enabling aarch64-linux on all hosts...
This commit is contained in:
parent
b99925ff12
commit
2ee9db3ce6
3 changed files with 57 additions and 37 deletions
|
|
@ -1,4 +1,11 @@
|
||||||
{ inputs, outputs, lib, config, pkgs, ... }: {
|
{
|
||||||
|
inputs,
|
||||||
|
outputs,
|
||||||
|
lib,
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
imports = [
|
imports = [
|
||||||
inputs.nixos-hardware.nixosModules.framework-amd-ai-300-series
|
inputs.nixos-hardware.nixosModules.framework-amd-ai-300-series
|
||||||
./hardware-configuration.nix
|
./hardware-configuration.nix
|
||||||
|
|
@ -6,7 +13,6 @@
|
||||||
../workstation
|
../workstation
|
||||||
];
|
];
|
||||||
networking.hostName = "loki";
|
networking.hostName = "loki";
|
||||||
boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
|
|
||||||
variables.address = "100.72.0.1";
|
variables.address = "100.72.0.1";
|
||||||
variables.swayScale = "1.2";
|
variables.swayScale = "1.2";
|
||||||
|
|
||||||
|
|
@ -20,5 +26,5 @@
|
||||||
gnome-calendar.enable = true;
|
gnome-calendar.enable = true;
|
||||||
};
|
};
|
||||||
primary.enable = true;
|
primary.enable = true;
|
||||||
wm = { sway.enable = true; };
|
wm = {sway.enable = true;};
|
||||||
}
|
}
|
||||||
|
|
|
||||||
|
|
@ -1,5 +1,11 @@
|
||||||
{ inputs, outputs, lib, config, pkgs, ... }:
|
{
|
||||||
let
|
inputs,
|
||||||
|
outputs,
|
||||||
|
lib,
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: let
|
||||||
my-python-packages = python-packages:
|
my-python-packages = python-packages:
|
||||||
with python-packages; [
|
with python-packages; [
|
||||||
pip
|
pip
|
||||||
|
|
@ -12,10 +18,10 @@ let
|
||||||
in {
|
in {
|
||||||
nix = {
|
nix = {
|
||||||
settings = {
|
settings = {
|
||||||
experimental-features = [ "nix-command" "flakes" ];
|
experimental-features = ["nix-command" "flakes"];
|
||||||
warn-dirty = false;
|
warn-dirty = false;
|
||||||
auto-optimise-store = true;
|
auto-optimise-store = true;
|
||||||
trusted-users = [ "root" "don" ];
|
trusted-users = ["root" "don"];
|
||||||
};
|
};
|
||||||
gc = {
|
gc = {
|
||||||
automatic = true;
|
automatic = true;
|
||||||
|
|
@ -49,14 +55,15 @@ in {
|
||||||
inputMethod = {
|
inputMethod = {
|
||||||
enable = true;
|
enable = true;
|
||||||
type = "fcitx5";
|
type = "fcitx5";
|
||||||
fcitx5.addons = with pkgs; [ fcitx5-mozc fcitx5-gtk ];
|
fcitx5.addons = with pkgs; [fcitx5-mozc fcitx5-gtk];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# Bootloader.
