nix-env -iA nixos.keyutils
|
-o ashift=13 \
|
||||||
keyctl link @u @s
|
-o autotrim=off \
|
||||||
bcachefs unlock $DISK-part2
|
-O acltype=posixacl \
|
||||||
|
-O atime=off \
|
||||||
|
-O canmount=off \
|
||||||
|
-O checksum=blake3 \
|
||||||
|
-O compression=lz4 \
|
||||||
|
-O dnodesize=auto \
|
||||||
|
-O utf8only=on \
|
||||||
|
-O normalization=none \
|
||||||
|
-O xattr=sa \
|
||||||
|
-O mountpoint=none \
|
||||||
|
-O encryption=on \
|
||||||
|
-O keylocation=prompt \
|
||||||
|
-O keyformat=passphrase \
|
||||||
|
zpool $RAID
|
||||||
|
|
||||||
# prepare install, tmpfs root
|
sleep 5
|
||||||
mount -t tmpfs none /mnt
|
|
||||||
|
# take a look at the partitions
|
||||||
|
lsblk
|
||||||
|
|
||||||
|
# show the pool
|
||||||
|
zpool status
|
||||||
|
|
||||||
|
sleep 5
|
||||||
|
|
||||||
|
# create all the volumes
|
||||||
|
zfs create -o recordsize=64K -o mountpoint=legacy zpool/data
|
||||||
|
zfs create -o recordsize=64K -o mountpoint=legacy zpool/nix
|
||||||
|
zfs create -o recordsize=64K -o mountpoint=legacy zpool/root
|
||||||
|
|
||||||
|
sleep 5
|
||||||
|
|
||||||
|
# show the pool
|
||||||
|
zpool status
|
||||||
|
|
||||||
|
sleep 5
|
||||||
|
|
||||||
|
# create ZFS snapshot that we'll rollback to on boot
|
||||||
|
# see https://ryanseipp.com/post/nixos-encrypted-root/
|
||||||
|
zfs snapshot zpool/root@blank
|
||||||
|
|
||||||
|
sleep 5
|
||||||
|
|
||||||
|
# prepare install, root
|
||||||
|
mount -t zfs zpool/root /mnt
|
||||||
|
|
||||||
# Create directories to mount file systems on
|
# Create directories to mount file systems on
|
||||||
mkdir -p /mnt/{data,nix,boot,root,etc/nixos}
|
mkdir -p /mnt/{data,nix,boot,root,etc/nixos}
|
||||||
|
@ -77,12 +118,9 @@ mkdir -p /mnt/{data,nix,boot,root,etc/nixos}
|
||||||
# mount the ESP
|
# mount the ESP
|
||||||
mount $DISK-part1 /mnt/boot
|
mount $DISK-part1 /mnt/boot
|
||||||
|
|
||||||
# mount the /nix
|
# mount volumes
|
||||||
mount -t bcachefs $DISK-part2 /mnt/nix
|
mount -t zfs zpool/data /mnt/data
|
||||||
|
mount -t zfs zpool/nix /mnt/nix
|
||||||
# mount the /data via bind mount
|
|
||||||
mkdir /mnt/nix/data
|
|
||||||
mount --bind /mnt/nix/data /mnt/data
|
|
||||||
|
|
||||||
# bind mount persistent stuff to data
|
# bind mount persistent stuff to data
|
||||||
mkdir -p /mnt/data/{root,nixos/$HOST}
|
mkdir -p /mnt/data/{root,nixos/$HOST}
|
||||||
|
@ -107,6 +145,7 @@ nixos-install --option experimental-features 'nix-command flakes' --no-root-pass
|
||||||
|
|
||||||
# unmount all stuff and sync
|
# unmount all stuff and sync
|
||||||
umount -Rl /data /mnt
|
umount -Rl /data /mnt
|
||||||
|
zpool export -a
|
||||||
sync
|
sync
|
||||||
|
|
||||||
# shutdown once
|
# shutdown once
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue