Updated README.md
This commit is contained in:
		
							parent
							
								
									87b50bfb4d
								
							
						
					
					
						commit
						cfc276184f
					
				
							
								
								
									
										31
									
								
								README.md
									
									
									
									
									
								
							
							
						
						
									
										31
									
								
								README.md
									
									
									
									
									
								
							| @ -4,22 +4,39 @@ My NixOS configuration. | |||||||
| 
 | 
 | ||||||
| ## Installation | ## Installation | ||||||
| 
 | 
 | ||||||
| For disk configuration we use disko, this means that installing the system can be done with the following commands: | For disk configuration we use disko, but for secrets management we use sops-nix and the particular setup makes the installation process a bit more involved. It is required that the computer from which the installation is being run has access to the `nixos-secrets` repository, otherwise you will need to manually add the required ssh keys to the installation image.  | ||||||
| ``` | ```bash | ||||||
|  | # Load into the installer | ||||||
|  | sudo passwd # Set a root password | ||||||
|  | 
 | ||||||
|  | # From a machine with network access to the installer | ||||||
|  | # and access to the nixos-secrets repo | ||||||
|  | ssh -A root@(installer-ip) | ||||||
|  | 
 | ||||||
|  | # Set up disks | ||||||
| nix-shell -p disko | nix-shell -p disko | ||||||
| sudo disko --mode disko --flake git+https://git.bulthuis.dev/Jan/dotfiles#<system> | disko --mode disko --flake git+https://git.bulthuis.dev/Jan/nixos-config#(system) | ||||||
| sudo nixos-install --no-channel-copy --no-root-password --flake git+https://git.bulthuis.dev/Jan/dotfiles#<system> | exit | ||||||
|  | 
 | ||||||
|  | # Install NixOS | ||||||
|  | nixos-install --no-channel-copy --no-root-password --flake git+https://git.bulthuis.dev/Jan/nixos-config#(system) | ||||||
|  | cd /mnt/persist/system/etc/sops | ||||||
|  | 
 | ||||||
|  | # Set up host credentials for access to the secrets | ||||||
|  | touch sops_ed25519_key  | ||||||
|  | chmod 600 sops_ed25519_key | ||||||
|  | nano sops_ed25519_key | ||||||
| ``` | ``` | ||||||
| If `nixos-install` is being stopped by the OOM-killer, you can try adding `-j 1` to limit the amount of jobs that will be executed at the same time to 1. It might require running nixos-install multiple times untill it has managed to download all requirements and slowly start building the rest of the system. | If `nixos-install` is being stopped by the OOM-killer, you can try adding `-j 1` to limit the amount of jobs that will be executed at the same time to 1. It might require running nixos-install multiple times untill it has managed to download all requirements and slowly start building the rest of the system. | ||||||
| 
 | 
 | ||||||
| ## Updating | ## Updating | ||||||
| 
 | 
 | ||||||
| To update the system configuration, it is a single command: | To update the system configuration, it is a single command: | ||||||
| ``` | ```bash | ||||||
| sudo system-update | sudo system-update | ||||||
| ``` | ``` | ||||||
| Or if this shell script has not been installed for some reason: | Or if this shell script has not been installed for some reason: | ||||||
| ``` | ```bash | ||||||
| sudo nixos-rebuild switch --flake git+https://git.bulthuis.dev/Jan/dotfiles | sudo nixos-rebuild switch --flake git+https://git.bulthuis.dev/Jan/nixos-config | ||||||
| ``` | ``` | ||||||
| Sometimes it may be necessary to reboot of course. | Sometimes it may be necessary to reboot of course. | ||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user
	 Jan-Bulthuis
						Jan-Bulthuis