|
# Bootloader.
|
||||||
boot = {
|
boot = {
|
||||||
|
binfmt.emulatedSystems = ["aarch64-linux"];
|
||||||
kernelPackages = pkgs.linuxPackages_latest;
|
kernelPackages = pkgs.linuxPackages_latest;
|
||||||
kernelParams = [ "consoleblank=60" ];
|
kernelParams = ["consoleblank=60"];
|
||||||
#loader = {
|
#loader = {
|
||||||
#systemd-boot = {
|
#systemd-boot = {
|
||||||
#enable = true;
|
#enable = true;
|
||||||
|
|
@ -66,34 +73,36 @@ in {
|
||||||
#efiSysMountPoint = "/boot";
|
#efiSysMountPoint = "/boot";
|
||||||
#};
|
#};
|
||||||
#};
|
#};
|
||||||
plymouth = { enable = true; };
|
plymouth = {enable = true;};
|
||||||
kernel = { sysctl = { "vm.swappiness" = 10; }; };
|
kernel = {sysctl = {"vm.swappiness" = 10;};};
|
||||||
};
|
};
|
||||||
|
|
||||||
security = {
|
security = {
|
||||||
polkit = { enable = true; };
|
polkit = {enable = true;};
|
||||||
sudo.enable = false;
|
sudo.enable = false;
|
||||||
doas = {
|
doas = {
|
||||||
enable = true;
|
enable = true;
|
||||||
extraRules = [{
|
extraRules = [
|
||||||
users = [ "don" ];
|
{
|
||||||
keepEnv = true;
|
users = ["don"];
|
||||||
noPass = true;
|
keepEnv = true;
|
||||||
}];
|
noPass = true;
|
||||||
|
}
|
||||||
|
];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
services = {
|
services = {
|
||||||
pcscd = { enable = true; };
|
pcscd = {enable = true;};
|
||||||
beszel-agent = { enable = true; };
|
beszel-agent = {enable = true;};
|
||||||
avahi = {
|
avahi = {
|
||||||
enable = true;
|
enable = true;
|
||||||
nssmdns4 = true;
|
nssmdns4 = true;
|
||||||
};
|
};
|
||||||
printing = { enable = true; };
|
printing = {enable = true;};
|
||||||
udisks2 = { enable = true; };
|
udisks2 = {enable = true;};
|
||||||
nscd = { enableNsncd = true; };
|
nscd = {enableNsncd = true;};
|
||||||
tailscale = { enable = true; };
|
tailscale = {enable = true;};
|
||||||
locate = {
|
locate = {
|
||||||
enable = true;
|
enable = true;
|
||||||
package = pkgs.mlocate;
|
package = pkgs.mlocate;
|
||||||
|
|
@ -179,8 +188,8 @@ in {
|
||||||
];
|
];
|
||||||
|
|
||||||
programs = {
|
programs = {
|
||||||
dconf = { enable = true; };
|
dconf = {enable = true;};
|
||||||
mtr = { enable = true; };
|
mtr = {enable = true;};
|
||||||
gnupg = {
|
gnupg = {
|
||||||
agent = {
|
agent = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
@ -192,25 +201,29 @@ in {
|
||||||
|
|
||||||
nixpkgs.overlays = [
|
nixpkgs.overlays = [
|
||||||
(final: super: {
|
(final: super: {
|
||||||
khal = super.khal.overridePythonAttrs (_: { doCheck = false; });
|
khal = super.khal.overridePythonAttrs (_: {doCheck = false;});
|
||||||
})
|
})
|
||||||
];
|
];
|
||||||
|
|
||||||
# Open ports in the firewall.
|
# Open ports in the firewall.
|
||||||
networking.firewall = {
|
networking.firewall = {
|
||||||
enable = true;
|
enable = true;
|
||||||
trustedInterfaces = [ "tailscale0" ];
|
trustedInterfaces = ["tailscale0"];
|
||||||
checkReversePath = "loose";
|
checkReversePath = "loose";
|
||||||
allowedUDPPorts = [ config.services.tailscale.port ];
|
allowedUDPPorts = [config.services.tailscale.port];
|
||||||
allowedTCPPortRanges = [{
|
allowedTCPPortRanges = [
|
||||||
from = 1714;
|
{
|
||||||
to = 1764;
|
from = 1714;
|
||||||
}];
|
to = 1764;
|
||||||
allowedUDPPortRanges = [{
|
}
|
||||||
from = 1714;
|
];
|
||||||
to = 1764;
|
allowedUDPPortRanges = [
|
||||||
}];
|
{
|
||||||
allowedTCPPorts = [ 22 ];
|
from = 1714;
|
||||||
|
to = 1764;
|
||||||
|
}
|
||||||
|
];
|
||||||
|
allowedTCPPorts = [22];
|
||||||
};
|
};
|
||||||
|
|
||||||
# This value determines the NixOS release from which the default
|
# This value determines the NixOS release from which the default
|
||||||
|
|
|
||||||
|
|
@ -99,6 +99,7 @@ in {
|
||||||
|
|
||||||
# Bootloader.
|
# Bootloader.
|
||||||
boot = {
|
boot = {
|
||||||
|
binfmt.emulatedSystems = ["aarch64-linux"];
|
||||||
# kernelPackages = pkgs.linuxPackages_latest;
|
# kernelPackages = pkgs.linuxPackages_latest;
|
||||||
kernelPackages = pkgs.linuxPackages_zen;
|
kernelPackages = pkgs.linuxPackages_zen;
|
||||||
kernelParams = ["consoleblank=60" "mem_sleep_default=deep"];
|
kernelParams = ["consoleblank=60" "mem_sleep_default=deep"];
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue