palo/nixos-config
palo/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: palo:216d13513d6355ba0699a83dd78e5309a5c2d3fe
Branches Tags
palo:main
palo:feature/bugwarrior3
palo:update
palo:refactor/component/ssh
palo:orbi-ssh-unlock-works
...
compare: palo:1bfb0b20a1361cbccb21d57cc03a21b9a1f03932
Branches Tags
palo:main
palo:feature/bugwarrior3
palo:update
palo:refactor/component/ssh
palo:orbi-ssh-unlock-works

3 commits
216d13513d ... 1bfb0b20a1

Author SHA1 Message Date
Ingolf Wagner
1bfb0b20a1
fix quickemu 2024-07-04 19:42:10 +02:00
Ingolf Wagner
8052c8f411
set root password 2024-07-04 19:22:20 +02:00
Ingolf Wagner
1dd9135402
update 2024-07-04 19:21:39 +02:00
5 changed files with 53 additions and 61 deletions
Show stats Expand all files Collapse all files

100
flake.lock
View file

@ -129,11 +129,11 @@
"treefmt-nix": "treefmt-nix"
},
"locked": {
"lastModified": 1719497618,
"narHash": "sha256-RT4E4M64Uzy0CPh5mwE2UCewlXJ9f6zoNMlE04MLS38=",
"lastModified": 1720087757,
"narHash": "sha256-5Zk63S74ADFKPMpMOseyE68E268UHkQQBARZTaD8hZw=",
"ref": "refs/heads/main",
"rev": "8f0e537d34ee261e2ed9905de0190abd24558916",
"revCount": 3238,
"rev": "a89b30142582a5f7eba2fbde0d88fc8c84c6184e",
"revCount": 3321,
"type": "git",
"url": "https://git.clan.lol/clan/clan-core"
},
@ -248,11 +248,11 @@
]
},
"locked": {
"lastModified": 1717285511,
"narHash": "sha256-iKzJcpdXih14qYVcZ9QC9XuZYnPc6T8YImb6dX166kw=",
"lastModified": 1719994518,
"narHash": "sha256-pQMhCCHyQGRzdfAkdJ4cIWiw+JNuWsTX7f0ZYSyz0VY=",
"owner": "hercules-ci",
"repo": "flake-parts",
"rev": "2a55567fcf15b1b1c7ed712a2c6fadaec7412ea8",
"rev": "9227223f6d922fee3c7b190b2cc238a99527bbb7",
"type": "github"
},
"original": {
@ -386,11 +386,11 @@
"nixpkgs": "nixpkgs_2"
},
"locked": {
"lastModified": 1719588253,
"narHash": "sha256-A03i8xiVgP14DCmV5P7VUv37eodCjY4e1iai0b2EuuM=",
"lastModified": 1720045378,
"narHash": "sha256-lmE7B+QXw7lWdBu5GQlUABSpzPk3YBb9VbV+IYK5djk=",
"owner": "nix-community",
"repo": "home-manager",
"rev": "7e68e55d2e16d3a1e92a679430728c35a30fd24e",
"rev": "0a30138c694ab3b048ac300794c2eb599dc40266",
"type": "github"
},
"original": {
@ -460,21 +460,6 @@
"type": "github"
}
},
"nixlib": {
"locked": {
"lastModified": 1712450863,
"narHash": "sha256-K6IkdtMtq9xktmYPj0uaYc8NsIqHuaAoRBaMgu9Fvrw=",
"owner": "nix-community",
"repo": "nixpkgs.lib",
"rev": "3c62b6a12571c9a7f65ab037173ee153d539905f",
"type": "github"
},
"original": {
"owner": "nix-community",
"repo": "nixpkgs.lib",
"type": "github"
}
},
"nixos-anywhere": {
"inputs": {
"disko": "disko_2",
@ -485,11 +470,11 @@
"treefmt-nix": "treefmt-nix_2"
},
"locked": {
"lastModified": 1718803059,
"narHash": "sha256-MYvDgSPWdF0hP6vzOhpqY+2a66ZLELFj+MUP5S/+dBY=",
"lastModified": 1719852663,
"narHash": "sha256-83rF68wdvOc9iyHSIxlgk/PMoFXilIYabOxC+meamyo=",
"owner": "nix-community",
"repo": "nixos-anywhere",
"rev": "ce18c086d8ca143d43ab20b3db20ab1e3e62c519",
"rev": "f99d120b3788a286989db4e592a698f5d310d2f6",
"type": "github"
},
"original": {
@ -500,7 +485,10 @@
},
"nixos-generators": {
"inputs": {
"nixlib": "nixlib",
"nixlib": [
"clan-core",
"nixpkgs"
],
"nixpkgs": [
"clan-core",
"nixpkgs"
@ -522,11 +510,11 @@
},
"nixos-hardware": {
"locked": {
"lastModified": 1719647737,
"narHash": "sha256-OvX/qQQ33zyB5ReRzm+U5+9Hh6EeYxHdd21tXL3p/eY=",
"lastModified": 1719895800,
"narHash": "sha256-xNbjISJTFailxass4LmdWeV4jNhAlmJPwj46a/GxE6M=",
"owner": "nixos",
"repo": "nixos-hardware",
"rev": "231274268ff2250d4730e274b808f66ef91b6381",
