update installation script
This commit is contained in:
Dmitriy Kholkin
parent
b36fb27499
commit
da147cd997
@ -1,59 +0,0 @@
|
||||
#! /usr/bin/env nix-shell
|
||||
#! nix-shell -i bash -p perl
|
||||
cd ..
|
||||
CONFIG_FOLDER=$(pwd)
|
||||
cd install
|
||||
|
||||
ENCRYPT_ROOT=true
|
||||
FORMAT_BOOT_PARTITION=false
|
||||
|
||||
DEVICE_NAME=Dell-Laptop
|
||||
MAX_JOBS=8
|
||||
DEVICE=/dev/nvme0n1
|
||||
BOOT_PARTITION=/dev/nvme0n1p1
|
||||
SWAP_PARTITION=/dev/nvme0n1p3
|
||||
ROOT_PARTITION=/dev/nvme0n1p2
|
||||
ROOT_NAME=cryptnixos
|
||||
|
||||
gdisk $DEVICE
|
||||
|
||||
# Format boot partition
|
||||
if [[ "$FORMAT_BOOT_PARTITION" == true ]]; then
|
||||
mkfs.vfat -n BOOT $BOOT_PARTITION
|
||||
fi
|
||||
# Create luks partition
|
||||
if [[ "$ENCRYPT_ROOT" == true ]]; then
|
||||
cryptsetup --type luks2 --cipher aes-xts-plain64 --key-size 256 --hash sha512 luksFormat $ROOT_PARTITION
|
||||
cryptsetup luksOpen --type luks2 $ROOT_PARTITION $ROOT_NAME
|
||||
ROOT_NAME=/dev/mapper/$ROOT_NAME
|
||||
mkfs.f2fs -f -l root $ROOT_NAME
|
||||
mount $ROOT_NAME /mnt
|
||||
else
|
||||
ROOT_NAME=$ROOT_PARTITION
|
||||
mkfs.f2fs -f -l root $ROOT_PARTITION
|
||||
mount $ROOT_PARTITION /mnt
|
||||
fi
|
||||
# Mount boot
|
||||
mkdir /mnt/boot
|
||||
mount $BOOT_PARTITION /mnt/boot
|
||||
# Create swap
|
||||
mkswap -L swap $SWAP_PARTITION
|
||||
# Search swap PARTUUID
|
||||
SW=$(cut -d'/' -f3 <<< "$SWAP_PARTITION")
|
||||
SWAP_PARTUUID=$(eval "lsblk -o name,partuuid | grep $SW | awk '{print \$2}'")
|
||||
# Generate config (hardware)
|
||||
nixos-generate-config --root /mnt/
|
||||
# Copy hardware conf into new installation
|
||||
cp /mnt/etc/nixos/hardware-configuration.nix $CONFIG_FOLDER/hardware-configuration/$DEVICE_NAME.nix
|
||||
# Change not-detected for flakes
|
||||
sed -i 's#<nixpkgs/nixos/modules/installer/scan/not-detected.nix>#"${inputs.nixpkgs}/nixos/modules/installer/scan/not-detected.nix"#' $CONFIG_FOLDER/hardware-configuration/$DEVICE_NAME.nix
|
||||
perl -0777 -pi -e "s#swapDevices.+#swapDevices = [\n {\n device = \"/dev/disk/by-partuuid/$SWAP_PARTUUID\";\n randomEncryption.enable = true;\n }\n ];#" $CONFIG_FOLDER/hardware-configuration/$DEVICE_NAME.nix
|
||||
# Copy initial system config
|
||||
cp ./min-config.nix /mnt/etc/nixos/configuration.nix
|
||||
# Change hostname
|
||||
sed -i "s#changeme#${DEVICE_NAME}#" /mnt/etc/nixos/configuration.nix
|
||||
nixos-install -I nixpkgs=https://github.com/NixOS/nixpkgs-channels/archive/840c782d507d60aaa49aa9e3f6d0b0e780912742.tar.gz --max-jobs $MAX_JOBS --no-root-passwd
|
||||
|
||||
mkdir -p /mnt/home/alukard/nixos-config
|
||||
cp -aT $CONFIG_FOLDER /mnt/home/alukard/nixos-config
|
||||
echo "Installation complete!"
|
||||
205
install/install.sh
Executable file
205
install/install.sh
Executable file
@ -0,0 +1,205 @@
|
||||
#! /usr/bin/env nix-shell
|
||||
#! nix-shell -i bash -p perl
|
||||
|
||||
set -e
|
||||
|
||||
CONFIG_FOLDER="$(dirname "$(pwd)")"
|
||||
DEVICE_NAME=Dell-Laptop
|
||||
MAX_JOBS=8
|
||||
NIXOS_COMMIT="c59ea8b8a0e7f927e7291c14ea6cd1bd3a16ff38"
|
||||
ASHIFT=12 # recommended=12 which 1<<12 (4096)
|
||||
|
||||
clean_stdin() {
|
||||
while read -r -t 0; do read -r; done
|
||||
}
|
||||
|
||||
pprint () {
|
||||
local cyan="\e[96m"
|
||||
local default="\e[39m"
|
||||
local timestamp
|
||||
timestamp=$(date +%FT%T.%3NZ)
|
||||
echo -e "${cyan}${timestamp} $1${default}" 1>&2
|
||||
}
|
||||
|
||||
# Create new partitions
|
||||
create_new_part_table() {
|
||||
select ENTRY in $(ls /dev/disk/by-id/);
|
||||
do
|
||||
DISK="/dev/disk/by-id/$ENTRY"
|
||||
echo "Installing system on $ENTRY"
|
||||
break
|
||||
done
|
||||
|
||||
read -p "> Do you want to wipe all data on $ENTRY ?" -n 1 -r
|
||||
echo
|
||||
if [[ "$REPLY" =~ ^[Yy]$ ]]
|
||||
then
|
||||
wipefs -af "$DISK"
|
||||
sgdisk -Zo "$DISK"
|
||||
fi
|
||||
|
||||
pprint "Creating boot (EFI) partition"
|
||||
sgdisk -n 1:1MiB:+256MiB -t 1:EF00 "$DISK"
|
||||
BOOT="$DISK-part1"
|
||||
|
||||
pprint "Creating SWAP partition"
|
||||
sgdisk -n 2::+8GiB -t 2:8200 "$DISK"
|
||||
SWAP="$DISK-part2"
|
||||
|
||||
pprint "Creating LUKS partition"
|
||||
sgdisk -n 3 -t 3:8309 "$DISK"
|
||||
LINUX="$DISK-part3"
|
||||
|
||||
partprobe "$DISK"
|
||||
sleep 1
|
||||
|
||||
pprint "Format BOOT partition $BOOT"
|
||||
mkfs.vfat "$BOOT"
|
||||
}
|
||||
|
||||
# Using existed partitions
|
||||
use_old_part_table() {
|
||||
lsblk -o name,type,size,mountpoint | grep part
|
||||
|
||||
pprint "Select BOOT partition (must already be formatted in vfat!)"
|
||||
|
||||
select ENTRY in $(lsblk -o path,size,type | grep part | awk '{print $1}');
|
||||
do
|
||||
BOOT="$ENTRY"
|
||||
echo "You select $BOOT as BOOT"
|
||||
break
|
||||
done
|
||||
|
||||
pprint "Select the partition on which LUKS will be created"
|
||||
|
||||
select ENTRY in $(lsblk -o path,size,type | grep part | awk '{print $1}');
|
||||
do
|
||||
LINUX="$ENTRY"
|
||||
echo "Installing system on $LINUX"
|
||||
break
|
||||
done
|
||||
|
||||
pprint "Select the partition on which SWAP will be created"
|
||||
|
||||
select ENTRY in $(lsblk -o path,size,type | grep part | awk '{print $1}' && echo NONE);
|
||||
do
|
||||
SWAP="$ENTRY"
|
||||
echo "You select $SWAP as SWAP"
|
||||
break
|
||||
done
|
||||
|
||||
clean_stdin
|
||||
read -p "> Do you want to format BOOT partition in $BOOT?" -n 1 -r
|
||||
echo
|
||||
if [[ "$REPLY" =~ ^[Yy]$ ]]
|
||||
then
|
||||
mkfs.vfat "$BOOT"
|
||||
fi
|
||||
}
|
||||
|
||||
### INSTALLATION BEGIN ###
|
||||
|
||||
read -p "> Do you want to partition the disk (new gpt table)?" -n 1 -r
|
||||
echo
|
||||
if [[ "$REPLY" =~ ^[Yy]$ ]]
|
||||
then
|
||||
create_new_part_table
|
||||
else
|
||||
use_old_part_table
|
||||
fi
|
||||
|
||||
pprint "Creating LUKS container on $LINUX"
|
||||
clean_stdin
|
||||
cryptsetup --type luks2 --cipher aes-xts-plain64 --key-size 512 --hash sha512 --iter-time 5000 --use-random luksFormat "$LINUX"
|
||||
|
||||
pprint "Open LUKS container on $LINUX"
|
||||
LUKS_DEVICE_NAME=cryptroot
|
||||
clean_stdin
|
||||
cryptsetup luksOpen "$LINUX" "$LUKS_DEVICE_NAME"
|
||||
|
||||
LUKS_DISK="/dev/mapper/$LUKS_DEVICE_NAME"
|
||||
|
||||
pprint "Create ZFS partition on $LUKS_DISK"
|
||||
ZFS="${LUKS_DISK}"
|
||||
|
||||
if [[ "$SWAP" != "NONE" ]]; then
|
||||
pprint "Create SWAP partition on $SWAP"
|
||||
mkswap $SWAP
|
||||
fi
|
||||
|
||||
pprint "Create ZFS pool on $ZFS"
|
||||
zpool create -f -m none -o ashift=$ASHIFT -O compression=lz4 -O normalization=formD -O atime=on -O relatime=on -O dedup=off -R /mnt rpool "$ZFS"
|
||||
|
||||
pprint "Create ZFS datasets"
|
||||
|
||||
zfs create -o mountpoint=none -o com.sun.auto-snapshot=false rpool/local
|
||||
zfs create -o mountpoint=legacy -o atime=off -o recordsize=16K rpool/local/bittorrent
|
||||
zfs create -o mountpoint=legacy -o atime=off rpool/local/nix
|
||||
zfs create -o mountpoint=none -o com.sun.auto-snapshot:frequent=false rpool/system
|
||||
zfs create -o mountpoint=legacy rpool/system/root
|
||||
zfs create -o mountpoint=legacy -o xattr=sa -o acltype=posixacl rpool/system/var
|
||||
zfs create -o mountpoint=none rpool/user
|
||||
zfs create -o mountpoint=legacy rpool/user/home
|
||||
|
||||
# Create blank zfs snapshot
|
||||
zfs snapshot rpool/local@blank
|
||||
zfs snapshot rpool/system@blank
|
||||
|
||||
pprint "Mount ZFS datasets"
|
||||
mount -t zfs rpool/system/root /mnt
|
||||
|
||||
mkdir /mnt/nix
|
||||
mount -t zfs rpool/local/nix /mnt/nix
|
||||
|
||||
mkdir /mnt/var
|
||||
mount -t zfs rpool/system/var /mnt/var
|
||||
|
||||
mkdir /mnt/home
|
||||
mount -t zfs rpool/user/home /mnt/home
|
||||
|
||||
mkdir /mnt/bittorrent
|
||||
mount -t zfs rpool/local/bittorrent /mnt/bittorrent
|
||||
|
||||
mkdir /mnt/boot
|
||||
mount "$BOOT" /mnt/boot
|
||||
|
||||
pprint "Generate NixOS configuration"
|
||||
nixos-generate-config --root /mnt
|
||||
|
||||
HOSTID=$(head -c8 /etc/machine-id)
|
||||
LINUX_DISK_UUID=$(blkid --match-tag PARTUUID --output value "$LINUX")
|
||||
if [[ "$SWAP" != "NONE" ]]; then
|
||||
SWAP_UUID=$(blkid --match-tag PARTUUID --output value "$SWAP")
|
||||
fi
|
||||
|
||||
HARDWARE_CONFIG=$(mktemp)
|
||||
cat <<CONFIG > "$HARDWARE_CONFIG"
|
||||
networking.hostId = "$HOSTID";
|
||||
boot.initrd.luks.devices."$LUKS_DEVICE_NAME".device = "/dev/disk/by-partuuid/$LINUX_DISK_UUID";
|
||||
boot.zfs.devNodes = "$ZFS";
|
||||
boot.supportedFilesystems = [ "zfs" ];
|
||||
CONFIG
|
||||
|
||||
pprint "Append ZFS configuration to hardware-configuration.nix"
|
||||
sed -i "\$e cat $HARDWARE_CONFIG" /mnt/etc/nixos/hardware-configuration.nix
|
||||
|
||||
if [[ "$SWAP" != "NONE" ]]; then
|
||||
perl -0777 -pi -e "s#swapDevices.+#swapDevices = [\n {\n device = \"/dev/disk/by-partuuid/$SWAP_UUID\";\n randomEncryption.enable = true;\n }\n ];#" /mnt/etc/nixos/hardware-configuration.nix
|
||||
fi
|
||||
|
||||
pprint "Copy minimal config to destiination system"
|
||||
cp /mnt/etc/nixos/hardware-configuration.nix $CONFIG_FOLDER/hardware-configuration/$DEVICE_NAME.nix
|
||||
# Change <not-detected> for flakes
|
||||
sed -i 's#<nixpkgs/nixos/modules/installer/scan/not-detected.nix>#"${inputs.nixpkgs}/nixos/modules/installer/scan/not-detected.nix"#' $CONFIG_FOLDER/hardware-configuration/$DEVICE_NAME.nix
|
||||
cp ./min-config.nix /mnt/etc/nixos/configuration.nix
|
||||
sed -i "s#changeme#${DEVICE_NAME}#" /mnt/etc/nixos/configuration.nix
|
||||
|
||||
clean_stdin
|
||||
read -p "> Do you want to execute nixos-install command?" -n 1 -r
|
||||
echo
|
||||
if [[ "$REPLY" =~ ^[Yy]$ ]]
|
||||
then
|
||||
nixos-install -I nixpkgs=https://github.com/NixOS/nixpkgs-channels/archive/$NIXOS_COMMIT.tar.gz --max-jobs $MAX_JOBS --no-root-passwd
|
||||
mkdir -p /mnt/home/alukard/nixos-config
|
||||
cp -aT $CONFIG_FOLDER /mnt/home/alukard/nixos-config
|
||||
fi
|
||||
Loading…
x
Reference in New Issue
Block a user