"rev": "6e253f12b1009053eff5344be5e835f604bb64cd",
"type": "github"
},
"original": {
@ -634,11 +622,11 @@
},
"nixpkgs-legacy_2311": {
"locked": {
"lastModified": 1719234068,
"narHash": "sha256-1AjSIedDC/aERt24KsCUftLpVppW61S7awfjGe7bMio=",
"lastModified": 1719957072,
"narHash": "sha256-gvFhEf5nszouwLAkT9nWsDzocUTqLWHuL++dvNjMp9I=",
"owner": "nixos",
"repo": "nixpkgs",
"rev": "90bd1b26e23760742fdcb6152369919098f05417",
"rev": "7144d6241f02d171d25fba3edeaf15e0f2592105",
"type": "github"
},
"original": {
@ -650,11 +638,11 @@
},
"nixpkgs-legacy_2405": {
"locked": {
"lastModified": 1719426051,
"narHash": "sha256-yJL9VYQhaRM7xs0M867ZFxwaONB9T2Q4LnGo1WovuR4=",
"lastModified": 1719956923,
"narHash": "sha256-nNJHJ9kfPdzYsCOlHOnbiiyKjZUW5sWbwx3cakg3/C4=",
"owner": "nixos",
"repo": "nixpkgs",
"rev": "89c49874fb15f4124bf71ca5f42a04f2ee5825fd",
"rev": "706eef542dec88cc0ed25b9075d3037564b2d164",
"type": "github"
},
"original": {
@ -678,11 +666,11 @@
},
"nixpkgs-unstable-small": {
"locked": {
"lastModified": 1719629854,
"narHash": "sha256-BheGh2LLDet7B7VX+S56M99LuwAMsqJhdBTRw3gr95o=",
"lastModified": 1720107418,
"narHash": "sha256-KPxjth7cCwNeTV9jJ90lPu8b/wMi3hcAnUbZ5NzogjA=",
"owner": "nixos",
"repo": "nixpkgs",
"rev": "5e87fb56fd499ee4090e6ed939561a9470ac5f53",
"rev": "d586b644539e41fafcee09f9b40a6552252dbdb4",
"type": "github"
},
"original": {
@ -694,11 +682,11 @@
},
"nixpkgs_2": {
"locked": {
"lastModified": 1719254875,
"narHash": "sha256-ECni+IkwXjusHsm9Sexdtq8weAq/yUyt1TWIemXt3Ko=",
"lastModified": 1719848872,
"narHash": "sha256-H3+EC5cYuq+gQW8y0lSrrDZfH71LB4DAf+TDFyvwCNA=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "2893f56de08021cffd9b6b6dfc70fd9ccd51eb60",
"rev": "00d80d13810dbfea8ab4ed1009b09100cca86ba8",
"type": "github"
},
"original": {
@ -741,11 +729,11 @@
},
"nixpkgs_5": {
"locked": {
"lastModified": 1719506693,
"narHash": "sha256-C8e9S7RzshSdHB7L+v9I51af1gDM5unhJ2xO1ywxNH8=",
"lastModified": 1720031269,
"narHash": "sha256-rwz8NJZV+387rnWpTYcXaRNvzUSnnF9aHONoJIYmiUQ=",
"owner": "nixos",
"repo": "nixpkgs",
"rev": "b2852eb9365c6de48ffb0dc2c9562591f652242a",
"rev": "9f4128e00b0ae8ec65918efeba59db998750ead6",
"type": "github"
},
"original": {
@ -787,11 +775,11 @@
},
"nixpkgs_8": {
"locked": {
"lastModified": 1719412806,
"narHash": "sha256-C3gUNdFDAWrP6glCCo+MXrrAoAyHi1Zdvlgs1Awqpv8=",
"lastModified": 1720022903,
"narHash": "sha256-TLiEulaY4I+vwaJIHQXASVQva+2nepaziUomigYY9+0=",
"owner": "NixOS",
"repo": "nixpkgs",
"rev": "af796de7d1e6bbda6049a3732ff881b3ad518b6b",
"rev": "88f3dab52d2cc42945f70f4e84c4505dedaa377d",
"type": "github"
},
"original": {
@ -895,11 +883,11 @@
},
"retiolum": {
"locked": {
"lastModified": 1719392416,
"narHash": "sha256-aYWEFGHxg+eyej62PpqKqN/zRg+0LPe0IQkL0OcbbQE=",
"lastModified": 1719907580,
"narHash": "sha256-arE8H5HXoPwcjQXnUH1pmnh2pi37+5hXjo4UPpYJ7FY=",
"owner": "Mic92",
"repo": "retiolum",
"rev": "5dd82a3a3212aa3ef184077b1f02c29cdaf75f63",
"rev": "7e5194b7aba337bc06b5a33738284ef98eef6cbf",
"type": "github"
},
"original": {
@ -981,11 +969,11 @@
"nixpkgs": "nixpkgs_8"
},
"locked": {
"lastModified": 1719449101,
"narHash": "sha256-rRrz763KKi6GnSZF4WF34kpJ9eMXR3AOPOWN/7hO1Zs=",
"lastModified": 1720054509,
"narHash": "sha256-cVR1VTZRwxkECRK1TUjhrWn/HQJa62Chsgd5IUUcYiY=",
"owner": "nix-community",
"repo": "srvos",
"rev": "e938f07e5cd9d11576d3860b68c117932c161006",
"rev": "b4f8e243d8d72222b4e7468373bba6989c11b9ea",
"type": "github"
},
"original": {

2
flake.nix
View file

@ -185,7 +185,7 @@
, modules
}: {
clan.networking.targetHost = lib.mkDefault "root@${host}";
clan.core.networking.targetHost = lib.mkDefault "root@${host}";
nixpkgs.pkgs = meta.pkgs;
nixpkgs.hostPlatform = meta.system;
clan.core.facts.secretStore = "password-store";

3
machines/cherry/qemu.nix
View file

@ -7,7 +7,8 @@
environment.systemPackages = [
pkgs.qemu_kvm
(pkgs.quickemu.override { qemu = pkgs.qemu_kvm; })
#(pkgs.quickemu.override { qemu_full = pkgs.qemu_kvm; })
pkgs.quickemu
pkgs.virt-manager
];

3
machines/cream/qemu.nix
View file

@ -7,7 +7,8 @@
environment.systemPackages = [
pkgs.qemu_kvm
(pkgs.quickemu.override { qemu = pkgs.qemu_kvm; })
#(pkgs.quickemu.override { qemu_full = pkgs.qemu_kvm; })
pkgs.quickemu
pkgs.virt-manager
];

6
machines/orbi/hardware-configuration/default.nix
View file

@ -43,8 +43,10 @@ in
efiSupport = false; # we created a ef02 partition because uefi is not supported on hetzner online machines.
};
# Initial empty root password for easy login:
users.users.root.initialHashedPassword = "";
# root password
clan.core.facts.services.rootPassword = factsGenerator.password { name = "root"; };
users.users.root.hashedPasswordFile = config.clan.core.facts.services.rootPassword.secret."password.root.pam".path;
services.openssh.settings.PermitRootLogin = "prohibit-password";
services.openssh.settings.PasswordAuthentication = false;